nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/12 12:51:37

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-12 21:51:37 +09:00
1 parent d0269095f6
commit d69e12b09f
73 files changed
+637 -775
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-9798.json
+2 -2
View File
@@ -118,7 +118,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 4,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -132,7 +132,7 @@
"scanner"
],
"visibility": "public",
"forks": 4,
"forks": 2,
"watchers": 19,
"score": 0,
"subscribers_count": 1
2018/CVE-2018-13379.json
+2 -2
View File
@@ -450,8 +450,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"updated_at": "2026-08-12T07:55:01Z",
"pushed_at": "2026-08-12T07:52:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-2879.json
-33
View File
@@ -64,38 +64,5 @@
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 181337856,
"name": "OAMBuster",
"full_name": "redtimmy\/OAMBuster",
"owner": {
"login": "redtimmy",
"id": 40774163,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40774163?v=4",
"html_url": "https:\/\/github.com\/redtimmy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/redtimmy\/OAMBuster",
"description": "Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)",
"fork": false,
"created_at": "2019-04-14T16:32:08Z",
"updated_at": "2026-05-22T11:47:50Z",
"pushed_at": "2019-08-06T12:42:05Z",
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 24,
"score": 0,
"subscribers_count": 3
}
]
2018/CVE-2018-5955.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能",
"fork": false,
"created_at": "2019-12-21T22:45:55Z",
"updated_at": "2026-08-05T07:09:46Z",
"updated_at": "2026-08-12T11:25:47Z",
"pushed_at": "2020-01-05T21:46:25Z",
"stargazers_count": 644,
"watchers_count": 644,
"stargazers_count": 645,
"watchers_count": 645,
"has_discussions": false,
"forks_count": 129,
"allow_forking": true,
@@ -41,7 +41,7 @@
],
"visibility": "public",
"forks": 129,
"watchers": 644,
"watchers": 645,
"score": 0,
"subscribers_count": 15
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-12T05:09:33Z",
"pushed_at": "2026-08-12T05:09:25Z",
"updated_at": "2026-08-12T12:07:00Z",
"pushed_at": "2026-08-12T12:06:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-9053.json
+2 -2
View File
@@ -217,7 +217,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 8,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,7 +225,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
2020/CVE-2020-10199.json
+33
View File
@@ -200,5 +200,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 987412676,
"name": "CVE-2020-10199",
"full_name": "finn79426\/CVE-2020-10199",
"owner": {
"login": "finn79426",
"id": 26408530,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26408530?v=4",
"html_url": "https:\/\/github.com\/finn79426",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/finn79426\/CVE-2020-10199",
"description": null,
"fork": false,
"created_at": "2025-05-21T03:29:03Z",
"updated_at": "2025-06-02T03:28:09Z",
"pushed_at": "2025-06-02T03:28:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2020/CVE-2020-13259.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 291721408,
"name": "CVE-2020-13259",
"full_name": "UrielYochpaz\/CVE-2020-13259",
"owner": {
"login": "UrielYochpaz",
"id": 36864886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36864886?v=4",
"html_url": "https:\/\/github.com\/UrielYochpaz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/UrielYochpaz\/CVE-2020-13259",
"description": "PoC of Full Account Takeover on RAD SecFlow-1v ",
"fork": false,
"created_at": "2020-08-31T13:22:21Z",
"updated_at": "2023-01-09T21:55:48Z",
"pushed_at": "2023-01-09T21:55:44Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2020/CVE-2020-1472.json
+6 -6
View File
@@ -186,10 +186,10 @@
"description": "Exploit for zerologon cve-2020-1472",
"fork": false,
"created_at": "2020-09-14T19:19:07Z",
"updated_at": "2026-08-09T23:39:41Z",
"updated_at": "2026-08-12T08:59:59Z",
"pushed_at": "2020-10-15T18:31:15Z",
"stargazers_count": 704,
"watchers_count": 704,
"stargazers_count": 705,
"watchers_count": 705,
"has_discussions": false,
"forks_count": 146,
"allow_forking": true,
@@ -200,7 +200,7 @@
"topics": [],
"visibility": "public",
"forks": 146,
"watchers": 704,
"watchers": 705,
"score": 0,
"subscribers_count": 11
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-12T06:10:12Z",
"pushed_at": "2026-08-12T06:09:33Z",
"updated_at": "2026-08-12T12:10:14Z",
"pushed_at": "2026-08-12T12:09:47Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2020/CVE-2020-8958.json
+2 -2
View File
@@ -54,7 +54,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -67,7 +67,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 1
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-12T06:23:47Z",
"pushed_at": "2026-08-12T06:23:43Z",
"updated_at": "2026-08-12T12:08:39Z",
"pushed_at": "2026-08-12T12:08:34Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-36260.json
+4 -4
View File
@@ -248,10 +248,10 @@
"description": "HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection",
"fork": false,
"created_at": "2024-07-05T16:58:14Z",
"updated_at": "2026-08-10T12:10:55Z",
"updated_at": "2026-08-12T08:03:58Z",
"pushed_at": "2025-12-22T22:57:58Z",
"stargazers_count": 376,
"watchers_count": 376,
"stargazers_count": 377,
"watchers_count": 377,
"has_discussions": false,
"forks_count": 64,
"allow_forking": true,
@@ -262,7 +262,7 @@
"topics": [],
"visibility": "public",
"forks": 64,
"watchers": 376,
"watchers": 377,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-08-09T12:47:07Z",
"updated_at": "2026-08-12T10:47:50Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1782,
"watchers_count": 1782,
"stargazers_count": 1783,
"watchers_count": 1783,
"has_discussions": false,
"forks_count": 475,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 475,
"watchers": 1782,
"watchers": 1783,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-41773.json
+2 -2
View File
@@ -5167,7 +5167,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -5175,7 +5175,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-44228.json
+4 -4
View File
@@ -408,7 +408,7 @@
"stargazers_count": 1140,
"watchers_count": 1140,
"has_discussions": false,
"forks_count": 552,
"forks_count": 551,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -418,7 +418,7 @@
"log4shell"
],
"visibility": "public",
"forks": 552,
"forks": 551,
"watchers": 1140,
"score": 0,
"subscribers_count": 21
@@ -993,7 +993,7 @@
"stargazers_count": 1850,
"watchers_count": 1850,
"has_discussions": false,
"forks_count": 541,
"forks_count": 542,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1006,7 +1006,7 @@
"security"
],
"visibility": "public",
"forks": 541,
"forks": 542,
"watchers": 1850,
"score": 0,
"subscribers_count": 0
2022/CVE-2022-0778.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 9,
"score": 0,
"subscribers_count": 1
2022/CVE-2022-40684.json
+2 -2
View File
@@ -981,8 +981,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"updated_at": "2026-08-12T07:55:01Z",
"pushed_at": "2026-08-12T07:52:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-27997.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"updated_at": "2026-08-12T07:55:01Z",
"pushed_at": "2026-08-12T07:52:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-5968.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-07-04T00:48:09Z",
"updated_at": "2026-08-11T20:43:49Z",
"pushed_at": "2026-08-11T20:43:04Z",
"pushed_at": "2026-08-12T08:03:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0044.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely",
"fork": false,
"created_at": "2024-06-18T09:22:59Z",
"updated_at": "2026-05-18T14:02:59Z",
"updated_at": "2026-08-12T11:23:17Z",
"pushed_at": "2024-07-31T01:29:36Z",
"stargazers_count": 76,
"watchers_count": 76,
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 76,
"watchers": 77,
"score": 0,
"subscribers_count": 3
},
@@ -47,10 +47,10 @@
"description": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13",
"fork": false,
"created_at": "2024-06-18T12:30:53Z",
"updated_at": "2026-08-04T18:15:36Z",
"updated_at": "2026-08-12T11:23:08Z",
"pushed_at": "2024-12-02T06:29:52Z",
"stargazers_count": 329,
"watchers_count": 329,
"stargazers_count": 330,
"watchers_count": 330,
"has_discussions": false,
"forks_count": 67,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 67,
"watchers": 329,
"watchers": 330,
"score": 0,
"subscribers_count": 5
},
2024/CVE-2024-21762.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"updated_at": "2026-08-12T07:55:01Z",
"pushed_at": "2026-08-12T07:52:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-31317.json
+6 -6
View File
@@ -179,12 +179,12 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-08-11T04:39:40Z",
"updated_at": "2026-08-12T10:44:15Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 74,
"watchers_count": 74,
"stargazers_count": 75,
"watchers_count": 75,
"has_discussions": false,
"forks_count": 10,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -192,8 +192,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 74,
"forks": 9,
"watchers": 75,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-38821.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 918629965,
"name": "CVE-2024-38821-POC",
"full_name": "masa42\/CVE-2024-38821-POC",
"owner": {
"login": "masa42",
"id": 46730934,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46730934?v=4",
"html_url": "https:\/\/github.com\/masa42",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/masa42\/CVE-2024-38821-POC",
"description": null,
"fork": false,
"created_at": "2025-01-18T12:52:34Z",
"updated_at": "2025-06-16T10:43:47Z",
"pushed_at": "2025-01-18T13:38:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-4367.json
+2 -2
View File
@@ -742,8 +742,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-13T07:15:37Z",
"updated_at": "2026-07-06T15:22:52Z",
"pushed_at": "2026-07-06T15:18:28Z",
"updated_at": "2026-08-12T09:00:15Z",
"pushed_at": "2026-08-12T08:59:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-51977.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Multiple Brother Devices: Multiple Vulnerabilities (CVE-2024-51977, CVE-2024-51978, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51983, CVE-2024-51984)",
"fork": false,
"created_at": "2025-05-22T10:52:10Z",
"updated_at": "2026-07-24T03:52:42Z",
"updated_at": "2026-08-12T11:24:26Z",
"pushed_at": "2025-06-30T10:25:19Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-49344.json → 2024/CVE-2024-52806.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1251050487,
"name": "CVE-2026-49344-Mercator-JSON-DSL",
"full_name": "hadhub\/CVE-2026-49344-Mercator-JSON-DSL",
"id": 1331909127,
"name": "CVE-2024-52806-PoC",
"full_name": "heartlesseorg-dot\/CVE-2024-52806-PoC",
"owner": {
"login": "hadhub",
"id": 85348372,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85348372?v=4",
"html_url": "https:\/\/github.com\/hadhub",
"login": "heartlesseorg-dot",
"id": 259609956,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259609956?v=4",
"html_url": "https:\/\/github.com\/heartlesseorg-dot",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hadhub\/CVE-2026-49344-Mercator-JSON-DSL",
"html_url": "https:\/\/github.com\/heartlesseorg-dot\/CVE-2024-52806-PoC",
"description": null,
"fork": false,
"created_at": "2026-05-27T07:45:57Z",
"updated_at": "2026-05-30T09:55:52Z",
"pushed_at": "2026-05-27T07:54:33Z",
"created_at": "2026-08-12T10:39:38Z",
"updated_at": "2026-08-12T10:42:29Z",
"pushed_at": "2026-08-12T10:40:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-10951.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-11T21:53:00Z",
"updated_at": "2026-08-11T22:05:31Z",
"updated_at": "2026-08-12T09:33:53Z",
"pushed_at": "2026-08-11T22:03:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-32463.json
+2 -2
View File
@@ -242,7 +242,7 @@
"stargazers_count": 472,
"watchers_count": 472,
"has_discussions": false,
"forks_count": 61,
"forks_count": 62,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,7 +262,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 61,
"forks": 62,
"watchers": 472,
"score": 0,
"subscribers_count": 3
2025/CVE-2025-48804.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-08-09T20:32:43Z",
"pushed_at": "2026-07-21T15:59:26Z",
"updated_at": "2026-08-12T12:01:39Z",
"pushed_at": "2026-08-12T12:01:15Z",
"stargazers_count": 223,
"watchers_count": 223,
"has_discussions": false,
2025/CVE-2025-49113.json
+4 -4
View File
@@ -83,10 +83,10 @@
"description": null,
"fork": false,
"created_at": "2025-06-04T15:49:43Z",
"updated_at": "2026-07-17T15:13:09Z",
"updated_at": "2026-08-12T10:01:49Z",
"pushed_at": "2025-06-06T04:05:55Z",
"stargazers_count": 108,
"watchers_count": 108,
"stargazers_count": 109,
"watchers_count": 109,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -97,7 +97,7 @@
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 108,
"watchers": 109,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-10T22:14:43Z",
"updated_at": "2026-08-12T07:50:36Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 897,
"watchers_count": 897,
"stargazers_count": 898,
"watchers_count": 898,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 897,
"watchers": 898,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-55182.json
+2 -2
View File
@@ -12599,8 +12599,8 @@
"description": "Remote code execution for React Server Components 19.0.0 - 19.2.0",
"fork": false,
"created_at": "2026-01-13T17:11:47Z",
"updated_at": "2026-01-13T17:12:16Z",
"pushed_at": "2026-01-13T17:11:58Z",
"updated_at": "2026-08-12T12:42:34Z",
"pushed_at": "2026-08-12T12:42:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-64446.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "A scanner for the FortiNet vulnerability CVE-2025-64446",
"fork": false,
"created_at": "2025-11-17T11:58:18Z",
"updated_at": "2026-07-13T12:08:34Z",
"updated_at": "2026-08-12T12:34:36Z",
"pushed_at": "2025-11-18T16:27:06Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -129,7 +129,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-7771.json
+8 -8
View File
@@ -256,10 +256,10 @@
"description": "Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 process termination and physical memory R\/W. Researching EDR-Killer patterns, PPL bypasses, and kernel-mode primitives used by MedusaLocker and other threat actors.",
"fork": false,
"created_at": "2026-02-04T01:47:36Z",
"updated_at": "2026-07-23T02:59:34Z",
"updated_at": "2026-08-12T07:52:28Z",
"pushed_at": "2026-02-04T02:20:21Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -286,7 +286,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 48,
"watchers": 49,
"score": 0,
"subscribers_count": 1
},
@@ -371,10 +371,10 @@
"description": "ThrottleStop.sys Arbitrary Physical Memory R\/W",
"fork": false,
"created_at": "2026-08-10T23:15:36Z",
"updated_at": "2026-08-12T05:39:10Z",
"updated_at": "2026-08-12T08:00:55Z",
"pushed_at": "2026-08-10T23:15:39Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -385,7 +385,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-13768.json
-43
View File
@@ -1,47 +1,4 @@
[
{
"id": 1287544643,
"name": "CVE-2026-13768",
"full_name": "MichaelAdamGroberman\/CVE-2026-13768",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-13768",
"description": "CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)",
"fork": false,
"created_at": "2026-07-02T19:38:56Z",
"updated_at": "2026-07-02T21:59:59Z",
"pushed_at": "2026-07-02T21:59:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"azure-iot-hub",
"cisa",
"cve",
"gardyn",
"hardcoded-credentials",
"iot-security",
"remote-code-execution",
"security-research",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1297842149,
"name": "CVE-2026-13768",
2026/CVE-2026-16723.json
+2 -2
View File
@@ -275,8 +275,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T09:29:39Z",
"updated_at": "2026-08-12T06:30:22Z",
"pushed_at": "2026-08-12T06:29:28Z",
"updated_at": "2026-08-12T10:04:38Z",
"pushed_at": "2026-08-12T10:04:01Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-17106.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp",
"fork": false,
"created_at": "2026-08-09T21:02:40Z",
"updated_at": "2026-08-11T21:48:58Z",
"updated_at": "2026-08-12T08:34:20Z",
"pushed_at": "2026-08-09T21:04:41Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing",
"fork": false,
"created_at": "2026-08-11T11:34:39Z",
"updated_at": "2026-08-11T11:35:35Z",
"updated_at": "2026-08-12T10:41:42Z",
"pushed_at": "2026-08-11T11:35:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20643.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "WebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643)",
"fork": false,
"created_at": "2026-03-17T20:32:03Z",
"updated_at": "2026-07-15T07:10:45Z",
"updated_at": "2026-08-12T11:42:59Z",
"pushed_at": "2026-06-28T22:18:55Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20896.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1286608034,
"name": "CVE-2026-20896",
"full_name": "kaleth4\/CVE-2026-20896",
"owner": {
"login": "kaleth4",
"id": 216897593,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216897593?v=4",
"html_url": "https:\/\/github.com\/kaleth4",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kaleth4\/CVE-2026-20896",
"description": null,
"fork": false,
"created_at": "2026-07-02T00:22:55Z",
"updated_at": "2026-07-06T17:21:41Z",
"pushed_at": "2026-07-03T00:57:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1290200697,
"name": "CVE-2026-20896",
2026/CVE-2026-23744.json
+2 -2
View File
@@ -176,10 +176,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Least-Significant-Bit\/CVE-2026-23744",
"description": "Remote Code Execution in MCPJam 1.4.2 and older.",
"description": "Remote Code Execution in MCPJam 1.4.2 and older",
"fork": false,
"created_at": "2026-05-31T19:17:49Z",
"updated_at": "2026-05-31T19:20:16Z",
"updated_at": "2026-08-12T12:47:47Z",
"pushed_at": "2026-05-31T19:20:13Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-25262.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results",
"fork": false,
"created_at": "2026-07-08T09:51:38Z",
"updated_at": "2026-08-07T13:19:29Z",
"updated_at": "2026-08-12T09:51:44Z",
"pushed_at": "2026-07-12T05:26:33Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-26119.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST\/PowerShell invokeCommand.",
"fork": false,
"created_at": "2026-08-09T20:21:00Z",
"updated_at": "2026-08-12T01:23:34Z",
"updated_at": "2026-08-12T08:05:59Z",
"pushed_at": "2026-08-09T20:21:39Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-27344.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1331983552,
"name": "CVE-2026-27344",
"full_name": "AC8999\/CVE-2026-27344",
"owner": {
"login": "AC8999",
"id": 207462763,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207462763?v=4",
"html_url": "https:\/\/github.com\/AC8999",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AC8999\/CVE-2026-27344",
"description": "Missing Authorization in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n\/a through <= 1.0.5.",
"fork": false,
"created_at": "2026-08-12T12:06:09Z",
"updated_at": "2026-08-12T12:18:03Z",
"pushed_at": "2026-08-12T12:17:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2766.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-2766, but with wasm",
"fork": false,
"created_at": "2026-08-11T02:36:01Z",
"updated_at": "2026-08-12T01:32:19Z",
"pushed_at": "2026-08-12T01:32:16Z",
"updated_at": "2026-08-12T12:31:08Z",
"pushed_at": "2026-08-12T12:30:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-27912.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-08-12T04:06:22Z",
"updated_at": "2026-08-12T11:20:58Z",
"pushed_at": "2026-08-02T14:30:24Z",
"stargazers_count": 178,
"watchers_count": 178,
"stargazers_count": 182,
"watchers_count": 182,
"has_discussions": false,
"forks_count": 27,
"forks_count": 29,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 27,
"watchers": 178,
"forks": 29,
"watchers": 182,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-28995.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1287860261,
"name": "CVE-2026-28995",
"full_name": "Robertmak2014-sudow\/CVE-2026-28995",
"owner": {
"login": "Robertmak2014-sudow",
"id": 267650640,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/267650640?v=4",
"html_url": "https:\/\/github.com\/Robertmak2014-sudow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Robertmak2014-sudow\/CVE-2026-28995",
"description": "# CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path Traversal vulnerability in App Intents on iOS 26.4.2 and below.",
"fork": false,
"created_at": "2026-07-03T04:19:24Z",
"updated_at": "2026-08-05T14:10:35Z",
"pushed_at": "2026-07-03T04:27:43Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+39 -6
View File
@@ -52,7 +52,7 @@
"stargazers_count": 441,
"watchers_count": 441,
"has_discussions": true,
"forks_count": 121,
"forks_count": 122,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -73,7 +73,7 @@
"security-research"
],
"visibility": "public",
"forks": 121,
"forks": 122,
"watchers": 441,
"score": 0,
"subscribers_count": 2
@@ -264,10 +264,10 @@
"description": "Copy Fail - CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:59:11Z",
"updated_at": "2026-08-06T03:37:36Z",
"updated_at": "2026-08-12T12:13:31Z",
"pushed_at": "2026-06-05T02:59:22Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -278,7 +278,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -1212,6 +1212,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1237824325,
"name": "copy-fail-CVE-2026-31431",
"full_name": "SilverRuler\/copy-fail-CVE-2026-31431",
"owner": {
"login": "SilverRuler",
"id": 77913282,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77913282?v=4",
"html_url": "https:\/\/github.com\/SilverRuler",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SilverRuler\/copy-fail-CVE-2026-31431",
"description": "copy-fail-CVE-2026-31431",
"fork": false,
"created_at": "2026-05-13T14:43:00Z",
"updated_at": "2026-05-13T15:15:37Z",
"pushed_at": "2026-05-13T14:45:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1238225490,
"name": "cve-2026-31431",
2026/CVE-2026-34835.json
-53
View File
@@ -1,53 +0,0 @@
[
{
"id": 1287804253,
"name": "CVE-2026-34835-Black-box-Analysis",
"full_name": "Cyber-note\/CVE-2026-34835-Black-box-Analysis",
"owner": {
"login": "Cyber-note",
"id": 281077513,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281077513?v=4",
"html_url": "https:\/\/github.com\/Cyber-note",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cyber-note\/CVE-2026-34835-Black-box-Analysis",
"description": "A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and defensive recommendations.",
"fork": false,
"created_at": "2026-07-03T02:50:25Z",
"updated_at": "2026-07-31T13:03:05Z",
"pushed_at": "2026-07-03T03:20:36Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-34835",
"cybersecurity",
"dast",
"host-header",
"offensive-security",
"owasp",
"owasp-top-10",
"penetration-testing",
"rack",
"red-team",
"red-teaming",
"ruby",
"security",
"web-security",
"web-security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-36027.json
-39
View File
@@ -1,39 +0,0 @@
[
{
"id": 1287540386,
"name": "Code-27-Companion-Hub-Exploits",
"full_name": "redr0nin\/Code-27-Companion-Hub-Exploits",
"owner": {
"login": "redr0nin",
"id": 39013067,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39013067?v=4",
"html_url": "https:\/\/github.com\/redr0nin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/redr0nin\/Code-27-Companion-Hub-Exploits",
"description": "Proof of concept for CVE-2026-36027 and CVE-2026-36028",
"fork": false,
"created_at": "2026-07-02T19:32:51Z",
"updated_at": "2026-07-10T16:08:19Z",
"pushed_at": "2026-07-02T20:58:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-36027",
"cve-2026-36028",
"exploits"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-10T22:14:43Z",
"updated_at": "2026-08-12T07:50:36Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 897,
"watchers_count": 897,
"stargazers_count": 898,
"watchers_count": 898,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 897,
"watchers": 898,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-40369.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 260,
"watchers_count": 260,
"has_discussions": false,
"forks_count": 58,
"forks_count": 59,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 58,
"forks": 59,
"watchers": 260,
"score": 0,
"subscribers_count": 5
2026/CVE-2026-41089.json
+6 -6
View File
@@ -129,7 +129,7 @@
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 12,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -137,7 +137,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"forks": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
@@ -210,10 +210,10 @@
"description": "Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.",
"fork": false,
"created_at": "2026-07-21T02:05:07Z",
"updated_at": "2026-08-08T10:58:25Z",
"updated_at": "2026-08-12T11:54:10Z",
"pushed_at": "2026-08-07T00:49:48Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -237,7 +237,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 27,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+6 -6
View File
@@ -609,12 +609,12 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-07-20T14:15:54Z",
"updated_at": "2026-08-12T05:22:51Z",
"updated_at": "2026-08-12T11:23:19Z",
"pushed_at": "2026-08-08T20:09:34Z",
"stargazers_count": 319,
"watchers_count": 319,
"stargazers_count": 321,
"watchers_count": 321,
"has_discussions": false,
"forks_count": 40,
"forks_count": 41,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -628,8 +628,8 @@
"python"
],
"visibility": "public",
"forks": 40,
"watchers": 319,
"forks": 41,
"watchers": 321,
"score": 0,
"subscribers_count": 9
},
2026/CVE-2026-42588.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Store vulnerability POC files including CVE-2026-42588 Spring RCE xml payload",
"fork": false,
"created_at": "2026-06-18T11:20:16Z",
"updated_at": "2026-07-23T06:21:19Z",
"pushed_at": "2026-07-23T06:21:15Z",
"updated_at": "2026-08-12T07:34:43Z",
"pushed_at": "2026-08-12T07:34:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-43499.json
+96 -30
View File
@@ -348,12 +348,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-12T06:02:04Z",
"updated_at": "2026-08-12T09:02:09Z",
"pushed_at": "2026-08-06T09:48:14Z",
"stargazers_count": 244,
"watchers_count": 244,
"stargazers_count": 246,
"watchers_count": 246,
"has_discussions": false,
"forks_count": 52,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -368,8 +368,8 @@
"root"
],
"visibility": "public",
"forks": 52,
"watchers": 244,
"forks": 54,
"watchers": 246,
"score": 0,
"subscribers_count": 10
},
@@ -520,10 +520,10 @@
"description": "Android version CVE-2026-43499 tester",
"fork": false,
"created_at": "2026-07-13T13:31:55Z",
"updated_at": "2026-08-11T22:11:30Z",
"updated_at": "2026-08-12T08:01:00Z",
"pushed_at": "2026-07-20T07:22:42Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -534,7 +534,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 0
},
@@ -586,10 +586,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-11T19:26:24Z",
"updated_at": "2026-08-12T11:55:24Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -600,7 +600,7 @@
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-12T05:24:14Z",
"updated_at": "2026-08-12T12:47:19Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 782,
"watchers_count": 782,
"stargazers_count": 786,
"watchers_count": 786,
"has_discussions": false,
"forks_count": 132,
"forks_count": 134,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 132,
"watchers": 782,
"forks": 134,
"watchers": 786,
"score": 0,
"subscribers_count": 24
},
@@ -2037,10 +2037,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-02T08:10:34Z",
"updated_at": "2026-08-12T04:12:40Z",
"updated_at": "2026-08-12T08:26:05Z",
"pushed_at": "2026-08-12T04:12:35Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -2051,7 +2051,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -2070,10 +2070,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-12T05:25:21Z",
"updated_at": "2026-08-12T09:33:43Z",
"pushed_at": "2026-08-11T18:46:51Z",
"stargazers_count": 133,
"watchers_count": 133,
"stargazers_count": 134,
"watchers_count": 134,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -2090,7 +2090,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 133,
"watchers": 134,
"score": 0,
"subscribers_count": 4
},
@@ -2180,7 +2180,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2188,7 +2188,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
@@ -2489,5 +2489,71 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1331777892,
"name": "F9360-CVE43499",
"full_name": "E-R-Butch\/F9360-CVE43499",
"owner": {
"login": "E-R-Butch",
"id": 56301946,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56301946?v=4",
"html_url": "https:\/\/github.com\/E-R-Butch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/E-R-Butch\/F9360-CVE43499",
"description": "SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12.",
"fork": false,
"created_at": "2026-08-12T08:10:15Z",
"updated_at": "2026-08-12T08:10:29Z",
"pushed_at": "2026-08-12T08:11:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1331880004,
"name": "iqoo-temp-root",
"full_name": "hybLOVE\/iqoo-temp-root",
"owner": {
"login": "hybLOVE",
"id": 196507296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196507296?v=4",
"html_url": "https:\/\/github.com\/hybLOVE",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hybLOVE\/iqoo-temp-root",
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-08-12T11:03:47Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43503.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 31,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43813.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43813: CloudAttestation enforceEnvironment bypass",
"fork": false,
"created_at": "2026-07-29T19:41:14Z",
"updated_at": "2026-08-07T21:38:21Z",
"updated_at": "2026-08-12T08:01:18Z",
"pushed_at": "2026-07-29T19:41:18Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49345.json → 2026/CVE-2026-44402.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1251003747,
"name": "CVE-2026-49345-Mercator-SSRF",
"full_name": "hadhub\/CVE-2026-49345-Mercator-SSRF",
"id": 1331956237,
"name": "CVE-2026-44402",
"full_name": "Virgula0\/CVE-2026-44402",
"owner": {
"login": "hadhub",
"id": 85348372,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85348372?v=4",
"html_url": "https:\/\/github.com\/hadhub",
"login": "Virgula0",
"id": 16546435,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16546435?v=4",
"html_url": "https:\/\/github.com\/Virgula0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hadhub\/CVE-2026-49345-Mercator-SSRF",
"description": "SSRF Discovered in Mercator",
"html_url": "https:\/\/github.com\/Virgula0\/CVE-2026-44402",
"description": "Pre-Authenticated Full Root Remote Command Execution in Voltronic Power SNMP Web Pro 1.1",
"fork": false,
"created_at": "2026-05-27T06:46:38Z",
"updated_at": "2026-05-30T09:56:05Z",
"pushed_at": "2026-05-27T07:18:29Z",
"created_at": "2026-08-12T11:35:20Z",
"updated_at": "2026-08-12T12:49:51Z",
"pushed_at": "2026-08-12T12:49:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46331.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-08-05T16:04:42Z",
"updated_at": "2026-08-12T09:29:19Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 137,
"watchers_count": 137,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 45,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 45,
"watchers": 137,
"watchers": 138,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-48558.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1287368611,
"name": "CVE-2026-48558",
"full_name": "J4ck3LSyN-Gen2\/CVE-2026-48558",
"owner": {
"login": "J4ck3LSyN-Gen2",
"id": 204588854,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204588854?v=4",
"html_url": "https:\/\/github.com\/J4ck3LSyN-Gen2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/J4ck3LSyN-Gen2\/CVE-2026-48558",
"description": "SimpleHelp OIDC Authentication Bypass PoC",
"fork": false,
"created_at": "2026-07-02T16:11:50Z",
"updated_at": "2026-07-30T15:06:43Z",
"pushed_at": "2026-07-02T16:47:50Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50656.json
+37 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-50656",
"fork": false,
"created_at": "2026-06-18T13:16:36Z",
"updated_at": "2026-07-13T08:36:38Z",
"updated_at": "2026-08-12T08:16:32Z",
"pushed_at": "2026-06-18T13:44:42Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,40 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1331749325,
"name": "CVE-2026-50656",
"full_name": "HORKimhab\/CVE-2026-50656",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-50656",
"description": "CVE-2026-50656",
"fork": false,
"created_at": "2026-08-12T07:36:26Z",
"updated_at": "2026-08-12T07:40:40Z",
"pushed_at": "2026-08-12T07:40:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-53264.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-53361.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape",
"fork": false,
"created_at": "2026-08-10T19:59:45Z",
"updated_at": "2026-08-12T06:25:09Z",
"updated_at": "2026-08-12T09:30:57Z",
"pushed_at": "2026-08-11T11:43:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"forks": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-54477.json
-45
View File
@@ -1,45 +0,0 @@
[
{
"id": 1287575291,
"name": "CVE-2026-54477",
"full_name": "MichaelAdamGroberman\/CVE-2026-54477",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-54477",
"description": "CVE-2026-54477: Admin Panel Missing Security Headers (clickjacking\/XSS) - Gardyn (ICSA-26-183-03)",
"fork": false,
"created_at": "2026-07-02T20:18:29Z",
"updated_at": "2026-07-02T22:00:01Z",
"pushed_at": "2026-07-02T21:59:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cisa",
"clickjacking",
"coordinated-disclosure",
"cve",
"gardyn",
"iot-security",
"security-research",
"vulnerability-disclosure",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55040.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)",
"fork": false,
"created_at": "2026-08-06T11:46:34Z",
"updated_at": "2026-08-12T06:21:57Z",
"updated_at": "2026-08-12T12:46:26Z",
"pushed_at": "2026-08-10T15:35:23Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"forks": 4,
"watchers": 22,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-55200.json
-33
View File
@@ -64,38 +64,5 @@
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1286606231,
"name": "CVE-2026-55200",
"full_name": "kaleth4\/CVE-2026-55200",
"owner": {
"login": "kaleth4",
"id": 216897593,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216897593?v=4",
"html_url": "https:\/\/github.com\/kaleth4",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kaleth4\/CVE-2026-55200",
"description": null,
"fork": false,
"created_at": "2026-07-02T00:19:23Z",
"updated_at": "2026-07-03T00:55:30Z",
"pushed_at": "2026-07-03T00:55:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55726.json
-44
View File
@@ -1,44 +0,0 @@
[
{
"id": 1287575250,
"name": "CVE-2026-55726",
"full_name": "MichaelAdamGroberman\/CVE-2026-55726",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-55726",
"description": "CVE-2026-55726: Publicly Listable Azure Blob Storage Container (device logs) - Gardyn (ICSA-26-183-03)",
"fork": false,
"created_at": "2026-07-02T20:18:26Z",
"updated_at": "2026-07-02T22:00:00Z",
"pushed_at": "2026-07-02T21:59:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"azure-blob-storage",
"cisa",
"coordinated-disclosure",
"cve",
"gardyn",
"iot-security",
"security-research",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+2 -2
View File
@@ -2489,7 +2489,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2513,7 +2513,7 @@
"wordpress-exploit"
],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-64638.json
+43 -10
View File
@@ -113,10 +113,10 @@
"description": "Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)",
"fork": false,
"created_at": "2026-08-07T17:48:46Z",
"updated_at": "2026-08-11T15:37:24Z",
"updated_at": "2026-08-12T09:28:58Z",
"pushed_at": "2026-08-07T18:12:28Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -278,12 +278,12 @@
"description": "CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC",
"fork": false,
"created_at": "2026-08-08T01:20:11Z",
"updated_at": "2026-08-12T03:40:43Z",
"updated_at": "2026-08-12T09:32:36Z",
"pushed_at": "2026-08-08T01:24:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -300,8 +300,8 @@
"xss2shell"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -667,5 +667,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1331976644,
"name": "CVE-2026-64638",
"full_name": "ZildanZ\/CVE-2026-64638",
"owner": {
"login": "ZildanZ",
"id": 96684361,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96684361?v=4",
"html_url": "https:\/\/github.com\/ZildanZ",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZildanZ\/CVE-2026-64638",
"description": null,
"fork": false,
"created_at": "2026-08-12T11:58:32Z",
"updated_at": "2026-08-12T12:01:20Z",
"pushed_at": "2026-08-12T12:00:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-68138.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1331398479,
"name": "CVE-2026-68138",
"full_name": "aramosf\/CVE-2026-68138",
"owner": {
"login": "aramosf",
"id": 3511842,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3511842?v=4",
"html_url": "https:\/\/github.com\/aramosf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aramosf\/CVE-2026-68138",
"description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
"fork": false,
"created_at": "2026-08-11T22:22:22Z",
"updated_at": "2026-08-12T09:10:23Z",
"pushed_at": "2026-08-12T08:20:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-69263.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1331996385,
"name": "CVE-2026-69263",
"full_name": "leoelsolh\/CVE-2026-69263",
"owner": {
"login": "leoelsolh",
"id": 255668797,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/255668797?v=4",
"html_url": "https:\/\/github.com\/leoelsolh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/leoelsolh\/CVE-2026-69263",
"description": "MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1",
"fork": false,
"created_at": "2026-08-12T12:20:22Z",
"updated_at": "2026-08-12T12:25:22Z",
"pushed_at": "2026-08-12T12:24:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-70376.json
+44
View File
@@ -0,0 +1,44 @@
[
{
"id": 1331972403,
"name": "PluckCMS-CSRF-RCE",
"full_name": "IlhomjonR\/PluckCMS-CSRF-RCE",
"owner": {
"login": "IlhomjonR",
"id": 143179506,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143179506?v=4",
"html_url": "https:\/\/github.com\/IlhomjonR",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/IlhomjonR\/PluckCMS-CSRF-RCE",
"description": "CVE-2026-70376 — Pluck CMS site-wide CSRF (fail-open Referer check) → RCE via double-extension upload. CWE-352\/434, CVSS 8.0. Advisory + PoC by @IlhomjonR.",
"fork": false,
"created_at": "2026-08-12T11:53:33Z",
"updated_at": "2026-08-12T12:02:34Z",
"pushed_at": "2026-08-12T12:02:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"csrf",
"cve",
"exploit",
"pluck-cms",
"poc",
"rce",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+44 -68
View File
@@ -1980,7 +1980,6 @@
<code>Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user's network.
</code>
- [MichaelAdamGroberman/CVE-2026-13768](https://github.com/MichaelAdamGroberman/CVE-2026-13768)
- [J4ck3LSyN-Gen2/CVE-2026-13768](https://github.com/J4ck3LSyN-Gen2/CVE-2026-13768)
### CVE-2026-13934 (2026-06-30)
@@ -2492,7 +2491,6 @@
<code>Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled.
</code>
- [kaleth4/CVE-2026-20896](https://github.com/kaleth4/CVE-2026-20896)
- [rz1027/CVE-2026-20896](https://github.com/rz1027/CVE-2026-20896)
- [szybnev/cve-2026-20896-gitea-poc](https://github.com/szybnev/cve-2026-20896-gitea-poc)
- [XaocZenon/CVE-2026-20896](https://github.com/XaocZenon/CVE-2026-20896)
@@ -3424,6 +3422,13 @@
- [stealth-engine/resize-image-before-upload-secure](https://github.com/stealth-engine/resize-image-before-upload-secure)
### CVE-2026-27344 (2026-03-05)
<code>Missing Authorization vulnerability in inseriswiss inseri core inseri-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects inseri core: from n/a through &lt;= 1.0.5.
</code>
- [AC8999/CVE-2026-27344](https://github.com/AC8999/CVE-2026-27344)
### CVE-2026-27384 (2026-03-05)
<code>Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through &lt;= 2.9.1.
@@ -3594,13 +3599,6 @@
- [0xjohnnydev/CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions](https://github.com/0xjohnnydev/CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions)
- [clogan9019-dotcom/IOHIDFamily-PoC-Research](https://github.com/clogan9019-dotcom/IOHIDFamily-PoC-Research)
### CVE-2026-28995 (2026-05-11)
<code>A logic issue was addressed with improved restrictions. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A malicious app may be able to break out of its sandbox.
</code>
- [Robertmak2014-sudow/CVE-2026-28995](https://github.com/Robertmak2014-sudow/CVE-2026-28995)
### CVE-2026-29000 (2026-03-04)
<code>pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators.
@@ -3763,6 +3761,7 @@
- [gbonacini/CVE-2026-31431](https://github.com/gbonacini/CVE-2026-31431)
- [sh4den/CVE-2026-31431-copyfail-aarch64](https://github.com/sh4den/CVE-2026-31431-copyfail-aarch64)
- [kuniyal08/Copy-Fail-CVE-2026-31431-Lab](https://github.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab)
- [SilverRuler/copy-fail-CVE-2026-31431](https://github.com/SilverRuler/copy-fail-CVE-2026-31431)
- [Sebastian294/cve-2026-31431](https://github.com/Sebastian294/cve-2026-31431)
- [0xFuffM3/CVE-2026-31431-CopyFail](https://github.com/0xFuffM3/CVE-2026-31431-CopyFail)
- [dotPY-hax/CopyFail](https://github.com/dotPY-hax/CopyFail)
@@ -4130,13 +4129,6 @@
- [anonmrc/CVE-2026-34486-e-Tomcat-Tribes](https://github.com/anonmrc/CVE-2026-34486-e-Tomcat-Tribes)
- [razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction](https://github.com/razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction)
### CVE-2026-34835 (2026-04-02)
<code>Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, #, and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be bypassed. This can lead to host header poisoning in applications that use req.host, req.url, or req.base_url for link generation, redirects, or origin validation. This issue has been patched in versions 3.1.21 and 3.2.6.
</code>
- [Cyber-note/CVE-2026-34835-Black-box-Analysis](https://github.com/Cyber-note/CVE-2026-34835-Black-box-Analysis)
### CVE-2026-34908 (2026-05-22)
<code>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
@@ -4257,13 +4249,6 @@
- [PwnOnu/T3-Technology-CPE-Advisories](https://github.com/PwnOnu/T3-Technology-CPE-Advisories)
### CVE-2026-36027 (2026-07-08)
<code>An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (ADB) and Android Debug Bridge components
</code>
- [redr0nin/Code-27-Companion-Hub-Exploits](https://github.com/redr0nin/Code-27-Companion-Hub-Exploits)
### CVE-2026-36213 (2026-06-15)
<code>An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component.
@@ -5308,6 +5293,8 @@
- [xiaohj233/ghostlock-x200-root](https://github.com/xiaohj233/ghostlock-x200-root)
- [yijiacloud/GhostLock-OPPO-PCKM00](https://github.com/yijiacloud/GhostLock-OPPO-PCKM00)
- [yijiacloud/ghostlock-cve-2026-43499-4.19-k40](https://github.com/yijiacloud/ghostlock-cve-2026-43499-4.19-k40)
- [E-R-Butch/F9360-CVE43499](https://github.com/E-R-Butch/F9360-CVE43499)
- [hybLOVE/iqoo-temp-root](https://github.com/hybLOVE/iqoo-temp-root)
### CVE-2026-43500 (2026-05-11)
@@ -5454,6 +5441,9 @@
- [sn0x-sharma/CVE-2026-44401](https://github.com/sn0x-sharma/CVE-2026-44401)
### CVE-2026-44402
- [Virgula0/CVE-2026-44402](https://github.com/Virgula0/CVE-2026-44402)
### CVE-2026-44403 (2026-05-12)
<code>Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject arbitrary Lua code through the domain admin mydirectory field. Attackers can exploit unsafe serialization of session values into Lua source code without proper escaping of closing delimiters, causing the injected code to be executed when the poisoned session is loaded via loadfile().
@@ -6187,13 +6177,6 @@
- [ghapvharmo/gha-lab-a5c1876997-1](https://github.com/ghapvharmo/gha-lab-a5c1876997-1)
### CVE-2026-48558 (2026-06-12)
<code>SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during login are accepted without verifying their cryptographic signature. In a vulnerable configuration, a remote, unauthenticated attacker can submit a forged token containing arbitrary identity claims to obtain a fully authenticated technician session. In some configurations, this may also allow bypass of multi-factor authentication. No user interaction is required.
</code>
- [J4ck3LSyN-Gen2/CVE-2026-48558](https://github.com/J4ck3LSyN-Gen2/CVE-2026-48558)
### CVE-2026-48598 (2026-06-02)
<code>Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values.\n\nTesla.Multipart.part_headers_for_disposition/1 interpolates each disposition parameter as #{k}=&quot;#{v}&quot; with no validation of CR (\r), LF (\n), or double-quote characters. The values come verbatim from the caller via Tesla.Multipart.add_field/4 (the name parameter), Tesla.Multipart.add_file/3, and Tesla.Multipart.add_file_content/4 (both the filename parameter and other disposition opts). A &quot; in the value closes the quoted parameter early; a \r\n ends the Content-Disposition header line and starts a new part header (such as a forged Content-Type), or, after a second \r\n, ends the entire part header block and prepends bytes to the part body. The default-filename path in add_file/3 derives the filename via Path.basename/1, which does not strip CR or LF, so any application forwarding a partially-attacker-controlled file path inherits the same issue.\n\nThis issue affects tesla: from 0.8.0 before 1.18.3.
@@ -6466,20 +6449,6 @@
- [xiaoqiMikko/shiro-check](https://github.com/xiaoqiMikko/shiro-check)
### CVE-2026-49344 (2026-06-19)
<code>Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine (`/admin/queries/execute`) accepts a JSON DSL (`from` / `select` / `filters` / `traverse` / `output`), translates it into an Eloquent query, and returns results as JSON. The controller method `QueryController::execute()` does not enforce an authorization gate, unlike `store()` and `massDestroy()` in the same controller which are correctly protected. As a result, any authenticated account — including the read-only Auditor role — can query models beyond its intended scope, including the `User` model. Additionally, the `password` column, although declared `$hidden`, is not excluded from filter predicates, which allows it to be used in `LIKE` conditions. The `schema()` and `schemaModel()` endpoints of the same controller are similarly unguarded. The Query Engine is read-only; integrity and availability are not affected. Version 2025.05.19 patches the issue.
</code>
- [hadhub/CVE-2026-49344-Mercator-JSON-DSL](https://github.com/hadhub/CVE-2026-49344-Mercator-JSON-DSL)
### CVE-2026-49345 (2026-06-19)
<code>Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery (SSRF) vulnerability exists in Mercator's CVE configuration panel (`/admin/config/parameters`). The `testProvider()` method in `ConfigurationController` passes user-supplied input directly to `curl_init()` without validating the scheme, hostname, or destination IP address. An authenticated user with the `configure` permission can force the Mercator server to issue arbitrary outbound network requests. The suffix `/api/dbInfo` appended to the URL can be bypassed by injecting a `#` fragment character (e.g. `http://TARGET/PATH#`), allowing full control over the target URL. No scheme whitelist, host whitelist, or private/loopback IP block is applied. The `telnet://` scheme can be used for internal port scanning; the `gopher://` scheme enables interaction with unauthenticated internal services (Redis, Memcached), potentially leading to Remote Code Execution under specific deployment conditions. Version 2025.05.19 patches the issue.
</code>
- [hadhub/CVE-2026-49345-Mercator-SSRF](https://github.com/hadhub/CVE-2026-49345-Mercator-SSRF)
### CVE-2026-49352 (2026-07-15)
<code>9Router is an AI router &amp; token saver. From 0.2.21 until 0.4.44, 9Router used the hardcoded fallback JWT secret 9router-default-secret-change-me in src/app/api/auth/login/route.js, src/middleware.js, and later src/lib/auth/dashboardSession.js, allowing attackers to forge an auth_token cookie when JWT_SECRET was unset. This issue is fixed in version 0.4.44
@@ -6691,6 +6660,7 @@
- [g0thamRabb1t/CVE-2026-50656-rogueplanet-validation](https://github.com/g0thamRabb1t/CVE-2026-50656-rogueplanet-validation)
- [0xBlackash/CVE-2026-50656](https://github.com/0xBlackash/CVE-2026-50656)
- [HORKimhab/CVE-2026-50656](https://github.com/HORKimhab/CVE-2026-50656)
### CVE-2026-50657 (2026-07-14)
@@ -7099,13 +7069,6 @@
- [tomadimitrie/CVE-2026-54424](https://github.com/tomadimitrie/CVE-2026-54424)
### CVE-2026-54477 (2026-07-02)
<code>The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.
</code>
- [MichaelAdamGroberman/CVE-2026-54477](https://github.com/MichaelAdamGroberman/CVE-2026-54477)
### CVE-2026-54515 (2026-06-23)
<code>jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4.
@@ -7199,7 +7162,6 @@
- [0xBlackash/CVE-2026-55200](https://github.com/0xBlackash/CVE-2026-55200)
- [xd20111/CVE-2026-55200](https://github.com/xd20111/CVE-2026-55200)
- [kaleth4/CVE-2026-55200](https://github.com/kaleth4/CVE-2026-55200)
### CVE-2026-55255 (2026-06-23)
@@ -7224,13 +7186,6 @@
### CVE-2026-55584
- [mirackayikci/CVE-2026-55584](https://github.com/mirackayikci/CVE-2026-55584)
### CVE-2026-55726 (2026-07-02)
<code>The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.
</code>
- [MichaelAdamGroberman/CVE-2026-55726](https://github.com/MichaelAdamGroberman/CVE-2026-55726)
### CVE-2026-55957 (2026-06-29)
<code>Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through 9.0.100, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.5, 10.1.37 or 9.0.101, which fixes the issue.
@@ -7829,6 +7784,7 @@
- [g0d150ne/XSS2Shell](https://github.com/g0d150ne/XSS2Shell)
- [eh-amish/CVE-2026-64638-XSS-to-Shell-PoC](https://github.com/eh-amish/CVE-2026-64638-XSS-to-Shell-PoC)
- [0xlipon/xss2shell](https://github.com/0xlipon/xss2shell)
- [ZildanZ/CVE-2026-64638](https://github.com/ZildanZ/CVE-2026-64638)
### CVE-2026-64640 (2026-08-06)
@@ -8182,6 +8138,13 @@
### CVE-2026-68004
- [xuwu-xuwu/CVE-2026-68004](https://github.com/xuwu-xuwu/CVE-2026-68004)
### CVE-2026-68138 (2026-08-10)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: serialize qdisc_rtab_list against concurrent get/put\n\nqdisc_get_rtab() and qdisc_put_rtab() mutate the process-global singly\nlinked list qdisc_rtab_list and a plain non-atomic 'int refcnt' with no\nlock. This was only safe because every caller historically held the RTNL\nmutex, which serialized all rate-table lookups, inserts and frees.\n\nThat invariant no longer holds. cls_flower sets\nTCF_PROTO_OPS_DOIT_UNLOCKED, so tc_new_tfilter() keeps rtnl_held == false\nfor it and sets TCA_ACT_FLAGS_NO_RTNL. That flag propagates through\ntcf_exts_validate_ex() -&gt; tcf_action_init() -&gt; tcf_action_init_1() -&gt;\ntcf_police_init(), which calls qdisc_get_rtab()/qdisc_put_rtab() with the\nRTNL mutex NOT held. Two RTM_NEWTFILTER requests on different CPUs, each\nadding a flower filter with a police action carrying the same rate, then\nrace on qdisc_rtab_list and on the non-atomic refcnt, leading to a\nuse-after-free / double-free of the kmalloc-2k struct qdisc_rate_table.\nqdisc_rtab_list is a single global (not per-netns), so the corrupted\nobject is shared system-wide.\n\n BUG: KASAN: slab-use-after-free in qdisc_put_rtab+0x12f/0x160\n qdisc_put_rtab+0x12f/0x160\n tcf_police_init+0xda9/0x1590\n tcf_action_init_1+0x460/0x6b0\n tcf_action_init+0x439/0xa40\n tcf_exts_validate_ex+0x42d/0x550\n fl_change+0xddd/0x7da0\n tc_new_tfilter+0xaa7/0x2420\n rtnetlink_rcv_msg+0x95e/0xe90\n which belongs to the cache kmalloc-2k of size 2048\n\nProtect qdisc_rtab_list and the refcount with a dedicated spinlock. The\n(sleeping, GFP_KERNEL) allocation in qdisc_get_rtab() is performed before\ntaking the lock; if a concurrent inserter added an identical table in the\nmeantime the freshly allocated one is freed under the lock, so no\nduplicate is leaked. qdisc_put_rtab() now decrements the refcount and\nunlinks under the same lock.
</code>
- [aramosf/CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138)
### CVE-2026-68771 (2026-07-31)
<code>ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard_*.pkl file via the unauthenticated POST /upload/image endpoint and then queue a workflow graph via POST /prompt referencing the uploaded file, causing torch.load to deserialize the attacker-controlled pickle payload using __reduce__ and execute arbitrary commands as the ComfyUI process user.
@@ -8220,6 +8183,20 @@
- [JVBotelho/cve-2026-69243-poc-aiohttp-smuggling](https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling)
### CVE-2026-69263 (2026-08-04)
<code>Flowise is a drag &amp; drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS by exact environment-variable name. Because npm reads configuration from npm_config_* variables, setting npm_config_yes=true reproduced --yes behavior without using a blocked flag, causing npx to auto-install and execute the named package when a Custom MCP server launched. This issue is fixed in version 3.1.3.
</code>
- [leoelsolh/CVE-2026-69263](https://github.com/leoelsolh/CVE-2026-69263)
### CVE-2026-70376 (2026-08-05)
<code>Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, with no per-request anti-CSRF token anywhere in the admin area.
</code>
- [IlhomjonR/PluckCMS-CSRF-RCE](https://github.com/IlhomjonR/PluckCMS-CSRF-RCE)
### CVE-2026-70481 (2026-08-04)
<code>Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.0, the standard channel message update and delete handlers accepted any caller holding write access on the channel without checking that the caller wrote the message. Because write access is the same grant a member needs to post, any ordinary participant in a shared standard channel could rewrite or permanently delete another participant message, while group and direct message handlers enforced authorship. This issue is fixed in 0.11.0.
@@ -27797,7 +27774,6 @@
</code>
- [mouadk/cve-2024-38821](https://github.com/mouadk/cve-2024-38821)
- [masa42/CVE-2024-38821-POC](https://github.com/masa42/CVE-2024-38821-POC)
### CVE-2024-38828 (2024-11-18)
@@ -30380,6 +30356,13 @@
- [JAckLosingHeart/GHSA-4cx5-89vm-833x-POC](https://github.com/JAckLosingHeart/GHSA-4cx5-89vm-833x-POC)
### CVE-2024-52806 (2024-12-02)
<code>SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18.
</code>
- [heartlesseorg-dot/CVE-2024-52806-PoC](https://github.com/heartlesseorg-dot/CVE-2024-52806-PoC)
### CVE-2024-52940 (2024-11-18)
<code>AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID.
@@ -56866,6 +56849,7 @@
- [zhzyker/CVE-2020-10199_POC-EXP](https://github.com/zhzyker/CVE-2020-10199_POC-EXP)
- [aleenzz/CVE-2020-10199](https://github.com/aleenzz/CVE-2020-10199)
- [hugosg97/CVE-2020-10199-Nexus-3.21.01](https://github.com/hugosg97/CVE-2020-10199-Nexus-3.21.01)
- [finn79426/CVE-2020-10199](https://github.com/finn79426/CVE-2020-10199)
### CVE-2020-10204 (2020-04-01)
@@ -57561,13 +57545,6 @@
- [danpalmer/django-cve-2020-13254](https://github.com/danpalmer/django-cve-2020-13254)
### CVE-2020-13259 (2020-09-16)
<code>A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. This could be exploited in conjunction with CVE-2020-13260.
</code>
- [UrielYochpaz/CVE-2020-13259](https://github.com/UrielYochpaz/CVE-2020-13259)
### CVE-2020-13277 (2020-06-19)
<code>An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5
@@ -65003,7 +64980,6 @@
- [MostafaSoliman/Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit](https://github.com/MostafaSoliman/Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit)
- [AymanElSherif/oracle-oam-authentication-bypas-exploit](https://github.com/AymanElSherif/oracle-oam-authentication-bypas-exploit)
- [redtimmy/OAMBuster](https://github.com/redtimmy/OAMBuster)
### CVE-2018-2893 (2018-07-18)