diff --git a/2007/CVE-2007-2447.json b/2007/CVE-2007-2447.json index a25c522dea..210c178e09 100644 --- a/2007/CVE-2007-2447.json +++ b/2007/CVE-2007-2447.json @@ -1441,9 +1441,9 @@ "subscribers_count": 0 }, { - "id": 1407093077, - "name": "xxxxxxxxxxxxxxxx", - "full_name": "malredfan\/xxxxxxxxxxxxxxxx", + "id": 1407244475, + "name": "metasploitable2-pentest", + "full_name": "malredfan\/metasploitable2-pentest", "owner": { "login": "malredfan", "id": 208989944, @@ -1451,14 +1451,14 @@ "html_url": "https:\/\/github.com\/malredfan", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/malredfan\/xxxxxxxxxxxxxxxx", + "html_url": "https:\/\/github.com\/malredfan\/metasploitable2-pentest", "description": "Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)", "fork": false, - "created_at": "2026-10-06T10:19:19Z", - "updated_at": "2026-10-06T10:47:28Z", - "pushed_at": "2026-10-06T10:22:37Z", - "stargazers_count": 0, - "watchers_count": 0, + "created_at": "2026-10-06T12:14:23Z", + "updated_at": "2026-10-06T14:57:10Z", + "pushed_at": "2026-10-06T14:57:06Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1466,76 +1466,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cybersecurity", + "cybersecurity-tools", + "kali-linux", + "kali-scripts", + "kali-tools", + "metasploitable", + "metasploitable-2", + "samba" + ], "visibility": "public", "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1407126628, - "name": "vvvvvvvv2", - "full_name": "malredfan\/vvvvvvvv2", - "owner": { - "login": "malredfan", - "id": 208989944, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208989944?v=4", - "html_url": "https:\/\/github.com\/malredfan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/malredfan\/vvvvvvvv2", - "description": "Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)", - "fork": false, - "created_at": "2026-10-06T10:49:09Z", - "updated_at": "2026-10-06T11:57:55Z", - "pushed_at": "2026-10-06T11:48:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1407223402, - "name": "gggggggggggggggggg", - "full_name": "malredfan\/gggggggggggggggggg", - "owner": { - "login": "malredfan", - "id": 208989944, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208989944?v=4", - "html_url": "https:\/\/github.com\/malredfan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/malredfan\/gggggggggggggggggg", - "description": "Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)", - "fork": false, - "created_at": "2026-10-06T11:59:42Z", - "updated_at": "2026-10-06T12:13:40Z", - "pushed_at": "2026-10-06T12:12:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2011/CVE-2011-4825.json b/2011/CVE-2011-4825.json new file mode 100644 index 0000000000..686892d50a --- /dev/null +++ b/2011/CVE-2011-4825.json @@ -0,0 +1,42 @@ +[ + { + "id": 1407731326, + "name": "Zenphoto-1.4.1.4-CVE-2011-4825-RCE", + "full_name": "XavLimSG\/Zenphoto-1.4.1.4-CVE-2011-4825-RCE", + "owner": { + "login": "XavLimSG", + "id": 50736074, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50736074?v=4", + "html_url": "https:\/\/github.com\/XavLimSG", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/XavLimSG\/Zenphoto-1.4.1.4-CVE-2011-4825-RCE", + "description": "Python 3 reverse-shell exploit for Zenphoto <= 1.4.1.4 \/ CVE-2011-4825 (EDB-18083)", + "fork": false, + "created_at": "2026-10-06T17:58:25Z", + "updated_at": "2026-10-06T17:58:34Z", + "pushed_at": "2026-10-06T17:58:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2011-4825", + "exploit", + "oscp", + "python3", + "remote-code-execution", + "zenphoto" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2016/CVE-2016-4655.json b/2016/CVE-2016-4655.json index 5232645bdd..4231efbbe6 100644 --- a/2016/CVE-2016-4655.json +++ b/2016/CVE-2016-4655.json @@ -14,10 +14,10 @@ "description": "OS X 10.11.6 LPE PoC for CVE-2016-4655 \/ CVE-2016-4656", "fork": false, "created_at": "2016-10-02T12:42:14Z", - "updated_at": "2026-05-22T18:47:52Z", + "updated_at": "2026-10-06T17:57:02Z", "pushed_at": "2016-10-04T16:36:18Z", - "stargazers_count": 103, - "watchers_count": 103, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 103, + "watchers": 102, "score": 0, "subscribers_count": 8 }, diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index 7a960b882a..909ca3ebb7 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -255,10 +255,10 @@ "description": "A CVE-2016-5195 exploit example.", "fork": false, "created_at": "2016-10-23T00:16:33Z", - "updated_at": "2026-09-17T02:52:14Z", + "updated_at": "2026-10-06T18:14:38Z", "pushed_at": "2017-03-21T16:46:38Z", - "stargazers_count": 340, - "watchers_count": 340, + "stargazers_count": 341, + "watchers_count": 341, "has_discussions": false, "forks_count": 122, "allow_forking": true, @@ -273,7 +273,7 @@ ], "visibility": "public", "forks": 122, - "watchers": 340, + "watchers": 341, "score": 0, "subscribers_count": 13 }, diff --git a/2018/CVE-2018-7600.json b/2018/CVE-2018-7600.json index fcb09fc8d0..e2f392ff13 100644 --- a/2018/CVE-2018-7600.json +++ b/2018/CVE-2018-7600.json @@ -1762,6 +1762,50 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1403505638, + "name": "DC-1_Vulnhub_Walkthrough", + "full_name": "Aihikk\/DC-1_Vulnhub_Walkthrough", + "owner": { + "login": "Aihikk", + "id": 215174668, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215174668?v=4", + "html_url": "https:\/\/github.com\/Aihikk", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Aihikk\/DC-1_Vulnhub_Walkthrough", + "description": "VulnHub DC-1 boot2root — unauthenticated RCE via Drupalgeddon2 (CVE-2018-7600) to SUID find privilege escalation, with severity-rated findings and remediation.", + "fork": false, + "created_at": "2026-10-03T18:10:28Z", + "updated_at": "2026-10-06T14:33:38Z", + "pushed_at": "2026-10-04T05:55:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "boot2root", + "cve-2018-7600", + "drupal", + "gtfobins", + "metasploit", + "penetration-testing", + "privilege-escalation", + "suid", + "vapt", + "vulnhub" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1404651984, "name": "CVE-2018-7600", diff --git a/2018/CVE-2018-8120.json b/2018/CVE-2018-8120.json index 420128f40b..dc0dbdd1b5 100644 --- a/2018/CVE-2018-8120.json +++ b/2018/CVE-2018-8120.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2018-05-17T08:51:39Z", - "updated_at": "2026-07-29T10:32:10Z", + "updated_at": "2026-10-06T14:43:42Z", "pushed_at": "2018-05-18T07:49:45Z", - "stargazers_count": 163, - "watchers_count": 163, + "stargazers_count": 164, + "watchers_count": 164, "has_discussions": false, "forks_count": 62, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 62, - "watchers": 163, + "watchers": 164, "score": 0, "subscribers_count": 10 }, diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index c9075fc2a2..b732350a1b 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -1885,7 +1885,7 @@ "stargazers_count": 1185, "watchers_count": 1185, "has_discussions": false, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1893,7 +1893,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 1185, "score": 0, "subscribers_count": 66 diff --git a/2019/CVE-2019-9506.json b/2019/CVE-2019-9506.json index 408e6abf82..747e4531f8 100644 --- a/2019/CVE-2019-9506.json +++ b/2019/CVE-2019-9506.json @@ -14,10 +14,10 @@ "description": "Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR\/EDR and BLE [CVE-2019-9506]", "fork": false, "created_at": "2019-08-15T11:54:21Z", - "updated_at": "2026-10-05T08:11:16Z", + "updated_at": "2026-10-06T13:17:17Z", "pushed_at": "2022-04-04T15:16:08Z", - "stargazers_count": 188, - "watchers_count": 188, + "stargazers_count": 189, + "watchers_count": 189, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 39, - "watchers": 188, + "watchers": 189, "score": 0, "subscribers_count": 10 } diff --git a/2020/CVE-2020-14144.json b/2020/CVE-2020-14144.json index f85ba1c5cf..5e8b661e6d 100644 --- a/2020/CVE-2020-14144.json +++ b/2020/CVE-2020-14144.json @@ -14,10 +14,10 @@ "description": "A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks", "fork": false, "created_at": "2022-03-08T17:14:27Z", - "updated_at": "2026-10-05T08:13:03Z", + "updated_at": "2026-10-06T13:19:24Z", "pushed_at": "2026-03-17T12:42:02Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-17103.json b/2020/CVE-2020-17103.json index 0d92addc8f..04f60ecbad 100644 --- a/2020/CVE-2020-17103.json +++ b/2020/CVE-2020-17103.json @@ -80,7 +80,7 @@ "description": "CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback", "fork": false, "created_at": "2026-05-18T15:36:34Z", - "updated_at": "2026-09-17T03:01:52Z", + "updated_at": "2026-10-06T18:01:16Z", "pushed_at": "2026-05-20T13:07:06Z", "stargazers_count": 46, "watchers_count": 46, diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json index fd96c986cb..b975196c59 100644 --- a/2021/CVE-2021-1931.json +++ b/2021/CVE-2021-1931.json @@ -80,10 +80,10 @@ "description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.", "fork": false, "created_at": "2026-07-31T05:37:56Z", - "updated_at": "2026-10-05T21:43:48Z", + "updated_at": "2026-10-06T18:09:59Z", "pushed_at": "2026-08-28T12:08:00Z", - "stargazers_count": 211, - "watchers_count": 211, + "stargazers_count": 212, + "watchers_count": 212, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -108,7 +108,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 211, + "watchers": 212, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index cf1ba4c9f9..e7ba8a48c5 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -1081,10 +1081,10 @@ "description": "Sudo Baron Samedit Exploit", "fork": false, "created_at": "2021-03-15T17:37:02Z", - "updated_at": "2026-10-06T05:57:48Z", + "updated_at": "2026-10-06T17:22:42Z", "pushed_at": "2022-01-13T05:48:01Z", - "stargazers_count": 806, - "watchers_count": 806, + "stargazers_count": 807, + "watchers_count": 807, "has_discussions": false, "forks_count": 174, "allow_forking": true, @@ -1095,7 +1095,7 @@ "topics": [], "visibility": "public", "forks": 174, - "watchers": 806, + "watchers": 807, "score": 0, "subscribers_count": 10 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 9fa3e5916a..b476ccced3 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -4203,39 +4203,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 514403582, - "name": "cve-2021-4034", - "full_name": "supportingmx\/cve-2021-4034", - "owner": { - "login": "supportingmx", - "id": 88459207, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88459207?v=4", - "html_url": "https:\/\/github.com\/supportingmx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/supportingmx\/cve-2021-4034", - "description": null, - "fork": false, - "created_at": "2022-07-15T20:58:48Z", - "updated_at": "2024-05-03T00:28:21Z", - "pushed_at": "2024-05-03T00:28:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 519969135, "name": "CVE-2021-4034", diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index 8950afd3e2..e2f7d77242 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -582,10 +582,10 @@ "description": "Modified code so that we don´t need to rely on CAB archives", "fork": false, "created_at": "2021-09-19T19:46:28Z", - "updated_at": "2026-09-03T00:22:10Z", + "updated_at": "2026-10-06T14:34:30Z", "pushed_at": "2021-09-22T20:07:51Z", - "stargazers_count": 104, - "watchers_count": 104, + "stargazers_count": 105, + "watchers_count": 105, "has_discussions": false, "forks_count": 19, "allow_forking": true, @@ -596,7 +596,7 @@ "topics": [], "visibility": "public", "forks": 19, - "watchers": 104, + "watchers": 105, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-40449.json b/2021/CVE-2021-40449.json index d3dc1b4b70..0e8d52d0f2 100644 --- a/2021/CVE-2021-40449.json +++ b/2021/CVE-2021-40449.json @@ -49,10 +49,10 @@ "description": "windows 10 14393 LPE", "fork": false, "created_at": "2021-10-20T09:24:36Z", - "updated_at": "2026-09-03T00:21:33Z", + "updated_at": "2026-10-06T14:33:58Z", "pushed_at": "2021-10-28T03:51:09Z", - "stargazers_count": 105, - "watchers_count": 105, + "stargazers_count": 106, + "watchers_count": 106, "has_discussions": false, "forks_count": 41, "allow_forking": true, @@ -63,7 +63,7 @@ "topics": [], "visibility": "public", "forks": 41, - "watchers": 105, + "watchers": 106, "score": 0, "subscribers_count": 6 }, diff --git a/2021/CVE-2021-4045.json b/2021/CVE-2021-4045.json index 70622ca767..8f7b464d34 100644 --- a/2021/CVE-2021-4045.json +++ b/2021/CVE-2021-4045.json @@ -14,10 +14,10 @@ "description": "Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera", "fork": false, "created_at": "2021-11-15T14:48:14Z", - "updated_at": "2026-09-03T00:21:58Z", + "updated_at": "2026-10-06T14:34:16Z", "pushed_at": "2024-10-31T18:50:48Z", - "stargazers_count": 119, - "watchers_count": 119, + "stargazers_count": 120, + "watchers_count": 120, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 17, - "watchers": 119, + "watchers": 120, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-42013.json b/2021/CVE-2021-42013.json index f02cd324a2..c83c1ba560 100644 --- a/2021/CVE-2021-42013.json +++ b/2021/CVE-2021-42013.json @@ -1061,6 +1061,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1236984974, + "name": "cve-2021-42013", + "full_name": "lmcewen9\/cve-2021-42013", + "owner": { + "login": "lmcewen9", + "id": 89426396, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89426396?v=4", + "html_url": "https:\/\/github.com\/lmcewen9", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lmcewen9\/cve-2021-42013", + "description": "PoC Exploit for Apache httpd 2.4.49 & 2.4.50 remote code exploitation", + "fork": false, + "created_at": "2026-05-12T19:06:15Z", + "updated_at": "2026-10-06T18:46:14Z", + "pushed_at": "2026-10-06T18:46:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1278623099, "name": "CVE-2021-42013", diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 4d01bb4a2e..d3a74ccecf 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -1552,10 +1552,10 @@ "description": "Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228", "fork": false, "created_at": "2021-12-11T11:18:46Z", - "updated_at": "2026-10-01T19:25:11Z", + "updated_at": "2026-10-06T14:37:10Z", "pushed_at": "2022-04-07T14:47:03Z", - "stargazers_count": 861, - "watchers_count": 861, + "stargazers_count": 862, + "watchers_count": 862, "has_discussions": false, "forks_count": 168, "allow_forking": true, @@ -1579,7 +1579,7 @@ ], "visibility": "public", "forks": 168, - "watchers": 861, + "watchers": 862, "score": 0, "subscribers_count": 33 }, @@ -2265,7 +2265,7 @@ "description": "An agent to hotpatch the log4j RCE from CVE-2021-44228.", "fork": false, "created_at": "2021-12-12T01:24:51Z", - "updated_at": "2026-09-01T15:12:37Z", + "updated_at": "2026-10-06T17:45:39Z", "pushed_at": "2022-10-24T02:25:53Z", "stargazers_count": 497, "watchers_count": 497, @@ -6559,10 +6559,10 @@ "description": "Scanners for Jar files that may be vulnerable to CVE-2021-44228", "fork": false, "created_at": "2021-12-14T23:33:51Z", - "updated_at": "2026-07-08T13:40:46Z", + "updated_at": "2026-10-06T14:37:42Z", "pushed_at": "2022-03-23T18:12:51Z", - "stargazers_count": 350, - "watchers_count": 350, + "stargazers_count": 351, + "watchers_count": 351, "has_discussions": false, "forks_count": 85, "allow_forking": true, @@ -6573,7 +6573,7 @@ "topics": [], "visibility": "public", "forks": 85, - "watchers": 350, + "watchers": 351, "score": 0, "subscribers_count": 2 }, diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 7124a92efe..fa366e0f3e 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -2475,8 +2475,8 @@ "description": null, "fork": false, "created_at": "2026-05-06T01:47:50Z", - "updated_at": "2026-10-04T18:31:25Z", - "pushed_at": "2026-10-05T23:07:36Z", + "updated_at": "2026-10-06T13:52:20Z", + "pushed_at": "2026-10-06T13:52:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 464f0d7c19..9e781874df 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -14,10 +14,10 @@ "description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692", "fork": false, "created_at": "2023-06-10T08:31:26Z", - "updated_at": "2026-10-06T12:22:59Z", + "updated_at": "2026-10-06T15:09:10Z", "pushed_at": "2025-06-14T16:55:26Z", - "stargazers_count": 618, - "watchers_count": 618, + "stargazers_count": 619, + "watchers_count": 619, "has_discussions": true, "forks_count": 85, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 85, - "watchers": 618, + "watchers": 619, "score": 0, "subscribers_count": 15 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index c96a46f921..34ec92535c 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-10-06T12:34:10Z", - "pushed_at": "2026-10-06T12:34:06Z", + "updated_at": "2026-10-06T15:37:27Z", + "pushed_at": "2026-10-06T15:37:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json index 53e02e124d..b1a3aaca81 100644 --- a/2024/CVE-2024-0044.json +++ b/2024/CVE-2024-0044.json @@ -217,7 +217,7 @@ "stargazers_count": 31, "watchers_count": 31, "has_discussions": false, - "forks_count": 17, + "forks_count": 16, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -225,7 +225,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 17, + "forks": 16, "watchers": 31, "score": 0, "subscribers_count": 2 diff --git a/2024/CVE-2024-12986.json b/2024/CVE-2024-12986.json index 87e15641b0..8bc6b526ed 100644 --- a/2024/CVE-2024-12986.json +++ b/2024/CVE-2024-12986.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-01-04T14:47:09Z", - "updated_at": "2026-10-06T13:19:09Z", + "updated_at": "2026-10-06T18:39:38Z", "pushed_at": "2025-01-04T14:58:25Z", - "stargazers_count": 319, - "watchers_count": 319, + "stargazers_count": 192, + "watchers_count": 192, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 319, + "watchers": 192, "score": 0, "subscribers_count": 327 } diff --git a/2024/CVE-2024-21338.json b/2024/CVE-2024-21338.json index b632093a04..ecfc213ce8 100644 --- a/2024/CVE-2024-21338.json +++ b/2024/CVE-2024-21338.json @@ -267,5 +267,38 @@ "watchers": 7, "score": 0, "subscribers_count": 0 + }, + { + "id": 1398470842, + "name": "CVE-2024-21338", + "full_name": "kikozz\/CVE-2024-21338", + "owner": { + "login": "kikozz", + "id": 26044865, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26044865?v=4", + "html_url": "https:\/\/github.com\/kikozz", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kikozz\/CVE-2024-21338", + "description": null, + "fork": false, + "created_at": "2026-09-30T16:38:13Z", + "updated_at": "2026-10-06T19:09:45Z", + "pushed_at": "2026-09-30T16:39:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json index e3692a3384..376452cd5e 100644 --- a/2024/CVE-2024-21413.json +++ b/2024/CVE-2024-21413.json @@ -947,8 +947,8 @@ "description": "Penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft, including attack execution, hash cracking, and defensive countermeasures", "fork": false, "created_at": "2026-03-08T14:33:34Z", - "updated_at": "2026-03-08T19:55:25Z", - "pushed_at": "2026-03-08T19:55:18Z", + "updated_at": "2026-10-06T14:22:38Z", + "pushed_at": "2026-10-06T14:22:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-23692.json b/2024/CVE-2024-23692.json index a70d83a5cc..70c53c4e3e 100644 --- a/2024/CVE-2024-23692.json +++ b/2024/CVE-2024-23692.json @@ -311,10 +311,10 @@ "description": "POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 ", "fork": false, "created_at": "2024-09-15T12:15:35Z", - "updated_at": "2026-09-11T10:28:58Z", + "updated_at": "2026-10-06T16:21:08Z", "pushed_at": "2025-03-24T10:08:18Z", - "stargazers_count": 49, - "watchers_count": 49, + "stargazers_count": 50, + "watchers_count": 50, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -330,7 +330,7 @@ ], "visibility": "public", "forks": 15, - "watchers": 49, + "watchers": 50, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-27956.json b/2024/CVE-2024-27956.json index 2a191208ae..cc07f645fc 100644 --- a/2024/CVE-2024-27956.json +++ b/2024/CVE-2024-27956.json @@ -47,10 +47,10 @@ "description": "PoC for SQL Injection in CVE-2024-27956", "fork": false, "created_at": "2024-05-01T01:58:28Z", - "updated_at": "2026-09-25T12:04:20Z", + "updated_at": "2026-10-06T17:56:38Z", "pushed_at": "2024-05-03T11:28:21Z", - "stargazers_count": 90, - "watchers_count": 90, + "stargazers_count": 89, + "watchers_count": 89, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 90, + "watchers": 89, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-4068.json b/2024/CVE-2024-4068.json deleted file mode 100644 index 520e78284e..0000000000 --- a/2024/CVE-2024-4068.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 1304083129, - "name": "DoS-Braces-3.03", - "full_name": "cyeezy08\/DoS-Braces-3.03", - "owner": { - "login": "cyeezy08", - "id": 245098952, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245098952?v=4", - "html_url": "https:\/\/github.com\/cyeezy08", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cyeezy08\/DoS-Braces-3.03", - "description": "CVE-Candidate: DoS in braces@3.0.3 via comma-separated brace expansion (CVE-2024-4068 incomplete fix)", - "fork": false, - "created_at": "2026-07-17T14:31:01Z", - "updated_at": "2026-10-01T05:06:14Z", - "pushed_at": "2026-09-20T18:42:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "brace-expansion", - "cve", - "denial-of-service", - "patch-analysis", - "poc", - "security-research" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 9f4278cc5f..2b191f12f0 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -1409,7 +1409,7 @@ "stargazers_count": 113, "watchers_count": 113, "has_discussions": false, - "forks_count": 38, + "forks_count": 37, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1426,7 +1426,7 @@ "rce" ], "visibility": "public", - "forks": 38, + "forks": 37, "watchers": 113, "score": 0, "subscribers_count": 3 diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 7f6bbf4fa4..8c9c155e79 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -212,10 +212,10 @@ "description": null, "fork": false, "created_at": "2026-08-19T09:39:46Z", - "updated_at": "2026-10-01T09:09:50Z", + "updated_at": "2026-10-06T15:04:09Z", "pushed_at": "2026-09-28T08:28:51Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -429,10 +429,10 @@ "description": "Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499", "fork": false, "created_at": "2026-10-06T09:08:12Z", - "updated_at": "2026-10-06T11:59:31Z", + "updated_at": "2026-10-06T14:06:29Z", "pushed_at": "2026-10-06T09:28:05Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -443,7 +443,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 6c01dbe168..df399112c1 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -1457,8 +1457,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-10-06T12:36:26Z", - "pushed_at": "2026-10-06T12:36:21Z", + "updated_at": "2026-10-06T15:39:33Z", + "pushed_at": "2026-10-06T15:39:29Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index 0d4993c1e7..67601534c8 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-08-28T15:52:37Z", + "updated_at": "2026-10-06T18:13:16Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 195, - "watchers_count": 195, + "stargazers_count": 194, + "watchers_count": 194, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 195, + "watchers": 194, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 4873a14e95..e772bb6edd 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-10-06T12:41:26Z", - "pushed_at": "2026-10-06T12:41:21Z", + "updated_at": "2026-10-06T15:44:15Z", + "pushed_at": "2026-10-06T15:43:51Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 2187a73891..be2ee49b48 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-05T13:53:19Z", + "updated_at": "2026-10-06T18:07:09Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 963, - "watchers_count": 963, + "stargazers_count": 964, + "watchers_count": 964, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 143, - "watchers": 963, + "watchers": 964, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 8a546831ff..1f721499b6 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-05T04:40:20Z", + "updated_at": "2026-10-06T14:05:58Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2454, - "watchers_count": 2454, + "stargazers_count": 2453, + "watchers_count": 2453, "has_discussions": false, "forks_count": 269, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 269, - "watchers": 2454, + "watchers": 2453, "score": 0, "subscribers_count": 11 }, @@ -2121,12 +2121,12 @@ "description": "Exploit for CVE-2025-55182 & CVE-2025-66478", "fork": false, "created_at": "2025-12-05T05:09:56Z", - "updated_at": "2026-09-17T03:00:41Z", + "updated_at": "2026-10-06T14:06:05Z", "pushed_at": "2025-12-10T11:48:44Z", - "stargazers_count": 142, - "watchers_count": 142, + "stargazers_count": 141, + "watchers_count": 141, "has_discussions": false, - "forks_count": 35, + "forks_count": 34, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2134,8 +2134,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 35, - "watchers": 142, + "forks": 34, + "watchers": 141, "score": 0, "subscribers_count": 2 }, @@ -2201,7 +2201,7 @@ "stargazers_count": 588, "watchers_count": 588, "has_discussions": false, - "forks_count": 86, + "forks_count": 85, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2209,7 +2209,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 86, + "forks": 85, "watchers": 588, "score": 0, "subscribers_count": 3 @@ -3874,7 +3874,7 @@ "stargazers_count": 313, "watchers_count": 313, "has_discussions": false, - "forks_count": 55, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3882,7 +3882,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 55, + "forks": 54, "watchers": 313, "score": 0, "subscribers_count": 5 @@ -4315,7 +4315,7 @@ "stargazers_count": 22, "watchers_count": 22, "has_discussions": false, - "forks_count": 8, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4323,7 +4323,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, + "forks": 7, "watchers": 22, "score": 0, "subscribers_count": 0 @@ -14855,7 +14855,7 @@ "description": "Toolkit for CVE-2025-55182, also known as React2Shell.", "fork": false, "created_at": "2026-06-12T12:53:14Z", - "updated_at": "2026-07-15T08:28:57Z", + "updated_at": "2026-10-06T15:26:29Z", "pushed_at": "2026-06-12T12:55:52Z", "stargazers_count": 4, "watchers_count": 4, diff --git a/2025/CVE-2025-55575.json b/2025/CVE-2025-55575.json index 396ce27cd2..2c233439b5 100644 --- a/2025/CVE-2025-55575.json +++ b/2025/CVE-2025-55575.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-08-22T19:04:24Z", - "updated_at": "2026-10-06T13:26:36Z", + "updated_at": "2026-10-06T18:39:38Z", "pushed_at": "2025-08-25T18:42:48Z", - "stargazers_count": 314, - "watchers_count": 314, + "stargazers_count": 191, + "watchers_count": 191, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 314, + "watchers": 191, "score": 0, "subscribers_count": 326 } diff --git a/2025/CVE-2025-58726.json b/2025/CVE-2025-58726.json index b6c996c90f..7b0d3d33a6 100644 --- a/2025/CVE-2025-58726.json +++ b/2025/CVE-2025-58726.json @@ -14,10 +14,10 @@ "description": "AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.", "fork": false, "created_at": "2026-03-30T19:34:35Z", - "updated_at": "2026-10-05T22:44:34Z", + "updated_at": "2026-10-06T18:38:09Z", "pushed_at": "2026-09-25T10:10:11Z", - "stargazers_count": 209, - "watchers_count": 209, + "stargazers_count": 208, + "watchers_count": 208, "has_discussions": false, "forks_count": 43, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 43, - "watchers": 209, + "watchers": 208, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-65945.json b/2025/CVE-2025-65945.json index 3caf64c5db..9c71bab87f 100644 --- a/2025/CVE-2025-65945.json +++ b/2025/CVE-2025-65945.json @@ -14,12 +14,12 @@ "description": "PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)", "fork": false, "created_at": "2025-12-17T15:52:03Z", - "updated_at": "2025-12-21T21:32:47Z", + "updated_at": "2026-10-06T14:06:06Z", "pushed_at": "2025-12-17T19:48:11Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, - "forks_count": 1, + "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -35,8 +35,8 @@ "poc" ], "visibility": "public", - "forks": 1, - "watchers": 5, + "forks": 0, + "watchers": 4, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 9a0bcb80a0..77fe4f078c 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-10-06T12:49:21Z", - "pushed_at": "2026-10-06T12:49:16Z", + "updated_at": "2026-10-06T15:51:32Z", + "pushed_at": "2026-10-06T15:51:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -134,7 +134,7 @@ "stargazers_count": 430, "watchers_count": 430, "has_discussions": false, - "forks_count": 80, + "forks_count": 79, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -147,7 +147,7 @@ "nextjs" ], "visibility": "public", - "forks": 80, + "forks": 79, "watchers": 430, "score": 0, "subscribers_count": 1 diff --git a/2025/CVE-2025-66516.json b/2025/CVE-2025-66516.json index 32e9c93dd7..aee28dbf73 100644 --- a/2025/CVE-2025-66516.json +++ b/2025/CVE-2025-66516.json @@ -1,37 +1,4 @@ [ - { - "id": 1112650280, - "name": "Blackash-CVE-2025-66516", - "full_name": "yunatamos\/Blackash-CVE-2025-66516", - "owner": { - "login": "yunatamos", - "id": 57252898, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57252898?v=4", - "html_url": "https:\/\/github.com\/yunatamos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yunatamos\/Blackash-CVE-2025-66516", - "description": "CVE-2025-66516 ", - "fork": false, - "created_at": "2025-12-08T23:14:15Z", - "updated_at": "2025-12-08T23:14:15Z", - "pushed_at": "2025-12-08T11:13:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1114914901, "name": "CVE-2025-66516-Writeup-POC", diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index b2b00a53c4..7045b55c48 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-10-06T12:54:51Z", - "pushed_at": "2026-10-06T12:54:47Z", + "updated_at": "2026-10-06T15:56:57Z", + "pushed_at": "2026-10-06T15:56:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-103956.json b/2026/CVE-2026-103956.json index 29dc89213c..6a65ac5966 100644 --- a/2026/CVE-2026-103956.json +++ b/2026/CVE-2026-103956.json @@ -14,10 +14,10 @@ "description": "CVE-2026-103956 - Loom for AWS - Critical - Auth bypass - unauthenticated super-admin when no IdP is configured", "fork": false, "created_at": "2026-10-03T21:54:10Z", - "updated_at": "2026-10-05T12:26:48Z", + "updated_at": "2026-10-06T16:21:59Z", "pushed_at": "2026-10-03T21:54:41Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-104905.json b/2026/CVE-2026-104905.json index d079a1b839..fb747f3239 100644 --- a/2026/CVE-2026-104905.json +++ b/2026/CVE-2026-104905.json @@ -14,10 +14,10 @@ "description": "PHP Object Injection -> Arbitrary File Deletion in FacturaScripts <= 2026.66 (CWE-502). PoC + advisory.", "fork": false, "created_at": "2026-10-06T06:18:26Z", - "updated_at": "2026-10-06T06:30:47Z", + "updated_at": "2026-10-06T14:51:13Z", "pushed_at": "2026-10-06T06:30:43Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index f12bcce6a0..d4c9a7f824 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-10-06T13:01:17Z", - "pushed_at": "2026-10-06T13:00:47Z", + "updated_at": "2026-10-06T16:02:36Z", + "pushed_at": "2026-10-06T16:02:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-21589.json b/2026/CVE-2026-21589.json new file mode 100644 index 0000000000..cb6aee1cfb --- /dev/null +++ b/2026/CVE-2026-21589.json @@ -0,0 +1,115 @@ +[ + { + "id": 1407117336, + "name": "watchTowr-vs-Atlassian-CVE-2026-21589", + "full_name": "watchtowrlabs\/watchTowr-vs-Atlassian-CVE-2026-21589", + "owner": { + "login": "watchtowrlabs", + "id": 99977116, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4", + "html_url": "https:\/\/github.com\/watchtowrlabs", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-Atlassian-CVE-2026-21589", + "description": null, + "fork": false, + "created_at": "2026-10-06T10:40:59Z", + "updated_at": "2026-10-06T16:56:46Z", + "pushed_at": "2026-10-06T10:48:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1407557235, + "name": "CVE-2026-21589", + "full_name": "MarcusProgram\/CVE-2026-21589", + "owner": { + "login": "MarcusProgram", + "id": 133644816, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133644816?v=4", + "html_url": "https:\/\/github.com\/MarcusProgram", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MarcusProgram\/CVE-2026-21589", + "description": null, + "fork": false, + "created_at": "2026-10-06T15:43:34Z", + "updated_at": "2026-10-06T18:15:44Z", + "pushed_at": "2026-10-06T15:51:43Z", + "stargazers_count": 5, + "watchers_count": 5, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 5, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1407757615, + "name": "CVE-2026-21589-PoC-Exploit", + "full_name": "tc4dy\/CVE-2026-21589-PoC-Exploit", + "owner": { + "login": "tc4dy", + "id": 140116264, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4", + "html_url": "https:\/\/github.com\/tc4dy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-21589-PoC-Exploit", + "description": "CVE-2026-21589 – Atlassian Data Center Unauth Arbitrary File Read (CVSS 9.3) | Red\/Blue Team suite. 2 tools: Full Exploit (path traversal, WEB-INF read, credential harvest, 8 products, mass scan, SOCKS5\/Tor, stealth) & SafeChecker (non-intrusive version audit, IoC guidance, JSON\/CSV). Use Ethically, Stay Legal.", + "fork": false, + "created_at": "2026-10-06T18:21:50Z", + "updated_at": "2026-10-06T18:34:46Z", + "pushed_at": "2026-10-06T18:34:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "atlassian", + "atlassian-crowd", + "atlassian-jira", + "atlassian-vuln", + "blueteam", + "cve", + "cve-2026-21589", + "cve-scanning", + "cve-search", + "redteam", + "toolkit", + "vulnerability", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json index c1b8dbdec9..e40a799159 100644 --- a/2026/CVE-2026-23870.json +++ b/2026/CVE-2026-23870.json @@ -14,10 +14,10 @@ "description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)", "fork": false, "created_at": "2026-05-07T23:00:40Z", - "updated_at": "2026-09-22T21:10:42Z", + "updated_at": "2026-10-06T14:06:06Z", "pushed_at": "2026-05-12T04:28:18Z", - "stargazers_count": 184, - "watchers_count": 184, + "stargazers_count": 183, + "watchers_count": 183, "has_discussions": true, "forks_count": 41, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 41, - "watchers": 184, + "watchers": 183, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 3d7ee48eaa..5785898660 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -65,8 +65,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-10-06T13:03:04Z", - "pushed_at": "2026-10-06T13:03:00Z", + "updated_at": "2026-10-06T16:04:35Z", + "pushed_at": "2026-10-06T16:04:30Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-30368.json b/2026/CVE-2026-30368.json index 6726cfa8a6..49ea9cddbe 100644 --- a/2026/CVE-2026-30368.json +++ b/2026/CVE-2026-30368.json @@ -14,10 +14,10 @@ "description": "CVE-2026-30368 proof of concept", "fork": false, "created_at": "2026-04-22T03:40:06Z", - "updated_at": "2026-09-17T09:27:12Z", + "updated_at": "2026-10-06T14:38:23Z", "pushed_at": "2026-04-26T22:34:05Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 13, + "watchers": 12, "score": 0, "subscribers_count": 2 } diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index aeb58b1563..e4bf46b248 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-10-06T07:56:49Z", + "updated_at": "2026-10-06T19:22:09Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4073, - "watchers_count": 4073, + "stargazers_count": 4072, + "watchers_count": 4072, "has_discussions": false, "forks_count": 913, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 913, - "watchers": 4073, + "watchers": 4072, "score": 0, "subscribers_count": 34 }, diff --git a/2026/CVE-2026-32475.json b/2026/CVE-2026-32475.json index aa47d77bf1..60ed7d0a59 100644 --- a/2026/CVE-2026-32475.json +++ b/2026/CVE-2026-32475.json @@ -196,48 +196,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1377607270, - "name": "WordPress_Exploit_Directory", - "full_name": "cyeezy08\/WordPress_Exploit_Directory", - "owner": { - "login": "cyeezy08", - "id": 245098952, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245098952?v=4", - "html_url": "https:\/\/github.com\/cyeezy08", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cyeezy08\/WordPress_Exploit_Directory", - "description": "CVE-2026-32475 — unauthenticated arbitrary file upload in Elementor Pro <= 4.2.1 (CVSS 9.0, CWE-434). PoC for authorised testing.", - "fork": false, - "created_at": "2026-09-19T20:55:47Z", - "updated_at": "2026-10-01T05:06:15Z", - "pushed_at": "2026-09-19T20:59:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2026-32475", - "elementor", - "exploit", - "poc", - "rce", - "security-research", - "unrestricted-file-upload", - "wordpress" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-34990.json b/2026/CVE-2026-34990.json index 7d869f6e84..cf6abb6eb2 100644 --- a/2026/CVE-2026-34990.json +++ b/2026/CVE-2026-34990.json @@ -85,7 +85,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 3, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 87be39c958..ed310160de 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-05T13:53:19Z", + "updated_at": "2026-10-06T18:07:09Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 963, - "watchers_count": 963, + "stargazers_count": 964, + "watchers_count": 964, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 143, - "watchers": 963, + "watchers": 964, "score": 0, "subscribers_count": 22 }, diff --git a/2026/CVE-2026-3888.json b/2026/CVE-2026-3888.json index 17a0ac9815..e005ab813a 100644 --- a/2026/CVE-2026-3888.json +++ b/2026/CVE-2026-3888.json @@ -231,5 +231,48 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1407589678, + "name": "CVE-2026-3888-snap-confine-privilege-escalation", + "full_name": "AlanNewberry\/CVE-2026-3888-snap-confine-privilege-escalation", + "owner": { + "login": "AlanNewberry", + "id": 181013839, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181013839?v=4", + "html_url": "https:\/\/github.com\/AlanNewberry", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AlanNewberry\/CVE-2026-3888-snap-confine-privilege-escalation", + "description": "Exploit para CVE-2026-3888: race condition en snap-confine con hijack del loader para escalar a root en Linux.", + "fork": false, + "created_at": "2026-10-06T16:07:23Z", + "updated_at": "2026-10-06T16:13:40Z", + "pushed_at": "2026-10-06T16:07:28Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-3888", + "exploit", + "linux", + "local-privesc", + "privilege-escalation", + "race-condition", + "snap-confine", + "snapd" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-41875.json b/2026/CVE-2026-41875.json index 4848b53115..820084861e 100644 --- a/2026/CVE-2026-41875.json +++ b/2026/CVE-2026-41875.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-10-05T13:57:12Z", - "updated_at": "2026-10-05T13:59:30Z", + "updated_at": "2026-10-06T14:57:15Z", "pushed_at": "2026-10-05T13:59:25Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index f8f77241ad..de93b9e79d 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -738,10 +738,10 @@ "description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection", "fork": false, "created_at": "2026-05-01T12:09:26Z", - "updated_at": "2026-09-30T15:01:45Z", + "updated_at": "2026-10-06T17:13:21Z", "pushed_at": "2026-05-01T12:10:32Z", - "stargazers_count": 506, - "watchers_count": 506, + "stargazers_count": 507, + "watchers_count": 507, "has_discussions": false, "forks_count": 139, "allow_forking": true, @@ -752,7 +752,7 @@ "topics": [], "visibility": "public", "forks": 139, - "watchers": 506, + "watchers": 507, "score": 0, "subscribers_count": 7 }, @@ -2543,10 +2543,10 @@ "description": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required.", "fork": false, "created_at": "2026-09-21T18:23:02Z", - "updated_at": "2026-10-06T13:37:41Z", + "updated_at": "2026-10-06T18:05:44Z", "pushed_at": "2026-10-03T16:48:21Z", - "stargazers_count": 265, - "watchers_count": 265, + "stargazers_count": 277, + "watchers_count": 277, "has_discussions": false, "forks_count": 34, "allow_forking": true, @@ -2564,7 +2564,7 @@ ], "visibility": "public", "forks": 34, - "watchers": 265, + "watchers": 277, "score": 0, "subscribers_count": 0 }, @@ -2583,8 +2583,8 @@ "description": "A tool for exploiting CVE-2026-41940, a critical authentication bypass in cPanel & WHM (CVSS 10.0), allowing unauthenticated attackers to gain root-level WHM access by injecting CRLF sequences into server-side session files via the Authorization header — no credentials required.", "fork": false, "created_at": "2026-09-26T17:18:07Z", - "updated_at": "2026-09-26T17:19:48Z", - "pushed_at": "2026-09-26T17:19:44Z", + "updated_at": "2026-10-06T14:27:25Z", + "pushed_at": "2026-10-06T14:27:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index f564699866..8d305b11ca 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -282,10 +282,10 @@ "description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k", "fork": false, "created_at": "2026-07-12T10:15:03Z", - "updated_at": "2026-10-02T15:21:47Z", + "updated_at": "2026-10-06T17:53:58Z", "pushed_at": "2026-07-15T22:46:59Z", - "stargazers_count": 247, - "watchers_count": 247, + "stargazers_count": 248, + "watchers_count": 248, "has_discussions": false, "forks_count": 98, "allow_forking": true, @@ -296,7 +296,7 @@ "topics": [], "visibility": "public", "forks": 98, - "watchers": 247, + "watchers": 248, "score": 0, "subscribers_count": 3 }, @@ -348,10 +348,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-10-05T21:52:46Z", + "updated_at": "2026-10-06T18:50:45Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 394, - "watchers_count": 394, + "stargazers_count": 396, + "watchers_count": 396, "has_discussions": false, "forks_count": 89, "allow_forking": true, @@ -369,7 +369,7 @@ ], "visibility": "public", "forks": 89, - "watchers": 394, + "watchers": 396, "score": 0, "subscribers_count": 11 }, @@ -1048,10 +1048,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-06T13:38:16Z", + "updated_at": "2026-10-06T18:27:10Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1362, - "watchers_count": 1362, + "stargazers_count": 1364, + "watchers_count": 1364, "has_discussions": false, "forks_count": 277, "allow_forking": true, @@ -1062,7 +1062,7 @@ "topics": [], "visibility": "public", "forks": 277, - "watchers": 1362, + "watchers": 1364, "score": 0, "subscribers_count": 39 }, @@ -1147,8 +1147,8 @@ "description": "UNFINISHED\/WIP - CVE-2026-43499 (IonStack\/GhostLock) research POC for Samsung SM-T878U \/ gts7l. Trigger + geometry verified, NO working root yet.", "fork": false, "created_at": "2026-07-18T08:18:28Z", - "updated_at": "2026-10-03T03:23:34Z", - "pushed_at": "2026-10-03T03:22:40Z", + "updated_at": "2026-10-06T16:50:05Z", + "pushed_at": "2026-10-06T16:50:56Z", "stargazers_count": 16, "watchers_count": 16, "has_discussions": false, @@ -1663,12 +1663,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-06T13:13:08Z", + "updated_at": "2026-10-06T18:34:16Z", "pushed_at": "2026-10-06T02:45:20Z", - "stargazers_count": 1586, - "watchers_count": 1586, + "stargazers_count": 1596, + "watchers_count": 1596, "has_discussions": false, - "forks_count": 417, + "forks_count": 418, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1676,8 +1676,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 417, - "watchers": 1586, + "forks": 418, + "watchers": 1596, "score": 0, "subscribers_count": 21 }, @@ -1998,10 +1998,10 @@ "description": "the CVE-2026-43499 by iqooneo11", "fork": false, "created_at": "2026-08-02T08:10:34Z", - "updated_at": "2026-10-02T20:45:46Z", + "updated_at": "2026-10-06T16:42:00Z", "pushed_at": "2026-08-28T03:35:13Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -2012,7 +2012,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 0 }, @@ -2599,12 +2599,12 @@ "description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本", "fork": false, "created_at": "2026-08-12T10:05:38Z", - "updated_at": "2026-10-05T05:29:24Z", + "updated_at": "2026-10-06T18:17:31Z", "pushed_at": "2026-08-12T10:05:44Z", - "stargazers_count": 42, - "watchers_count": 42, + "stargazers_count": 43, + "watchers_count": 43, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2612,8 +2612,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 42, + "forks": 4, + "watchers": 43, "score": 0, "subscribers_count": 0 }, @@ -2775,10 +2775,10 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-10-06T13:38:38Z", + "updated_at": "2026-10-06T15:06:54Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 220, - "watchers_count": 220, + "stargazers_count": 221, + "watchers_count": 221, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -2789,7 +2789,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 220, + "watchers": 221, "score": 0, "subscribers_count": 1 }, @@ -3204,10 +3204,10 @@ "description": "GhostLock (CVE-2026-43499) for the Galaxy S26", "fork": false, "created_at": "2026-08-21T14:29:00Z", - "updated_at": "2026-10-06T10:02:02Z", + "updated_at": "2026-10-06T15:23:12Z", "pushed_at": "2026-10-06T01:15:52Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 20, + "watchers_count": 20, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -3218,7 +3218,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 19, + "watchers": 20, "score": 0, "subscribers_count": 1 }, @@ -4371,10 +4371,10 @@ "description": "Exploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21", "fork": false, "created_at": "2026-09-15T16:09:05Z", - "updated_at": "2026-10-06T12:51:37Z", + "updated_at": "2026-10-06T15:18:24Z", "pushed_at": "2026-10-06T12:51:32Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -4385,7 +4385,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 1 }, @@ -5261,10 +5261,10 @@ "description": "Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499", "fork": false, "created_at": "2026-10-06T09:08:12Z", - "updated_at": "2026-10-06T11:59:31Z", + "updated_at": "2026-10-06T14:06:29Z", "pushed_at": "2026-10-06T09:28:05Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5275,7 +5275,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43682.json b/2026/CVE-2026-43682.json index 54d2b82d68..4549096a42 100644 --- a/2026/CVE-2026-43682.json +++ b/2026/CVE-2026-43682.json @@ -19,7 +19,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 11, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-43805.json b/2026/CVE-2026-43805.json index 6f5a7993f5..11e762a6aa 100644 --- a/2026/CVE-2026-43805.json +++ b/2026/CVE-2026-43805.json @@ -39,5 +39,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1407464993, + "name": "CVE-2026-43805-analysis", + "full_name": "WTCYJ\/CVE-2026-43805-analysis", + "owner": { + "login": "WTCYJ", + "id": 150126582, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150126582?v=4", + "html_url": "https:\/\/github.com\/WTCYJ", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/WTCYJ\/CVE-2026-43805-analysis", + "description": "One-day analysis + sanitizer PoC of CVE-2026-43805 (IOKit IODMACommand DriverKit RPC race, CWE-362)", + "fork": false, + "created_at": "2026-10-06T14:45:26Z", + "updated_at": "2026-10-06T14:45:37Z", + "pushed_at": "2026-10-06T14:45:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-4480.json b/2026/CVE-2026-4480.json index 9024cc4fd2..a1b349b5e2 100644 --- a/2026/CVE-2026-4480.json +++ b/2026/CVE-2026-4480.json @@ -242,10 +242,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/AlanNewberry\/CVE-2026-4480-samba-print-command-injection-rce", - "description": null, + "description": "Exploit para CVE-2026-4480: inyeccion de comandos en la variable %J del print command de Samba para RCE sin autenticacion via spoolss.", "fork": false, "created_at": "2026-10-03T15:23:16Z", - "updated_at": "2026-10-04T21:03:31Z", + "updated_at": "2026-10-06T16:13:26Z", "pushed_at": "2026-10-03T15:23:21Z", "stargazers_count": 2, "watchers_count": 2, @@ -259,13 +259,17 @@ "topics": [ "command-injection", "cve", + "cve-2026-4480", "cybersecurity", "exploit", "linux", "pentesting", + "poc", "python", "rce", - "samba" + "samba", + "spoolss", + "unauthenticated" ], "visibility": "public", "forks": 0, diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index d62181c755..d4f7f82c31 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-06T11:02:22Z", + "updated_at": "2026-10-06T18:40:47Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 444, - "watchers_count": 444, + "stargazers_count": 445, + "watchers_count": 445, "has_discussions": false, "forks_count": 103, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 103, - "watchers": 444, + "watchers": 445, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-50229.json b/2026/CVE-2026-50229.json deleted file mode 100644 index 2b78c003d5..0000000000 --- a/2026/CVE-2026-50229.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1293338448, - "name": "CVE-2026-50229", - "full_name": "zero-trace7\/CVE-2026-50229", - "owner": { - "login": "zero-trace7", - "id": 195900104, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195900104?v=4", - "html_url": "https:\/\/github.com\/zero-trace7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zero-trace7\/CVE-2026-50229", - "description": null, - "fork": false, - "created_at": "2026-07-08T08:56:04Z", - "updated_at": "2026-09-18T05:02:02Z", - "pushed_at": "2026-10-04T00:17:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-52824.json b/2026/CVE-2026-52824.json index 86eecd793c..46ac2457b8 100644 --- a/2026/CVE-2026-52824.json +++ b/2026/CVE-2026-52824.json @@ -1,48 +1,4 @@ [ - { - "id": 1316876650, - "name": "Kimai-CVE-2026-52824-POC", - "full_name": "cyeezy08\/Kimai-CVE-2026-52824-POC", - "owner": { - "login": "cyeezy08", - "id": 245098952, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245098952?v=4", - "html_url": "https:\/\/github.com\/cyeezy08", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cyeezy08\/Kimai-CVE-2026-52824-POC", - "description": "PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0", - "fork": false, - "created_at": "2026-07-30T05:40:52Z", - "updated_at": "2026-10-01T09:25:23Z", - "pushed_at": "2026-09-20T18:42:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "authentication-bypass", - "cookie-forgery", - "cve-2026-52824", - "default-secret", - "exploit", - "kimai", - "poc", - "python", - "security-research", - "symfony" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1322447651, "name": "CVE-2026-52824", diff --git a/2026/CVE-2026-57967.json b/2026/CVE-2026-57967.json new file mode 100644 index 0000000000..75cb58ffd8 --- /dev/null +++ b/2026/CVE-2026-57967.json @@ -0,0 +1,44 @@ +[ + { + "id": 1407829311, + "name": "CVE-2026-57967", + "full_name": "c0dem4sters\/CVE-2026-57967", + "owner": { + "login": "c0dem4sters", + "id": 158744821, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158744821?v=4", + "html_url": "https:\/\/github.com\/c0dem4sters", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/c0dem4sters\/CVE-2026-57967", + "description": "CVE-2026-57967 PoC — Apache ActiveMQ Artemis unauthenticated session hijacking via SESSION_REATTACH (2.50.0–2.56.0)", + "fork": false, + "created_at": "2026-10-06T19:28:07Z", + "updated_at": "2026-10-06T19:28:22Z", + "pushed_at": "2026-10-06T19:28:14Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "1day", + "activemq-artemis", + "cve", + "cve-2026-57967", + "exploit", + "poc", + "security-research", + "session-hijacking" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-59265.json b/2026/CVE-2026-59265.json new file mode 100644 index 0000000000..3b2aac7845 --- /dev/null +++ b/2026/CVE-2026-59265.json @@ -0,0 +1,35 @@ +[ + { + "id": 1407509681, + "name": "CVE-2026-59265", + "full_name": "HORKimhab\/CVE-2026-59265", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-59265", + "description": "CVE-2026-59265", + "fork": false, + "created_at": "2026-10-06T15:12:44Z", + "updated_at": "2026-10-06T15:15:15Z", + "pushed_at": "2026-10-06T15:15:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-59310.json b/2026/CVE-2026-59310.json index aebd26a738..7d0ab70d0b 100644 --- a/2026/CVE-2026-59310.json +++ b/2026/CVE-2026-59310.json @@ -163,7 +163,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -180,7 +180,7 @@ "vmware" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-63277.json b/2026/CVE-2026-63277.json new file mode 100644 index 0000000000..fdf033cc17 --- /dev/null +++ b/2026/CVE-2026-63277.json @@ -0,0 +1,35 @@ +[ + { + "id": 1407504366, + "name": "CVE-2026-63277", + "full_name": "HORKimhab\/CVE-2026-63277", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-63277", + "description": "CVE-2026-63277,", + "fork": false, + "created_at": "2026-10-06T15:09:45Z", + "updated_at": "2026-10-06T15:12:09Z", + "pushed_at": "2026-10-06T15:12:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-64561.json b/2026/CVE-2026-64561.json index c21912ef75..ca16f5125c 100644 --- a/2026/CVE-2026-64561.json +++ b/2026/CVE-2026-64561.json @@ -117,8 +117,8 @@ "description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.", "fork": false, "created_at": "2026-08-07T15:51:07Z", - "updated_at": "2026-10-06T13:22:28Z", - "pushed_at": "2026-10-06T13:22:24Z", + "updated_at": "2026-10-06T17:04:03Z", + "pushed_at": "2026-10-06T17:03:59Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-67401.json b/2026/CVE-2026-67401.json index aa2dc717ed..dd0da09291 100644 --- a/2026/CVE-2026-67401.json +++ b/2026/CVE-2026-67401.json @@ -164,5 +164,38 @@ "watchers": 5, "score": 0, "subscribers_count": 0 + }, + { + "id": 1407448579, + "name": "CVE-2026-67401", + "full_name": "hitechcloud-vietnam\/CVE-2026-67401", + "owner": { + "login": "hitechcloud-vietnam", + "id": 187465773, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187465773?v=4", + "html_url": "https:\/\/github.com\/hitechcloud-vietnam", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hitechcloud-vietnam\/CVE-2026-67401", + "description": "PoC for CVE-2026-67401 — cPanel\/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.", + "fork": false, + "created_at": "2026-10-06T14:34:00Z", + "updated_at": "2026-10-06T14:38:33Z", + "pushed_at": "2026-10-06T14:38:29Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-73570.json b/2026/CVE-2026-73570.json index 1c5b897c16..405ce8c4a1 100644 --- a/2026/CVE-2026-73570.json +++ b/2026/CVE-2026-73570.json @@ -303,10 +303,10 @@ "description": "CVE-2026-73570", "fork": false, "created_at": "2026-09-30T21:13:26Z", - "updated_at": "2026-10-01T15:54:35Z", + "updated_at": "2026-10-06T17:44:41Z", "pushed_at": "2026-09-30T21:30:51Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -317,7 +317,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-76578.json b/2026/CVE-2026-76578.json index 3fda1c704d..0e85d65f92 100644 --- a/2026/CVE-2026-76578.json +++ b/2026/CVE-2026-76578.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-8206.json b/2026/CVE-2026-8206.json index a56d36f125..17325fddcf 100644 --- a/2026/CVE-2026-8206.json +++ b/2026/CVE-2026-8206.json @@ -155,10 +155,10 @@ "description": "A deep-dive technical reconstruction and impact analysis of CVE-2026-8206—a critical CVSS 9.8 unauthenticated account takeover vulnerability in the WordPress Kirki plugin, featuring proof-of-concept validation, detection strategies, and mitigation frameworks. 🛡️", "fork": false, "created_at": "2026-10-06T05:49:42Z", - "updated_at": "2026-10-06T06:23:34Z", + "updated_at": "2026-10-06T15:33:30Z", "pushed_at": "2026-10-06T06:03:45Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -179,7 +179,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-88771.json b/2026/CVE-2026-88771.json index 5008552ec0..2479983d2c 100644 --- a/2026/CVE-2026-88771.json +++ b/2026/CVE-2026-88771.json @@ -299,8 +299,8 @@ "description": "PitScaler: independent, source-linked briefing on Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 (CTX697096). https:\/\/pitscaler.com", "fork": false, "created_at": "2026-10-01T10:40:43Z", - "updated_at": "2026-10-05T12:24:58Z", - "pushed_at": "2026-10-05T12:24:53Z", + "updated_at": "2026-10-06T19:44:24Z", + "pushed_at": "2026-10-06T19:44:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-89026.json b/2026/CVE-2026-89026.json index a28abb76dd..7dfdd4cacd 100644 --- a/2026/CVE-2026-89026.json +++ b/2026/CVE-2026-89026.json @@ -14,7 +14,7 @@ "description": "PoC exploit and scanner for CVE-2026-89026, targeting the Issabel PBXAPI authentication vulnerability", "fork": false, "created_at": "2026-09-21T10:59:47Z", - "updated_at": "2026-09-21T11:24:13Z", + "updated_at": "2026-10-06T18:59:27Z", "pushed_at": "2026-09-21T11:09:25Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2026/CVE-2026-94545.json b/2026/CVE-2026-94545.json index eec7f1a0e7..6f41546229 100644 --- a/2026/CVE-2026-94545.json +++ b/2026/CVE-2026-94545.json @@ -80,10 +80,10 @@ "description": "Next.js RCE", "fork": false, "created_at": "2026-09-29T07:57:18Z", - "updated_at": "2026-10-05T20:56:10Z", + "updated_at": "2026-10-06T18:07:37Z", "pushed_at": "2026-09-29T08:12:51Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 48, + "watchers_count": 48, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 47, + "watchers": 48, "score": 0, "subscribers_count": 1 },