nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/10/31 19:48:33

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-11-01 04:48:34 +09:00
1 parent 007b67b54e
commit d7d14e5c2d
80 files changed
+1004 -419
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-4210.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
},
2016/CVE-2016-0638.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
},
2016/CVE-2016-5195.json
+12 -12
View File
@@ -222,10 +222,10 @@
"description": "PoC for Dirty COW (CVE-2016-5195)",
"fork": false,
"created_at": "2016-10-22T15:25:34Z",
"updated_at": "2026-10-12T04:29:44Z",
"updated_at": "2026-10-31T16:57:01Z",
"pushed_at": "2022-03-16T12:08:54Z",
"stargazers_count": 511,
"watchers_count": 511,
"stargazers_count": 510,
"watchers_count": 510,
"has_discussions": false,
"forks_count": 145,
"allow_forking": true,
@@ -236,7 +236,7 @@
"topics": [],
"visibility": "public",
"forks": 145,
"watchers": 511,
"watchers": 510,
"score": 0,
"subscribers_count": 19
},
@@ -255,10 +255,10 @@
"description": "A CVE-2016-5195 exploit example.",
"fork": false,
"created_at": "2016-10-23T00:16:33Z",
"updated_at": "2026-10-31T12:02:26Z",
"updated_at": "2026-10-31T16:49:23Z",
"pushed_at": "2017-03-21T16:46:38Z",
"stargazers_count": 342,
"watchers_count": 342,
"stargazers_count": 341,
"watchers_count": 341,
"has_discussions": false,
"forks_count": 122,
"allow_forking": true,
@@ -273,7 +273,7 @@
],
"visibility": "public",
"forks": 122,
"watchers": 342,
"watchers": 341,
"score": 0,
"subscribers_count": 13
},
@@ -457,10 +457,10 @@
"description": "Dirty Cow exploit - CVE-2016-5195",
"fork": false,
"created_at": "2016-11-25T21:08:01Z",
"updated_at": "2026-10-30T03:54:18Z",
"updated_at": "2026-10-31T16:57:55Z",
"pushed_at": "2025-07-30T11:31:24Z",
"stargazers_count": 933,
"watchers_count": 933,
"stargazers_count": 932,
"watchers_count": 932,
"has_discussions": false,
"forks_count": 424,
"allow_forking": true,
@@ -475,7 +475,7 @@
],
"visibility": "public",
"forks": 424,
"watchers": 933,
"watchers": 932,
"score": 0,
"subscribers_count": 1
},
2017/CVE-2017-0781.json
+4 -4
View File
@@ -123,10 +123,10 @@
"description": "BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability (CVE-2017-0781), and the SDP Information leak vulnerability (CVE-2017-0785) can be found. Under 'linux-bluez' exploits for the Linux-RCE vulnerability (CVE-2017-1000251) can be found (for Amazon Echo, and Samsung Gear S3). Under 'l2cap_infra' a general testing framework to send and receive raw l2cap messages (using scapy) can be found. Under 'nRF24_BDADDR_Sniffer' a tool to capture bluetooth mac addresses (BDADDR) over the air, using a nRF24L01 chip For more details on BlueBorne, you may read the full technical white paper available here: https:\/\/www.armis.com\/blueborne\/ In addition a several detailed blog posts on the exploitation of these vulnerability can be found here: https:\/\/www.armis.com\/blog\/ =============== Dependencies:",
"fork": false,
"created_at": "2020-10-12T07:21:08Z",
"updated_at": "2026-05-02T03:16:36Z",
"updated_at": "2026-10-31T14:47:33Z",
"pushed_at": "2020-11-04T16:49:05Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -137,7 +137,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2017/CVE-2017-3248.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
},
2017/CVE-2017-5753.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Example of using revealed \"Spectre\" exploit (CVE-2017-5753 and CVE-2017-5715)",
"fork": false,
"created_at": "2018-01-04T00:28:50Z",
"updated_at": "2026-10-13T16:28:43Z",
"updated_at": "2026-10-31T17:02:39Z",
"pushed_at": "2018-01-10T01:14:44Z",
"stargazers_count": 772,
"watchers_count": 772,
"stargazers_count": 773,
"watchers_count": 773,
"has_discussions": false,
"forks_count": 168,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 168,
"watchers": 772,
"watchers": 773,
"score": 0,
"subscribers_count": 40
},
2018/CVE-2018-2628.json
+4 -4
View File
@@ -546,10 +546,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -581,7 +581,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
},
2018/CVE-2018-8120.json
+1 -1
View File
@@ -67,7 +67,7 @@
"forks": 183,
"watchers": 497,
"score": 0,
"subscribers_count": 24
"subscribers_count": 20
},
{
"id": 136113184,
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-10-30T12:15:22Z",
"updated_at": "2026-10-31T16:55:11Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4295,
"watchers_count": 4295,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1078,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1078,
"watchers": 4295,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2019/CVE-2019-2618.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -247,7 +247,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
}
2019/CVE-2019-9506.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR\/EDR and BLE [CVE-2019-9506]",
"fork": false,
"created_at": "2019-08-15T11:54:21Z",
"updated_at": "2026-10-06T13:17:17Z",
"updated_at": "2026-10-31T17:19:08Z",
"pushed_at": "2022-04-04T15:16:08Z",
"stargazers_count": 189,
"watchers_count": 189,
"stargazers_count": 190,
"watchers_count": 190,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 39,
"watchers": 189,
"watchers": 190,
"score": 0,
"subscribers_count": 10
}
2020/CVE-2020-14882.json
+12 -12
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-10-30T12:15:22Z",
"updated_at": "2026-10-31T16:55:11Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4295,
"watchers_count": 4295,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1078,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1078,
"watchers": 4295,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
@@ -67,10 +67,10 @@
"description": "CVE-2020–14882、CVE-2020–14883",
"fork": false,
"created_at": "2020-10-28T11:43:37Z",
"updated_at": "2026-10-30T12:15:25Z",
"updated_at": "2026-10-31T16:57:26Z",
"pushed_at": "2020-11-16T04:23:09Z",
"stargazers_count": 287,
"watchers_count": 287,
"stargazers_count": 286,
"watchers_count": 286,
"has_discussions": false,
"forks_count": 60,
"allow_forking": true,
@@ -81,7 +81,7 @@
"topics": [],
"visibility": "public",
"forks": 60,
"watchers": 287,
"watchers": 286,
"score": 0,
"subscribers_count": 4
},
@@ -331,10 +331,10 @@
"description": "CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。",
"fork": false,
"created_at": "2020-11-03T10:49:35Z",
"updated_at": "2026-10-05T17:33:43Z",
"updated_at": "2026-10-31T16:57:26Z",
"pushed_at": "2022-03-29T02:08:45Z",
"stargazers_count": 145,
"watchers_count": 145,
"stargazers_count": 144,
"watchers_count": 144,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -345,7 +345,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 145,
"watchers": 144,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-14883.json
+4 -4
View File
@@ -148,10 +148,10 @@
"description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE",
"fork": false,
"created_at": "2021-03-11T22:49:17Z",
"updated_at": "2026-10-30T14:11:16Z",
"updated_at": "2026-10-31T16:55:31Z",
"pushed_at": "2023-05-11T14:36:58Z",
"stargazers_count": 1071,
"watchers_count": 1071,
"stargazers_count": 1070,
"watchers_count": 1070,
"has_discussions": false,
"forks_count": 312,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 312,
"watchers": 1071,
"watchers": 1070,
"score": 0,
"subscribers_count": 34
},
2020/CVE-2020-15368.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2020-15368, aka \"How to exploit a vulnerable driver\"",
"fork": false,
"created_at": "2021-06-29T04:38:24Z",
"updated_at": "2026-10-28T14:11:27Z",
"updated_at": "2026-10-31T16:52:47Z",
"pushed_at": "2022-04-14T03:17:44Z",
"stargazers_count": 516,
"watchers_count": 516,
"stargazers_count": 515,
"watchers_count": 515,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 48,
"watchers": 516,
"watchers": 515,
"score": 0,
"subscribers_count": 5
},
2020/CVE-2020-2551.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-10-25T09:43:06Z",
"updated_at": "2026-10-31T16:55:12Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2081,
"watchers_count": 2081,
"stargazers_count": 2080,
"watchers_count": 2080,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2081,
"watchers": 2080,
"score": 0,
"subscribers_count": 33
},
2020/CVE-2020-5902.json
+33
View File
@@ -1852,5 +1852,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1440939461,
"name": "cve-2020-5902",
"full_name": "yora1928\/cve-2020-5902",
"owner": {
"login": "yora1928",
"id": 293059973,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293059973?v=4",
"html_url": "https:\/\/github.com\/yora1928",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yora1928\/cve-2020-5902",
"description": "by yora cve-2020-5902",
"fork": false,
"created_at": "2026-10-31T14:31:20Z",
"updated_at": "2026-10-31T14:34:05Z",
"pushed_at": "2026-10-31T14:32:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-22204.json
+13 -3
View File
@@ -522,11 +522,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/d4ytox\/CVE-2021-22204",
"description": "ExifTool RCE exploit (CVE-2021-22204) - improved version, no exiftool dependency",
"description": "ExifTool arbitrary code execution via a crafted DjVu image (versions 7.44 to 12.23). PoC builds a pure DjVu payload with djvumake, so the attacker machine needs no vulnerable ExifTool.",
"fork": false,
"created_at": "2026-06-13T11:14:25Z",
"updated_at": "2026-10-31T11:37:12Z",
"pushed_at": "2026-10-31T11:37:08Z",
"updated_at": "2026-10-31T16:51:10Z",
"pushed_at": "2026-10-31T16:44:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -537,12 +537,22 @@
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"arbitrary-code-execution",
"code-injection",
"cve-2021-22204",
"cybersecurity",
"djvu",
"exiftool",
"exploit",
"image-exploit",
"infosec",
"pentesting",
"poc",
"proof-of-concept",
"python",
"rce",
"redteam",
"remote-code-execution",
"security"
],
"visibility": "public",
2021/CVE-2021-25646.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE",
"fork": false,
"created_at": "2021-03-11T22:49:17Z",
"updated_at": "2026-10-30T14:11:16Z",
"updated_at": "2026-10-31T16:55:31Z",
"pushed_at": "2023-05-11T14:36:58Z",
"stargazers_count": 1071,
"watchers_count": 1071,
"stargazers_count": 1070,
"watchers_count": 1070,
"has_discussions": false,
"forks_count": 312,
"allow_forking": true,
@@ -164,7 +164,7 @@
],
"visibility": "public",
"forks": 312,
"watchers": 1071,
"watchers": 1070,
"score": 0,
"subscribers_count": 34
},
2021/CVE-2021-30327.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Let's hijack our bootchain - CVE-2021-30327",
"fork": false,
"created_at": "2026-06-25T12:12:38Z",
"updated_at": "2026-10-19T23:34:54Z",
"updated_at": "2026-10-31T16:28:28Z",
"pushed_at": "2026-09-12T10:26:20Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 25,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
2021/CVE-2021-3156.json
+31 -11
View File
@@ -450,10 +450,10 @@
"description": "PoC for CVE-2021-3156 (sudo heap overflow)",
"fork": false,
"created_at": "2021-01-30T03:22:04Z",
"updated_at": "2026-10-17T14:21:37Z",
"updated_at": "2026-10-31T16:55:54Z",
"pushed_at": "2022-04-14T11:51:18Z",
"stargazers_count": 430,
"watchers_count": 430,
"stargazers_count": 429,
"watchers_count": 429,
"has_discussions": false,
"forks_count": 105,
"allow_forking": true,
@@ -464,7 +464,7 @@
"topics": [],
"visibility": "public",
"forks": 105,
"watchers": 430,
"watchers": 429,
"score": 0,
"subscribers_count": 7
},
@@ -2959,13 +2959,13 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/d4ytox\/CVE-2021-3156",
"description": null,
"description": "Baron Samedit (CVE-2021-3156): sudo heap-based buffer overflow giving local root. PoC packaged with a static\/musl launcher so it runs against older-glibc (2.31) targets.",
"fork": false,
"created_at": "2026-10-31T11:27:42Z",
"updated_at": "2026-10-31T11:30:43Z",
"pushed_at": "2026-10-31T11:30:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-10-31T16:42:10Z",
"pushed_at": "2026-10-31T16:35:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2973,10 +2973,30 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"baron-samedit",
"buffer-overflow",
"cve-2021-3156",
"cybersecurity",
"exploit",
"glibc",
"heap-overflow",
"infosec",
"linux",
"local-privilege-escalation",
"lpe",
"memory-corruption",
"poc",
"privilege-escalation",
"proof-of-concept",
"redteam",
"security",
"sudo",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-42278.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ",
"fork": false,
"created_at": "2021-12-11T15:10:30Z",
"updated_at": "2026-10-29T00:07:56Z",
"updated_at": "2026-10-31T17:06:01Z",
"pushed_at": "2022-07-10T22:23:13Z",
"stargazers_count": 1070,
"watchers_count": 1070,
"stargazers_count": 1071,
"watchers_count": 1071,
"has_discussions": false,
"forks_count": 191,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 191,
"watchers": 1070,
"watchers": 1071,
"score": 0,
"subscribers_count": 23
},
2021/CVE-2021-44228.json
+4 -4
View File
@@ -3873,10 +3873,10 @@
"description": "a fast check, if your server could be vulnerable to CVE-2021-44228",
"fork": false,
"created_at": "2021-12-13T04:14:18Z",
"updated_at": "2026-10-13T21:12:27Z",
"updated_at": "2026-10-31T13:26:02Z",
"pushed_at": "2022-01-21T11:43:49Z",
"stargazers_count": 247,
"watchers_count": 247,
"stargazers_count": 246,
"watchers_count": 246,
"has_discussions": true,
"forks_count": 83,
"allow_forking": true,
@@ -3887,7 +3887,7 @@
"topics": [],
"visibility": "public",
"forks": 83,
"watchers": 247,
"watchers": 246,
"score": 0,
"subscribers_count": 8
},
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-10-30T16:06:44Z",
"updated_at": "2026-10-31T17:55:59Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 645,
"watchers_count": 645,
"stargazers_count": 647,
"watchers_count": 647,
"has_discussions": true,
"forks_count": 90,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 90,
"watchers": 645,
"watchers": 647,
"score": 0,
"subscribers_count": 15
},
2022/CVE-2022-44384.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2022-44384 - authenticated arbitrary file upload to RCE in rConfig <= 3.9.6. Working Python 3 rewrite of the public PoC",
"fork": false,
"created_at": "2026-10-04T12:19:12Z",
"updated_at": "2026-10-30T21:27:50Z",
"pushed_at": "2026-10-04T12:33:26Z",
"updated_at": "2026-10-31T16:43:29Z",
"pushed_at": "2026-10-31T16:43:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2023/CVE-2023-21608.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit",
"fork": false,
"created_at": "2023-01-30T12:57:48Z",
"updated_at": "2026-09-12T10:39:49Z",
"updated_at": "2026-10-31T15:27:18Z",
"pushed_at": "2023-12-05T12:21:02Z",
"stargazers_count": 284,
"watchers_count": 284,
"stargazers_count": 285,
"watchers_count": 285,
"has_discussions": false,
"forks_count": 58,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 58,
"watchers": 284,
"watchers": 285,
"score": 0,
"subscribers_count": 4
},
2023/CVE-2023-45866.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1903,
"watchers_count": 1903,
"has_discussions": false,
"forks_count": 320,
"forks_count": 321,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 320,
"forks": 321,
"watchers": 1903,
"score": 0,
"subscribers_count": 30
2024/CVE-2024-1651.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.",
"fork": false,
"created_at": "2024-02-23T11:04:24Z",
"updated_at": "2026-10-13T18:57:47Z",
"updated_at": "2026-10-31T18:44:36Z",
"pushed_at": "2024-03-07T10:23:52Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-23897.json
+2 -2
View File
@@ -1680,8 +1680,8 @@
"description": "Work 1 — secure Flask REST API, three-stage CI, and CVE-2024-23897 (Jenkins CLI) analysis",
"fork": false,
"created_at": "2026-10-29T07:44:22Z",
"updated_at": "2026-10-31T13:13:12Z",
"pushed_at": "2026-10-31T13:13:08Z",
"updated_at": "2026-10-31T14:58:29Z",
"pushed_at": "2026-10-31T14:58:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-34361.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "This repository contains an exploit for CVE-2024-34361, a critical Pi-hole vulnerability (CVSS 8.6). It uses SSRF to achieve RCE by exploiting improper URL validation, allowing attackers to send arbitrary requests and execute commands on the system. Disclaimer: For educational and ethical security testing only. Unauthorized use is illegal.",
"fork": false,
"created_at": "2024-07-07T21:22:36Z",
"updated_at": "2026-10-29T11:16:35Z",
"pushed_at": "2026-10-29T11:16:32Z",
"updated_at": "2026-10-31T13:39:45Z",
"pushed_at": "2026-10-31T13:39:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-24799.json
+4 -4
View File
@@ -79,15 +79,15 @@
{
"id": 1052744729,
"name": "CVE-2025-24799",
"full_name": "Rosemary1337\/CVE-2025-24799",
"full_name": "ryhnmhrdka\/CVE-2025-24799",
"owner": {
"login": "Rosemary1337",
"login": "ryhnmhrdka",
"id": 164360967,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164360967?v=4",
"html_url": "https:\/\/github.com\/Rosemary1337",
"html_url": "https:\/\/github.com\/ryhnmhrdka",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rosemary1337\/CVE-2025-24799",
"html_url": "https:\/\/github.com\/ryhnmhrdka\/CVE-2025-24799",
"description": "CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection",
"fork": false,
"created_at": "2025-09-08T13:43:26Z",
2025/CVE-2025-29927.json
+2 -2
View File
@@ -4315,7 +4315,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -4323,7 +4323,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-10-30T09:02:25Z",
"updated_at": "2026-10-31T15:35:32Z",
"pushed_at": "2026-10-29T21:19:11Z",
"stargazers_count": 247,
"watchers_count": 247,
"stargazers_count": 248,
"watchers_count": 248,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 44,
"watchers": 247,
"watchers": 248,
"score": 0,
"subscribers_count": 4
}
2025/CVE-2025-49132.json
+4 -4
View File
@@ -713,10 +713,10 @@
"description": "CVE-2025-49132_PHP_PEAR_METHOD",
"fork": false,
"created_at": "2026-02-12T23:48:42Z",
"updated_at": "2026-04-10T09:16:06Z",
"updated_at": "2026-10-31T14:04:17Z",
"pushed_at": "2026-02-12T23:57:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -727,7 +727,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49706.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A deep dive into CVE-2025-49706 — the SharePoint spoofing flaw now exploited in the wild for stealthy web shell deployment and privilege escalation.",
"fork": false,
"created_at": "2025-07-20T13:55:28Z",
"updated_at": "2026-10-26T15:05:57Z",
"updated_at": "2026-10-31T13:51:28Z",
"pushed_at": "2025-07-20T14:06:49Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 19,
"watchers": 18,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-6934.json
+4 -4
View File
@@ -167,15 +167,15 @@
{
"id": 1052715783,
"name": "CVE-2025-6934",
"full_name": "Rosemary1337\/CVE-2025-6934",
"full_name": "ryhnmhrdka\/CVE-2025-6934",
"owner": {
"login": "Rosemary1337",
"login": "ryhnmhrdka",
"id": 164360967,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164360967?v=4",
"html_url": "https:\/\/github.com\/Rosemary1337",
"html_url": "https:\/\/github.com\/ryhnmhrdka",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rosemary1337\/CVE-2025-6934",
"html_url": "https:\/\/github.com\/ryhnmhrdka\/CVE-2025-6934",
"description": "CVE-2025-6934 - Exploit WordPress Opal Estate Pro ",
"fork": false,
"created_at": "2025-09-08T12:58:45Z",
2025/CVE-2025-8061.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.",
"fork": false,
"created_at": "2026-09-17T02:28:07Z",
"updated_at": "2026-10-25T16:49:38Z",
"updated_at": "2026-10-31T15:56:53Z",
"pushed_at": "2026-09-17T02:45:22Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-103039.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1440995251,
"name": "CVE-2026-103039",
"full_name": "noxcrypt-x\/CVE-2026-103039",
"owner": {
"login": "noxcrypt-x",
"id": 53613265,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53613265?v=4",
"html_url": "https:\/\/github.com\/noxcrypt-x",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/noxcrypt-x\/CVE-2026-103039",
"description": "CVE-2026-103039: Gravity Forms <= 3.1.2 PHP object injection to RCE. PoC by NOXCRYPT (noxcrypt-x). gen_payload.php is not included.",
"fork": false,
"created_at": "2026-10-31T15:33:32Z",
"updated_at": "2026-10-31T15:33:56Z",
"pushed_at": "2026-10-31T15:33:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-103039",
"exploit",
"gravity-forms",
"php-object-injection",
"poc",
"rce",
"security-research",
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-105950.json
+6 -2
View File
@@ -14,8 +14,8 @@
"description": "Bilingual PoC and technical analysis for CVE-2026-105950 — Formwork formaction URI sanitizer bypass",
"fork": false,
"created_at": "2026-10-13T14:02:57Z",
"updated_at": "2026-10-26T23:19:38Z",
"pushed_at": "2026-10-26T23:19:34Z",
"updated_at": "2026-10-31T17:51:59Z",
"pushed_at": "2026-10-31T17:51:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -27,9 +27,13 @@
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-105950",
"cybersecurity",
"formwork",
"poc",
"proof-of-concept",
"responsible-disclosure",
"security-research",
"vulnerability-research",
"xss"
],
2026/CVE-2026-108097.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-108924.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-108924: didactic PoC for Kirby dynamic option authorization bypass",
"fork": false,
"created_at": "2026-10-13T22:38:52Z",
"updated_at": "2026-10-13T22:39:02Z",
"pushed_at": "2026-10-13T22:38:58Z",
"updated_at": "2026-10-31T17:52:00Z",
"pushed_at": "2026-10-31T17:51:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-109618.json
+98 -65
View File
@@ -14,10 +14,10 @@
"description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619",
"fork": false,
"created_at": "2026-10-18T06:43:48Z",
"updated_at": "2026-10-31T01:08:43Z",
"updated_at": "2026-10-31T19:20:00Z",
"pushed_at": "2026-10-28T02:08:14Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
},
@@ -672,12 +672,12 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-10-31T13:47:13Z",
"updated_at": "2026-10-31T17:14:41Z",
"pushed_at": "2026-10-28T23:21:57Z",
"stargazers_count": 1914,
"watchers_count": 1914,
"stargazers_count": 1918,
"watchers_count": 1918,
"has_discussions": false,
"forks_count": 649,
"forks_count": 650,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -700,8 +700,8 @@
"wordpress-security"
],
"visibility": "public",
"forks": 649,
"watchers": 1914,
"forks": 650,
"watchers": 1918,
"score": 0,
"subscribers_count": 8
},
@@ -973,12 +973,12 @@
"description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.",
"fork": false,
"created_at": "2026-10-21T08:31:43Z",
"updated_at": "2026-10-31T10:09:37Z",
"updated_at": "2026-10-31T17:36:14Z",
"pushed_at": "2026-10-22T07:19:20Z",
"stargazers_count": 1053,
"watchers_count": 1053,
"has_discussions": false,
"forks_count": 264,
"forks_count": 265,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -986,7 +986,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 264,
"forks": 265,
"watchers": 1053,
"score": 0,
"subscribers_count": 41
@@ -1462,10 +1462,10 @@
"description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)",
"fork": false,
"created_at": "2026-10-21T10:44:37Z",
"updated_at": "2026-10-31T03:03:11Z",
"updated_at": "2026-10-31T18:25:49Z",
"pushed_at": "2026-10-22T08:15:35Z",
"stargazers_count": 63,
"watchers_count": 63,
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -1476,7 +1476,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 63,
"watchers": 64,
"score": 0,
"subscribers_count": 0
},
@@ -3241,10 +3241,10 @@
"description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.",
"fork": false,
"created_at": "2026-10-21T14:48:05Z",
"updated_at": "2026-10-30T22:06:45Z",
"updated_at": "2026-10-31T18:34:42Z",
"pushed_at": "2026-10-30T22:06:41Z",
"stargazers_count": 124,
"watchers_count": 124,
"stargazers_count": 125,
"watchers_count": 125,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -3272,7 +3272,7 @@
],
"visibility": "public",
"forks": 21,
"watchers": 124,
"watchers": 125,
"score": 0,
"subscribers_count": 3
},
@@ -7340,7 +7340,7 @@
"description": "Read-only checker for php2shell (CVE-2026-109618 \/ CVE-2026-109619): audit PHP servers and websites, no exploit payloads",
"fork": false,
"created_at": "2026-10-21T21:38:17Z",
"updated_at": "2026-10-22T05:53:51Z",
"updated_at": "2026-10-31T16:23:51Z",
"pushed_at": "2026-10-21T22:36:57Z",
"stargazers_count": 1,
"watchers_count": 1,
@@ -7708,12 +7708,12 @@
"description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.",
"fork": false,
"created_at": "2026-10-21T22:53:01Z",
"updated_at": "2026-10-31T13:46:49Z",
"updated_at": "2026-10-31T19:27:53Z",
"pushed_at": "2026-10-30T16:04:28Z",
"stargazers_count": 222,
"watchers_count": 222,
"stargazers_count": 239,
"watchers_count": 239,
"has_discussions": false,
"forks_count": 62,
"forks_count": 66,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7742,8 +7742,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 62,
"watchers": 222,
"forks": 66,
"watchers": 239,
"score": 0,
"subscribers_count": 2
},
@@ -9516,10 +9516,10 @@
"description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-22T03:53:20Z",
"updated_at": "2026-10-31T10:50:40Z",
"updated_at": "2026-10-31T15:51:23Z",
"pushed_at": "2026-10-24T03:40:18Z",
"stargazers_count": 968,
"watchers_count": 968,
"stargazers_count": 969,
"watchers_count": 969,
"has_discussions": false,
"forks_count": 143,
"allow_forking": true,
@@ -9530,7 +9530,7 @@
"topics": [],
"visibility": "public",
"forks": 143,
"watchers": 968,
"watchers": 969,
"score": 0,
"subscribers_count": 11
},
@@ -13425,12 +13425,12 @@
"description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE",
"fork": false,
"created_at": "2026-10-22T12:53:40Z",
"updated_at": "2026-10-31T01:23:31Z",
"updated_at": "2026-10-31T14:08:56Z",
"pushed_at": "2026-10-26T12:50:30Z",
"stargazers_count": 191,
"watchers_count": 191,
"stargazers_count": 193,
"watchers_count": 193,
"has_discussions": false,
"forks_count": 53,
"forks_count": 55,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -13438,8 +13438,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 191,
"forks": 55,
"watchers": 193,
"score": 0,
"subscribers_count": 1
},
@@ -15120,8 +15120,8 @@
"description": "PHP vulnerability checker for PHP2Shell (CVE-2026-109618\/109619): audits servers, Docker images & CI. Backport-aware, zero-dep.",
"fork": false,
"created_at": "2026-10-22T16:46:59Z",
"updated_at": "2026-10-23T14:49:07Z",
"pushed_at": "2026-10-29T05:36:14Z",
"updated_at": "2026-10-31T19:43:22Z",
"pushed_at": "2026-10-31T19:43:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": true,
@@ -15239,8 +15239,8 @@
"description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560",
"fork": false,
"created_at": "2026-10-22T16:51:35Z",
"updated_at": "2026-10-31T05:34:46Z",
"pushed_at": "2026-10-31T05:34:45Z",
"updated_at": "2026-10-31T17:04:57Z",
"pushed_at": "2026-10-31T17:04:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15895,8 +15895,8 @@
"description": "Interactive Bash audit & remediation tool for PHP2Shell (CVE-2026-109618\/109619). Features live Docker inspection, reversible BSI mitigations, and split-screen TUI.",
"fork": false,
"created_at": "2026-10-22T18:18:08Z",
"updated_at": "2026-10-28T20:08:04Z",
"pushed_at": "2026-10-28T20:08:00Z",
"updated_at": "2026-10-31T13:54:42Z",
"pushed_at": "2026-10-31T13:54:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -18803,7 +18803,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -18818,7 +18818,7 @@
"poc"
],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
@@ -19990,8 +19990,8 @@
"description": "Defensive checker for the PHP2Shell RCE (CVE-2026-109618\/109619): is the patch actually running, log scan back to Oct 17, WAF\/Sigma\/Suricata rules. Stdlib Python, no remote probing.",
"fork": false,
"created_at": "2026-10-23T14:26:46Z",
"updated_at": "2026-10-30T09:19:02Z",
"pushed_at": "2026-10-28T20:48:52Z",
"updated_at": "2026-10-31T15:15:57Z",
"pushed_at": "2026-10-31T15:15:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -20638,15 +20638,15 @@
{
"id": 1431401151,
"name": "php2shell-fix",
"full_name": "sanketkokate712\/php2shell-fix",
"full_name": "SanketKokate712\/php2shell-fix",
"owner": {
"login": "sanketkokate712",
"login": "SanketKokate712",
"id": 186406115,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186406115?v=4",
"html_url": "https:\/\/github.com\/sanketkokate712",
"html_url": "https:\/\/github.com\/SanketKokate712",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sanketkokate712\/php2shell-fix",
"html_url": "https:\/\/github.com\/SanketKokate712\/php2shell-fix",
"description": "Claude Code skill + scripts to find, patch and verify PHP2Shell (CVE-2026-109618, CVE-2026-109619) on any PHP server",
"fork": false,
"created_at": "2026-10-23T18:19:14Z",
@@ -21125,8 +21125,8 @@
"description": "Backport-aware PHP2Shell (CVE-2026-109618\/109619) checker for installed PHP packages; knows distro and vendor fixed builds, incl. patched PHP 5.6-8.4 for CentOS 7",
"fork": false,
"created_at": "2026-10-23T20:47:08Z",
"updated_at": "2026-10-30T11:53:13Z",
"pushed_at": "2026-10-30T11:53:08Z",
"updated_at": "2026-10-31T14:50:23Z",
"pushed_at": "2026-10-31T14:50:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -23256,8 +23256,8 @@
},
{
"id": 1433182777,
"name": "php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free",
"full_name": "catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free",
"name": "php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched",
"full_name": "catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched",
"owner": {
"login": "catscarlet",
"id": 10594035,
@@ -23265,12 +23265,12 @@
"html_url": "https:\/\/github.com\/catscarlet",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free",
"html_url": "https:\/\/github.com\/catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched",
"description": "This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**.",
"fork": false,
"created_at": "2026-10-25T12:38:45Z",
"updated_at": "2026-10-31T13:49:46Z",
"pushed_at": "2026-10-31T13:45:26Z",
"updated_at": "2026-10-31T14:21:11Z",
"pushed_at": "2026-10-31T14:21:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -26510,8 +26510,8 @@
"description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.",
"fork": false,
"created_at": "2026-10-30T21:46:32Z",
"updated_at": "2026-10-31T13:34:58Z",
"pushed_at": "2026-10-31T13:34:54Z",
"updated_at": "2026-10-31T15:09:07Z",
"pushed_at": "2026-10-31T15:17:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -26635,10 +26635,10 @@
"description": "PHP 8.1.34 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.",
"fork": false,
"created_at": "2026-10-31T08:47:24Z",
"updated_at": "2026-10-31T13:17:58Z",
"updated_at": "2026-10-31T15:48:39Z",
"pushed_at": "2026-10-31T11:44:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -26661,7 +26661,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -26743,5 +26743,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1440993680,
"name": "php2shell-ubuntu",
"full_name": "marceloaugu\/php2shell-ubuntu",
"owner": {
"login": "marceloaugu",
"id": 62657718,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62657718?v=4",
"html_url": "https:\/\/github.com\/marceloaugu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/marceloaugu\/php2shell-ubuntu",
"description": "Analisa e corrige as vulnerabilidades php2shell do PHP (CVE-2026-109618 e CVE-2026-109619) no Ubuntu",
"fork": false,
"created_at": "2026-10-31T15:31:49Z",
"updated_at": "2026-10-31T15:40:14Z",
"pushed_at": "2026-10-31T15:40:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-110025.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE",
"fork": false,
"created_at": "2026-10-13T22:45:00Z",
"updated_at": "2026-10-26T23:19:41Z",
"pushed_at": "2026-10-26T23:19:37Z",
"updated_at": "2026-10-31T17:52:01Z",
"pushed_at": "2026-10-31T17:51:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111497.json
+10 -10
View File
@@ -1357,10 +1357,10 @@
"description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-25T04:23:54Z",
"updated_at": "2026-10-29T07:28:19Z",
"updated_at": "2026-10-31T13:51:24Z",
"pushed_at": "2026-10-25T04:24:27Z",
"stargazers_count": 85,
"watchers_count": 85,
"stargazers_count": 84,
"watchers_count": 84,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -1371,7 +1371,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 85,
"watchers": 84,
"score": 0,
"subscribers_count": 1
},
@@ -1530,8 +1530,8 @@
"description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds",
"fork": false,
"created_at": "2026-10-25T17:23:52Z",
"updated_at": "2026-10-28T07:46:25Z",
"pushed_at": "2026-10-27T01:00:17Z",
"updated_at": "2026-10-31T19:49:49Z",
"pushed_at": "2026-10-31T19:49:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2300,8 +2300,8 @@
"description": "WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write).",
"fork": false,
"created_at": "2026-10-27T19:53:45Z",
"updated_at": "2026-10-29T21:02:10Z",
"pushed_at": "2026-10-27T19:54:24Z",
"updated_at": "2026-10-31T18:05:07Z",
"pushed_at": "2026-10-31T18:05:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2333,8 +2333,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-28T06:45:04Z",
"updated_at": "2026-10-30T10:45:29Z",
"pushed_at": "2026-10-30T10:45:25Z",
"updated_at": "2026-10-31T14:16:18Z",
"pushed_at": "2026-10-31T14:16:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111585.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1440944113,
"name": "CVE-2026-111585",
"full_name": "googlesky\/CVE-2026-111585",
"owner": {
"login": "googlesky",
"id": 4094347,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4",
"html_url": "https:\/\/github.com\/googlesky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/googlesky\/CVE-2026-111585",
"description": "CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable\/fixed differential evidence.",
"fork": false,
"created_at": "2026-10-31T14:36:35Z",
"updated_at": "2026-10-31T14:36:59Z",
"pushed_at": "2026-10-31T14:37:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-112445.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-112445: The Simplest macOS Local Privilege Escalation to Date",
"fork": false,
"created_at": "2026-10-29T04:45:44Z",
"updated_at": "2026-10-31T05:06:41Z",
"updated_at": "2026-10-31T15:34:29Z",
"pushed_at": "2026-10-29T04:48:06Z",
"stargazers_count": 45,
"watchers_count": 45,
"stargazers_count": 46,
"watchers_count": 46,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 45,
"watchers": 46,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-112487.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441124625,
"name": "CVE-2026-112487",
"full_name": "Lyutoon\/CVE-2026-112487",
"owner": {
"login": "Lyutoon",
"id": 57178900,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57178900?v=4",
"html_url": "https:\/\/github.com\/Lyutoon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lyutoon\/CVE-2026-112487",
"description": "macOS revisiond local privilege escalation to root (CVE-2026-112487)",
"fork": false,
"created_at": "2026-10-31T18:04:33Z",
"updated_at": "2026-10-31T18:11:38Z",
"pushed_at": "2026-10-31T18:11:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-112705.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif \/ Chollima team.",
"fork": false,
"created_at": "2026-10-30T09:29:03Z",
"updated_at": "2026-10-31T12:02:41Z",
"updated_at": "2026-10-31T15:45:06Z",
"pushed_at": "2026-10-30T10:06:16Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 34,
"forks": 9,
"watchers": 35,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-112816.json
+68
View File
@@ -0,0 +1,68 @@
[
{
"id": 1441034675,
"name": "cve-2026-112816",
"full_name": "dehasoft-tr\/cve-2026-112816",
"owner": {
"login": "dehasoft-tr",
"id": 81747972,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81747972?v=4",
"html_url": "https:\/\/github.com\/dehasoft-tr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dehasoft-tr\/cve-2026-112816",
"description": null,
"fork": false,
"created_at": "2026-10-31T16:18:52Z",
"updated_at": "2026-10-31T16:33:19Z",
"pushed_at": "2026-10-31T16:33:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441041643,
"name": "cve-2026-112816",
"full_name": "Sotrano-dev\/cve-2026-112816",
"owner": {
"login": "Sotrano-dev",
"id": 178072659,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178072659?v=4",
"html_url": "https:\/\/github.com\/Sotrano-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sotrano-dev\/cve-2026-112816",
"description": null,
"fork": false,
"created_at": "2026-10-31T16:26:55Z",
"updated_at": "2026-10-31T16:27:04Z",
"pushed_at": "2026-10-31T16:27:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-115905.json
+2 -2
View File
@@ -56,8 +56,8 @@
"description": "Live demo: the same vulnerable Rust zip crate (RUSTSEC-2026-0367 setuid + CVE-2026-115905 zip cloaking) contained by a deny-by-default Cosmonic WebAssembly sandbox.",
"fork": false,
"created_at": "2026-10-28T21:31:02Z",
"updated_at": "2026-10-31T12:49:32Z",
"pushed_at": "2026-10-31T12:49:28Z",
"updated_at": "2026-10-31T14:31:40Z",
"pushed_at": "2026-10-31T14:31:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-115925.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-29T18:40:27Z",
"updated_at": "2026-10-29T18:48:47Z",
"pushed_at": "2026-10-29T18:48:43Z",
"updated_at": "2026-10-31T19:27:16Z",
"pushed_at": "2026-10-31T19:27:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-115926.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-29T18:44:49Z",
"updated_at": "2026-10-29T19:18:48Z",
"pushed_at": "2026-10-29T19:18:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-10-31T19:26:30Z",
"pushed_at": "2026-10-31T19:26:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-116000.json
+6 -2
View File
@@ -14,8 +14,8 @@
"description": "Safe PoC and technical analysis for CVE-2026-116000",
"fork": false,
"created_at": "2026-10-26T23:13:23Z",
"updated_at": "2026-10-26T23:45:16Z",
"pushed_at": "2026-10-26T23:45:12Z",
"updated_at": "2026-10-31T17:52:02Z",
"pushed_at": "2026-10-31T17:51:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -27,8 +27,12 @@
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-116000",
"poc",
"privategpt",
"proof-of-concept",
"responsible-disclosure",
"security-research",
"ssrf",
"vulnerability-research"
],
2026/CVE-2026-116004.json
+6 -2
View File
@@ -14,8 +14,8 @@
"description": "Safe PoC and technical analysis for CVE-2026-116004",
"fork": false,
"created_at": "2026-10-26T23:13:31Z",
"updated_at": "2026-10-26T23:45:19Z",
"pushed_at": "2026-10-26T23:45:15Z",
"updated_at": "2026-10-31T17:52:04Z",
"pushed_at": "2026-10-31T17:51:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -27,8 +27,12 @@
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-116004",
"iframe",
"poc",
"proof-of-concept",
"responsible-disclosure",
"security-research",
"vulnerability-research",
"xss"
],
2026/CVE-2026-120218.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1441108594,
"name": "CVE-2026-120218",
"full_name": "capivara-research\/CVE-2026-120218",
"owner": {
"login": "capivara-research",
"id": 287438663,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4",
"html_url": "https:\/\/github.com\/capivara-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-120218",
"description": "CVE-2026-120218: bilingual TypeMill stored XSS analysis and safe SVG\/XSLT PoC",
"fork": false,
"created_at": "2026-10-31T17:45:25Z",
"updated_at": "2026-10-31T17:58:32Z",
"pushed_at": "2026-10-31T17:58:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-120218",
"cwe-79",
"proof-of-concept",
"responsible-disclosure",
"security-research",
"stored-xss",
"svg",
"typemill",
"xslt"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-18649.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441194745,
"name": "cve-2026-18649",
"full_name": "C3viche\/cve-2026-18649",
"owner": {
"login": "C3viche",
"id": 28328104,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28328104?v=4",
"html_url": "https:\/\/github.com\/C3viche",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/C3viche\/cve-2026-18649",
"description": "GStreamer RTP Depayloader Memory Exhaustion Analysis",
"fork": false,
"created_at": "2026-10-31T19:37:00Z",
"updated_at": "2026-10-31T19:38:34Z",
"pushed_at": "2026-10-31T19:38:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-21858.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 303,
"watchers_count": 303,
"has_discussions": false,
"forks_count": 58,
"forks_count": 60,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,7 +36,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 58,
"forks": 60,
"watchers": 303,
"score": 0,
"subscribers_count": 4
2026/CVE-2026-27912.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-10-20T16:49:26Z",
"updated_at": "2026-10-31T19:38:11Z",
"pushed_at": "2026-08-20T16:44:53Z",
"stargazers_count": 223,
"watchers_count": 223,
"stargazers_count": 224,
"watchers_count": 224,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 223,
"watchers": 224,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-32202.json
+4 -4
View File
@@ -68,15 +68,15 @@
{
"id": 1276192069,
"name": "CVE-2026-32202",
"full_name": "f0xox\/CVE-2026-32202",
"full_name": "foxfxfxx\/CVE-2026-32202",
"owner": {
"login": "f0xox",
"login": "foxfxfxx",
"id": 235265419,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235265419?v=4",
"html_url": "https:\/\/github.com\/f0xox",
"html_url": "https:\/\/github.com\/foxfxfxx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/f0xox\/CVE-2026-32202",
"html_url": "https:\/\/github.com\/foxfxfxx\/CVE-2026-32202",
"description": null,
"fork": false,
"created_at": "2026-06-21T16:51:33Z",
2026/CVE-2026-36425.json
+39
View File
@@ -70,5 +70,44 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1440956565,
"name": "whatsapp-valleyrat-analysis",
"full_name": "MacAwad\/whatsapp-valleyrat-analysis",
"owner": {
"login": "MacAwad",
"id": 266111379,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266111379?v=4",
"html_url": "https:\/\/github.com\/MacAwad",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MacAwad\/whatsapp-valleyrat-analysis",
"description": "WhatsApp-delivered Winos 4.0 \/ ValleyRAT stager: DLL sideloading, BYOVD Defender kill (CVE-2026-36425), custom C2 protocol on TCP 443, and previously unreported C2 infrastructure.",
"fork": false,
"created_at": "2026-10-31T14:50:14Z",
"updated_at": "2026-10-31T15:20:22Z",
"pushed_at": "2026-10-31T15:20:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"byovd",
"dfir",
"malware-analysis",
"threat-intelligence",
"valleyrat"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-39808.json
+2 -2
View File
@@ -224,7 +224,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -232,7 +232,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43284.json
+6 -6
View File
@@ -1383,12 +1383,12 @@
"description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.",
"fork": false,
"created_at": "2026-10-02T18:29:26Z",
"updated_at": "2026-10-31T04:13:46Z",
"updated_at": "2026-10-31T17:40:28Z",
"pushed_at": "2026-10-05T15:01:25Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 26,
"forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1396,8 +1396,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 26,
"watchers": 59,
"forks": 27,
"watchers": 61,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-43499.json
+36 -36
View File
@@ -183,10 +183,10 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-10-30T12:27:03Z",
"updated_at": "2026-10-31T13:47:57Z",
"pushed_at": "2026-10-30T06:00:18Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 27,
"allow_forking": true,
@@ -210,7 +210,7 @@
],
"visibility": "public",
"forks": 27,
"watchers": 67,
"watchers": 68,
"score": 0,
"subscribers_count": 1
},
@@ -366,7 +366,7 @@
"stargazers_count": 439,
"watchers_count": 439,
"has_discussions": false,
"forks_count": 94,
"forks_count": 93,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -381,7 +381,7 @@
"root"
],
"visibility": "public",
"forks": 94,
"forks": 93,
"watchers": 439,
"score": 0,
"subscribers_count": 14
@@ -995,12 +995,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-10-31T11:33:11Z",
"updated_at": "2026-10-31T16:20:09Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1515,
"watchers_count": 1515,
"has_discussions": false,
"forks_count": 303,
"forks_count": 302,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1008,7 +1008,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 303,
"forks": 302,
"watchers": 1515,
"score": 0,
"subscribers_count": 46
@@ -1676,12 +1676,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-31T13:33:22Z",
"updated_at": "2026-10-31T18:01:45Z",
"pushed_at": "2026-10-27T12:02:30Z",
"stargazers_count": 2445,
"watchers_count": 2445,
"stargazers_count": 2455,
"watchers_count": 2455,
"has_discussions": true,
"forks_count": 596,
"forks_count": 599,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1689,8 +1689,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 596,
"watchers": 2445,
"forks": 599,
"watchers": 2455,
"score": 0,
"subscribers_count": 44
},
@@ -2044,10 +2044,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-10-31T07:23:00Z",
"updated_at": "2026-10-31T19:28:41Z",
"pushed_at": "2026-09-13T16:31:27Z",
"stargazers_count": 481,
"watchers_count": 481,
"stargazers_count": 482,
"watchers_count": 482,
"has_discussions": false,
"forks_count": 72,
"allow_forking": true,
@@ -2065,7 +2065,7 @@
],
"visibility": "public",
"forks": 72,
"watchers": 481,
"watchers": 482,
"score": 0,
"subscribers_count": 8
},
@@ -2612,7 +2612,7 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-10-30T07:35:53Z",
"updated_at": "2026-10-31T16:54:44Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 59,
"watchers_count": 59,
@@ -2788,10 +2788,10 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-10-31T10:26:50Z",
"updated_at": "2026-10-31T13:57:04Z",
"pushed_at": "2026-10-02T08:20:25Z",
"stargazers_count": 272,
"watchers_count": 272,
"stargazers_count": 273,
"watchers_count": 273,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -2802,7 +2802,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 272,
"watchers": 273,
"score": 0,
"subscribers_count": 1
},
@@ -2920,8 +2920,8 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-10-31T09:31:21Z",
"pushed_at": "2026-10-31T09:21:06Z",
"updated_at": "2026-10-31T14:08:45Z",
"pushed_at": "2026-10-31T15:20:59Z",
"stargazers_count": 98,
"watchers_count": 98,
"has_discussions": false,
@@ -2968,10 +2968,10 @@
"description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices",
"fork": false,
"created_at": "2026-08-17T16:57:57Z",
"updated_at": "2026-10-29T13:28:10Z",
"updated_at": "2026-10-31T15:33:22Z",
"pushed_at": "2026-10-24T13:35:00Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -2982,7 +2982,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 51,
"watchers": 53,
"score": 0,
"subscribers_count": 2
},
@@ -3397,10 +3397,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-10-31T06:41:49Z",
"updated_at": "2026-10-31T15:45:05Z",
"pushed_at": "2026-10-23T06:52:34Z",
"stargazers_count": 87,
"watchers_count": 87,
"stargazers_count": 88,
"watchers_count": 88,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -3411,7 +3411,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 87,
"watchers": 88,
"score": 0,
"subscribers_count": 0
},
@@ -5566,8 +5566,8 @@
"description": "GhostLock (CVE-2026-43499) PC-side driver for iQOO Neo9 (PD2338): boot-window campaign over adb, temporary root via KernelSU late-load. One bash script + one payload pack.",
"fork": false,
"created_at": "2026-10-17T20:56:33Z",
"updated_at": "2026-10-30T15:41:13Z",
"pushed_at": "2026-10-30T15:41:09Z",
"updated_at": "2026-10-31T14:55:02Z",
"pushed_at": "2026-10-31T14:55:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-43664.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "AirPods Bluetooth MAC Address Disclosure via NSUserDefaults",
"fork": false,
"created_at": "2026-10-28T10:50:39Z",
"updated_at": "2026-10-30T15:55:14Z",
"updated_at": "2026-10-31T17:09:22Z",
"pushed_at": "2026-10-29T09:28:15Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 12,
"forks": 1,
"watchers": 13,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-58882.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441183102,
"name": "WapGuard",
"full_name": "Ignema\/WapGuard",
"owner": {
"login": "Ignema",
"id": 58748389,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58748389?v=4",
"html_url": "https:\/\/github.com\/Ignema",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ignema\/WapGuard",
"description": "Tiny Shizuku app that clears stuck 'SMS of Death' (CVE-2026-58882) WAP Push messages. Material 3 Expressive.",
"fork": false,
"created_at": "2026-10-31T19:20:57Z",
"updated_at": "2026-10-31T19:24:41Z",
"pushed_at": "2026-10-31T19:25:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-59310.json
+4 -4
View File
@@ -84,10 +84,10 @@
"description": "CVE-2026-59310-POC 仅用于自测，请勿用于攻击",
"fork": false,
"created_at": "2026-09-25T16:05:26Z",
"updated_at": "2026-10-25T14:12:08Z",
"updated_at": "2026-10-31T16:14:43Z",
"pushed_at": "2026-09-25T16:12:44Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 809,
"watchers_count": 809,
"has_discussions": false,
"forks_count": 186,
"forks_count": 187,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 186,
"forks": 187,
"watchers": 809,
"score": 0,
"subscribers_count": 3
2026/CVE-2026-63686.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-63686 demo",
"fork": false,
"created_at": "2026-10-31T08:33:10Z",
"updated_at": "2026-10-31T11:27:48Z",
"updated_at": "2026-10-31T14:43:19Z",
"pushed_at": "2026-10-31T11:18:18Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-64560.json
+7 -7
View File
@@ -564,12 +564,12 @@
"description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM",
"fork": false,
"created_at": "2026-10-20T09:43:06Z",
"updated_at": "2026-10-31T08:02:03Z",
"pushed_at": "2026-10-30T11:38:26Z",
"stargazers_count": 19,
"watchers_count": 19,
"updated_at": "2026-10-31T15:55:40Z",
"pushed_at": "2026-10-31T15:55:34Z",
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -577,8 +577,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 19,
"forks": 8,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-77396.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441079232,
"name": "CVE-2026-77396",
"full_name": "saretawa\/CVE-2026-77396",
"owner": {
"login": "saretawa",
"id": 68328156,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68328156?v=4",
"html_url": "https:\/\/github.com\/saretawa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/saretawa\/CVE-2026-77396",
"description": null,
"fork": false,
"created_at": "2026-10-31T17:10:20Z",
"updated_at": "2026-10-31T17:10:31Z",
"pushed_at": "2026-10-31T17:10:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-84383.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker lab for validating CVE-2026-84383 in libheif through Discourse",
"fork": false,
"created_at": "2026-09-29T17:40:08Z",
"updated_at": "2026-10-20T16:49:49Z",
"updated_at": "2026-10-31T14:44:59Z",
"pushed_at": "2026-09-29T17:54:51Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-88771.json
+1 -1
View File
@@ -113,7 +113,7 @@
"description": "Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174, CTX697191 (SAML RCE) and CTX697263 php2shell (fixed in 14.1-73.49 \/ 13.1-64.32): build, CVE preconditions, SAML, mgmt exposure, MFA, upgrade risks + IoC sweep with every public IoC (webshells, implants, 133 attacker IPs).",
"fork": false,
"created_at": "2026-09-28T11:20:30Z",
"updated_at": "2026-10-29T19:42:30Z",
"updated_at": "2026-10-31T17:38:52Z",
"pushed_at": "2026-10-27T21:30:47Z",
"stargazers_count": 22,
"watchers_count": 22,
2026/CVE-2026-89633.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441073595,
"name": "CVE-2026-89633",
"full_name": "woshigenm\/CVE-2026-89633",
"owner": {
"login": "woshigenm",
"id": 99122353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4",
"html_url": "https:\/\/github.com\/woshigenm",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-89633",
"description": null,
"fork": false,
"created_at": "2026-10-31T17:03:47Z",
"updated_at": "2026-10-31T18:20:23Z",
"pushed_at": "2026-10-31T17:35:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-90931.json
+5 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC",
"fork": false,
"created_at": "2026-10-26T23:39:24Z",
"updated_at": "2026-10-26T23:40:26Z",
"pushed_at": "2026-10-26T23:39:30Z",
"updated_at": "2026-10-31T17:52:06Z",
"pushed_at": "2026-10-31T17:51:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -27,9 +27,12 @@
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-90931",
"cybersecurity",
"laradashboard",
"proof-of-concept",
"responsible-disclosure",
"security-research",
"xss"
],
"visibility": "public",
2026/CVE-2026-90932.json
+6 -3
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion\/write — bilingual analysis and safe PoC",
"fork": false,
"created_at": "2026-10-26T23:39:32Z",
"updated_at": "2026-10-26T23:44:21Z",
"pushed_at": "2026-10-26T23:39:38Z",
"updated_at": "2026-10-31T17:52:07Z",
"pushed_at": "2026-10-31T17:51:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -27,10 +27,13 @@
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-90932",
"cybersecurity",
"laradashboard",
"path-traversal",
"proof-of-concept"
"proof-of-concept",
"responsible-disclosure",
"security-research"
],
"visibility": "public",
"forks": 1,
2026/CVE-2026-92424.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-29T19:06:54Z",
"updated_at": "2026-10-29T19:07:40Z",
"pushed_at": "2026-10-29T19:07:36Z",
"updated_at": "2026-10-31T19:29:23Z",
"pushed_at": "2026-10-31T19:29:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-96652.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 103,
"watchers_count": 103,
"has_discussions": false,
"forks_count": 16,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 16,
"forks": 17,
"watchers": 103,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-97206.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-22T07:12:04Z",
"updated_at": "2026-10-29T17:24:28Z",
"pushed_at": "2026-10-29T17:24:23Z",
"updated_at": "2026-10-31T14:17:01Z",
"pushed_at": "2026-10-31T14:16:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-97229.json
+6 -6
View File
@@ -52,7 +52,7 @@
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 11,
"watchers": 65,
"score": 0,
"subscribers_count": 0
@@ -80,10 +80,10 @@
"description": "CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering",
"fork": false,
"created_at": "2026-10-17T18:03:59Z",
"updated_at": "2026-10-26T08:51:03Z",
"updated_at": "2026-10-31T17:49:56Z",
"pushed_at": "2026-10-19T00:41:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98260.json
+37 -37
View File
@@ -52,7 +52,7 @@
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 16,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 16,
"forks": 18,
"watchers": 40,
"score": 0,
"subscribers_count": 0
@@ -146,7 +146,7 @@
"description": "CVE-2026-98260 temporary root for HONOR Win2 BRM-AN00, handed to BakaSU. No flashing.",
"fork": false,
"created_at": "2026-10-24T18:14:12Z",
"updated_at": "2026-10-27T19:44:07Z",
"updated_at": "2026-10-31T15:47:07Z",
"pushed_at": "2026-10-24T18:16:47Z",
"stargazers_count": 1,
"watchers_count": 1,
@@ -179,8 +179,8 @@
"description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)",
"fork": false,
"created_at": "2026-10-25T12:51:04Z",
"updated_at": "2026-10-30T09:51:50Z",
"pushed_at": "2026-10-25T19:06:56Z",
"updated_at": "2026-10-31T19:33:45Z",
"pushed_at": "2026-10-31T19:33:42Z",
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
@@ -376,10 +376,10 @@
"description": "REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。",
"fork": false,
"created_at": "2026-10-26T09:25:45Z",
"updated_at": "2026-10-31T05:09:02Z",
"updated_at": "2026-10-31T18:32:06Z",
"pushed_at": "2026-10-31T05:08:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -390,7 +390,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -409,10 +409,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-26T09:32:43Z",
"updated_at": "2026-10-31T12:37:07Z",
"updated_at": "2026-10-31T16:41:26Z",
"pushed_at": "2026-10-26T09:50:29Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -423,7 +423,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 38,
"watchers": 39,
"score": 0,
"subscribers_count": 0
},
@@ -552,10 +552,10 @@
"description": "6.12.69-android16-6-g242e1a07f878",
"fork": false,
"created_at": "2026-10-27T12:53:47Z",
"updated_at": "2026-10-31T08:47:54Z",
"updated_at": "2026-10-31T16:45:27Z",
"pushed_at": "2026-10-27T14:13:02Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -566,7 +566,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 36,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
@@ -730,8 +730,8 @@
"description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md",
"fork": false,
"created_at": "2026-10-28T16:54:41Z",
"updated_at": "2026-10-31T03:49:53Z",
"pushed_at": "2026-10-31T03:49:49Z",
"updated_at": "2026-10-31T16:00:19Z",
"pushed_at": "2026-10-31T16:00:14Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -768,7 +768,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -776,7 +776,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
@@ -796,12 +796,12 @@
"description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）",
"fork": false,
"created_at": "2026-10-29T05:12:04Z",
"updated_at": "2026-10-31T11:33:18Z",
"updated_at": "2026-10-31T18:57:05Z",
"pushed_at": "2026-10-29T05:13:36Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -809,8 +809,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 37,
"forks": 22,
"watchers": 39,
"score": 0,
"subscribers_count": 0
},
@@ -829,12 +829,12 @@
"description": "CVE 2026 98260 vivo x fold6 poc",
"fork": false,
"created_at": "2026-10-29T09:36:16Z",
"updated_at": "2026-10-31T04:13:51Z",
"updated_at": "2026-10-31T16:38:51Z",
"pushed_at": "2026-10-29T09:47:49Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -842,8 +842,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -910,10 +910,10 @@
"description": "Verified CVE-2026-98260 Android port for Xiaomi 15 dada OS4.0.0.22.XOCCNXM",
"fork": false,
"created_at": "2026-10-29T13:48:03Z",
"updated_at": "2026-10-29T13:56:14Z",
"updated_at": "2026-10-31T15:01:06Z",
"pushed_at": "2026-10-29T13:56:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -924,7 +924,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98432.json
+97 -31
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-29T14:58:31Z",
"updated_at": "2026-10-30T10:56:40Z",
"pushed_at": "2026-10-30T10:56:36Z",
"updated_at": "2026-10-31T14:18:25Z",
"pushed_at": "2026-10-31T14:18:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -218,12 +218,12 @@
"description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).",
"fork": false,
"created_at": "2026-10-30T00:22:53Z",
"updated_at": "2026-10-31T10:37:19Z",
"updated_at": "2026-10-31T16:18:04Z",
"pushed_at": "2026-10-31T06:38:04Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -238,7 +238,7 @@
"use-after-free"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 0
@@ -473,12 +473,12 @@
"description": "Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP use-after-free (CVSS 9.8).",
"fork": false,
"created_at": "2026-10-30T09:56:32Z",
"updated_at": "2026-10-30T10:35:56Z",
"updated_at": "2026-10-31T16:08:47Z",
"pushed_at": "2026-10-30T10:19:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -505,8 +505,8 @@
"vulnerability-detection"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -525,12 +525,12 @@
"description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.",
"fork": false,
"created_at": "2026-10-30T13:11:26Z",
"updated_at": "2026-10-31T12:05:34Z",
"updated_at": "2026-10-31T16:55:01Z",
"pushed_at": "2026-10-30T13:51:44Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -553,8 +553,8 @@
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -606,10 +606,10 @@
"description": "You should patch, but not worry about CVE-2026-98432",
"fork": false,
"created_at": "2026-10-30T15:38:53Z",
"updated_at": "2026-10-31T12:07:12Z",
"updated_at": "2026-10-31T14:47:09Z",
"pushed_at": "2026-10-30T16:10:03Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -620,7 +620,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -672,10 +672,10 @@
"description": "Proof-only PoC for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution",
"fork": false,
"created_at": "2026-10-30T16:36:43Z",
"updated_at": "2026-10-31T11:30:35Z",
"updated_at": "2026-10-31T18:39:01Z",
"pushed_at": "2026-10-30T16:40:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -692,7 +692,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -1055,8 +1055,8 @@
"description": "Check an Ubuntu host for CVE-2026-98432 and, after you confirm, apply the interim Red Hat RHSB-2026-016 mitigation. Ubuntu 20.04 to 26.10.",
"fork": false,
"created_at": "2026-10-31T10:34:49Z",
"updated_at": "2026-10-31T10:38:29Z",
"pushed_at": "2026-10-31T10:38:26Z",
"updated_at": "2026-10-31T17:03:37Z",
"pushed_at": "2026-10-31T17:03:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1088,8 +1088,8 @@
"description": "eBPF (XDP\/tc) mitigation for CVE-2026-98432 \/ RHSB-2026-016 - untested draft",
"fork": false,
"created_at": "2026-10-31T11:25:56Z",
"updated_at": "2026-10-31T13:26:10Z",
"pushed_at": "2026-10-31T13:26:06Z",
"updated_at": "2026-10-31T19:06:03Z",
"pushed_at": "2026-10-31T19:06:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1121,8 +1121,74 @@
"description": null,
"fork": false,
"created_at": "2026-10-31T13:14:39Z",
"updated_at": "2026-10-31T13:43:29Z",
"pushed_at": "2026-10-31T13:43:26Z",
"updated_at": "2026-10-31T14:48:59Z",
"pushed_at": "2026-10-31T14:48:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441002171,
"name": "debian-cve-2026-98432-fix",
"full_name": "AronWang001\/debian-cve-2026-98432-fix",
"owner": {
"login": "AronWang001",
"id": 260259579,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260259579?v=4",
"html_url": "https:\/\/github.com\/AronWang001",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AronWang001\/debian-cve-2026-98432-fix",
"description": "One-click kernel security update for CVE-2026-98432 on Debian 12\/13.",
"fork": false,
"created_at": "2026-10-31T15:41:12Z",
"updated_at": "2026-10-31T19:22:36Z",
"pushed_at": "2026-10-31T19:28:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441022553,
"name": "CVE-2026-98432",
"full_name": "googlesky\/CVE-2026-98432",
"owner": {
"login": "googlesky",
"id": 4094347,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4",
"html_url": "https:\/\/github.com\/googlesky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/googlesky\/CVE-2026-98432",
"description": "PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt\/ireq_opt use-after-free, CVSS 9.8): KASAN-verified UAF reproduction in inet_csk_route_req with A\/B fixed-kernel control",
"fork": false,
"created_at": "2026-10-31T16:04:50Z",
"updated_at": "2026-10-31T16:10:28Z",
"pushed_at": "2026-10-31T16:10:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,