nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/15 18:53:17

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-16 03:53:17 +09:00
1 parent bcd82fb825
commit d358986eba
97 files changed
+844 -947
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-2523.json
+2 -2
View File
@@ -1508,8 +1508,8 @@
"description": "DFIR investigation + 7 Suricata rules on a simulated NexaCorp intrusion (vsftpd 2.3.4 CVE-2011-2523 + MITRE Caldera C2). 4-day solo engagement (BeCode Brussels Mission 01). 54-page report, 10 findings, 7\/7 rules validated by PCAP replay.",
"fork": false,
"created_at": "2026-05-17T21:06:04Z",
"updated_at": "2026-06-12T13:25:09Z",
"pushed_at": "2026-06-12T13:25:04Z",
"updated_at": "2026-06-15T15:56:11Z",
"pushed_at": "2026-06-15T15:55:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2015/CVE-2015-2291.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2015-2291 Local Privilege Escalation PoC",
"fork": false,
"created_at": "2026-01-25T02:03:04Z",
"updated_at": "2026-01-25T05:16:45Z",
"updated_at": "2026-06-15T13:09:09Z",
"pushed_at": "2026-01-25T05:16:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2016/CVE-2016-0189.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": false,
"forks_count": 50,
"forks_count": 51,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 50,
"forks": 51,
"watchers": 114,
"score": 0,
"subscribers_count": 9
2016/CVE-2016-15042.json
-44
View File
@@ -1,48 +1,4 @@
[
{
"id": 708658246,
"name": "lab-cve-2016-15042",
"full_name": "Aditya43621\/lab-cve-2016-15042",
"owner": {
"login": "Aditya43621",
"id": 148743882,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148743882?v=4",
"html_url": "https:\/\/github.com\/Aditya43621",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Aditya43621\/lab-cve-2016-15042",
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-06-15T10:33:33Z",
"pushed_at": "2026-06-15T10:33:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2016-15042",
"docker",
"file-upload",
"nuclei",
"poc",
"rce",
"security-lab",
"unauthenticated",
"wordpress",
"wp-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1049621107,
"name": "lab-cve-2016-15042",
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-15T11:30:38Z",
"pushed_at": "2026-06-15T11:30:24Z",
"updated_at": "2026-06-15T16:28:41Z",
"pushed_at": "2026-06-15T16:28:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-5736.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 209,
"watchers_count": 209,
"has_discussions": false,
"forks_count": 65,
"forks_count": 66,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 65,
"forks": 66,
"watchers": 209,
"score": 0,
"subscribers_count": 8
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-06-15T10:33:28Z",
"pushed_at": "2026-06-15T10:33:24Z",
"updated_at": "2026-06-15T17:20:35Z",
"pushed_at": "2026-06-15T17:20:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+6 -6
View File
@@ -146,10 +146,10 @@
"description": "Exploit Code for CVE-2020-1472 aka Zerologon",
"fork": false,
"created_at": "2020-09-14T16:57:49Z",
"updated_at": "2026-06-02T09:35:52Z",
"updated_at": "2026-06-15T13:28:25Z",
"pushed_at": "2020-11-05T16:37:20Z",
"stargazers_count": 393,
"watchers_count": 393,
"stargazers_count": 394,
"watchers_count": 394,
"has_discussions": false,
"forks_count": 64,
"allow_forking": true,
@@ -167,7 +167,7 @@
],
"visibility": "public",
"forks": 64,
"watchers": 393,
"watchers": 394,
"score": 0,
"subscribers_count": 5
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-15T07:32:50Z",
"pushed_at": "2026-06-15T07:32:46Z",
"updated_at": "2026-06-15T18:09:22Z",
"pushed_at": "2026-06-15T18:09:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-3156.json
+4 -4
View File
@@ -516,10 +516,10 @@
"description": null,
"fork": false,
"created_at": "2021-01-30T20:39:58Z",
"updated_at": "2026-06-12T03:52:28Z",
"updated_at": "2026-06-15T17:30:15Z",
"pushed_at": "2021-02-02T17:07:09Z",
"stargazers_count": 1013,
"watchers_count": 1013,
"stargazers_count": 1014,
"watchers_count": 1014,
"has_discussions": false,
"forks_count": 234,
"allow_forking": true,
@@ -530,7 +530,7 @@
"topics": [],
"visibility": "public",
"forks": 234,
"watchers": 1013,
"watchers": 1014,
"score": 0,
"subscribers_count": 24
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-15T07:35:25Z",
"pushed_at": "2026-06-15T07:35:21Z",
"updated_at": "2026-06-15T18:16:29Z",
"pushed_at": "2026-06-15T18:15:21Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3490.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2021-06-24T18:50:17Z",
"updated_at": "2026-06-11T01:19:24Z",
"updated_at": "2026-06-15T16:27:34Z",
"pushed_at": "2023-07-10T16:41:49Z",
"stargazers_count": 315,
"watchers_count": 315,
"stargazers_count": 316,
"watchers_count": 316,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 315,
"watchers": 316,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-06-15T10:40:10Z",
"pushed_at": "2026-06-15T10:40:06Z",
"updated_at": "2026-06-15T17:27:18Z",
"pushed_at": "2026-06-15T17:27:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+9 -9
View File
@@ -1059,10 +1059,10 @@
"description": "Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam",
"fork": false,
"created_at": "2021-12-10T23:35:31Z",
"updated_at": "2026-05-23T10:52:46Z",
"updated_at": "2026-06-15T12:41:14Z",
"pushed_at": "2021-12-14T13:43:35Z",
"stargazers_count": 106,
"watchers_count": 106,
"stargazers_count": 107,
"watchers_count": 107,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -1078,7 +1078,7 @@
],
"visibility": "public",
"forks": 20,
"watchers": 106,
"watchers": 107,
"score": 0,
"subscribers_count": 2
},
@@ -3906,10 +3906,10 @@
"description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ",
"fork": false,
"created_at": "2021-12-13T03:57:50Z",
"updated_at": "2026-06-12T06:09:24Z",
"updated_at": "2026-06-15T13:48:10Z",
"pushed_at": "2022-11-23T18:23:24Z",
"stargazers_count": 3427,
"watchers_count": 3427,
"stargazers_count": 3428,
"watchers_count": 3428,
"has_discussions": true,
"forks_count": 727,
"allow_forking": true,
@@ -3920,7 +3920,7 @@
"topics": [],
"visibility": "public",
"forks": 727,
"watchers": 3427,
"watchers": 3428,
"score": 0,
"subscribers_count": 54
},
@@ -14184,7 +14184,7 @@
"fork": false,
"created_at": "2026-06-15T05:48:46Z",
"updated_at": "2026-06-15T09:02:28Z",
"pushed_at": "2026-06-15T09:02:18Z",
"pushed_at": "2026-06-15T18:23:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-0386.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2023-0386 analysis and Exp",
"fork": false,
"created_at": "2023-05-06T06:07:23Z",
"updated_at": "2026-05-19T08:25:13Z",
"updated_at": "2026-06-15T16:35:45Z",
"pushed_at": "2023-05-06T06:19:25Z",
"stargazers_count": 123,
"watchers_count": 123,
"stargazers_count": 124,
"watchers_count": 124,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 123,
"watchers": 124,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-21768.json
+2 -2
View File
@@ -489,7 +489,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -497,7 +497,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-31703.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A reflected Cross-Site Scripting (XSS) vulnerability exists in the Edit User functionality of the Microworld Technologies eScan Management Console (version 14.0.1400.2281).",
"fork": false,
"created_at": "2023-05-17T07:22:37Z",
"updated_at": "2026-02-20T07:00:48Z",
"updated_at": "2026-06-15T13:10:49Z",
"pushed_at": "2026-02-20T07:00:21Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-15T10:29:46Z",
"pushed_at": "2026-06-15T10:29:42Z",
"updated_at": "2026-06-15T17:16:22Z",
"pushed_at": "2026-06-15T17:16:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-06-15T11:32:36Z",
"pushed_at": "2026-06-15T11:32:29Z",
"updated_at": "2026-06-15T18:22:10Z",
"pushed_at": "2026-06-15T18:20:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-15T11:32:59Z",
"pushed_at": "2026-06-15T11:32:52Z",
"updated_at": "2026-06-15T18:21:41Z",
"pushed_at": "2026-06-15T18:21:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1065.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-06-15T12:17:55Z",
"pushed_at": "2026-06-15T12:17:41Z",
"updated_at": "2026-06-15T16:12:01Z",
"pushed_at": "2026-06-15T16:10:46Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2024/CVE-2024-2887.json
+2 -2
View File
@@ -118,7 +118,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2024/CVE-2024-36039.json
+6 -2
View File
@@ -14,7 +14,7 @@
"description": "PoC for CVE-2024-36039: Demonstrating SQL Injection via PyMySQL Object-to-String serialization flaw",
"fork": false,
"created_at": "2026-03-26T09:14:58Z",
"updated_at": "2026-05-05T08:29:40Z",
"updated_at": "2026-06-15T14:42:35Z",
"pushed_at": "2026-03-26T09:21:42Z",
"stargazers_count": 1,
"watchers_count": 1,
@@ -25,7 +25,11 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve",
"cve-2024-36039",
"pymysql"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
2024/CVE-2024-56426.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-06-15T12:24:01Z",
"pushed_at": "2026-06-15T12:23:55Z",
"updated_at": "2026-06-15T12:50:24Z",
"pushed_at": "2026-06-15T12:50:16Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
2025/CVE-2025-10184.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "ColorOS短信漏洞，以及用户自救方案",
"fork": false,
"created_at": "2025-09-24T11:48:03Z",
"updated_at": "2026-05-29T03:02:56Z",
"updated_at": "2026-06-15T15:38:37Z",
"pushed_at": "2025-10-15T11:32:43Z",
"stargazers_count": 387,
"watchers_count": 387,
"stargazers_count": 386,
"watchers_count": 386,
"has_discussions": true,
"forks_count": 42,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 387,
"watchers": 386,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-12420.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1270274316,
"name": "aisecplus-week01-servicenow-ai-security-incident",
"full_name": "OloladeAbiola03\/aisecplus-week01-servicenow-ai-security-incident",
"owner": {
"login": "OloladeAbiola03",
"id": 256129671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/256129671?v=4",
"html_url": "https:\/\/github.com\/OloladeAbiola03",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OloladeAbiola03\/aisecplus-week01-servicenow-ai-security-incident",
"description": "Research and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection strategies, and mitigation recommendations.",
"fork": false,
"created_at": "2026-06-15T14:52:39Z",
"updated_at": "2026-06-15T15:00:58Z",
"pushed_at": "2026-06-15T15:00:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-15T11:37:53Z",
"pushed_at": "2026-06-15T11:37:49Z",
"updated_at": "2026-06-15T18:26:25Z",
"pushed_at": "2026-06-15T18:26:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-15T11:36:46Z",
"pushed_at": "2026-06-15T11:36:42Z",
"updated_at": "2026-06-15T18:26:00Z",
"pushed_at": "2026-06-15T18:25:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-06-15T11:58:11Z",
"pushed_at": "2026-06-15T11:58:07Z",
"updated_at": "2026-06-15T18:46:42Z",
"pushed_at": "2026-06-15T18:46:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-15T12:29:15Z",
"pushed_at": "2026-06-15T12:29:11Z",
"updated_at": "2026-06-15T16:22:47Z",
"pushed_at": "2026-06-15T16:22:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-27237.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE 2025 27237 Zabbix LPE proof of concept.",
"fork": false,
"created_at": "2026-01-26T16:31:57Z",
"updated_at": "2026-02-19T16:07:43Z",
"updated_at": "2026-06-15T16:39:21Z",
"pushed_at": "2026-01-26T16:39:22Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-2783.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
{
"id": 1270438739,
"name": "CVE-2025-2783",
"full_name": "ElianGonzi00\/CVE-2025-2783",
"owner": {
"login": "ElianGonzi00",
"id": 79408142,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79408142?v=4",
"html_url": "https:\/\/github.com\/ElianGonzi00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ElianGonzi00\/CVE-2025-2783",
"description": null,
"fork": false,
"created_at": "2026-06-15T18:01:34Z",
"updated_at": "2026-06-15T18:04:46Z",
"pushed_at": "2026-06-15T18:03:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-15T10:35:14Z",
"pushed_at": "2026-06-15T10:35:10Z",
"updated_at": "2026-06-15T17:22:32Z",
"pushed_at": "2026-06-15T17:22:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31324.json
+2 -2
View File
@@ -359,7 +359,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -367,7 +367,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-06-15T10:28:23Z",
"pushed_at": "2026-06-15T10:28:18Z",
"updated_at": "2026-06-15T17:15:00Z",
"pushed_at": "2026-06-15T17:14:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-15T10:36:26Z",
"pushed_at": "2026-06-15T10:36:21Z",
"updated_at": "2026-06-15T17:23:28Z",
"pushed_at": "2026-06-15T17:23:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-06-15T10:36:26Z",
"pushed_at": "2026-06-15T10:36:21Z",
"updated_at": "2026-06-15T17:23:29Z",
"pushed_at": "2026-06-15T17:23:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-06-15T11:48:17Z",
"pushed_at": "2026-06-15T11:48:14Z",
"updated_at": "2026-06-15T18:36:49Z",
"pushed_at": "2026-06-15T18:36:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-4275.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Binaries, drivers, PoCs and other stuff on Hydroph0bia vulnerability (CVE-2025-4275)",
"fork": false,
"created_at": "2025-06-10T11:24:13Z",
"updated_at": "2026-05-13T10:19:15Z",
"updated_at": "2026-06-15T18:21:56Z",
"pushed_at": "2025-06-20T05:47:21Z",
"stargazers_count": 42,
"watchers_count": 42,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 42,
"watchers": 41,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-43300.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This is POC for IOS 0click CVE-2025-43300",
"fork": false,
"created_at": "2025-08-24T15:48:41Z",
"updated_at": "2026-06-05T06:36:58Z",
"updated_at": "2026-06-15T12:51:24Z",
"pushed_at": "2025-08-24T16:15:20Z",
"stargazers_count": 113,
"watchers_count": 113,
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 113,
"watchers": 114,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-43529.json
+5 -5
View File
@@ -245,10 +245,10 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-06-15T07:01:20Z",
"pushed_at": "2026-06-15T05:43:36Z",
"stargazers_count": 12,
"watchers_count": 12,
"updated_at": "2026-06-15T17:48:43Z",
"pushed_at": "2026-06-15T16:29:50Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 12,
"watchers": 14,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-49132.json
+4 -4
View File
@@ -476,10 +476,10 @@
"description": "This repo contains RCE exploit for Pterodactyl htb machine",
"fork": false,
"created_at": "2026-02-09T14:43:12Z",
"updated_at": "2026-05-13T10:50:53Z",
"updated_at": "2026-06-15T13:52:20Z",
"pushed_at": "2026-02-20T08:54:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -495,7 +495,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-06-15T10:36:17Z",
"pushed_at": "2026-06-15T10:36:13Z",
"updated_at": "2026-06-15T17:23:23Z",
"pushed_at": "2026-06-15T17:23:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-15T10:54:21Z",
"pushed_at": "2026-06-15T10:54:18Z",
"updated_at": "2026-06-15T17:41:42Z",
"pushed_at": "2026-06-15T17:41:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-15T10:55:44Z",
"pushed_at": "2026-06-15T10:55:41Z",
"updated_at": "2026-06-15T17:42:28Z",
"pushed_at": "2026-06-15T17:42:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-15T11:33:39Z",
"updated_at": "2026-06-15T17:33:16Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 794,
"watchers_count": 794,
"stargazers_count": 796,
"watchers_count": 796,
"has_discussions": false,
"forks_count": 117,
"forks_count": 118,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,8 +36,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 117,
"watchers": 794,
"forks": 118,
"watchers": 796,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-53779.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)",
"fork": false,
"created_at": "2025-11-19T03:27:51Z",
"updated_at": "2026-06-15T02:14:08Z",
"updated_at": "2026-06-15T15:09:16Z",
"pushed_at": "2026-06-15T02:14:04Z",
"stargazers_count": 45,
"watchers_count": 45,
"stargazers_count": 46,
"watchers_count": 46,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 45,
"watchers": 46,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-06-15T11:56:26Z",
"pushed_at": "2026-06-15T11:56:22Z",
"updated_at": "2026-06-15T15:49:13Z",
"pushed_at": "2026-06-15T18:44:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-06-15T10:31:12Z",
"pushed_at": "2026-06-15T10:31:08Z",
"updated_at": "2026-06-15T17:18:22Z",
"pushed_at": "2026-06-15T17:17:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-15T10:30:36Z",
"pushed_at": "2026-06-15T10:30:32Z",
"updated_at": "2026-06-15T17:17:20Z",
"pushed_at": "2026-06-15T17:17:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+67 -83
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-06-15T11:23:33Z",
"pushed_at": "2026-06-15T11:23:28Z",
"updated_at": "2026-06-15T18:11:43Z",
"pushed_at": "2026-06-15T18:11:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-15T11:23:07Z",
"pushed_at": "2026-06-15T11:23:03Z",
"updated_at": "2026-06-15T18:11:25Z",
"pushed_at": "2026-06-15T18:11:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-06-15T11:23:14Z",
"pushed_at": "2026-06-15T11:23:09Z",
"updated_at": "2026-06-15T18:11:28Z",
"pushed_at": "2026-06-15T18:11:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-06-15T11:24:11Z",
"pushed_at": "2026-06-15T11:24:07Z",
"updated_at": "2026-06-15T18:12:24Z",
"pushed_at": "2026-06-15T18:12:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-06-15T11:22:53Z",
"pushed_at": "2026-06-15T11:22:49Z",
"updated_at": "2026-06-15T18:10:52Z",
"pushed_at": "2026-06-15T18:10:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-15T11:23:50Z",
"pushed_at": "2026-06-15T11:23:47Z",
"updated_at": "2026-06-15T18:11:57Z",
"pushed_at": "2026-06-15T18:11:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-06-15T11:26:38Z",
"pushed_at": "2026-06-15T11:26:34Z",
"updated_at": "2026-06-15T18:14:46Z",
"pushed_at": "2026-06-15T18:14:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-15T11:23:24Z",
"pushed_at": "2026-06-15T11:23:20Z",
"updated_at": "2026-06-15T18:11:31Z",
"pushed_at": "2026-06-15T18:11:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-06-15T11:24:13Z",
"pushed_at": "2026-06-15T11:24:09Z",
"updated_at": "2026-06-15T18:12:26Z",
"pushed_at": "2026-06-15T18:12:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2605,10 +2605,10 @@
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T08:00:07Z",
"updated_at": "2026-06-14T05:40:00Z",
"updated_at": "2026-06-15T17:12:14Z",
"pushed_at": "2025-12-05T08:56:15Z",
"stargazers_count": 1049,
"watchers_count": 1049,
"stargazers_count": 1048,
"watchers_count": 1048,
"has_discussions": false,
"forks_count": 108,
"allow_forking": true,
@@ -2622,7 +2622,7 @@
],
"visibility": "public",
"forks": 108,
"watchers": 1049,
"watchers": 1048,
"score": 0,
"subscribers_count": 25
},
@@ -12147,8 +12147,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-15T11:23:04Z",
"pushed_at": "2026-06-15T11:23:00Z",
"updated_at": "2026-06-15T18:11:27Z",
"pushed_at": "2026-06-15T18:11:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12217,55 +12217,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1122448098,
"name": "Blackash-CVE-2025-55182",
"full_name": "Ghost121111\/Blackash-CVE-2025-55182",
"owner": {
"login": "Ghost121111",
"id": 176820616,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176820616?v=4",
"html_url": "https:\/\/github.com\/Ghost121111",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost121111\/Blackash-CVE-2025-55182",
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-06-15T11:22:28Z",
"pushed_at": "2026-06-15T11:22:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"blackash",
"bug-bounty",
"cve-2025-55182",
"cybersecurity",
"developer-tools",
"exploit",
"incident-response",
"information-security",
"open-source",
"penetration-testing",
"risk-assessment",
"security",
"software-security",
"threat-hunting",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1122449249,
"name": "CVE-2025-55182-poc",
@@ -12281,8 +12232,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-06-15T11:22:33Z",
"pushed_at": "2026-06-15T11:22:28Z",
"updated_at": "2026-06-15T18:11:08Z",
"pushed_at": "2026-06-15T18:10:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12366,8 +12317,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-06-15T11:23:52Z",
"pushed_at": "2026-06-15T11:23:48Z",
"updated_at": "2026-06-15T18:12:00Z",
"pushed_at": "2026-06-15T18:11:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12568,8 +12519,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-06-15T11:23:55Z",
"pushed_at": "2026-06-15T11:23:50Z",
"updated_at": "2026-06-15T18:12:04Z",
"pushed_at": "2026-06-15T18:12:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12838,8 +12789,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-15T11:28:25Z",
"pushed_at": "2026-06-15T11:28:20Z",
"updated_at": "2026-06-15T18:16:36Z",
"pushed_at": "2026-06-15T18:16:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13359,8 +13310,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-06-15T11:33:44Z",
"pushed_at": "2026-06-15T11:33:39Z",
"updated_at": "2026-06-15T18:23:09Z",
"pushed_at": "2026-06-15T18:21:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15953,6 +15904,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1267334630,
"name": "react2shell-toolkit",
"full_name": "olezhaku\/react2shell-toolkit",
"owner": {
"login": "olezhaku",
"id": 139953855,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139953855?v=4",
"html_url": "https:\/\/github.com\/olezhaku",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/olezhaku\/react2shell-toolkit",
"description": "Toolkit for CVE-2025-55182, also known as React2Shell.",
"fork": false,
"created_at": "2026-06-12T12:53:14Z",
"updated_at": "2026-06-15T17:17:25Z",
"pushed_at": "2026-06-12T12:55:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1268626990,
"name": "CVE-2025-55182",
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-06-15T11:28:53Z",
"pushed_at": "2026-06-15T11:28:50Z",
"updated_at": "2026-06-15T18:17:10Z",
"pushed_at": "2026-06-15T18:17:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-06-15T11:48:26Z",
"pushed_at": "2026-06-15T11:48:22Z",
"updated_at": "2026-06-15T18:36:48Z",
"pushed_at": "2026-06-15T18:36:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6018.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit",
"fork": false,
"created_at": "2026-02-09T08:01:28Z",
"updated_at": "2026-03-10T08:22:06Z",
"updated_at": "2026-06-15T14:42:13Z",
"pushed_at": "2026-02-09T13:46:06Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-06-15T10:53:02Z",
"pushed_at": "2026-06-15T10:52:57Z",
"updated_at": "2026-06-15T17:40:17Z",
"pushed_at": "2026-06-15T17:40:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6254.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-63307.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1083223147,
"name": "CVE-2025-63307",
"full_name": "Theethat-Thamwasin\/CVE-2025-63307",
"owner": {
"login": "Theethat-Thamwasin",
"id": 175581567,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175581567?v=4",
"html_url": "https:\/\/github.com\/Theethat-Thamwasin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Theethat-Thamwasin\/CVE-2025-63307",
"description": "An authenticated Stored Cross-site Scripting (XSS) vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitrary JavaScript code in uploaded or created files. ",
"fork": false,
"created_at": "2025-10-25T15:34:17Z",
"updated_at": "2025-11-05T14:39:42Z",
"pushed_at": "2025-11-05T14:39:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-06-15T11:18:28Z",
"pushed_at": "2026-06-15T11:18:24Z",
"updated_at": "2026-06-15T18:06:46Z",
"pushed_at": "2026-06-15T18:06:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-15T12:22:49Z",
"pushed_at": "2026-06-15T12:22:46Z",
"updated_at": "2026-06-15T16:17:06Z",
"pushed_at": "2026-06-15T16:16:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+10 -10
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-15T11:24:42Z",
"pushed_at": "2026-06-15T11:24:37Z",
"updated_at": "2026-06-15T18:13:50Z",
"pushed_at": "2026-06-15T18:12:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -129,10 +129,10 @@
"description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
"fork": false,
"created_at": "2025-12-04T13:13:33Z",
"updated_at": "2026-06-09T03:30:44Z",
"updated_at": "2026-06-15T14:49:21Z",
"pushed_at": "2025-12-16T03:18:16Z",
"stargazers_count": 427,
"watchers_count": 427,
"stargazers_count": 428,
"watchers_count": 428,
"has_discussions": false,
"forks_count": 86,
"allow_forking": true,
@@ -148,7 +148,7 @@
],
"visibility": "public",
"forks": 86,
"watchers": 427,
"watchers": 428,
"score": 0,
"subscribers_count": 1
},
@@ -200,10 +200,10 @@
"description": "React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.",
"fork": false,
"created_at": "2025-12-05T22:20:14Z",
"updated_at": "2026-06-09T05:58:26Z",
"updated_at": "2026-06-15T17:15:01Z",
"pushed_at": "2025-12-10T09:35:17Z",
"stargazers_count": 152,
"watchers_count": 152,
"stargazers_count": 151,
"watchers_count": 151,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -225,7 +225,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 152,
"watchers": 151,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-67511.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself",
"fork": false,
"created_at": "2025-12-09T16:13:33Z",
"updated_at": "2026-06-15T01:42:25Z",
"pushed_at": "2025-12-17T10:30:46Z",
"updated_at": "2026-06-15T14:30:17Z",
"pushed_at": "2026-06-15T14:28:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-15T11:45:18Z",
"pushed_at": "2026-06-15T11:45:14Z",
"updated_at": "2026-06-15T18:35:00Z",
"pushed_at": "2026-06-15T18:33:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-15T12:10:36Z",
"pushed_at": "2026-06-15T12:10:32Z",
"updated_at": "2026-06-15T16:05:16Z",
"pushed_at": "2026-06-15T16:02:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-15T12:05:53Z",
"pushed_at": "2026-06-15T12:05:49Z",
"updated_at": "2026-06-15T15:58:58Z",
"pushed_at": "2026-06-15T15:58:32Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-06-15T11:19:32Z",
"pushed_at": "2026-06-15T11:19:28Z",
"updated_at": "2026-06-15T18:07:50Z",
"pushed_at": "2026-06-15T18:07:31Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-06-15T11:27:57Z",
"pushed_at": "2026-06-15T11:27:53Z",
"updated_at": "2026-06-15T18:16:04Z",
"pushed_at": "2026-06-15T18:16:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
-80
View File
@@ -1,51 +1,4 @@
[
{
"id": 817529690,
"name": "CVE-2025-9074_DAEMON_KILLER",
"full_name": "KvzinNcpx7\/CVE-2025-9074_DAEMON_KILLER",
"owner": {
"login": "KvzinNcpx7",
"id": 173314517,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173314517?v=4",
"html_url": "https:\/\/github.com\/KvzinNcpx7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KvzinNcpx7\/CVE-2025-9074_DAEMON_KILLER",
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-06-15T11:29:25Z",
"pushed_at": "2026-06-15T11:29:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bash",
"c0deghost",
"cve-2025-9074",
"docker",
"docker-escape",
"exploit",
"fsociety",
"linux-hacking",
"offensive-security",
"privilege-escalation",
"red-team",
"root",
"windows"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1043162465,
"name": "cve-2025-9074-poc",
@@ -473,39 +426,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1127085375,
"name": "kvzinncpx7.github.io",
"full_name": "KvzinNcpx7\/kvzinncpx7.github.io",
"owner": {
"login": "KvzinNcpx7",
"id": 173314517,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173314517?v=4",
"html_url": "https:\/\/github.com\/KvzinNcpx7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KvzinNcpx7\/kvzinncpx7.github.io",
"description": "🛠️ Exploit CVE-2025-9074 using this API exploitation framework designed for Docker environments, enhancing your security assessment capabilities.",
"fork": false,
"created_at": "2026-01-03T06:24:29Z",
"updated_at": "2026-02-19T17:32:16Z",
"pushed_at": "2026-02-19T17:32:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1127585784,
"name": "POC-for-CVE-2025-9074",
2026/CVE-2026-0257.json
+8 -8
View File
@@ -113,10 +113,10 @@
"description": "CVE-2026-0257",
"fork": false,
"created_at": "2026-05-30T09:04:29Z",
"updated_at": "2026-06-05T13:11:31Z",
"updated_at": "2026-06-15T14:09:27Z",
"pushed_at": "2026-06-05T01:09:55Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -214,10 +214,10 @@
"description": "Palo Alto Networks PAN-OS contains an authentication bypass caused by flaws in the GlobalProtect portal and gateway, letting attackers establish unauthorized VPN connections, exploit requires network access to the portal or gateway.",
"fork": false,
"created_at": "2026-06-03T07:54:36Z",
"updated_at": "2026-06-05T10:53:31Z",
"updated_at": "2026-06-15T14:53:13Z",
"pushed_at": "2026-06-03T08:48:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-15T12:05:53Z",
"pushed_at": "2026-06-15T12:05:49Z",
"updated_at": "2026-06-15T15:58:58Z",
"pushed_at": "2026-06-15T15:58:32Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-10520.json
+2 -2
View File
@@ -87,7 +87,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -98,7 +98,7 @@
"ivanti-sentry"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-2005.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 1229094264,
"name": "CVE-2026-2005_lab",
"full_name": "stvm8\/CVE-2026-2005_lab",
"owner": {
"login": "stvm8",
"id": 121763544,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121763544?v=4",
"html_url": "https:\/\/github.com\/stvm8",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/stvm8\/CVE-2026-2005_lab",
"description": null,
"fork": false,
"created_at": "2026-05-04T17:37:03Z",
"updated_at": "2026-05-04T17:40:51Z",
"pushed_at": "2026-05-04T17:40:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237868780,
"name": "CVE-2026-2005",
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-15T12:05:10Z",
"pushed_at": "2026-06-15T12:05:05Z",
"updated_at": "2026-06-15T15:58:22Z",
"pushed_at": "2026-06-15T15:57:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-15T12:04:12Z",
"pushed_at": "2026-06-15T12:04:08Z",
"updated_at": "2026-06-15T15:57:34Z",
"pushed_at": "2026-06-15T15:56:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-21514.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1229095250,
"name": "CVE-2026-21514_CVE-2026-21510",
"full_name": "ChaitanyaHaritash\/CVE-2026-21514_CVE-2026-21510",
"owner": {
"login": "ChaitanyaHaritash",
"id": 16261173,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16261173?v=4",
"html_url": "https:\/\/github.com\/ChaitanyaHaritash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChaitanyaHaritash\/CVE-2026-21514_CVE-2026-21510",
"description": "CVE-2026-21514 & CVE-2026-21510 (Because MS-Office Fascinates me)",
"fork": false,
"created_at": "2026-05-04T17:38:14Z",
"updated_at": "2026-05-15T09:43:03Z",
"pushed_at": "2026-05-04T18:07:02Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-06-15T11:56:00Z",
"pushed_at": "2026-06-15T11:55:53Z",
"updated_at": "2026-06-15T18:44:31Z",
"pushed_at": "2026-06-15T18:44:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-15T11:52:35Z",
"pushed_at": "2026-06-15T11:52:31Z",
"updated_at": "2026-06-15T18:41:17Z",
"pushed_at": "2026-06-15T18:41:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -98,8 +98,8 @@
"description": "CVE-2026-24061 exploit PoC",
"fork": false,
"created_at": "2026-03-08T11:25:39Z",
"updated_at": "2026-06-11T04:08:02Z",
"pushed_at": "2026-06-05T13:39:35Z",
"updated_at": "2026-06-15T18:48:12Z",
"pushed_at": "2026-06-15T18:47:49Z",
"stargazers_count": 202,
"watchers_count": 202,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-15T12:24:55Z",
"pushed_at": "2026-06-15T12:24:51Z",
"updated_at": "2026-06-15T16:18:49Z",
"pushed_at": "2026-06-15T16:18:15Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-15T12:07:32Z",
"pushed_at": "2026-06-15T12:07:27Z",
"updated_at": "2026-06-15T16:01:42Z",
"pushed_at": "2026-06-15T16:00:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-15T12:12:53Z",
"pushed_at": "2026-06-15T12:12:48Z",
"updated_at": "2026-06-15T16:06:24Z",
"pushed_at": "2026-06-15T16:05:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-06-15T12:11:40Z",
"pushed_at": "2026-06-15T12:11:34Z",
"updated_at": "2026-06-15T16:06:42Z",
"pushed_at": "2026-06-15T16:04:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26128.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for exploiting CVE-2026-26128.",
"fork": false,
"created_at": "2026-05-05T20:27:35Z",
"updated_at": "2026-06-08T11:47:00Z",
"updated_at": "2026-06-15T16:17:22Z",
"pushed_at": "2026-05-06T06:49:26Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-06-15T12:28:58Z",
"pushed_at": "2026-06-15T12:28:54Z",
"updated_at": "2026-06-15T16:22:24Z",
"pushed_at": "2026-06-15T16:22:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31341.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1229174478,
"name": "cve-2026-31341-copy-fail-checker",
"full_name": "Sc2-Ciberdefensa\/cve-2026-31341-copy-fail-checker",
"owner": {
"login": "Sc2-Ciberdefensa",
"id": 231490656,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/231490656?v=4",
"html_url": "https:\/\/github.com\/Sc2-Ciberdefensa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sc2-Ciberdefensa\/cve-2026-31341-copy-fail-checker",
"description": null,
"fork": false,
"created_at": "2026-05-04T19:23:06Z",
"updated_at": "2026-05-04T19:30:27Z",
"pushed_at": "2026-05-04T19:30:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+107 -8
View File
@@ -47,10 +47,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-06-12T20:07:38Z",
"updated_at": "2026-06-15T16:56:08Z",
"pushed_at": "2026-05-22T11:51:03Z",
"stargazers_count": 425,
"watchers_count": 425,
"stargazers_count": 426,
"watchers_count": 426,
"has_discussions": true,
"forks_count": 118,
"allow_forking": true,
@@ -74,7 +74,7 @@
],
"visibility": "public",
"forks": 118,
"watchers": 425,
"watchers": 426,
"score": 0,
"subscribers_count": 2
},
@@ -1342,6 +1342,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1228016894,
"name": "copy-fail-rs",
"full_name": "ncmprbll\/copy-fail-rs",
"owner": {
"login": "ncmprbll",
"id": 106642017,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106642017?v=4",
"html_url": "https:\/\/github.com\/ncmprbll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ncmprbll\/copy-fail-rs",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-05-03T13:36:06Z",
"updated_at": "2026-05-04T19:00:53Z",
"pushed_at": "2026-05-04T19:00:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228525111,
"name": "copy-fail-checker",
@@ -1584,6 +1617,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1229003543,
"name": "CVE-2026-31431-mitigacion",
"full_name": "alvaroguzmancode\/CVE-2026-31431-mitigacion",
"owner": {
"login": "alvaroguzmancode",
"id": 17460284,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17460284?v=4",
"html_url": "https:\/\/github.com\/alvaroguzmancode",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/alvaroguzmancode\/CVE-2026-31431-mitigacion",
"description": "Explicación de la vulnerabilidad y cómo mitigarla",
"fork": false,
"created_at": "2026-05-04T15:47:14Z",
"updated_at": "2026-05-04T16:05:26Z",
"pushed_at": "2026-05-04T16:05:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229008425,
"name": "CVE-2026-31431",
@@ -1617,6 +1683,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1229084743,
"name": "CVE_kernellinux_jsh",
"full_name": "jshDevs\/CVE_kernellinux_jsh",
"owner": {
"login": "jshDevs",
"id": 109306974,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109306974?v=4",
"html_url": "https:\/\/github.com\/jshDevs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jshDevs\/CVE_kernellinux_jsh",
"description": "Framework modular Bash para auditar CVE-2026-31431 (CopyFail) y CVEs relacionados del kernel Linux en distros RPM-based (AlmaLinux, Rocky, CentOS Stream 8\/9\/10)",
"fork": false,
"created_at": "2026-05-04T17:25:17Z",
"updated_at": "2026-05-04T17:28:38Z",
"pushed_at": "2026-05-04T17:27:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229267211,
"name": "CVE-2026-31431",
@@ -1764,8 +1863,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-15T12:48:02Z",
"pushed_at": "2026-06-15T12:47:58Z",
"updated_at": "2026-06-15T16:42:12Z",
"pushed_at": "2026-06-15T16:42:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2599,8 +2698,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-15T12:49:00Z",
"pushed_at": "2026-06-15T12:48:56Z",
"updated_at": "2026-06-15T16:43:09Z",
"pushed_at": "2026-06-15T16:43:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-15T12:26:01Z",
"pushed_at": "2026-06-15T12:25:55Z",
"updated_at": "2026-06-15T16:19:23Z",
"pushed_at": "2026-06-15T16:19:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3437.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1270345747,
"name": "cve-2026-3437",
"full_name": "tihomirocrew\/cve-2026-3437",
"owner": {
"login": "tihomirocrew",
"id": 90578343,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90578343?v=4",
"html_url": "https:\/\/github.com\/tihomirocrew",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tihomirocrew\/cve-2026-3437",
"description": "Arbitrary physical memory read\/write in portwell.sys",
"fork": false,
"created_at": "2026-06-15T16:12:37Z",
"updated_at": "2026-06-15T16:15:02Z",
"pushed_at": "2026-06-15T16:14:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-15T11:33:39Z",
"updated_at": "2026-06-15T17:33:16Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 794,
"watchers_count": 794,
"stargazers_count": 796,
"watchers_count": 796,
"has_discussions": false,
"forks_count": 117,
"forks_count": 118,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,8 +36,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 117,
"watchers": 794,
"forks": 118,
"watchers": 796,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-40369.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-06-15T12:13:52Z",
"updated_at": "2026-06-15T15:34:29Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 244,
"watchers_count": 244,
"stargazers_count": 245,
"watchers_count": 245,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 244,
"watchers": 245,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-41089.json
+8 -448
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
"updated_at": "2026-06-14T14:19:21Z",
"updated_at": "2026-06-15T13:22:46Z",
"pushed_at": "2026-06-02T08:30:55Z",
"stargazers_count": 162,
"watchers_count": 162,
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 58,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 58,
"watchers": 162,
"watchers": 163,
"score": 0,
"subscribers_count": 1
},
@@ -157,10 +157,10 @@
"description": "CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.",
"fork": false,
"created_at": "2026-06-03T16:30:35Z",
"updated_at": "2026-06-13T08:50:53Z",
"updated_at": "2026-06-15T13:36:48Z",
"pushed_at": "2026-06-04T08:11:31Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -191,403 +191,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260306987,
"name": "CVE-2026-41089-277",
"full_name": "Planetpliexpose\/CVE-2026-41089-277",
"owner": {
"login": "Planetpliexpose",
"id": 288820865,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288820865?v=4",
"html_url": "https:\/\/github.com\/Planetpliexpose",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Planetpliexpose\/CVE-2026-41089-277",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-05T11:02:12Z",
"updated_at": "2026-06-05T11:02:59Z",
"pushed_at": "2026-06-05T11:02:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260309683,
"name": "CVE-2026-41089-686",
"full_name": "GalleryJoiner\/CVE-2026-41089-686",
"owner": {
"login": "GalleryJoiner",
"id": 288820885,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288820885?v=4",
"html_url": "https:\/\/github.com\/GalleryJoiner",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/GalleryJoiner\/CVE-2026-41089-686",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-05T11:05:43Z",
"updated_at": "2026-06-05T11:06:20Z",
"pushed_at": "2026-06-05T11:06:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261222462,
"name": "CVE-2026-41089-191",
"full_name": "Mapclaregister\/CVE-2026-41089-191",
"owner": {
"login": "Mapclaregister",
"id": 288821425,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288821425?v=4",
"html_url": "https:\/\/github.com\/Mapclaregister",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mapclaregister\/CVE-2026-41089-191",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T11:59:09Z",
"updated_at": "2026-06-06T11:59:57Z",
"pushed_at": "2026-06-06T11:59:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261229819,
"name": "CVE-2026-41089-971",
"full_name": "sectiondukestring25\/CVE-2026-41089-971",
"owner": {
"login": "sectiondukestring25",
"id": 288826815,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288826815?v=4",
"html_url": "https:\/\/github.com\/sectiondukestring25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sectiondukestring25\/CVE-2026-41089-971",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T12:11:11Z",
"updated_at": "2026-06-06T12:11:52Z",
"pushed_at": "2026-06-06T12:11:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261274293,
"name": "CVE-2026-41089-238",
"full_name": "SightFinchFall\/CVE-2026-41089-238",
"owner": {
"login": "SightFinchFall",
"id": 288931818,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288931818?v=4",
"html_url": "https:\/\/github.com\/SightFinchFall",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SightFinchFall\/CVE-2026-41089-238",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T13:21:55Z",
"updated_at": "2026-06-06T13:22:36Z",
"pushed_at": "2026-06-06T13:22:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261302641,
"name": "CVE-2026-41089-334",
"full_name": "segmentjoninsecret\/CVE-2026-41089-334",
"owner": {
"login": "segmentjoninsecret",
"id": 288934898,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288934898?v=4",
"html_url": "https:\/\/github.com\/segmentjoninsecret",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/segmentjoninsecret\/CVE-2026-41089-334",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T14:02:43Z",
"updated_at": "2026-06-06T14:03:32Z",
"pushed_at": "2026-06-06T14:03:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261312930,
"name": "CVE-2026-41089-986",
"full_name": "StampDreamFitting\/CVE-2026-41089-986",
"owner": {
"login": "StampDreamFitting",
"id": 288935674,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288935674?v=4",
"html_url": "https:\/\/github.com\/StampDreamFitting",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/StampDreamFitting\/CVE-2026-41089-986",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T14:17:37Z",
"updated_at": "2026-06-06T14:18:38Z",
"pushed_at": "2026-06-06T14:18:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261368744,
"name": "CVE-2026-41089-245",
"full_name": "CrimsonKingfisher\/CVE-2026-41089-245",
"owner": {
"login": "CrimsonKingfisher",
"id": 288934932,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288934932?v=4",
"html_url": "https:\/\/github.com\/CrimsonKingfisher",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CrimsonKingfisher\/CVE-2026-41089-245",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T15:39:39Z",
"updated_at": "2026-06-06T15:40:17Z",
"pushed_at": "2026-06-06T15:40:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261374107,
"name": "CVE-2026-41089-706",
"full_name": "RoyalViceroyBear\/CVE-2026-41089-706",
"owner": {
"login": "RoyalViceroyBear",
"id": 288932647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288932647?v=4",
"html_url": "https:\/\/github.com\/RoyalViceroyBear",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RoyalViceroyBear\/CVE-2026-41089-706",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-06T15:47:31Z",
"updated_at": "2026-06-06T15:48:41Z",
"pushed_at": "2026-06-06T15:48:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -667,49 +271,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1264128592,
"name": "CVE-2026-41089-latest",
"full_name": "Coasttruvitalize\/CVE-2026-41089-latest",
"owner": {
"login": "Coasttruvitalize",
"id": 288835284,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288835284?v=4",
"html_url": "https:\/\/github.com\/Coasttruvitalize",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Coasttruvitalize\/CVE-2026-41089-latest",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-09T15:31:13Z",
"updated_at": "2026-06-09T15:59:45Z",
"pushed_at": "2026-06-09T15:31:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+4 -4
View File
@@ -447,8 +447,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-15T12:49:15Z",
"pushed_at": "2026-06-15T12:49:10Z",
"updated_at": "2026-06-15T16:43:37Z",
"pushed_at": "2026-06-15T16:43:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -930,8 +930,8 @@
"description": "CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel and WHM. This repository is designed to demonstrate its Proof-Of-Concept",
"fork": false,
"created_at": "2026-06-04T17:17:49Z",
"updated_at": "2026-06-11T18:26:36Z",
"pushed_at": "2026-06-11T18:26:32Z",
"updated_at": "2026-06-15T18:47:31Z",
"pushed_at": "2026-06-15T18:47:26Z",
"stargazers_count": 202,
"watchers_count": 202,
"has_discussions": false,
2026/CVE-2026-42208.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 1227922803,
"name": "CVE-2026-42208",
"full_name": "0xBlackash\/CVE-2026-42208",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-42208",
"description": "CVE-2026-40487",
"fork": false,
"created_at": "2026-05-03T10:55:34Z",
"updated_at": "2026-05-04T18:47:19Z",
"pushed_at": "2026-05-04T18:47:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234297570,
"name": "threat-intel-brief-cve-2026-42208-litellm",
2026/CVE-2026-42945.json
+22 -22
View File
@@ -14,12 +14,12 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-06-14T05:38:17Z",
"updated_at": "2026-06-15T18:53:36Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 848,
"watchers_count": 848,
"stargazers_count": 850,
"watchers_count": 850,
"has_discussions": false,
"forks_count": 156,
"forks_count": 157,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 156,
"watchers": 848,
"forks": 157,
"watchers": 850,
"score": 0,
"subscribers_count": 5
},
@@ -146,12 +146,12 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
"updated_at": "2026-06-12T07:52:36Z",
"updated_at": "2026-06-15T17:35:45Z",
"pushed_at": "2026-05-14T11:38:47Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,8 +159,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 40,
"forks": 11,
"watchers": 41,
"score": 0,
"subscribers_count": 1
},
@@ -542,12 +542,12 @@
"description": "CVE-2026-42945 nginx 32-bit exploit lab ASLR enabled",
"fork": false,
"created_at": "2026-05-16T09:01:39Z",
"updated_at": "2026-05-16T09:03:46Z",
"updated_at": "2026-06-15T17:36:33Z",
"pushed_at": "2026-05-16T09:02:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -555,8 +555,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -724,10 +724,10 @@
"description": "🛡️ Script to test for NGINX CVE-2026-42945",
"fork": false,
"created_at": "2026-05-17T16:07:37Z",
"updated_at": "2026-05-22T14:15:30Z",
"updated_at": "2026-06-15T16:34:57Z",
"pushed_at": "2026-05-17T16:19:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -738,7 +738,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43284.json
+4 -4
View File
@@ -136,10 +136,10 @@
"description": "CVE-2026-43284",
"fork": false,
"created_at": "2026-05-08T17:07:20Z",
"updated_at": "2026-06-12T10:27:28Z",
"updated_at": "2026-06-15T16:42:47Z",
"pushed_at": "2026-05-08T17:25:35Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -150,7 +150,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-44166.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -43,7 +43,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-46300.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46300",
"fork": false,
"created_at": "2026-05-15T15:59:35Z",
"updated_at": "2026-06-05T09:30:10Z",
"updated_at": "2026-06-15T17:53:56Z",
"pushed_at": "2026-05-16T09:19:19Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-48849.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This repository documents CVE-2026-48849, a Stored Cross-Site Scripting (XSS), HTML Injection, and CSS Injection vulnerability discovered in Roundcube Webmai",
"fork": false,
"created_at": "2026-06-15T06:43:23Z",
"updated_at": "2026-06-15T07:32:59Z",
"updated_at": "2026-06-15T13:36:25Z",
"pushed_at": "2026-06-15T07:24:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49160.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1270463153,
"name": "CVE-2026-49160-HTTP.sys",
"full_name": "dhmosfunk\/CVE-2026-49160-HTTP.sys",
"owner": {
"login": "dhmosfunk",
"id": 45040001,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45040001?v=4",
"html_url": "https:\/\/github.com\/dhmosfunk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dhmosfunk\/CVE-2026-49160-HTTP.sys",
"description": "HTTP.sys Denial of Service Vulnerability",
"fork": false,
"created_at": "2026-06-15T18:30:18Z",
"updated_at": "2026-06-15T18:49:04Z",
"pushed_at": "2026-06-15T18:48:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49975.json
+2 -2
View File
@@ -250,7 +250,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -269,7 +269,7 @@
"web-security"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-8389.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-04T15:25:26Z",
"updated_at": "2026-06-08T13:25:24Z",
"updated_at": "2026-06-15T14:20:40Z",
"pushed_at": "2026-06-04T15:48:58Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9067.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload [POC & Xploit]",
"fork": false,
"created_at": "2026-06-10T18:30:39Z",
"updated_at": "2026-06-11T01:30:35Z",
"updated_at": "2026-06-15T16:50:42Z",
"pushed_at": "2026-06-10T18:34:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9277.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1270202116,
"name": "CVE-2026-9277",
"full_name": "DylanZahedi\/CVE-2026-9277",
"owner": {
"login": "DylanZahedi",
"id": 132252665,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132252665?v=4",
"html_url": "https:\/\/github.com\/DylanZahedi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DylanZahedi\/CVE-2026-9277",
"description": null,
"fork": false,
"created_at": "2026-06-15T13:37:09Z",
"updated_at": "2026-06-15T13:43:33Z",
"pushed_at": "2026-06-15T13:43:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+46 -14
View File
@@ -204,6 +204,7 @@
<code>Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
</code>
- [stvm8/CVE-2026-2005_lab](https://github.com/stvm8/CVE-2026-2005_lab)
- [var77/CVE-2026-2005](https://github.com/var77/CVE-2026-2005)
### CVE-2026-2256 (2026-03-02)
@@ -311,6 +312,13 @@
- [HORKimhab/CVE-2026-3300](https://github.com/HORKimhab/CVE-2026-3300)
- [adamshaikhma/CVE-2026-3300](https://github.com/adamshaikhma/CVE-2026-3300)
### CVE-2026-3437 (2026-03-03)
<code>An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this vulnerability could result in escalation of privileges or cause a denial-of-service condition.
</code>
- [tihomirocrew/cve-2026-3437](https://github.com/tihomirocrew/cve-2026-3437)
### CVE-2026-3494 (2026-03-03)
<code>In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
@@ -871,6 +879,13 @@
- [06-ux/CVE-2026-9256-POC](https://github.com/06-ux/CVE-2026-9256-POC)
- [y198nt/Nginx-chain-Rift-Poolslip](https://github.com/y198nt/Nginx-chain-Rift-Poolslip)
### CVE-2026-9277 (2026-05-22)
<code>shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which in JavaScript does not match line terminators (\n, \r, U+2028, U+2029). A line terminator in `.op` therefore passed through unescaped into the output; POSIX shells treat a literal newline as a command separator, so any content after it would execute as a second command. The vulnerable code path is reachable in two ways: (1) direct construction of `{ op: '...\n...' }` from external input, and (2) via `parse(cmd, envFn)` when `envFn` returns object tokens whose `.op` is attacker-influenced. Both are documented API surface. Fixed by replacing the per-character escape with strict shape validation: `.op` must match the parser's control-operator allowlist; `{ op: 'glob', pattern }` validates `pattern` and forbids line terminators; `{ comment }` validates `comment` and forbids line terminators; any other object shape throws `TypeError`.
</code>
- [DylanZahedi/CVE-2026-9277](https://github.com/DylanZahedi/CVE-2026-9277)
### CVE-2026-9560 (2026-05-26)
<code>Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel
@@ -1098,6 +1113,13 @@
- [EpSiLoNPoInTOrI/EpSiLoNPoInTlnk](https://github.com/EpSiLoNPoInTOrI/EpSiLoNPoInTlnk)
### CVE-2026-21514 (2026-02-10)
<code>Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
</code>
- [ChaitanyaHaritash/CVE-2026-21514_CVE-2026-21510](https://github.com/ChaitanyaHaritash/CVE-2026-21514_CVE-2026-21510)
### CVE-2026-21858 (2026-01-07)
<code>n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker, resulting in exposure of sensitive information stored on the system and may enable further compromise depending on deployment configuration and workflow usage. This issue is fixed in version 1.121.0.
@@ -1610,6 +1632,9 @@
- [0xrixet/Craftcms-PoC-CVE-2026-31266](https://github.com/0xrixet/Craftcms-PoC-CVE-2026-31266)
### CVE-2026-31341
- [Sc2-Ciberdefensa/cve-2026-31341-copy-fail-checker](https://github.com/Sc2-Ciberdefensa/cve-2026-31341-copy-fail-checker)
### CVE-2026-31431 (2026-04-22)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.
@@ -1653,6 +1678,7 @@
- [ctzisme/copyfail-guard](https://github.com/ctzisme/copyfail-guard)
- [AvPrince26/copy-fail-CVE-2026-31431-Python-Golfing](https://github.com/AvPrince26/copy-fail-CVE-2026-31431-Python-Golfing)
- [aexdyhaxor/CVE-2026-31431-copy-fail](https://github.com/aexdyhaxor/CVE-2026-31431-copy-fail)
- [ncmprbll/copy-fail-rs](https://github.com/ncmprbll/copy-fail-rs)
- [samanzamani/copy-fail-checker](https://github.com/samanzamani/copy-fail-checker)
- [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe)
- [ShahaB108/CVE-2026-31431_Kernel_Checker](https://github.com/ShahaB108/CVE-2026-31431_Kernel_Checker)
@@ -1660,7 +1686,9 @@
- [Mrhudson69/cve-2026-31431](https://github.com/Mrhudson69/cve-2026-31431)
- [net0bsd/Mitigaciones](https://github.com/net0bsd/Mitigaciones)
- [imkk000/play-go-copy-fail-cve-2026-31431](https://github.com/imkk000/play-go-copy-fail-cve-2026-31431)
- [alvaroguzmancode/CVE-2026-31431-mitigacion](https://github.com/alvaroguzmancode/CVE-2026-31431-mitigacion)
- [AdityaBhatt3010/CVE-2026-31431](https://github.com/AdityaBhatt3010/CVE-2026-31431)
- [jshDevs/CVE_kernellinux_jsh](https://github.com/jshDevs/CVE_kernellinux_jsh)
- [KhaosFarbauti/CVE-2026-31431](https://github.com/KhaosFarbauti/CVE-2026-31431)
- [rippsec/CVE-2026-31431-Copy-Fail](https://github.com/rippsec/CVE-2026-31431-Copy-Fail)
- [Silent4Labs/check-copyfail-cve-2026-31431](https://github.com/Silent4Labs/check-copyfail-cve-2026-31431)
@@ -2458,18 +2486,8 @@
- [hnytgl/CVE-2026-41089-Detector](https://github.com/hnytgl/CVE-2026-41089-Detector)
- [hnytgl/CVE-2026-41089](https://github.com/hnytgl/CVE-2026-41089)
- [ADScanPro/CVE-2026-41089-LongLogon](https://github.com/ADScanPro/CVE-2026-41089-LongLogon)
- [Planetpliexpose/CVE-2026-41089-277](https://github.com/Planetpliexpose/CVE-2026-41089-277)
- [GalleryJoiner/CVE-2026-41089-686](https://github.com/GalleryJoiner/CVE-2026-41089-686)
- [Mapclaregister/CVE-2026-41089-191](https://github.com/Mapclaregister/CVE-2026-41089-191)
- [sectiondukestring25/CVE-2026-41089-971](https://github.com/sectiondukestring25/CVE-2026-41089-971)
- [SightFinchFall/CVE-2026-41089-238](https://github.com/SightFinchFall/CVE-2026-41089-238)
- [segmentjoninsecret/CVE-2026-41089-334](https://github.com/segmentjoninsecret/CVE-2026-41089-334)
- [StampDreamFitting/CVE-2026-41089-986](https://github.com/StampDreamFitting/CVE-2026-41089-986)
- [CrimsonKingfisher/CVE-2026-41089-245](https://github.com/CrimsonKingfisher/CVE-2026-41089-245)
- [RoyalViceroyBear/CVE-2026-41089-706](https://github.com/RoyalViceroyBear/CVE-2026-41089-706)
- [jenniferreire26/CVE-2026-41089](https://github.com/jenniferreire26/CVE-2026-41089)
- [SpiralSealFill/CVE-2026-41089-hub](https://github.com/SpiralSealFill/CVE-2026-41089-hub)
- [Coasttruvitalize/CVE-2026-41089-latest](https://github.com/Coasttruvitalize/CVE-2026-41089-latest)
### CVE-2026-41091 (2026-05-20)
@@ -2602,6 +2620,7 @@
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.
</code>
- [0xBlackash/CVE-2026-42208](https://github.com/0xBlackash/CVE-2026-42208)
- [Zeltoc/threat-intel-brief-cve-2026-42208-litellm](https://github.com/Zeltoc/threat-intel-brief-cve-2026-42208-litellm)
- [rootdirective-sec/CVE-2026-42208-Lab](https://github.com/rootdirective-sec/CVE-2026-42208-Lab)
- [ridhinva/litellm-sqli-scanner](https://github.com/ridhinva/litellm-sqli-scanner)
@@ -3306,6 +3325,13 @@
- [j0xh-sec/CVE-2026-49009](https://github.com/j0xh-sec/CVE-2026-49009)
- [INTELEON404/CVE-2026-49009](https://github.com/INTELEON404/CVE-2026-49009)
### CVE-2026-49160 (2026-06-09)
<code>Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.
</code>
- [dhmosfunk/CVE-2026-49160-HTTP.sys](https://github.com/dhmosfunk/CVE-2026-49160-HTTP.sys)
### CVE-2026-49344
- [hadhub/CVE-2026-49344-Mercator-JSON-DSL](https://github.com/hadhub/CVE-2026-49344-Mercator-JSON-DSL)
@@ -3974,6 +4000,7 @@
- [Alchemist3dot14/CVE-2025-2783](https://github.com/Alchemist3dot14/CVE-2025-2783)
- [byteReaper77/CVE-2025-2783](https://github.com/byteReaper77/CVE-2025-2783)
- [aronfour/CVE-2025-2783](https://github.com/aronfour/CVE-2025-2783)
- [ElianGonzi00/CVE-2025-2783](https://github.com/ElianGonzi00/CVE-2025-2783)
### CVE-2025-2807 (2025-04-08)
@@ -5424,7 +5451,6 @@
<code>A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, and with or without the &quot;Expose daemon on tcp://localhost:2375 without TLS&quot; option enabled.\nThis can lead to execution of a wide range of privileged commands to the engine API, including controlling other containers, creating new ones, managing images etc. In some circumstances (e.g. Docker Desktop for Windows with WSL backend) it also allows mounting the host drive with the same privileges as the user running Docker Desktop.
</code>
- [KvzinNcpx7/CVE-2025-9074_DAEMON_KILLER](https://github.com/KvzinNcpx7/CVE-2025-9074_DAEMON_KILLER)
- [XRayZen/cve-2025-9074-poc](https://github.com/XRayZen/cve-2025-9074-poc)
- [zenzue/CVE-2025-9074](https://github.com/zenzue/CVE-2025-9074)
- [j3r1ch0123/CVE-2025-9074](https://github.com/j3r1ch0123/CVE-2025-9074)
@@ -5437,7 +5463,6 @@
- [fsoc-ghost-0x/CVE-2025-9074_DAEMON_KILLER](https://github.com/fsoc-ghost-0x/CVE-2025-9074_DAEMON_KILLER)
- [zaydbf/CVE-2025-9074-Poc](https://github.com/zaydbf/CVE-2025-9074-Poc)
- [Shaoshi17/CVE-2025-9074-Docker-Exploit](https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit)
- [KvzinNcpx7/kvzinncpx7.github.io](https://github.com/KvzinNcpx7/kvzinncpx7.github.io)
- [x0da6h/POC-for-CVE-2025-9074](https://github.com/x0da6h/POC-for-CVE-2025-9074)
- [matesz44/CVE-2025-9074](https://github.com/matesz44/CVE-2025-9074)
- [rocket-panda/CVE-2025-9074](https://github.com/rocket-panda/CVE-2025-9074)
@@ -5988,6 +6013,7 @@
</code>
- [cyberdudebivash/CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script](https://github.com/cyberdudebivash/CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script)
- [OloladeAbiola03/aisecplus-week01-servicenow-ai-security-incident](https://github.com/OloladeAbiola03/aisecplus-week01-servicenow-ai-security-incident)
### CVE-2025-12539 (2025-11-11)
@@ -12079,7 +12105,6 @@
- [jensnesten/React2Shell-PoC](https://github.com/jensnesten/React2Shell-PoC)
- [Farhan9488/CVE-2025-55182-research](https://github.com/Farhan9488/CVE-2025-55182-research)
- [bigbluewhale111/CVE-2025-55182-LAB](https://github.com/bigbluewhale111/CVE-2025-55182-LAB)
- [Ghost121111/Blackash-CVE-2025-55182](https://github.com/Ghost121111/Blackash-CVE-2025-55182)
- [slreaperking/CVE-2025-55182-poc](https://github.com/slreaperking/CVE-2025-55182-poc)
- [guiimoraes/react2shell-evolved](https://github.com/guiimoraes/react2shell-evolved)
- [sobuj0007/Nextjs_RCE_Exploit_Tool](https://github.com/sobuj0007/Nextjs_RCE_Exploit_Tool)
@@ -12187,6 +12212,7 @@
- [TechWithOrgito/CVE-2025-55182-Researching-process](https://github.com/TechWithOrgito/CVE-2025-55182-Researching-process)
- [AkhmadKholmurodov/React2Shell_Exploit](https://github.com/AkhmadKholmurodov/React2Shell_Exploit)
- [Alejandro609x/JEFAZO-CVE-2025-55182-Checker](https://github.com/Alejandro609x/JEFAZO-CVE-2025-55182-Checker)
- [olezhaku/react2shell-toolkit](https://github.com/olezhaku/react2shell-toolkit)
- [cc3305/CVE-2025-55182](https://github.com/cc3305/CVE-2025-55182)
### CVE-2025-55183 (2025-12-11)
@@ -13379,6 +13405,13 @@
- [t4e-3/CVE-2025-63296](https://github.com/t4e-3/CVE-2025-63296)
### CVE-2025-63307 (2025-11-06)
<code>alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization.
</code>
- [Theethat-Thamwasin/CVE-2025-63307](https://github.com/Theethat-Thamwasin/CVE-2025-63307)
### CVE-2025-63314 (2026-01-12)
<code>A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.
@@ -67417,7 +67450,6 @@
<code>The Frontend File Manager (versions &lt; 4.0), N-Media Post Front-end Form (versions &lt; 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm_filemanager_upload_file` and `nm_postfront_upload_file` AJAX actions. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
</code>
- [Aditya43621/lab-cve-2016-15042](https://github.com/Aditya43621/lab-cve-2016-15042)
- [ImBIOS/lab-cve-2016-15042](https://github.com/ImBIOS/lab-cve-2016-15042)
### CVE-2016-16113