nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/14 00:49:40

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-14 09:49:40 +09:00
1 parent bc9c7e14eb
commit d7aa1ffcad
75 files changed
+472 -482
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2002/CVE-2002-20001.json
+4 -4
View File
@@ -14,16 +14,16 @@
"description": "D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)",
"fork": false,
"created_at": "2021-08-31T09:51:12Z",
"updated_at": "2026-06-13T16:26:23Z",
"pushed_at": "2026-06-13T16:26:30Z",
"updated_at": "2026-06-13T22:45:39Z",
"pushed_at": "2026-06-13T19:43:42Z",
"stargazers_count": 216,
"watchers_count": 216,
"has_discussions": false,
"has_discussions": true,
"forks_count": 30,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [
"attack",
2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-06-13T16:04:19Z",
"pushed_at": "2026-06-13T16:04:16Z",
"updated_at": "2026-06-13T22:42:58Z",
"pushed_at": "2026-06-13T22:42:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-13077.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1268791895,
"name": "wpa2-krack-lab",
"full_name": "mugheeskhan5\/wpa2-krack-lab",
"owner": {
"login": "mugheeskhan5",
"id": 179556986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179556986?v=4",
"html_url": "https:\/\/github.com\/mugheeskhan5",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mugheeskhan5\/wpa2-krack-lab",
"description": "Containerized WPA2 4-way handshake lab using Docker, hostapd, and wpa_supplicant — captures and cryptographically verifies the handshake, then demonstrates the KRACK (CVE-2017-13077) attack and shows how patched systems correctly reject key reinstallation.",
"fork": false,
"created_at": "2026-06-14T00:03:45Z",
"updated_at": "2026-06-14T00:03:45Z",
"pushed_at": "2026-06-14T00:03:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-13T17:58:26Z",
"pushed_at": "2026-06-13T17:58:22Z",
"updated_at": "2026-06-13T23:19:25Z",
"pushed_at": "2026-06-13T23:19:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-06-13T16:04:05Z",
"pushed_at": "2026-06-13T16:04:02Z",
"updated_at": "2026-06-13T22:42:54Z",
"pushed_at": "2026-06-13T22:42:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-13T17:48:37Z",
"pushed_at": "2026-06-13T17:48:34Z",
"updated_at": "2026-06-13T23:45:00Z",
"pushed_at": "2026-06-13T23:44:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-21300.json
+2 -2
View File
@@ -481,7 +481,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -489,7 +489,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-13T17:26:00Z",
"pushed_at": "2026-06-13T17:25:56Z",
"updated_at": "2026-06-13T23:52:03Z",
"pushed_at": "2026-06-13T23:51:59Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-06-13T16:11:08Z",
"pushed_at": "2026-06-13T16:11:04Z",
"updated_at": "2026-06-13T22:49:49Z",
"pushed_at": "2026-06-13T22:49:46Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2022/CVE-2022-30075.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)",
"fork": false,
"created_at": "2022-06-07T23:26:47Z",
"updated_at": "2026-06-13T18:21:13Z",
"updated_at": "2026-06-13T23:20:11Z",
"pushed_at": "2022-11-20T03:03:53Z",
"stargazers_count": 235,
"watchers_count": 235,
"stargazers_count": 236,
"watchers_count": 236,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 235,
"watchers": 236,
"score": 0,
"subscribers_count": 4
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-13T16:00:26Z",
"pushed_at": "2026-06-13T16:00:20Z",
"updated_at": "2026-06-13T22:39:00Z",
"pushed_at": "2026-06-13T22:38:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38646.json
+33
View File
@@ -1276,5 +1276,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1043655566,
"name": "Metabase-Pre-Auth-RCE-POC",
"full_name": "NosrevytsNg\/Metabase-Pre-Auth-RCE-POC",
"owner": {
"login": "NosrevytsNg",
"id": 195313524,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195313524?v=4",
"html_url": "https:\/\/github.com\/NosrevytsNg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NosrevytsNg\/Metabase-Pre-Auth-RCE-POC",
"description": "CVE-2023-38646",
"fork": false,
"created_at": "2025-08-24T10:40:58Z",
"updated_at": "2026-06-13T20:07:57Z",
"pushed_at": "2026-03-14T19:11:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-06-13T17:06:59Z",
"pushed_at": "2026-06-13T17:06:56Z",
"updated_at": "2026-06-13T23:42:19Z",
"pushed_at": "2026-06-13T23:42:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-44451.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 744352278,
"name": "slippy-book-exploit",
"full_name": "febinrev\/slippy-book-exploit",
"owner": {
"login": "febinrev",
"id": 52229330,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52229330?v=4",
"html_url": "https:\/\/github.com\/febinrev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/febinrev\/slippy-book-exploit",
"description": " CVE-2023-44451, CVE-2023-52076: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution",
"fork": false,
"created_at": "2024-01-17T05:50:38Z",
"updated_at": "2024-12-17T14:43:58Z",
"pushed_at": "2024-01-17T10:42:12Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 10,
"score": 0,
"subscribers_count": 2
}
]
2024/CVE-2024-0582.json
-33
View File
@@ -248,38 +248,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237045364,
"name": "CVE-2024-0582",
"full_name": "nanabingies\/CVE-2024-0582",
"owner": {
"login": "nanabingies",
"id": 13157335,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13157335?v=4",
"html_url": "https:\/\/github.com\/nanabingies",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nanabingies\/CVE-2024-0582",
"description": "An exploit for a Use-After-Free vulnerability in the io_uring subsystem in the linux kernel",
"fork": false,
"created_at": "2026-05-12T20:29:01Z",
"updated_at": "2026-05-20T20:41:46Z",
"pushed_at": "2026-05-20T20:41:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-13T17:07:16Z",
"pushed_at": "2026-06-13T17:07:13Z",
"updated_at": "2026-06-13T23:42:38Z",
"pushed_at": "2026-06-13T23:42:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-10924.json
+4 -4
View File
@@ -232,10 +232,10 @@
"description": "Bypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.",
"fork": false,
"created_at": "2024-11-27T11:19:47Z",
"updated_at": "2026-05-29T22:45:06Z",
"updated_at": "2026-06-13T19:14:57Z",
"pushed_at": "2024-11-27T14:13:57Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -246,7 +246,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-06-13T17:53:16Z",
"pushed_at": "2026-06-13T17:53:12Z",
"updated_at": "2026-06-14T00:26:56Z",
"pushed_at": "2026-06-14T00:26:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2024/CVE-2024-34740.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-06-09T18:29:02Z",
"updated_at": "2026-06-13T19:55:50Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-56433.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 911625725,
"name": "CVE-2024-56433",
"full_name": "JonnyWhatshisface\/CVE-2024-56433",
"owner": {
"login": "JonnyWhatshisface",
"id": 6776518,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6776518?v=4",
"html_url": "https:\/\/github.com\/JonnyWhatshisface",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JonnyWhatshisface\/CVE-2024-56433",
"description": "CVE-2024-56433 - shadow-utils Default subordinate ID for local users creates risk of collision",
"fork": false,
"created_at": "2025-01-03T13:11:25Z",
"updated_at": "2025-01-08T08:24:17Z",
"pushed_at": "2025-01-08T08:24:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-5716.json
-52
View File
@@ -1,52 +0,0 @@
[
{
"id": 838716656,
"name": "logsign-rce",
"full_name": "byjanke\/logsign-rce",
"owner": {
"login": "byjanke",
"id": 82449360,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82449360?v=4",
"html_url": "https:\/\/github.com\/byjanke",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/byjanke\/logsign-rce",
"description": "Original Logsign Unified SecOps Platform unauthenticated RCE exploit — CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722",
"fork": false,
"created_at": "2024-08-06T07:49:40Z",
"updated_at": "2026-06-13T15:53:01Z",
"pushed_at": "2026-06-13T13:43:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"authentication-bypass",
"command-injection",
"cve",
"cve-2024-5716",
"cve-2024-5717",
"exploit",
"logsign",
"metasploit",
"nuclei",
"pentesting",
"poc",
"rce",
"redteam",
"siem",
"vulnerability",
"zeroday"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-1097.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 249,
"watchers_count": 249,
"has_discussions": false,
"forks_count": 55,
"forks_count": 56,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 55,
"forks": 56,
"watchers": 249,
"score": 0,
"subscribers_count": 3
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-13T17:12:17Z",
"pushed_at": "2026-06-13T17:12:14Z",
"updated_at": "2026-06-13T23:47:53Z",
"pushed_at": "2026-06-13T23:47:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-13T17:11:13Z",
"pushed_at": "2026-06-13T17:11:10Z",
"updated_at": "2026-06-13T23:46:43Z",
"pushed_at": "2026-06-13T23:46:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-06-13T17:33:36Z",
"pushed_at": "2026-06-13T17:33:33Z",
"updated_at": "2026-06-14T00:08:33Z",
"pushed_at": "2026-06-14T00:08:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-13T18:04:49Z",
"pushed_at": "2026-06-13T18:04:46Z",
"updated_at": "2026-06-14T00:38:04Z",
"pushed_at": "2026-06-14T00:38:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-13T16:05:56Z",
"pushed_at": "2026-06-13T16:05:53Z",
"updated_at": "2026-06-13T22:44:51Z",
"pushed_at": "2026-06-13T22:44:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-06-13T15:58:57Z",
"pushed_at": "2026-06-13T15:58:54Z",
"updated_at": "2026-06-13T22:37:23Z",
"pushed_at": "2026-06-13T22:37:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-13T16:07:24Z",
"pushed_at": "2026-06-13T16:07:20Z",
"updated_at": "2026-06-13T22:45:56Z",
"pushed_at": "2026-06-13T22:45:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-06-13T16:07:15Z",
"pushed_at": "2026-06-13T16:07:11Z",
"updated_at": "2026-06-13T22:45:58Z",
"pushed_at": "2026-06-13T22:45:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -91,7 +91,7 @@
"stargazers_count": 799,
"watchers_count": 799,
"has_discussions": false,
"forks_count": 88,
"forks_count": 89,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 88,
"forks": 89,
"watchers": 799,
"score": 0,
"subscribers_count": 22
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-06-13T17:23:28Z",
"pushed_at": "2026-06-13T17:23:25Z",
"updated_at": "2026-06-13T23:58:36Z",
"pushed_at": "2026-06-13T23:58:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-48804.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-06-12T22:52:17Z",
"updated_at": "2026-06-13T19:53:47Z",
"pushed_at": "2026-05-20T14:39:54Z",
"stargazers_count": 208,
"watchers_count": 208,
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-06-13T16:07:06Z",
"pushed_at": "2026-06-13T16:07:03Z",
"updated_at": "2026-06-13T22:45:46Z",
"pushed_at": "2026-06-13T22:45:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-13T16:26:38Z",
"pushed_at": "2026-06-13T16:26:34Z",
"updated_at": "2026-06-13T23:04:28Z",
"pushed_at": "2026-06-13T23:04:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-13T16:27:09Z",
"pushed_at": "2026-06-13T16:27:06Z",
"updated_at": "2026-06-13T23:05:10Z",
"pushed_at": "2026-06-13T23:05:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-51970.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-52691.json
+33 -33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1124797523,
"name": "CVE-2025-52691",
"full_name": "yt2w\/CVE-2025-52691",
"owner": {
"login": "yt2w",
"id": 240546344,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/240546344?v=4",
"html_url": "https:\/\/github.com\/yt2w",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yt2w\/CVE-2025-52691",
"description": null,
"fork": false,
"created_at": "2025-12-29T16:23:54Z",
"updated_at": "2026-05-28T13:23:54Z",
"pushed_at": "2025-12-29T16:24:39Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1125093593,
"name": "CVE-2025-52691",
@@ -70,6 +37,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1125300902,
"name": "CVE-2025-52691",
"full_name": "Udyz\/CVE-2025-52691",
"owner": {
"login": "Udyz",
"id": 39673284,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39673284?v=4",
"html_url": "https:\/\/github.com\/Udyz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Udyz\/CVE-2025-52691",
"description": null,
"fork": false,
"created_at": "2025-12-30T13:37:00Z",
"updated_at": "2025-12-30T13:37:01Z",
"pushed_at": "2025-12-29T16:24:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1125342349,
"name": "CVE-2025-52691",
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-06-13T17:31:56Z",
"pushed_at": "2026-06-13T17:31:53Z",
"updated_at": "2026-06-14T00:06:49Z",
"pushed_at": "2026-06-14T00:06:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-06-13T16:01:38Z",
"pushed_at": "2026-06-13T16:01:34Z",
"updated_at": "2026-06-13T22:40:19Z",
"pushed_at": "2026-06-13T22:40:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-13T16:01:15Z",
"pushed_at": "2026-06-13T16:01:11Z",
"updated_at": "2026-06-13T22:39:51Z",
"pushed_at": "2026-06-13T22:39:48Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+69 -36
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-06-13T16:57:29Z",
"pushed_at": "2026-06-13T16:57:26Z",
"updated_at": "2026-06-13T23:33:31Z",
"pushed_at": "2026-06-13T23:33:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-13T16:57:12Z",
"pushed_at": "2026-06-13T16:57:09Z",
"updated_at": "2026-06-13T23:33:06Z",
"pushed_at": "2026-06-13T23:33:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-06-13T16:57:15Z",
"pushed_at": "2026-06-13T16:57:11Z",
"updated_at": "2026-06-13T23:33:13Z",
"pushed_at": "2026-06-13T23:33:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-06-13T16:58:21Z",
"pushed_at": "2026-06-13T16:58:17Z",
"updated_at": "2026-06-13T23:34:12Z",
"pushed_at": "2026-06-13T23:34:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-06-13T16:56:42Z",
"pushed_at": "2026-06-13T16:56:39Z",
"updated_at": "2026-06-13T23:32:42Z",
"pushed_at": "2026-06-13T23:32:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-13T16:57:54Z",
"pushed_at": "2026-06-13T16:57:51Z",
"updated_at": "2026-06-13T23:33:48Z",
"pushed_at": "2026-06-13T23:33:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-06-13T17:00:54Z",
"pushed_at": "2026-06-13T17:00:50Z",
"updated_at": "2026-06-13T23:36:36Z",
"pushed_at": "2026-06-13T23:36:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-13T16:57:58Z",
"pushed_at": "2026-06-13T16:57:54Z",
"updated_at": "2026-06-13T23:33:29Z",
"pushed_at": "2026-06-13T23:33:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-06-13T16:58:19Z",
"pushed_at": "2026-06-13T16:58:16Z",
"updated_at": "2026-06-13T23:34:16Z",
"pushed_at": "2026-06-13T23:34:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -5232,10 +5232,10 @@
"description": "React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-06T21:54:13Z",
"updated_at": "2026-06-12T07:57:54Z",
"updated_at": "2026-06-13T20:32:45Z",
"pushed_at": "2025-12-12T11:11:17Z",
"stargazers_count": 249,
"watchers_count": 249,
"stargazers_count": 250,
"watchers_count": 250,
"has_discussions": false,
"forks_count": 58,
"allow_forking": true,
@@ -5246,7 +5246,7 @@
"topics": [],
"visibility": "public",
"forks": 58,
"watchers": 249,
"watchers": 250,
"score": 0,
"subscribers_count": 3
},
@@ -12180,8 +12180,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-13T16:57:08Z",
"pushed_at": "2026-06-13T16:57:05Z",
"updated_at": "2026-06-13T23:33:01Z",
"pushed_at": "2026-06-13T23:32:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12265,8 +12265,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-06-13T16:56:21Z",
"pushed_at": "2026-06-13T16:56:17Z",
"updated_at": "2026-06-13T23:32:21Z",
"pushed_at": "2026-06-13T23:32:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12314,8 +12314,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-06-13T16:56:23Z",
"pushed_at": "2026-06-13T16:56:19Z",
"updated_at": "2026-06-13T23:32:24Z",
"pushed_at": "2026-06-13T23:32:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12399,8 +12399,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-06-13T16:57:55Z",
"pushed_at": "2026-06-13T16:57:51Z",
"updated_at": "2026-06-13T23:33:51Z",
"pushed_at": "2026-06-13T23:33:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12601,8 +12601,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-06-13T16:57:55Z",
"pushed_at": "2026-06-13T16:57:51Z",
"updated_at": "2026-06-13T23:33:59Z",
"pushed_at": "2026-06-13T23:33:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12871,8 +12871,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-13T17:02:36Z",
"pushed_at": "2026-06-13T17:02:32Z",
"updated_at": "2026-06-13T23:38:19Z",
"pushed_at": "2026-06-13T23:38:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13392,8 +13392,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-06-13T17:08:06Z",
"pushed_at": "2026-06-13T17:08:02Z",
"updated_at": "2026-06-13T23:43:35Z",
"pushed_at": "2026-06-13T23:43:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15985,5 +15985,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1268626990,
"name": "CVE-2025-55182",
"full_name": "cc3305\/CVE-2025-55182",
"owner": {
"login": "cc3305",
"id": 103961201,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4",
"html_url": "https:\/\/github.com\/cc3305",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cc3305\/CVE-2025-55182",
"description": "CVE-2025-55182 exploit script",
"fork": false,
"created_at": "2026-06-13T18:51:57Z",
"updated_at": "2026-06-13T19:00:19Z",
"pushed_at": "2026-06-13T19:00:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-06-13T17:03:07Z",
"pushed_at": "2026-06-13T17:03:02Z",
"updated_at": "2026-06-13T23:38:47Z",
"pushed_at": "2026-06-13T23:38:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-57819.json
+4 -4
View File
@@ -191,10 +191,10 @@
"description": null,
"fork": false,
"created_at": "2025-09-08T15:28:14Z",
"updated_at": "2026-06-13T12:24:00Z",
"updated_at": "2026-06-13T19:28:50Z",
"pushed_at": "2025-09-08T15:31:22Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -205,7 +205,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-06-13T17:23:23Z",
"pushed_at": "2026-06-13T17:23:19Z",
"updated_at": "2026-06-13T23:58:38Z",
"pushed_at": "2026-06-13T23:58:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-06-13T16:24:45Z",
"pushed_at": "2026-06-13T16:24:41Z",
"updated_at": "2026-06-13T23:03:01Z",
"pushed_at": "2026-06-13T23:02:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-06-13T16:52:10Z",
"pushed_at": "2026-06-13T16:52:07Z",
"updated_at": "2026-06-13T23:28:19Z",
"pushed_at": "2026-06-13T23:28:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-13T17:58:18Z",
"pushed_at": "2026-06-13T17:58:15Z",
"updated_at": "2026-06-14T00:31:48Z",
"pushed_at": "2026-06-14T00:31:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-13T16:58:42Z",
"pushed_at": "2026-06-13T16:58:39Z",
"updated_at": "2026-06-13T23:34:35Z",
"pushed_at": "2026-06-13T23:34:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-13T17:20:12Z",
"pushed_at": "2026-06-13T17:20:09Z",
"updated_at": "2026-06-13T23:55:34Z",
"pushed_at": "2026-06-13T23:55:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-13T17:46:10Z",
"pushed_at": "2026-06-13T17:46:07Z",
"updated_at": "2026-06-14T00:20:00Z",
"pushed_at": "2026-06-14T00:19:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-13T17:41:26Z",
"pushed_at": "2026-06-13T17:41:23Z",
"updated_at": "2026-06-14T00:15:54Z",
"pushed_at": "2026-06-14T00:15:50Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-06-13T16:53:21Z",
"pushed_at": "2026-06-13T16:53:17Z",
"updated_at": "2026-06-13T23:29:24Z",
"pushed_at": "2026-06-13T23:29:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+4 -4
View File
@@ -52,7 +52,7 @@
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 27,
"score": 0,
"subscribers_count": 0
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-06-13T17:02:07Z",
"pushed_at": "2026-06-13T17:02:03Z",
"updated_at": "2026-06-13T23:37:54Z",
"pushed_at": "2026-06-13T23:37:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-06-13T17:03:39Z",
"pushed_at": "2026-06-13T17:03:36Z",
"updated_at": "2026-06-13T23:39:18Z",
"pushed_at": "2026-06-13T23:39:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+4 -4
View File
@@ -326,10 +326,10 @@
"description": "An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS\/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.",
"fork": false,
"created_at": "2026-05-20T08:02:35Z",
"updated_at": "2026-06-07T18:58:46Z",
"updated_at": "2026-06-13T21:13:07Z",
"pushed_at": "2026-05-20T10:53:30Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -340,7 +340,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-13T17:41:26Z",
"pushed_at": "2026-06-13T17:41:23Z",
"updated_at": "2026-06-14T00:15:54Z",
"pushed_at": "2026-06-14T00:15:50Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-20230.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Cisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.",
"fork": false,
"created_at": "2026-06-12T19:47:29Z",
"updated_at": "2026-06-12T19:50:53Z",
"pushed_at": "2026-06-12T19:50:50Z",
"updated_at": "2026-06-13T19:20:54Z",
"pushed_at": "2026-06-13T19:14:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20253.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-12T10:04:32Z",
"updated_at": "2026-06-13T14:31:19Z",
"updated_at": "2026-06-13T18:57:56Z",
"pushed_at": "2026-06-12T10:04:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-13T17:40:47Z",
"pushed_at": "2026-06-13T17:40:43Z",
"updated_at": "2026-06-14T00:15:10Z",
"pushed_at": "2026-06-14T00:15:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-13T17:39:58Z",
"pushed_at": "2026-06-13T17:39:54Z",
"updated_at": "2026-06-14T00:14:41Z",
"pushed_at": "2026-06-14T00:14:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-06-13T17:31:25Z",
"pushed_at": "2026-06-13T17:31:21Z",
"updated_at": "2026-06-14T00:06:17Z",
"pushed_at": "2026-06-14T00:06:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-13T17:28:00Z",
"pushed_at": "2026-06-13T17:27:56Z",
"updated_at": "2026-06-14T00:03:02Z",
"pushed_at": "2026-06-14T00:02:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-13T18:00:20Z",
"pushed_at": "2026-06-13T18:00:14Z",
"updated_at": "2026-06-14T00:33:56Z",
"pushed_at": "2026-06-14T00:33:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-13T17:43:08Z",
"pushed_at": "2026-06-13T17:43:04Z",
"updated_at": "2026-06-14T00:17:29Z",
"pushed_at": "2026-06-14T00:17:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-13T17:48:23Z",
"pushed_at": "2026-06-13T17:48:19Z",
"updated_at": "2026-06-14T00:22:21Z",
"pushed_at": "2026-06-14T00:22:17Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-06-13T17:47:07Z",
"pushed_at": "2026-06-13T17:47:04Z",
"updated_at": "2026-06-14T00:21:26Z",
"pushed_at": "2026-06-14T00:21:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-27778.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1228528627,
"name": "PoC-Simulator_CVE-2026-27778",
"full_name": "KimJ6\/PoC-Simulator_CVE-2026-27778",
"owner": {
"login": "KimJ6",
"id": 125845014,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125845014?v=4",
"html_url": "https:\/\/github.com\/KimJ6",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KimJ6\/PoC-Simulator_CVE-2026-27778",
"description": "Created with StackBlitz ⚡️",
"fork": false,
"created_at": "2026-05-04T05:36:25Z",
"updated_at": "2026-05-04T06:24:57Z",
"pushed_at": "2026-05-04T06:24:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-06-13T18:04:20Z",
"pushed_at": "2026-06-13T18:04:16Z",
"updated_at": "2026-06-14T00:37:41Z",
"pushed_at": "2026-06-14T00:37:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+4 -37
View File
@@ -1651,39 +1651,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1228620276,
"name": "copy-fail-CVE-2026-31431-shell",
"full_name": "g1nt0n1x\/copy-fail-CVE-2026-31431-shell",
"owner": {
"login": "g1nt0n1x",
"id": 249065598,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249065598?v=4",
"html_url": "https:\/\/github.com\/g1nt0n1x",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/g1nt0n1x\/copy-fail-CVE-2026-31431-shell",
"description": "PoC shell exploit for CVE-2026-31431 (copy_fail) — Linux LPE via AF_ALG + splice page-cache overwrite. Single-shot, no race condition, kernel 4.9–6.18.",
"fork": false,
"created_at": "2026-05-04T07:53:33Z",
"updated_at": "2026-05-04T07:55:57Z",
"pushed_at": "2026-05-04T07:55:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228656915,
"name": "RK35xx-CopyFail-Hotfix",
@@ -2142,8 +2109,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-13T18:23:28Z",
"pushed_at": "2026-06-13T18:23:24Z",
"updated_at": "2026-06-13T21:13:01Z",
"pushed_at": "2026-06-13T21:12:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2977,8 +2944,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-13T18:24:13Z",
"pushed_at": "2026-06-13T18:24:09Z",
"updated_at": "2026-06-13T21:13:37Z",
"pushed_at": "2026-06-13T21:13:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31635.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-31635",
"fork": false,
"created_at": "2026-05-19T21:39:31Z",
"updated_at": "2026-06-05T01:27:46Z",
"updated_at": "2026-06-14T00:37:50Z",
"pushed_at": "2026-05-20T10:22:15Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-13T18:01:22Z",
"pushed_at": "2026-06-13T18:01:18Z",
"updated_at": "2026-06-14T00:34:52Z",
"pushed_at": "2026-06-14T00:34:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-35273.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-41940.json
+2 -2
View File
@@ -621,8 +621,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-13T18:24:33Z",
"pushed_at": "2026-06-13T18:24:30Z",
"updated_at": "2026-06-13T21:13:59Z",
"pushed_at": "2026-06-13T21:13:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "yellowkey bitlocker github cve download recovery key cve-2026-45585 nightmare-eclipse bypass tpm sniffing decryption tool setup guide tutorial windows 11 windows 10 error fix latest version 2026",
"fork": false,
"created_at": "2026-06-12T18:10:09Z",
"updated_at": "2026-06-13T18:09:32Z",
"updated_at": "2026-06-14T00:46:56Z",
"pushed_at": "2026-06-12T18:19:13Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -246,7 +246,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 19,
"watchers": 35,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48611.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1268261293,
"name": "CVE-2026-48611-poc",
"full_name": "citruscitruscitruscitruscitrusci\/CVE-2026-48611-poc",
"owner": {
"login": "citruscitruscitruscitruscitrusci",
"id": 236313610,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/236313610?v=4",
"html_url": "https:\/\/github.com\/citruscitruscitruscitruscitrusci",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/citruscitruscitruscitruscitrusci\/CVE-2026-48611-poc",
"description": "(phpBB authentication bypass)",
"fork": false,
"created_at": "2026-06-13T10:21:15Z",
"updated_at": "2026-06-13T21:39:19Z",
"pushed_at": "2026-06-13T10:30:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49975.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "HTTP\/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)",
"fork": false,
"created_at": "2026-06-04T06:22:54Z",
"updated_at": "2026-06-13T09:17:53Z",
"updated_at": "2026-06-13T20:45:49Z",
"pushed_at": "2026-06-04T06:23:03Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 18,
"watchers": 20,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-50751.json
+2 -2
View File
@@ -184,7 +184,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -192,7 +192,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-5950.json
+42
View File
@@ -0,0 +1,42 @@
[
{
"id": 1268800875,
"name": "cve-2026-5950-bind9-resolver-dos",
"full_name": "billybaraja\/cve-2026-5950-bind9-resolver-dos",
"owner": {
"login": "billybaraja",
"id": 195091684,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195091684?v=4",
"html_url": "https:\/\/github.com\/billybaraja",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/billybaraja\/cve-2026-5950-bind9-resolver-dos",
"description": "Defensive research notes for CVE-2026-5950, a BIND 9 resolver DoS vulnerability credited to Billy Baraja (BielraX).",
"fork": false,
"created_at": "2026-06-14T00:28:02Z",
"updated_at": "2026-06-14T00:34:17Z",
"pushed_at": "2026-06-14T00:28:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bind9",
"bug-bounty",
"cve",
"cve-2026-5950",
"dns-security",
"security-advisory"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-6379.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1228584840,
"name": "cve-2026-6379",
"full_name": "dinosn\/cve-2026-6379",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/cve-2026-6379",
"description": "Lab kit for CVE-2026-6379 — WP Photo Album Plus < 9.1.11.001 unauthenticated SQL injection. Docker lab + time-based blind PoC. For authorized security research and education.",
"fork": false,
"created_at": "2026-05-04T07:04:30Z",
"updated_at": "2026-05-04T07:06:59Z",
"pushed_at": "2026-05-04T07:04:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+31 -31
View File
@@ -545,6 +545,13 @@
- [Crihexe/v8-poc-CVE-2026-5865](https://github.com/Crihexe/v8-poc-CVE-2026-5865)
### CVE-2026-5950 (2026-05-20)
<code>An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions.\nThis issue affects BIND 9 versions 9.18.36 through 9.18.48, 9.20.8 through 9.20.22, 9.21.7 through 9.21.21, 9.18.36-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
</code>
- [billybaraja/cve-2026-5950-bind9-resolver-dos](https://github.com/billybaraja/cve-2026-5950-bind9-resolver-dos)
### CVE-2026-6009 (2026-05-19)
<code>Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
@@ -597,13 +604,6 @@
- [87achrafg-stack/CVE-2026-6279.py](https://github.com/87achrafg-stack/CVE-2026-6279.py)
- [87achrafg-stack/CVE-2026-6279](https://github.com/87achrafg-stack/CVE-2026-6279)
### CVE-2026-6379 (2026-05-18)
<code>The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
</code>
- [dinosn/cve-2026-6379](https://github.com/dinosn/cve-2026-6379)
### CVE-2026-6433 (2026-05-11)
<code>The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.
@@ -1461,13 +1461,6 @@
- [HORKimhab/CVE-2026-27771](https://github.com/HORKimhab/CVE-2026-27771)
- [portbuster1337/CVE-2026-27771](https://github.com/portbuster1337/CVE-2026-27771)
### CVE-2026-27778 (2026-03-05)
<code>The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks by suppressing or mis-routing legitimate charger telemetry, or conduct brute-force attacks to gain unauthorized access.
</code>
- [KimJ6/PoC-Simulator_CVE-2026-27778](https://github.com/KimJ6/PoC-Simulator_CVE-2026-27778)
### CVE-2026-27886 (2026-05-14)
<code>Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational fields. An unauthenticated attacker could use the `where` query parameter on any publicly-accessible content-type with an `updatedBy` (or other admin-relation) field to perform a boolean-oracle attack against private fields on the joined `admin_users` table, including the `resetPasswordToken` field. Extracting an admin reset token via this oracle made full administrative account takeover possible without authentication. When a filter such as `where[updatedBy][resetPasswordToken][$startsWith]=a` was applied to a public Content API endpoint, the underlying query generation performed a `LEFT JOIN` against the `admin_users` table and emitted a `WHERE` clause referencing the joined column. The query parameter sanitization layer did not block operator chains that traversed into relational target schemas the caller had no read permission on, allowing the response count to be used as a one-bit oracle on any admin-table field. The patch in version 5.37.0 introduces explicit query-parameter sanitization at the controller and service boundary via three new primitives: `strictParam`, `addQueryParams`, and `addBodyParams`. Operator chains that traverse into restricted relational targets are now rejected before reaching the database.
@@ -1666,7 +1659,6 @@
- [ravindercodes/copy-fail-CVE-2026-31431](https://github.com/ravindercodes/copy-fail-CVE-2026-31431)
- [samanzamani/copy-fail-checker](https://github.com/samanzamani/copy-fail-checker)
- [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe)
- [g1nt0n1x/copy-fail-CVE-2026-31431-shell](https://github.com/g1nt0n1x/copy-fail-CVE-2026-31431-shell)
- [Qengineering/RK35xx-CopyFail-Hotfix](https://github.com/Qengineering/RK35xx-CopyFail-Hotfix)
- [ShahaB108/CVE-2026-31431_Kernel_Checker](https://github.com/ShahaB108/CVE-2026-31431_Kernel_Checker)
- [xeloxa/copyfail-exploit](https://github.com/xeloxa/copyfail-exploit)
@@ -3239,6 +3231,13 @@
- [workshops-de/google_gax](https://github.com/workshops-de/google_gax)
### CVE-2026-48611 (2026-06-12)
<code>Improper authentication checks in the OAuth implementation allow account hijacking even when OAuth is not configured or enabled leading to unauthorized access in default installations.
</code>
- [citruscitruscitruscitruscitrusci/CVE-2026-48611-poc](https://github.com/citruscitruscitruscitruscitrusci/CVE-2026-48611-poc)
### CVE-2026-48710 (2026-05-26)
<code>Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope[&quot;server&quot;]` for malformed values.
@@ -11164,8 +11163,8 @@
<code>Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
</code>
- [yt2w/CVE-2025-52691](https://github.com/yt2w/CVE-2025-52691)
- [rxerium/CVE-2025-52691](https://github.com/rxerium/CVE-2025-52691)
- [Udyz/CVE-2025-52691](https://github.com/Udyz/CVE-2025-52691)
- [you-ssef9/CVE-2025-52691](https://github.com/you-ssef9/CVE-2025-52691)
- [DeathShotXD/CVE-2025-52691-APT-PoC](https://github.com/DeathShotXD/CVE-2025-52691-APT-PoC)
- [mohammadzarnian1357/Ashwesker-CVE-2025-52691](https://github.com/mohammadzarnian1357/Ashwesker-CVE-2025-52691)
@@ -12163,6 +12162,7 @@
- [TechWithOrgito/CVE-2025-55182-Researching-process](https://github.com/TechWithOrgito/CVE-2025-55182-Researching-process)
- [AkhmadKholmurodov/React2Shell_Exploit](https://github.com/AkhmadKholmurodov/React2Shell_Exploit)
- [Alejandro609x/JEFAZO-CVE-2025-55182-Checker](https://github.com/Alejandro609x/JEFAZO-CVE-2025-55182-Checker)
- [cc3305/CVE-2025-55182](https://github.com/cc3305/CVE-2025-55182)
### CVE-2025-55183 (2025-12-11)
@@ -15318,7 +15318,6 @@
- [101010zyl/CVE-2024-0582-dataonly](https://github.com/101010zyl/CVE-2024-0582-dataonly)
- [kuzeyardabulut/CVE-2024-0582](https://github.com/kuzeyardabulut/CVE-2024-0582)
- [pwnmonk/io_uring-n-day](https://github.com/pwnmonk/io_uring-n-day)
- [nanabingies/CVE-2024-0582](https://github.com/nanabingies/CVE-2024-0582)
### CVE-2024-0588 (2024-04-09)
@@ -16650,13 +16649,6 @@
- [Adikso/CVE-2024-5633](https://github.com/Adikso/CVE-2024-5633)
### CVE-2024-5716 (2024-11-22)
<code>Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164.
</code>
- [byjanke/logsign-rce](https://github.com/byjanke/logsign-rce)
### CVE-2024-5735 (2024-06-28)
<code>Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.
@@ -25904,6 +25896,13 @@
- [UnionTech-Software/libtheora-CVE-2024-56431-PoC](https://github.com/UnionTech-Software/libtheora-CVE-2024-56431-PoC)
### CVE-2024-56433 (2024-12-26)
<code>shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.
</code>
- [JonnyWhatshisface/CVE-2024-56433](https://github.com/JonnyWhatshisface/CVE-2024-56433)
### CVE-2024-56800 (2024-12-30)
<code>Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery (SSRF) vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address. This allowed exfiltration of local network resources through the API. The cloud service was patched on December 27th, 2024, and the maintainers have checked that no user data was exposed by this vulnerability. Scraping engines used in the open sourced version of Firecrawl were patched on December 29th, 2024, except for the playwright services which the maintainers have determined to be un-patchable. All users of open-source software (OSS) Firecrawl should upgrade to v1.1.1. As a workaround, OSS Firecrawl users should supply the playwright services with a secure proxy. A proxy can be specified through the `PROXY_SERVER` env in the environment variables. Please refer to the documentation for instructions. Ensure that the proxy server one is using is setup to block all traffic going to link-local IP addresses.
@@ -32333,6 +32332,7 @@
- [JayRyz/CVE-2023-38646-PoC-Metabase](https://github.com/JayRyz/CVE-2023-38646-PoC-Metabase)
- [cleanmgr112/cve-2023-38646-poc](https://github.com/cleanmgr112/cve-2023-38646-poc)
- [BreezeGalaxy/CVE-2023-38646](https://github.com/BreezeGalaxy/CVE-2023-38646)
- [NosrevytsNg/Metabase-Pre-Auth-RCE-POC](https://github.com/NosrevytsNg/Metabase-Pre-Auth-RCE-POC)
### CVE-2023-38709 (2024-04-04)
@@ -33612,13 +33612,6 @@
- [SoundarXploit/CVE-2023-44061](https://github.com/SoundarXploit/CVE-2023-44061)
### CVE-2023-44451 (2024-05-03)
<code>Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of EPUB files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-21897.
</code>
- [febinrev/slippy-book-exploit](https://github.com/febinrev/slippy-book-exploit)
### CVE-2023-44487 (2023-10-10)
<code>The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
@@ -65366,6 +65359,13 @@
- [aress31/cve-2017-12945](https://github.com/aress31/cve-2017-12945)
### CVE-2017-13077 (2017-10-17)
<code>Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
</code>
- [mugheeskhan5/wpa2-krack-lab](https://github.com/mugheeskhan5/wpa2-krack-lab)
### CVE-2017-13089 (2017-10-27)
<code>The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.