From d7d14e5c2d95ab9566c44edab9030b0c07c8bbc2 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sun, 1 Nov 2026 04:48:34 +0900 Subject: [PATCH] Auto Update 2026/10/31 19:48:33 --- 2014/CVE-2014-4210.json | 8 +- 2016/CVE-2016-0638.json | 8 +- 2016/CVE-2016-5195.json | 24 +++--- 2017/CVE-2017-0781.json | 8 +- 2017/CVE-2017-3248.json | 8 +- 2017/CVE-2017-5753.json | 8 +- 2018/CVE-2018-2628.json | 8 +- 2018/CVE-2018-8120.json | 2 +- 2019/CVE-2019-17558.json | 8 +- 2019/CVE-2019-2618.json | 8 +- 2019/CVE-2019-9506.json | 8 +- 2020/CVE-2020-14882.json | 24 +++--- 2020/CVE-2020-14883.json | 8 +- 2020/CVE-2020-15368.json | 8 +- 2020/CVE-2020-2551.json | 8 +- 2020/CVE-2020-5902.json | 33 ++++++++ 2021/CVE-2021-22204.json | 16 +++- 2021/CVE-2021-25646.json | 8 +- 2021/CVE-2021-30327.json | 8 +- 2021/CVE-2021-3156.json | 42 +++++++--- 2021/CVE-2021-42278.json | 8 +- 2021/CVE-2021-44228.json | 8 +- 2022/CVE-2022-38694.json | 8 +- 2022/CVE-2022-44384.json | 4 +- 2023/CVE-2023-21608.json | 8 +- 2023/CVE-2023-45866.json | 4 +- 2024/CVE-2024-1651.json | 8 +- 2024/CVE-2024-23897.json | 4 +- 2024/CVE-2024-34361.json | 4 +- 2025/CVE-2025-24799.json | 8 +- 2025/CVE-2025-29927.json | 4 +- 2025/CVE-2025-48804.json | 8 +- 2025/CVE-2025-49132.json | 8 +- 2025/CVE-2025-49706.json | 8 +- 2025/CVE-2025-6934.json | 8 +- 2025/CVE-2025-8061.json | 8 +- 2026/CVE-2026-103039.json | 45 +++++++++++ 2026/CVE-2026-105950.json | 8 +- 2026/CVE-2026-108097.json | 4 +- 2026/CVE-2026-108924.json | 4 +- 2026/CVE-2026-109618.json | 163 +++++++++++++++++++++++--------------- 2026/CVE-2026-110025.json | 4 +- 2026/CVE-2026-111497.json | 20 ++--- 2026/CVE-2026-111585.json | 35 ++++++++ 2026/CVE-2026-112445.json | 8 +- 2026/CVE-2026-112487.json | 35 ++++++++ 2026/CVE-2026-112705.json | 12 +-- 2026/CVE-2026-112816.json | 68 ++++++++++++++++ 2026/CVE-2026-115905.json | 4 +- 2026/CVE-2026-115925.json | 4 +- 2026/CVE-2026-115926.json | 10 +-- 2026/CVE-2026-116000.json | 8 +- 2026/CVE-2026-116004.json | 8 +- 2026/CVE-2026-120218.json | 45 +++++++++++ 2026/CVE-2026-18649.json | 33 ++++++++ 2026/CVE-2026-21858.json | 4 +- 2026/CVE-2026-27912.json | 8 +- 2026/CVE-2026-32202.json | 8 +- 2026/CVE-2026-36425.json | 39 +++++++++ 2026/CVE-2026-39808.json | 4 +- 2026/CVE-2026-43284.json | 12 +-- 2026/CVE-2026-43499.json | 72 ++++++++--------- 2026/CVE-2026-43664.json | 12 +-- 2026/CVE-2026-58882.json | 35 ++++++++ 2026/CVE-2026-59310.json | 8 +- 2026/CVE-2026-63030.json | 4 +- 2026/CVE-2026-63686.json | 2 +- 2026/CVE-2026-64560.json | 14 ++-- 2026/CVE-2026-77396.json | 35 ++++++++ 2026/CVE-2026-84383.json | 8 +- 2026/CVE-2026-88771.json | 2 +- 2026/CVE-2026-89633.json | 35 ++++++++ 2026/CVE-2026-90931.json | 7 +- 2026/CVE-2026-90932.json | 9 ++- 2026/CVE-2026-92424.json | 4 +- 2026/CVE-2026-96652.json | 4 +- 2026/CVE-2026-97206.json | 4 +- 2026/CVE-2026-97229.json | 12 +-- 2026/CVE-2026-98260.json | 74 ++++++++--------- 2026/CVE-2026-98432.json | 128 ++++++++++++++++++++++-------- 80 files changed, 1004 insertions(+), 419 deletions(-) create mode 100644 2026/CVE-2026-103039.json create mode 100644 2026/CVE-2026-111585.json create mode 100644 2026/CVE-2026-112487.json create mode 100644 2026/CVE-2026-112816.json create mode 100644 2026/CVE-2026-120218.json create mode 100644 2026/CVE-2026-58882.json create mode 100644 2026/CVE-2026-77396.json create mode 100644 2026/CVE-2026-89633.json diff --git a/2014/CVE-2014-4210.json b/2014/CVE-2014-4210.json index 5e5b342cbf..3fcc8b75fc 100644 --- a/2014/CVE-2014-4210.json +++ b/2014/CVE-2014-4210.json @@ -47,10 +47,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -82,7 +82,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 }, diff --git a/2016/CVE-2016-0638.json b/2016/CVE-2016-0638.json index a4db4bd6c7..cab16793f6 100644 --- a/2016/CVE-2016-0638.json +++ b/2016/CVE-2016-0638.json @@ -14,10 +14,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -49,7 +49,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 }, diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index 59d34150d5..dc4939fb7d 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -222,10 +222,10 @@ "description": "PoC for Dirty COW (CVE-2016-5195)", "fork": false, "created_at": "2016-10-22T15:25:34Z", - "updated_at": "2026-10-12T04:29:44Z", + "updated_at": "2026-10-31T16:57:01Z", "pushed_at": "2022-03-16T12:08:54Z", - "stargazers_count": 511, - "watchers_count": 511, + "stargazers_count": 510, + "watchers_count": 510, "has_discussions": false, "forks_count": 145, "allow_forking": true, @@ -236,7 +236,7 @@ "topics": [], "visibility": "public", "forks": 145, - "watchers": 511, + "watchers": 510, "score": 0, "subscribers_count": 19 }, @@ -255,10 +255,10 @@ "description": "A CVE-2016-5195 exploit example.", "fork": false, "created_at": "2016-10-23T00:16:33Z", - "updated_at": "2026-10-31T12:02:26Z", + "updated_at": "2026-10-31T16:49:23Z", "pushed_at": "2017-03-21T16:46:38Z", - "stargazers_count": 342, - "watchers_count": 342, + "stargazers_count": 341, + "watchers_count": 341, "has_discussions": false, "forks_count": 122, "allow_forking": true, @@ -273,7 +273,7 @@ ], "visibility": "public", "forks": 122, - "watchers": 342, + "watchers": 341, "score": 0, "subscribers_count": 13 }, @@ -457,10 +457,10 @@ "description": "Dirty Cow exploit - CVE-2016-5195", "fork": false, "created_at": "2016-11-25T21:08:01Z", - "updated_at": "2026-10-30T03:54:18Z", + "updated_at": "2026-10-31T16:57:55Z", "pushed_at": "2025-07-30T11:31:24Z", - "stargazers_count": 933, - "watchers_count": 933, + "stargazers_count": 932, + "watchers_count": 932, "has_discussions": false, "forks_count": 424, "allow_forking": true, @@ -475,7 +475,7 @@ ], "visibility": "public", "forks": 424, - "watchers": 933, + "watchers": 932, "score": 0, "subscribers_count": 1 }, diff --git a/2017/CVE-2017-0781.json b/2017/CVE-2017-0781.json index 5896d09a09..ca4c349d4d 100644 --- a/2017/CVE-2017-0781.json +++ b/2017/CVE-2017-0781.json @@ -123,10 +123,10 @@ "description": "BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability (CVE-2017-0781), and the SDP Information leak vulnerability (CVE-2017-0785) can be found. Under 'linux-bluez' exploits for the Linux-RCE vulnerability (CVE-2017-1000251) can be found (for Amazon Echo, and Samsung Gear S3). Under 'l2cap_infra' a general testing framework to send and receive raw l2cap messages (using scapy) can be found. Under 'nRF24_BDADDR_Sniffer' a tool to capture bluetooth mac addresses (BDADDR) over the air, using a nRF24L01 chip For more details on BlueBorne, you may read the full technical white paper available here: https:\/\/www.armis.com\/blueborne\/ In addition a several detailed blog posts on the exploitation of these vulnerability can be found here: https:\/\/www.armis.com\/blog\/ =============== Dependencies:", "fork": false, "created_at": "2020-10-12T07:21:08Z", - "updated_at": "2026-05-02T03:16:36Z", + "updated_at": "2026-10-31T14:47:33Z", "pushed_at": "2020-11-04T16:49:05Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -137,7 +137,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 }, diff --git a/2017/CVE-2017-3248.json b/2017/CVE-2017-3248.json index 3f6b527cc3..273f4a9426 100644 --- a/2017/CVE-2017-3248.json +++ b/2017/CVE-2017-3248.json @@ -47,10 +47,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -82,7 +82,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 }, diff --git a/2017/CVE-2017-5753.json b/2017/CVE-2017-5753.json index 5a3e4c989a..10fa2ff5b8 100644 --- a/2017/CVE-2017-5753.json +++ b/2017/CVE-2017-5753.json @@ -14,10 +14,10 @@ "description": "Example of using revealed \"Spectre\" exploit (CVE-2017-5753 and CVE-2017-5715)", "fork": false, "created_at": "2018-01-04T00:28:50Z", - "updated_at": "2026-10-13T16:28:43Z", + "updated_at": "2026-10-31T17:02:39Z", "pushed_at": "2018-01-10T01:14:44Z", - "stargazers_count": 772, - "watchers_count": 772, + "stargazers_count": 773, + "watchers_count": 773, "has_discussions": false, "forks_count": 168, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 168, - "watchers": 772, + "watchers": 773, "score": 0, "subscribers_count": 40 }, diff --git a/2018/CVE-2018-2628.json b/2018/CVE-2018-2628.json index ba9b8e12ed..418ac1ec35 100644 --- a/2018/CVE-2018-2628.json +++ b/2018/CVE-2018-2628.json @@ -546,10 +546,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -581,7 +581,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 }, diff --git a/2018/CVE-2018-8120.json b/2018/CVE-2018-8120.json index ee3c3c41f3..d181b6eb7e 100644 --- a/2018/CVE-2018-8120.json +++ b/2018/CVE-2018-8120.json @@ -67,7 +67,7 @@ "forks": 183, "watchers": 497, "score": 0, - "subscribers_count": 24 + "subscribers_count": 20 }, { "id": 136113184, diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json index 034b33e9af..07ff10dd3d 100644 --- a/2019/CVE-2019-17558.json +++ b/2019/CVE-2019-17558.json @@ -47,10 +47,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-10-30T12:15:22Z", + "updated_at": "2026-10-31T16:55:11Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4295, - "watchers_count": 4295, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1078, "allow_forking": true, @@ -81,7 +81,7 @@ ], "visibility": "public", "forks": 1078, - "watchers": 4295, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, diff --git a/2019/CVE-2019-2618.json b/2019/CVE-2019-2618.json index 26a6a29e11..b28fb3190e 100644 --- a/2019/CVE-2019-2618.json +++ b/2019/CVE-2019-2618.json @@ -212,10 +212,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -247,7 +247,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 } diff --git a/2019/CVE-2019-9506.json b/2019/CVE-2019-9506.json index 747e4531f8..7ee9cc7af1 100644 --- a/2019/CVE-2019-9506.json +++ b/2019/CVE-2019-9506.json @@ -14,10 +14,10 @@ "description": "Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR\/EDR and BLE [CVE-2019-9506]", "fork": false, "created_at": "2019-08-15T11:54:21Z", - "updated_at": "2026-10-06T13:17:17Z", + "updated_at": "2026-10-31T17:19:08Z", "pushed_at": "2022-04-04T15:16:08Z", - "stargazers_count": 189, - "watchers_count": 189, + "stargazers_count": 190, + "watchers_count": 190, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 39, - "watchers": 189, + "watchers": 190, "score": 0, "subscribers_count": 10 } diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index 09cf89fcf7..817bedbbe6 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -14,10 +14,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-10-30T12:15:22Z", + "updated_at": "2026-10-31T16:55:11Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4295, - "watchers_count": 4295, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1078, "allow_forking": true, @@ -48,7 +48,7 @@ ], "visibility": "public", "forks": 1078, - "watchers": 4295, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, @@ -67,10 +67,10 @@ "description": "CVE-2020–14882、CVE-2020–14883", "fork": false, "created_at": "2020-10-28T11:43:37Z", - "updated_at": "2026-10-30T12:15:25Z", + "updated_at": "2026-10-31T16:57:26Z", "pushed_at": "2020-11-16T04:23:09Z", - "stargazers_count": 287, - "watchers_count": 287, + "stargazers_count": 286, + "watchers_count": 286, "has_discussions": false, "forks_count": 60, "allow_forking": true, @@ -81,7 +81,7 @@ "topics": [], "visibility": "public", "forks": 60, - "watchers": 287, + "watchers": 286, "score": 0, "subscribers_count": 4 }, @@ -331,10 +331,10 @@ "description": "CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。", "fork": false, "created_at": "2020-11-03T10:49:35Z", - "updated_at": "2026-10-05T17:33:43Z", + "updated_at": "2026-10-31T16:57:26Z", "pushed_at": "2022-03-29T02:08:45Z", - "stargazers_count": 145, - "watchers_count": 145, + "stargazers_count": 144, + "watchers_count": 144, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -345,7 +345,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 145, + "watchers": 144, "score": 0, "subscribers_count": 2 }, diff --git a/2020/CVE-2020-14883.json b/2020/CVE-2020-14883.json index 35bc741db9..719de258e2 100644 --- a/2020/CVE-2020-14883.json +++ b/2020/CVE-2020-14883.json @@ -148,10 +148,10 @@ "description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE", "fork": false, "created_at": "2021-03-11T22:49:17Z", - "updated_at": "2026-10-30T14:11:16Z", + "updated_at": "2026-10-31T16:55:31Z", "pushed_at": "2023-05-11T14:36:58Z", - "stargazers_count": 1071, - "watchers_count": 1071, + "stargazers_count": 1070, + "watchers_count": 1070, "has_discussions": false, "forks_count": 312, "allow_forking": true, @@ -166,7 +166,7 @@ ], "visibility": "public", "forks": 312, - "watchers": 1071, + "watchers": 1070, "score": 0, "subscribers_count": 34 }, diff --git a/2020/CVE-2020-15368.json b/2020/CVE-2020-15368.json index 2a1567ef56..8b86b64291 100644 --- a/2020/CVE-2020-15368.json +++ b/2020/CVE-2020-15368.json @@ -14,10 +14,10 @@ "description": "CVE-2020-15368, aka \"How to exploit a vulnerable driver\"", "fork": false, "created_at": "2021-06-29T04:38:24Z", - "updated_at": "2026-10-28T14:11:27Z", + "updated_at": "2026-10-31T16:52:47Z", "pushed_at": "2022-04-14T03:17:44Z", - "stargazers_count": 516, - "watchers_count": 516, + "stargazers_count": 515, + "watchers_count": 515, "has_discussions": false, "forks_count": 48, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 48, - "watchers": 516, + "watchers": 515, "score": 0, "subscribers_count": 5 }, diff --git a/2020/CVE-2020-2551.json b/2020/CVE-2020-2551.json index 67d729c9b5..5839821ae6 100644 --- a/2020/CVE-2020-2551.json +++ b/2020/CVE-2020-2551.json @@ -14,10 +14,10 @@ "description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883", "fork": false, "created_at": "2020-01-15T04:26:29Z", - "updated_at": "2026-10-25T09:43:06Z", + "updated_at": "2026-10-31T16:55:12Z", "pushed_at": "2023-11-24T09:21:56Z", - "stargazers_count": 2081, - "watchers_count": 2081, + "stargazers_count": 2080, + "watchers_count": 2080, "has_discussions": true, "forks_count": 325, "allow_forking": true, @@ -49,7 +49,7 @@ ], "visibility": "public", "forks": 325, - "watchers": 2081, + "watchers": 2080, "score": 0, "subscribers_count": 33 }, diff --git a/2020/CVE-2020-5902.json b/2020/CVE-2020-5902.json index d4e7962a1b..b9cf532aa0 100644 --- a/2020/CVE-2020-5902.json +++ b/2020/CVE-2020-5902.json @@ -1852,5 +1852,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440939461, + "name": "cve-2020-5902", + "full_name": "yora1928\/cve-2020-5902", + "owner": { + "login": "yora1928", + "id": 293059973, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293059973?v=4", + "html_url": "https:\/\/github.com\/yora1928", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/yora1928\/cve-2020-5902", + "description": "by yora cve-2020-5902", + "fork": false, + "created_at": "2026-10-31T14:31:20Z", + "updated_at": "2026-10-31T14:34:05Z", + "pushed_at": "2026-10-31T14:32:50Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-22204.json b/2021/CVE-2021-22204.json index 1b33f9245e..824d106256 100644 --- a/2021/CVE-2021-22204.json +++ b/2021/CVE-2021-22204.json @@ -522,11 +522,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/d4ytox\/CVE-2021-22204", - "description": "ExifTool RCE exploit (CVE-2021-22204) - improved version, no exiftool dependency", + "description": "ExifTool arbitrary code execution via a crafted DjVu image (versions 7.44 to 12.23). PoC builds a pure DjVu payload with djvumake, so the attacker machine needs no vulnerable ExifTool.", "fork": false, "created_at": "2026-06-13T11:14:25Z", - "updated_at": "2026-10-31T11:37:12Z", - "pushed_at": "2026-10-31T11:37:08Z", + "updated_at": "2026-10-31T16:51:10Z", + "pushed_at": "2026-10-31T16:44:48Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -537,12 +537,22 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "arbitrary-code-execution", + "code-injection", "cve-2021-22204", + "cybersecurity", + "djvu", "exiftool", "exploit", + "image-exploit", + "infosec", "pentesting", + "poc", + "proof-of-concept", "python", "rce", + "redteam", + "remote-code-execution", "security" ], "visibility": "public", diff --git a/2021/CVE-2021-25646.json b/2021/CVE-2021-25646.json index d6961c6670..bc8a5c134b 100644 --- a/2021/CVE-2021-25646.json +++ b/2021/CVE-2021-25646.json @@ -146,10 +146,10 @@ "description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE", "fork": false, "created_at": "2021-03-11T22:49:17Z", - "updated_at": "2026-10-30T14:11:16Z", + "updated_at": "2026-10-31T16:55:31Z", "pushed_at": "2023-05-11T14:36:58Z", - "stargazers_count": 1071, - "watchers_count": 1071, + "stargazers_count": 1070, + "watchers_count": 1070, "has_discussions": false, "forks_count": 312, "allow_forking": true, @@ -164,7 +164,7 @@ ], "visibility": "public", "forks": 312, - "watchers": 1071, + "watchers": 1070, "score": 0, "subscribers_count": 34 }, diff --git a/2021/CVE-2021-30327.json b/2021/CVE-2021-30327.json index 6384521397..570c567985 100644 --- a/2021/CVE-2021-30327.json +++ b/2021/CVE-2021-30327.json @@ -14,10 +14,10 @@ "description": "Let's hijack our bootchain - CVE-2021-30327", "fork": false, "created_at": "2026-06-25T12:12:38Z", - "updated_at": "2026-10-19T23:34:54Z", + "updated_at": "2026-10-31T16:28:28Z", "pushed_at": "2026-09-12T10:26:20Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 25, + "watchers": 26, "score": 0, "subscribers_count": 0 }, diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index 4fe78a5fd4..413a047c42 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -450,10 +450,10 @@ "description": "PoC for CVE-2021-3156 (sudo heap overflow)", "fork": false, "created_at": "2021-01-30T03:22:04Z", - "updated_at": "2026-10-17T14:21:37Z", + "updated_at": "2026-10-31T16:55:54Z", "pushed_at": "2022-04-14T11:51:18Z", - "stargazers_count": 430, - "watchers_count": 430, + "stargazers_count": 429, + "watchers_count": 429, "has_discussions": false, "forks_count": 105, "allow_forking": true, @@ -464,7 +464,7 @@ "topics": [], "visibility": "public", "forks": 105, - "watchers": 430, + "watchers": 429, "score": 0, "subscribers_count": 7 }, @@ -2959,13 +2959,13 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/d4ytox\/CVE-2021-3156", - "description": null, + "description": "Baron Samedit (CVE-2021-3156): sudo heap-based buffer overflow giving local root. PoC packaged with a static\/musl launcher so it runs against older-glibc (2.31) targets.", "fork": false, "created_at": "2026-10-31T11:27:42Z", - "updated_at": "2026-10-31T11:30:43Z", - "pushed_at": "2026-10-31T11:30:39Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-31T16:42:10Z", + "pushed_at": "2026-10-31T16:35:08Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2973,10 +2973,30 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "baron-samedit", + "buffer-overflow", + "cve-2021-3156", + "cybersecurity", + "exploit", + "glibc", + "heap-overflow", + "infosec", + "linux", + "local-privilege-escalation", + "lpe", + "memory-corruption", + "poc", + "privilege-escalation", + "proof-of-concept", + "redteam", + "security", + "sudo", + "vulnerability" + ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-42278.json b/2021/CVE-2021-42278.json index 3807a5bc0f..3f25ab559a 100644 --- a/2021/CVE-2021-42278.json +++ b/2021/CVE-2021-42278.json @@ -14,10 +14,10 @@ "description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ", "fork": false, "created_at": "2021-12-11T15:10:30Z", - "updated_at": "2026-10-29T00:07:56Z", + "updated_at": "2026-10-31T17:06:01Z", "pushed_at": "2022-07-10T22:23:13Z", - "stargazers_count": 1070, - "watchers_count": 1070, + "stargazers_count": 1071, + "watchers_count": 1071, "has_discussions": false, "forks_count": 191, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 191, - "watchers": 1070, + "watchers": 1071, "score": 0, "subscribers_count": 23 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 5794a799b4..c8eeabecca 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -3873,10 +3873,10 @@ "description": "a fast check, if your server could be vulnerable to CVE-2021-44228", "fork": false, "created_at": "2021-12-13T04:14:18Z", - "updated_at": "2026-10-13T21:12:27Z", + "updated_at": "2026-10-31T13:26:02Z", "pushed_at": "2022-01-21T11:43:49Z", - "stargazers_count": 247, - "watchers_count": 247, + "stargazers_count": 246, + "watchers_count": 246, "has_discussions": true, "forks_count": 83, "allow_forking": true, @@ -3887,7 +3887,7 @@ "topics": [], "visibility": "public", "forks": 83, - "watchers": 247, + "watchers": 246, "score": 0, "subscribers_count": 8 }, diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index e5eedf60ae..dc961ac094 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -14,10 +14,10 @@ "description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692", "fork": false, "created_at": "2023-06-10T08:31:26Z", - "updated_at": "2026-10-30T16:06:44Z", + "updated_at": "2026-10-31T17:55:59Z", "pushed_at": "2025-06-14T16:55:26Z", - "stargazers_count": 645, - "watchers_count": 645, + "stargazers_count": 647, + "watchers_count": 647, "has_discussions": true, "forks_count": 90, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 90, - "watchers": 645, + "watchers": 647, "score": 0, "subscribers_count": 15 }, diff --git a/2022/CVE-2022-44384.json b/2022/CVE-2022-44384.json index 6c4acd0780..87e423565c 100644 --- a/2022/CVE-2022-44384.json +++ b/2022/CVE-2022-44384.json @@ -14,8 +14,8 @@ "description": "CVE-2022-44384 - authenticated arbitrary file upload to RCE in rConfig <= 3.9.6. Working Python 3 rewrite of the public PoC", "fork": false, "created_at": "2026-10-04T12:19:12Z", - "updated_at": "2026-10-30T21:27:50Z", - "pushed_at": "2026-10-04T12:33:26Z", + "updated_at": "2026-10-31T16:43:29Z", + "pushed_at": "2026-10-31T16:43:25Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2023/CVE-2023-21608.json b/2023/CVE-2023-21608.json index 8dbb5ff12e..f148261cb7 100644 --- a/2023/CVE-2023-21608.json +++ b/2023/CVE-2023-21608.json @@ -14,10 +14,10 @@ "description": "Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit", "fork": false, "created_at": "2023-01-30T12:57:48Z", - "updated_at": "2026-09-12T10:39:49Z", + "updated_at": "2026-10-31T15:27:18Z", "pushed_at": "2023-12-05T12:21:02Z", - "stargazers_count": 284, - "watchers_count": 284, + "stargazers_count": 285, + "watchers_count": 285, "has_discussions": false, "forks_count": 58, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 58, - "watchers": 284, + "watchers": 285, "score": 0, "subscribers_count": 4 }, diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index b0cc1403fe..8083c6bc72 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -19,7 +19,7 @@ "stargazers_count": 1903, "watchers_count": 1903, "has_discussions": false, - "forks_count": 320, + "forks_count": 321, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 320, + "forks": 321, "watchers": 1903, "score": 0, "subscribers_count": 30 diff --git a/2024/CVE-2024-1651.json b/2024/CVE-2024-1651.json index 589edc705f..b27b3e8fa5 100644 --- a/2024/CVE-2024-1651.json +++ b/2024/CVE-2024-1651.json @@ -14,10 +14,10 @@ "description": "Torrentpier v2.4.1. CVE-2024-1651. Remote Code Execution (RCE). Exploit.", "fork": false, "created_at": "2024-02-23T11:04:24Z", - "updated_at": "2026-10-13T18:57:47Z", + "updated_at": "2026-10-31T18:44:36Z", "pushed_at": "2024-03-07T10:23:52Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-23897.json b/2024/CVE-2024-23897.json index b8193a742b..589e80f82c 100644 --- a/2024/CVE-2024-23897.json +++ b/2024/CVE-2024-23897.json @@ -1680,8 +1680,8 @@ "description": "Work 1 — secure Flask REST API, three-stage CI, and CVE-2024-23897 (Jenkins CLI) analysis", "fork": false, "created_at": "2026-10-29T07:44:22Z", - "updated_at": "2026-10-31T13:13:12Z", - "pushed_at": "2026-10-31T13:13:08Z", + "updated_at": "2026-10-31T14:58:29Z", + "pushed_at": "2026-10-31T14:58:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-34361.json b/2024/CVE-2024-34361.json index 8c26bde6fd..a9f0062b6e 100644 --- a/2024/CVE-2024-34361.json +++ b/2024/CVE-2024-34361.json @@ -14,8 +14,8 @@ "description": "This repository contains an exploit for CVE-2024-34361, a critical Pi-hole vulnerability (CVSS 8.6). It uses SSRF to achieve RCE by exploiting improper URL validation, allowing attackers to send arbitrary requests and execute commands on the system. Disclaimer: For educational and ethical security testing only. Unauthorized use is illegal.", "fork": false, "created_at": "2024-07-07T21:22:36Z", - "updated_at": "2026-10-29T11:16:35Z", - "pushed_at": "2026-10-29T11:16:32Z", + "updated_at": "2026-10-31T13:39:45Z", + "pushed_at": "2026-10-31T13:39:42Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-24799.json b/2025/CVE-2025-24799.json index c75bcb5763..9d540ee63a 100644 --- a/2025/CVE-2025-24799.json +++ b/2025/CVE-2025-24799.json @@ -79,15 +79,15 @@ { "id": 1052744729, "name": "CVE-2025-24799", - "full_name": "Rosemary1337\/CVE-2025-24799", + "full_name": "ryhnmhrdka\/CVE-2025-24799", "owner": { - "login": "Rosemary1337", + "login": "ryhnmhrdka", "id": 164360967, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164360967?v=4", - "html_url": "https:\/\/github.com\/Rosemary1337", + "html_url": "https:\/\/github.com\/ryhnmhrdka", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Rosemary1337\/CVE-2025-24799", + "html_url": "https:\/\/github.com\/ryhnmhrdka\/CVE-2025-24799", "description": "CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection", "fork": false, "created_at": "2025-09-08T13:43:26Z", diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index 439011295a..37897b6231 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -4315,7 +4315,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4323,7 +4323,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json index e5a09fdf2a..e9e773353f 100644 --- a/2025/CVE-2025-48804.json +++ b/2025/CVE-2025-48804.json @@ -14,10 +14,10 @@ "description": "Downgrade attack for CVE-2025-48804", "fork": false, "created_at": "2026-04-30T13:05:30Z", - "updated_at": "2026-10-30T09:02:25Z", + "updated_at": "2026-10-31T15:35:32Z", "pushed_at": "2026-10-29T21:19:11Z", - "stargazers_count": 247, - "watchers_count": 247, + "stargazers_count": 248, + "watchers_count": 248, "has_discussions": false, "forks_count": 44, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 44, - "watchers": 247, + "watchers": 248, "score": 0, "subscribers_count": 4 } diff --git a/2025/CVE-2025-49132.json b/2025/CVE-2025-49132.json index 7f536e46ff..4178f89c0e 100644 --- a/2025/CVE-2025-49132.json +++ b/2025/CVE-2025-49132.json @@ -713,10 +713,10 @@ "description": "CVE-2025-49132_PHP_PEAR_METHOD", "fork": false, "created_at": "2026-02-12T23:48:42Z", - "updated_at": "2026-04-10T09:16:06Z", + "updated_at": "2026-10-31T14:04:17Z", "pushed_at": "2026-02-12T23:57:16Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -727,7 +727,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-49706.json b/2025/CVE-2025-49706.json index a8adccfc31..0da5f96165 100644 --- a/2025/CVE-2025-49706.json +++ b/2025/CVE-2025-49706.json @@ -14,10 +14,10 @@ "description": "A deep dive into CVE-2025-49706 — the SharePoint spoofing flaw now exploited in the wild for stealthy web shell deployment and privilege escalation.", "fork": false, "created_at": "2025-07-20T13:55:28Z", - "updated_at": "2026-10-26T15:05:57Z", + "updated_at": "2026-10-31T13:51:28Z", "pushed_at": "2025-07-20T14:06:49Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 19, + "watchers": 18, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-6934.json b/2025/CVE-2025-6934.json index be1028e179..b4405636c5 100644 --- a/2025/CVE-2025-6934.json +++ b/2025/CVE-2025-6934.json @@ -167,15 +167,15 @@ { "id": 1052715783, "name": "CVE-2025-6934", - "full_name": "Rosemary1337\/CVE-2025-6934", + "full_name": "ryhnmhrdka\/CVE-2025-6934", "owner": { - "login": "Rosemary1337", + "login": "ryhnmhrdka", "id": 164360967, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164360967?v=4", - "html_url": "https:\/\/github.com\/Rosemary1337", + "html_url": "https:\/\/github.com\/ryhnmhrdka", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Rosemary1337\/CVE-2025-6934", + "html_url": "https:\/\/github.com\/ryhnmhrdka\/CVE-2025-6934", "description": "CVE-2025-6934 - Exploit WordPress Opal Estate Pro ", "fork": false, "created_at": "2025-09-08T12:58:45Z", diff --git a/2025/CVE-2025-8061.json b/2025/CVE-2025-8061.json index 2df4a73921..45c2de9ec6 100644 --- a/2025/CVE-2025-8061.json +++ b/2025/CVE-2025-8061.json @@ -146,10 +146,10 @@ "description": "MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.", "fork": false, "created_at": "2026-09-17T02:28:07Z", - "updated_at": "2026-10-25T16:49:38Z", + "updated_at": "2026-10-31T15:56:53Z", "pushed_at": "2026-09-17T02:45:22Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 6, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-103039.json b/2026/CVE-2026-103039.json new file mode 100644 index 0000000000..2cdcbc14c5 --- /dev/null +++ b/2026/CVE-2026-103039.json @@ -0,0 +1,45 @@ +[ + { + "id": 1440995251, + "name": "CVE-2026-103039", + "full_name": "noxcrypt-x\/CVE-2026-103039", + "owner": { + "login": "noxcrypt-x", + "id": 53613265, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53613265?v=4", + "html_url": "https:\/\/github.com\/noxcrypt-x", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/noxcrypt-x\/CVE-2026-103039", + "description": "CVE-2026-103039: Gravity Forms <= 3.1.2 PHP object injection to RCE. PoC by NOXCRYPT (noxcrypt-x). gen_payload.php is not included.", + "fork": false, + "created_at": "2026-10-31T15:33:32Z", + "updated_at": "2026-10-31T15:33:56Z", + "pushed_at": "2026-10-31T15:33:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-103039", + "exploit", + "gravity-forms", + "php-object-injection", + "poc", + "rce", + "security-research", + "wordpress" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-105950.json b/2026/CVE-2026-105950.json index d1cc9d7c2d..efb2570620 100644 --- a/2026/CVE-2026-105950.json +++ b/2026/CVE-2026-105950.json @@ -14,8 +14,8 @@ "description": "Bilingual PoC and technical analysis for CVE-2026-105950 — Formwork formaction URI sanitizer bypass", "fork": false, "created_at": "2026-10-13T14:02:57Z", - "updated_at": "2026-10-26T23:19:38Z", - "pushed_at": "2026-10-26T23:19:34Z", + "updated_at": "2026-10-31T17:51:59Z", + "pushed_at": "2026-10-31T17:51:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27,9 +27,13 @@ "pull_request_creation_policy": "all", "topics": [ "cve", + "cve-2026-105950", "cybersecurity", "formwork", "poc", + "proof-of-concept", + "responsible-disclosure", + "security-research", "vulnerability-research", "xss" ], diff --git a/2026/CVE-2026-108097.json b/2026/CVE-2026-108097.json index 8d2b94effa..febbfa2605 100644 --- a/2026/CVE-2026-108097.json +++ b/2026/CVE-2026-108097.json @@ -85,7 +85,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-108924.json b/2026/CVE-2026-108924.json index b8c80373e7..9ea523f35e 100644 --- a/2026/CVE-2026-108924.json +++ b/2026/CVE-2026-108924.json @@ -14,8 +14,8 @@ "description": "CVE-2026-108924: didactic PoC for Kirby dynamic option authorization bypass", "fork": false, "created_at": "2026-10-13T22:38:52Z", - "updated_at": "2026-10-13T22:39:02Z", - "pushed_at": "2026-10-13T22:38:58Z", + "updated_at": "2026-10-31T17:52:00Z", + "pushed_at": "2026-10-31T17:51:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index b71fa68775..51b9f03b2c 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -14,10 +14,10 @@ "description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-18T06:43:48Z", - "updated_at": "2026-10-31T01:08:43Z", + "updated_at": "2026-10-31T19:20:00Z", "pushed_at": "2026-10-28T02:08:14Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 1 }, @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-31T13:47:13Z", + "updated_at": "2026-10-31T17:14:41Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1914, - "watchers_count": 1914, + "stargazers_count": 1918, + "watchers_count": 1918, "has_discussions": false, - "forks_count": 649, + "forks_count": 650, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 649, - "watchers": 1914, + "forks": 650, + "watchers": 1918, "score": 0, "subscribers_count": 8 }, @@ -973,12 +973,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-31T10:09:37Z", + "updated_at": "2026-10-31T17:36:14Z", "pushed_at": "2026-10-22T07:19:20Z", "stargazers_count": 1053, "watchers_count": 1053, "has_discussions": false, - "forks_count": 264, + "forks_count": 265, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -986,7 +986,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 264, + "forks": 265, "watchers": 1053, "score": 0, "subscribers_count": 41 @@ -1462,10 +1462,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-31T03:03:11Z", + "updated_at": "2026-10-31T18:25:49Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 63, - "watchers_count": 63, + "stargazers_count": 64, + "watchers_count": 64, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -1476,7 +1476,7 @@ "topics": [], "visibility": "public", "forks": 29, - "watchers": 63, + "watchers": 64, "score": 0, "subscribers_count": 0 }, @@ -3241,10 +3241,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-30T22:06:45Z", + "updated_at": "2026-10-31T18:34:42Z", "pushed_at": "2026-10-30T22:06:41Z", - "stargazers_count": 124, - "watchers_count": 124, + "stargazers_count": 125, + "watchers_count": 125, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -3272,7 +3272,7 @@ ], "visibility": "public", "forks": 21, - "watchers": 124, + "watchers": 125, "score": 0, "subscribers_count": 3 }, @@ -7340,7 +7340,7 @@ "description": "Read-only checker for php2shell (CVE-2026-109618 \/ CVE-2026-109619): audit PHP servers and websites, no exploit payloads", "fork": false, "created_at": "2026-10-21T21:38:17Z", - "updated_at": "2026-10-22T05:53:51Z", + "updated_at": "2026-10-31T16:23:51Z", "pushed_at": "2026-10-21T22:36:57Z", "stargazers_count": 1, "watchers_count": 1, @@ -7708,12 +7708,12 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-31T13:46:49Z", + "updated_at": "2026-10-31T19:27:53Z", "pushed_at": "2026-10-30T16:04:28Z", - "stargazers_count": 222, - "watchers_count": 222, + "stargazers_count": 239, + "watchers_count": 239, "has_discussions": false, - "forks_count": 62, + "forks_count": 66, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7742,8 +7742,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 62, - "watchers": 222, + "forks": 66, + "watchers": 239, "score": 0, "subscribers_count": 2 }, @@ -9516,10 +9516,10 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-31T10:50:40Z", + "updated_at": "2026-10-31T15:51:23Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 968, - "watchers_count": 968, + "stargazers_count": 969, + "watchers_count": 969, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -9530,7 +9530,7 @@ "topics": [], "visibility": "public", "forks": 143, - "watchers": 968, + "watchers": 969, "score": 0, "subscribers_count": 11 }, @@ -13425,12 +13425,12 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-31T01:23:31Z", + "updated_at": "2026-10-31T14:08:56Z", "pushed_at": "2026-10-26T12:50:30Z", - "stargazers_count": 191, - "watchers_count": 191, + "stargazers_count": 193, + "watchers_count": 193, "has_discussions": false, - "forks_count": 53, + "forks_count": 55, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -13438,8 +13438,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, - "watchers": 191, + "forks": 55, + "watchers": 193, "score": 0, "subscribers_count": 1 }, @@ -15120,8 +15120,8 @@ "description": "PHP vulnerability checker for PHP2Shell (CVE-2026-109618\/109619): audits servers, Docker images & CI. Backport-aware, zero-dep.", "fork": false, "created_at": "2026-10-22T16:46:59Z", - "updated_at": "2026-10-23T14:49:07Z", - "pushed_at": "2026-10-29T05:36:14Z", + "updated_at": "2026-10-31T19:43:22Z", + "pushed_at": "2026-10-31T19:43:20Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": true, @@ -15239,8 +15239,8 @@ "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560", "fork": false, "created_at": "2026-10-22T16:51:35Z", - "updated_at": "2026-10-31T05:34:46Z", - "pushed_at": "2026-10-31T05:34:45Z", + "updated_at": "2026-10-31T17:04:57Z", + "pushed_at": "2026-10-31T17:04:54Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -15895,8 +15895,8 @@ "description": "Interactive Bash audit & remediation tool for PHP2Shell (CVE-2026-109618\/109619). Features live Docker inspection, reversible BSI mitigations, and split-screen TUI.", "fork": false, "created_at": "2026-10-22T18:18:08Z", - "updated_at": "2026-10-28T20:08:04Z", - "pushed_at": "2026-10-28T20:08:00Z", + "updated_at": "2026-10-31T13:54:42Z", + "pushed_at": "2026-10-31T13:54:38Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -18803,7 +18803,7 @@ "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -18818,7 +18818,7 @@ "poc" ], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 7, "score": 0, "subscribers_count": 0 @@ -19990,8 +19990,8 @@ "description": "Defensive checker for the PHP2Shell RCE (CVE-2026-109618\/109619): is the patch actually running, log scan back to Oct 17, WAF\/Sigma\/Suricata rules. Stdlib Python, no remote probing.", "fork": false, "created_at": "2026-10-23T14:26:46Z", - "updated_at": "2026-10-30T09:19:02Z", - "pushed_at": "2026-10-28T20:48:52Z", + "updated_at": "2026-10-31T15:15:57Z", + "pushed_at": "2026-10-31T15:15:50Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -20638,15 +20638,15 @@ { "id": 1431401151, "name": "php2shell-fix", - "full_name": "sanketkokate712\/php2shell-fix", + "full_name": "SanketKokate712\/php2shell-fix", "owner": { - "login": "sanketkokate712", + "login": "SanketKokate712", "id": 186406115, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186406115?v=4", - "html_url": "https:\/\/github.com\/sanketkokate712", + "html_url": "https:\/\/github.com\/SanketKokate712", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/sanketkokate712\/php2shell-fix", + "html_url": "https:\/\/github.com\/SanketKokate712\/php2shell-fix", "description": "Claude Code skill + scripts to find, patch and verify PHP2Shell (CVE-2026-109618, CVE-2026-109619) on any PHP server", "fork": false, "created_at": "2026-10-23T18:19:14Z", @@ -21125,8 +21125,8 @@ "description": "Backport-aware PHP2Shell (CVE-2026-109618\/109619) checker for installed PHP packages; knows distro and vendor fixed builds, incl. patched PHP 5.6-8.4 for CentOS 7", "fork": false, "created_at": "2026-10-23T20:47:08Z", - "updated_at": "2026-10-30T11:53:13Z", - "pushed_at": "2026-10-30T11:53:08Z", + "updated_at": "2026-10-31T14:50:23Z", + "pushed_at": "2026-10-31T14:50:20Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -23256,8 +23256,8 @@ }, { "id": 1433182777, - "name": "php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free", - "full_name": "catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free", + "name": "php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched", + "full_name": "catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched", "owner": { "login": "catscarlet", "id": 10594035, @@ -23265,12 +23265,12 @@ "html_url": "https:\/\/github.com\/catscarlet", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free", + "html_url": "https:\/\/github.com\/catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-patched", "description": "This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**.", "fork": false, "created_at": "2026-10-25T12:38:45Z", - "updated_at": "2026-10-31T13:49:46Z", - "pushed_at": "2026-10-31T13:45:26Z", + "updated_at": "2026-10-31T14:21:11Z", + "pushed_at": "2026-10-31T14:21:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26510,8 +26510,8 @@ "description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.", "fork": false, "created_at": "2026-10-30T21:46:32Z", - "updated_at": "2026-10-31T13:34:58Z", - "pushed_at": "2026-10-31T13:34:54Z", + "updated_at": "2026-10-31T15:09:07Z", + "pushed_at": "2026-10-31T15:17:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26635,10 +26635,10 @@ "description": "PHP 8.1.34 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.", "fork": false, "created_at": "2026-10-31T08:47:24Z", - "updated_at": "2026-10-31T13:17:58Z", + "updated_at": "2026-10-31T15:48:39Z", "pushed_at": "2026-10-31T11:44:51Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -26661,7 +26661,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -26743,5 +26743,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440993680, + "name": "php2shell-ubuntu", + "full_name": "marceloaugu\/php2shell-ubuntu", + "owner": { + "login": "marceloaugu", + "id": 62657718, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62657718?v=4", + "html_url": "https:\/\/github.com\/marceloaugu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/marceloaugu\/php2shell-ubuntu", + "description": "Analisa e corrige as vulnerabilidades php2shell do PHP (CVE-2026-109618 e CVE-2026-109619) no Ubuntu", + "fork": false, + "created_at": "2026-10-31T15:31:49Z", + "updated_at": "2026-10-31T15:40:14Z", + "pushed_at": "2026-10-31T15:40:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-110025.json b/2026/CVE-2026-110025.json index 9207282bcb..56395ef16e 100644 --- a/2026/CVE-2026-110025.json +++ b/2026/CVE-2026-110025.json @@ -14,8 +14,8 @@ "description": "CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE", "fork": false, "created_at": "2026-10-13T22:45:00Z", - "updated_at": "2026-10-26T23:19:41Z", - "pushed_at": "2026-10-26T23:19:37Z", + "updated_at": "2026-10-31T17:52:01Z", + "pushed_at": "2026-10-31T17:51:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 9be171f548..ff5756febe 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -1357,10 +1357,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-29T07:28:19Z", + "updated_at": "2026-10-31T13:51:24Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 85, - "watchers_count": 85, + "stargazers_count": 84, + "watchers_count": 84, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -1371,7 +1371,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 85, + "watchers": 84, "score": 0, "subscribers_count": 1 }, @@ -1530,8 +1530,8 @@ "description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds", "fork": false, "created_at": "2026-10-25T17:23:52Z", - "updated_at": "2026-10-28T07:46:25Z", - "pushed_at": "2026-10-27T01:00:17Z", + "updated_at": "2026-10-31T19:49:49Z", + "pushed_at": "2026-10-31T19:49:45Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -2300,8 +2300,8 @@ "description": "WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write).", "fork": false, "created_at": "2026-10-27T19:53:45Z", - "updated_at": "2026-10-29T21:02:10Z", - "pushed_at": "2026-10-27T19:54:24Z", + "updated_at": "2026-10-31T18:05:07Z", + "pushed_at": "2026-10-31T18:05:04Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -2333,8 +2333,8 @@ "description": null, "fork": false, "created_at": "2026-10-28T06:45:04Z", - "updated_at": "2026-10-30T10:45:29Z", - "pushed_at": "2026-10-30T10:45:25Z", + "updated_at": "2026-10-31T14:16:18Z", + "pushed_at": "2026-10-31T14:16:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-111585.json b/2026/CVE-2026-111585.json new file mode 100644 index 0000000000..cec681f902 --- /dev/null +++ b/2026/CVE-2026-111585.json @@ -0,0 +1,35 @@ +[ + { + "id": 1440944113, + "name": "CVE-2026-111585", + "full_name": "googlesky\/CVE-2026-111585", + "owner": { + "login": "googlesky", + "id": 4094347, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4", + "html_url": "https:\/\/github.com\/googlesky", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/googlesky\/CVE-2026-111585", + "description": "CVE-2026-111585 — TeamViewer Remote-Control Screen Decompression Integer Overflow → Heap Buffer Overflow (PoC, fixed in 15.83, CVSS 8.8). Containerized lab + one-command repro with vulnerable\/fixed differential evidence.", + "fork": false, + "created_at": "2026-10-31T14:36:35Z", + "updated_at": "2026-10-31T14:36:59Z", + "pushed_at": "2026-10-31T14:37:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-112445.json b/2026/CVE-2026-112445.json index d265513c7b..67ca005c9e 100644 --- a/2026/CVE-2026-112445.json +++ b/2026/CVE-2026-112445.json @@ -14,10 +14,10 @@ "description": "CVE-2026-112445: The Simplest macOS Local Privilege Escalation to Date", "fork": false, "created_at": "2026-10-29T04:45:44Z", - "updated_at": "2026-10-31T05:06:41Z", + "updated_at": "2026-10-31T15:34:29Z", "pushed_at": "2026-10-29T04:48:06Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 45, + "watchers": 46, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112487.json b/2026/CVE-2026-112487.json new file mode 100644 index 0000000000..172784cb0e --- /dev/null +++ b/2026/CVE-2026-112487.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441124625, + "name": "CVE-2026-112487", + "full_name": "Lyutoon\/CVE-2026-112487", + "owner": { + "login": "Lyutoon", + "id": 57178900, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57178900?v=4", + "html_url": "https:\/\/github.com\/Lyutoon", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Lyutoon\/CVE-2026-112487", + "description": "macOS revisiond local privilege escalation to root (CVE-2026-112487)", + "fork": false, + "created_at": "2026-10-31T18:04:33Z", + "updated_at": "2026-10-31T18:11:38Z", + "pushed_at": "2026-10-31T18:11:35Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-112705.json b/2026/CVE-2026-112705.json index e4a375cc10..6028fe84ee 100644 --- a/2026/CVE-2026-112705.json +++ b/2026/CVE-2026-112705.json @@ -47,12 +47,12 @@ "description": "PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif \/ Chollima team.", "fork": false, "created_at": "2026-10-30T09:29:03Z", - "updated_at": "2026-10-31T12:02:41Z", + "updated_at": "2026-10-31T15:45:06Z", "pushed_at": "2026-10-30T10:06:16Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, - "forks_count": 8, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, - "watchers": 34, + "forks": 9, + "watchers": 35, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112816.json b/2026/CVE-2026-112816.json new file mode 100644 index 0000000000..67569e3313 --- /dev/null +++ b/2026/CVE-2026-112816.json @@ -0,0 +1,68 @@ +[ + { + "id": 1441034675, + "name": "cve-2026-112816", + "full_name": "dehasoft-tr\/cve-2026-112816", + "owner": { + "login": "dehasoft-tr", + "id": 81747972, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81747972?v=4", + "html_url": "https:\/\/github.com\/dehasoft-tr", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/dehasoft-tr\/cve-2026-112816", + "description": null, + "fork": false, + "created_at": "2026-10-31T16:18:52Z", + "updated_at": "2026-10-31T16:33:19Z", + "pushed_at": "2026-10-31T16:33:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441041643, + "name": "cve-2026-112816", + "full_name": "Sotrano-dev\/cve-2026-112816", + "owner": { + "login": "Sotrano-dev", + "id": 178072659, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178072659?v=4", + "html_url": "https:\/\/github.com\/Sotrano-dev", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Sotrano-dev\/cve-2026-112816", + "description": null, + "fork": false, + "created_at": "2026-10-31T16:26:55Z", + "updated_at": "2026-10-31T16:27:04Z", + "pushed_at": "2026-10-31T16:27:00Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-115905.json b/2026/CVE-2026-115905.json index b4276450d9..92449b0da5 100644 --- a/2026/CVE-2026-115905.json +++ b/2026/CVE-2026-115905.json @@ -56,8 +56,8 @@ "description": "Live demo: the same vulnerable Rust zip crate (RUSTSEC-2026-0367 setuid + CVE-2026-115905 zip cloaking) contained by a deny-by-default Cosmonic WebAssembly sandbox.", "fork": false, "created_at": "2026-10-28T21:31:02Z", - "updated_at": "2026-10-31T12:49:32Z", - "pushed_at": "2026-10-31T12:49:28Z", + "updated_at": "2026-10-31T14:31:40Z", + "pushed_at": "2026-10-31T14:31:37Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-115925.json b/2026/CVE-2026-115925.json index 5d27147104..b39ce1f7a5 100644 --- a/2026/CVE-2026-115925.json +++ b/2026/CVE-2026-115925.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-10-29T18:40:27Z", - "updated_at": "2026-10-29T18:48:47Z", - "pushed_at": "2026-10-29T18:48:43Z", + "updated_at": "2026-10-31T19:27:16Z", + "pushed_at": "2026-10-31T19:27:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-115926.json b/2026/CVE-2026-115926.json index 1918dea681..748f3a494a 100644 --- a/2026/CVE-2026-115926.json +++ b/2026/CVE-2026-115926.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-10-29T18:44:49Z", - "updated_at": "2026-10-29T19:18:48Z", - "pushed_at": "2026-10-29T19:18:44Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-31T19:26:30Z", + "pushed_at": "2026-10-31T19:26:27Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-116000.json b/2026/CVE-2026-116000.json index 4cb77ce880..127bb636b4 100644 --- a/2026/CVE-2026-116000.json +++ b/2026/CVE-2026-116000.json @@ -14,8 +14,8 @@ "description": "Safe PoC and technical analysis for CVE-2026-116000", "fork": false, "created_at": "2026-10-26T23:13:23Z", - "updated_at": "2026-10-26T23:45:16Z", - "pushed_at": "2026-10-26T23:45:12Z", + "updated_at": "2026-10-31T17:52:02Z", + "pushed_at": "2026-10-31T17:51:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27,8 +27,12 @@ "pull_request_creation_policy": "all", "topics": [ "cve", + "cve-2026-116000", "poc", "privategpt", + "proof-of-concept", + "responsible-disclosure", + "security-research", "ssrf", "vulnerability-research" ], diff --git a/2026/CVE-2026-116004.json b/2026/CVE-2026-116004.json index ef74db7158..8c4d4144f5 100644 --- a/2026/CVE-2026-116004.json +++ b/2026/CVE-2026-116004.json @@ -14,8 +14,8 @@ "description": "Safe PoC and technical analysis for CVE-2026-116004", "fork": false, "created_at": "2026-10-26T23:13:31Z", - "updated_at": "2026-10-26T23:45:19Z", - "pushed_at": "2026-10-26T23:45:15Z", + "updated_at": "2026-10-31T17:52:04Z", + "pushed_at": "2026-10-31T17:51:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27,8 +27,12 @@ "pull_request_creation_policy": "all", "topics": [ "cve", + "cve-2026-116004", "iframe", "poc", + "proof-of-concept", + "responsible-disclosure", + "security-research", "vulnerability-research", "xss" ], diff --git a/2026/CVE-2026-120218.json b/2026/CVE-2026-120218.json new file mode 100644 index 0000000000..35d92de3cb --- /dev/null +++ b/2026/CVE-2026-120218.json @@ -0,0 +1,45 @@ +[ + { + "id": 1441108594, + "name": "CVE-2026-120218", + "full_name": "capivara-research\/CVE-2026-120218", + "owner": { + "login": "capivara-research", + "id": 287438663, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4", + "html_url": "https:\/\/github.com\/capivara-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-120218", + "description": "CVE-2026-120218: bilingual TypeMill stored XSS analysis and safe SVG\/XSLT PoC", + "fork": false, + "created_at": "2026-10-31T17:45:25Z", + "updated_at": "2026-10-31T17:58:32Z", + "pushed_at": "2026-10-31T17:58:29Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-120218", + "cwe-79", + "proof-of-concept", + "responsible-disclosure", + "security-research", + "stored-xss", + "svg", + "typemill", + "xslt" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-18649.json b/2026/CVE-2026-18649.json index 260609a074..7f16c371aa 100644 --- a/2026/CVE-2026-18649.json +++ b/2026/CVE-2026-18649.json @@ -31,5 +31,38 @@ "watchers": 4, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441194745, + "name": "cve-2026-18649", + "full_name": "C3viche\/cve-2026-18649", + "owner": { + "login": "C3viche", + "id": 28328104, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28328104?v=4", + "html_url": "https:\/\/github.com\/C3viche", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/C3viche\/cve-2026-18649", + "description": "GStreamer RTP Depayloader Memory Exhaustion Analysis", + "fork": false, + "created_at": "2026-10-31T19:37:00Z", + "updated_at": "2026-10-31T19:38:34Z", + "pushed_at": "2026-10-31T19:38:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-21858.json b/2026/CVE-2026-21858.json index cc5e92b88c..00749cf630 100644 --- a/2026/CVE-2026-21858.json +++ b/2026/CVE-2026-21858.json @@ -19,7 +19,7 @@ "stargazers_count": 303, "watchers_count": 303, "has_discussions": false, - "forks_count": 58, + "forks_count": 60, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -36,7 +36,7 @@ "vulnerability" ], "visibility": "public", - "forks": 58, + "forks": 60, "watchers": 303, "score": 0, "subscribers_count": 4 diff --git a/2026/CVE-2026-27912.json b/2026/CVE-2026-27912.json index fd909c599a..3787b18a9e 100644 --- a/2026/CVE-2026-27912.json +++ b/2026/CVE-2026-27912.json @@ -14,10 +14,10 @@ "description": "POC tool for ResetNightmare (CVE-2026-27912)", "fork": false, "created_at": "2026-08-02T12:36:16Z", - "updated_at": "2026-10-20T16:49:26Z", + "updated_at": "2026-10-31T19:38:11Z", "pushed_at": "2026-08-20T16:44:53Z", - "stargazers_count": 223, - "watchers_count": 223, + "stargazers_count": 224, + "watchers_count": 224, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 36, - "watchers": 223, + "watchers": 224, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-32202.json b/2026/CVE-2026-32202.json index 019ddf6373..c0c3362c4b 100644 --- a/2026/CVE-2026-32202.json +++ b/2026/CVE-2026-32202.json @@ -68,15 +68,15 @@ { "id": 1276192069, "name": "CVE-2026-32202", - "full_name": "f0xox\/CVE-2026-32202", + "full_name": "foxfxfxx\/CVE-2026-32202", "owner": { - "login": "f0xox", + "login": "foxfxfxx", "id": 235265419, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235265419?v=4", - "html_url": "https:\/\/github.com\/f0xox", + "html_url": "https:\/\/github.com\/foxfxfxx", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/f0xox\/CVE-2026-32202", + "html_url": "https:\/\/github.com\/foxfxfxx\/CVE-2026-32202", "description": null, "fork": false, "created_at": "2026-06-21T16:51:33Z", diff --git a/2026/CVE-2026-36425.json b/2026/CVE-2026-36425.json index ab966e1895..6ca928d40c 100644 --- a/2026/CVE-2026-36425.json +++ b/2026/CVE-2026-36425.json @@ -70,5 +70,44 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440956565, + "name": "whatsapp-valleyrat-analysis", + "full_name": "MacAwad\/whatsapp-valleyrat-analysis", + "owner": { + "login": "MacAwad", + "id": 266111379, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266111379?v=4", + "html_url": "https:\/\/github.com\/MacAwad", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MacAwad\/whatsapp-valleyrat-analysis", + "description": "WhatsApp-delivered Winos 4.0 \/ ValleyRAT stager: DLL sideloading, BYOVD Defender kill (CVE-2026-36425), custom C2 protocol on TCP 443, and previously unreported C2 infrastructure.", + "fork": false, + "created_at": "2026-10-31T14:50:14Z", + "updated_at": "2026-10-31T15:20:22Z", + "pushed_at": "2026-10-31T15:20:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "byovd", + "dfir", + "malware-analysis", + "threat-intelligence", + "valleyrat" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-39808.json b/2026/CVE-2026-39808.json index 88b298b251..290b5ef25c 100644 --- a/2026/CVE-2026-39808.json +++ b/2026/CVE-2026-39808.json @@ -224,7 +224,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -232,7 +232,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index acc9f8c874..9946cd3c5c 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1383,12 +1383,12 @@ "description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.", "fork": false, "created_at": "2026-10-02T18:29:26Z", - "updated_at": "2026-10-31T04:13:46Z", + "updated_at": "2026-10-31T17:40:28Z", "pushed_at": "2026-10-05T15:01:25Z", - "stargazers_count": 59, - "watchers_count": 59, + "stargazers_count": 61, + "watchers_count": 61, "has_discussions": false, - "forks_count": 26, + "forks_count": 27, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1396,8 +1396,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 26, - "watchers": 59, + "forks": 27, + "watchers": 61, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index f4a4da66ab..13946ecec2 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -183,10 +183,10 @@ "description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation", "fork": false, "created_at": "2026-07-09T22:46:15Z", - "updated_at": "2026-10-30T12:27:03Z", + "updated_at": "2026-10-31T13:47:57Z", "pushed_at": "2026-10-30T06:00:18Z", - "stargazers_count": 67, - "watchers_count": 67, + "stargazers_count": 68, + "watchers_count": 68, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -210,7 +210,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 67, + "watchers": 68, "score": 0, "subscribers_count": 1 }, @@ -366,7 +366,7 @@ "stargazers_count": 439, "watchers_count": 439, "has_discussions": false, - "forks_count": 94, + "forks_count": 93, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -381,7 +381,7 @@ "root" ], "visibility": "public", - "forks": 94, + "forks": 93, "watchers": 439, "score": 0, "subscribers_count": 14 @@ -995,12 +995,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-31T11:33:11Z", + "updated_at": "2026-10-31T16:20:09Z", "pushed_at": "2026-09-03T03:21:42Z", "stargazers_count": 1515, "watchers_count": 1515, "has_discussions": false, - "forks_count": 303, + "forks_count": 302, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1008,7 +1008,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 303, + "forks": 302, "watchers": 1515, "score": 0, "subscribers_count": 46 @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-31T13:33:22Z", + "updated_at": "2026-10-31T18:01:45Z", "pushed_at": "2026-10-27T12:02:30Z", - "stargazers_count": 2445, - "watchers_count": 2445, + "stargazers_count": 2455, + "watchers_count": 2455, "has_discussions": true, - "forks_count": 596, + "forks_count": 599, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 596, - "watchers": 2445, + "forks": 599, + "watchers": 2455, "score": 0, "subscribers_count": 44 }, @@ -2044,10 +2044,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-31T07:23:00Z", + "updated_at": "2026-10-31T19:28:41Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 481, - "watchers_count": 481, + "stargazers_count": 482, + "watchers_count": 482, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2065,7 +2065,7 @@ ], "visibility": "public", "forks": 72, - "watchers": 481, + "watchers": 482, "score": 0, "subscribers_count": 8 }, @@ -2612,7 +2612,7 @@ "description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本", "fork": false, "created_at": "2026-08-12T10:05:38Z", - "updated_at": "2026-10-30T07:35:53Z", + "updated_at": "2026-10-31T16:54:44Z", "pushed_at": "2026-08-12T10:05:44Z", "stargazers_count": 59, "watchers_count": 59, @@ -2788,10 +2788,10 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-10-31T10:26:50Z", + "updated_at": "2026-10-31T13:57:04Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 272, - "watchers_count": 272, + "stargazers_count": 273, + "watchers_count": 273, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -2802,7 +2802,7 @@ "topics": [], "visibility": "public", "forks": 30, - "watchers": 272, + "watchers": 273, "score": 0, "subscribers_count": 1 }, @@ -2920,8 +2920,8 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-31T09:31:21Z", - "pushed_at": "2026-10-31T09:21:06Z", + "updated_at": "2026-10-31T14:08:45Z", + "pushed_at": "2026-10-31T15:20:59Z", "stargazers_count": 98, "watchers_count": 98, "has_discussions": false, @@ -2968,10 +2968,10 @@ "description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices", "fork": false, "created_at": "2026-08-17T16:57:57Z", - "updated_at": "2026-10-29T13:28:10Z", + "updated_at": "2026-10-31T15:33:22Z", "pushed_at": "2026-10-24T13:35:00Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 53, + "watchers_count": 53, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -2982,7 +2982,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 51, + "watchers": 53, "score": 0, "subscribers_count": 2 }, @@ -3397,10 +3397,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-31T06:41:49Z", + "updated_at": "2026-10-31T15:45:05Z", "pushed_at": "2026-10-23T06:52:34Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 88, + "watchers_count": 88, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -3411,7 +3411,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 87, + "watchers": 88, "score": 0, "subscribers_count": 0 }, @@ -5566,8 +5566,8 @@ "description": "GhostLock (CVE-2026-43499) PC-side driver for iQOO Neo9 (PD2338): boot-window campaign over adb, temporary root via KernelSU late-load. One bash script + one payload pack.", "fork": false, "created_at": "2026-10-17T20:56:33Z", - "updated_at": "2026-10-30T15:41:13Z", - "pushed_at": "2026-10-30T15:41:09Z", + "updated_at": "2026-10-31T14:55:02Z", + "pushed_at": "2026-10-31T14:55:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": true, diff --git a/2026/CVE-2026-43664.json b/2026/CVE-2026-43664.json index de9c2c7d53..0a6d975162 100644 --- a/2026/CVE-2026-43664.json +++ b/2026/CVE-2026-43664.json @@ -14,12 +14,12 @@ "description": "AirPods Bluetooth MAC Address Disclosure via NSUserDefaults", "fork": false, "created_at": "2026-10-28T10:50:39Z", - "updated_at": "2026-10-30T15:55:14Z", + "updated_at": "2026-10-31T17:09:22Z", "pushed_at": "2026-10-29T09:28:15Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 12, + "forks": 1, + "watchers": 13, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-58882.json b/2026/CVE-2026-58882.json new file mode 100644 index 0000000000..8ae4dbe850 --- /dev/null +++ b/2026/CVE-2026-58882.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441183102, + "name": "WapGuard", + "full_name": "Ignema\/WapGuard", + "owner": { + "login": "Ignema", + "id": 58748389, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58748389?v=4", + "html_url": "https:\/\/github.com\/Ignema", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ignema\/WapGuard", + "description": "Tiny Shizuku app that clears stuck 'SMS of Death' (CVE-2026-58882) WAP Push messages. Material 3 Expressive.", + "fork": false, + "created_at": "2026-10-31T19:20:57Z", + "updated_at": "2026-10-31T19:24:41Z", + "pushed_at": "2026-10-31T19:25:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-59310.json b/2026/CVE-2026-59310.json index 0a57ef93b3..2b6380baf3 100644 --- a/2026/CVE-2026-59310.json +++ b/2026/CVE-2026-59310.json @@ -84,10 +84,10 @@ "description": "CVE-2026-59310-POC 仅用于自测，请勿用于攻击", "fork": false, "created_at": "2026-09-25T16:05:26Z", - "updated_at": "2026-10-25T14:12:08Z", + "updated_at": "2026-10-31T16:14:43Z", "pushed_at": "2026-09-25T16:12:44Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -98,7 +98,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 3ad857054d..c8542b0e38 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -19,7 +19,7 @@ "stargazers_count": 809, "watchers_count": 809, "has_discussions": false, - "forks_count": 186, + "forks_count": 187, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,7 +31,7 @@ "wp2shell-poc" ], "visibility": "public", - "forks": 186, + "forks": 187, "watchers": 809, "score": 0, "subscribers_count": 3 diff --git a/2026/CVE-2026-63686.json b/2026/CVE-2026-63686.json index 2f8aed28bd..de19c8b8ee 100644 --- a/2026/CVE-2026-63686.json +++ b/2026/CVE-2026-63686.json @@ -14,7 +14,7 @@ "description": "CVE-2026-63686 demo", "fork": false, "created_at": "2026-10-31T08:33:10Z", - "updated_at": "2026-10-31T11:27:48Z", + "updated_at": "2026-10-31T14:43:19Z", "pushed_at": "2026-10-31T11:18:18Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index cde3bca5fd..fb47883694 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,12 +564,12 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-31T08:02:03Z", - "pushed_at": "2026-10-30T11:38:26Z", - "stargazers_count": 19, - "watchers_count": 19, + "updated_at": "2026-10-31T15:55:40Z", + "pushed_at": "2026-10-31T15:55:34Z", + "stargazers_count": 20, + "watchers_count": 20, "has_discussions": false, - "forks_count": 7, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -577,8 +577,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, - "watchers": 19, + "forks": 8, + "watchers": 20, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-77396.json b/2026/CVE-2026-77396.json new file mode 100644 index 0000000000..4079db9c1c --- /dev/null +++ b/2026/CVE-2026-77396.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441079232, + "name": "CVE-2026-77396", + "full_name": "saretawa\/CVE-2026-77396", + "owner": { + "login": "saretawa", + "id": 68328156, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68328156?v=4", + "html_url": "https:\/\/github.com\/saretawa", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/saretawa\/CVE-2026-77396", + "description": null, + "fork": false, + "created_at": "2026-10-31T17:10:20Z", + "updated_at": "2026-10-31T17:10:31Z", + "pushed_at": "2026-10-31T17:10:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-84383.json b/2026/CVE-2026-84383.json index 490c7e5adb..ae141f374f 100644 --- a/2026/CVE-2026-84383.json +++ b/2026/CVE-2026-84383.json @@ -14,10 +14,10 @@ "description": "Docker lab for validating CVE-2026-84383 in libheif through Discourse", "fork": false, "created_at": "2026-09-29T17:40:08Z", - "updated_at": "2026-10-20T16:49:49Z", + "updated_at": "2026-10-31T14:44:59Z", "pushed_at": "2026-09-29T17:54:51Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-88771.json b/2026/CVE-2026-88771.json index 013376f644..8a18627296 100644 --- a/2026/CVE-2026-88771.json +++ b/2026/CVE-2026-88771.json @@ -113,7 +113,7 @@ "description": "Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771–88778), CTX697174, CTX697191 (SAML RCE) and CTX697263 php2shell (fixed in 14.1-73.49 \/ 13.1-64.32): build, CVE preconditions, SAML, mgmt exposure, MFA, upgrade risks + IoC sweep with every public IoC (webshells, implants, 133 attacker IPs).", "fork": false, "created_at": "2026-09-28T11:20:30Z", - "updated_at": "2026-10-29T19:42:30Z", + "updated_at": "2026-10-31T17:38:52Z", "pushed_at": "2026-10-27T21:30:47Z", "stargazers_count": 22, "watchers_count": 22, diff --git a/2026/CVE-2026-89633.json b/2026/CVE-2026-89633.json new file mode 100644 index 0000000000..c50741af66 --- /dev/null +++ b/2026/CVE-2026-89633.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441073595, + "name": "CVE-2026-89633", + "full_name": "woshigenm\/CVE-2026-89633", + "owner": { + "login": "woshigenm", + "id": 99122353, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4", + "html_url": "https:\/\/github.com\/woshigenm", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-89633", + "description": null, + "fork": false, + "created_at": "2026-10-31T17:03:47Z", + "updated_at": "2026-10-31T18:20:23Z", + "pushed_at": "2026-10-31T17:35:01Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-90931.json b/2026/CVE-2026-90931.json index 20d58fcd59..3329b8a3a3 100644 --- a/2026/CVE-2026-90931.json +++ b/2026/CVE-2026-90931.json @@ -14,8 +14,8 @@ "description": "CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC", "fork": false, "created_at": "2026-10-26T23:39:24Z", - "updated_at": "2026-10-26T23:40:26Z", - "pushed_at": "2026-10-26T23:39:30Z", + "updated_at": "2026-10-31T17:52:06Z", + "pushed_at": "2026-10-31T17:51:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27,9 +27,12 @@ "pull_request_creation_policy": "all", "topics": [ "cve", + "cve-2026-90931", "cybersecurity", "laradashboard", "proof-of-concept", + "responsible-disclosure", + "security-research", "xss" ], "visibility": "public", diff --git a/2026/CVE-2026-90932.json b/2026/CVE-2026-90932.json index ba21ed85cf..6222241099 100644 --- a/2026/CVE-2026-90932.json +++ b/2026/CVE-2026-90932.json @@ -14,8 +14,8 @@ "description": "CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion\/write — bilingual analysis and safe PoC", "fork": false, "created_at": "2026-10-26T23:39:32Z", - "updated_at": "2026-10-26T23:44:21Z", - "pushed_at": "2026-10-26T23:39:38Z", + "updated_at": "2026-10-31T17:52:07Z", + "pushed_at": "2026-10-31T17:51:53Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -27,10 +27,13 @@ "pull_request_creation_policy": "all", "topics": [ "cve", + "cve-2026-90932", "cybersecurity", "laradashboard", "path-traversal", - "proof-of-concept" + "proof-of-concept", + "responsible-disclosure", + "security-research" ], "visibility": "public", "forks": 1, diff --git a/2026/CVE-2026-92424.json b/2026/CVE-2026-92424.json index 6c096f75d9..28d8c40e05 100644 --- a/2026/CVE-2026-92424.json +++ b/2026/CVE-2026-92424.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-10-29T19:06:54Z", - "updated_at": "2026-10-29T19:07:40Z", - "pushed_at": "2026-10-29T19:07:36Z", + "updated_at": "2026-10-31T19:29:23Z", + "pushed_at": "2026-10-31T19:29:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-96652.json b/2026/CVE-2026-96652.json index de61af69dd..ac9c7360be 100644 --- a/2026/CVE-2026-96652.json +++ b/2026/CVE-2026-96652.json @@ -52,7 +52,7 @@ "stargazers_count": 103, "watchers_count": 103, "has_discussions": false, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 16, + "forks": 17, "watchers": 103, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-97206.json b/2026/CVE-2026-97206.json index 09ae36845e..58e75d1aad 100644 --- a/2026/CVE-2026-97206.json +++ b/2026/CVE-2026-97206.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-10-22T07:12:04Z", - "updated_at": "2026-10-29T17:24:28Z", - "pushed_at": "2026-10-29T17:24:23Z", + "updated_at": "2026-10-31T14:17:01Z", + "pushed_at": "2026-10-31T14:16:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index b13bb2668c..fb73c35e0e 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -52,7 +52,7 @@ "stargazers_count": 65, "watchers_count": 65, "has_discussions": false, - "forks_count": 10, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, + "forks": 11, "watchers": 65, "score": 0, "subscribers_count": 0 @@ -80,10 +80,10 @@ "description": "CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering", "fork": false, "created_at": "2026-10-17T18:03:59Z", - "updated_at": "2026-10-26T08:51:03Z", + "updated_at": "2026-10-31T17:49:56Z", "pushed_at": "2026-10-19T00:41:51Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 9b4f693325..1ff3909d6a 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -52,7 +52,7 @@ "stargazers_count": 40, "watchers_count": 40, "has_discussions": false, - "forks_count": 16, + "forks_count": 18, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 16, + "forks": 18, "watchers": 40, "score": 0, "subscribers_count": 0 @@ -146,7 +146,7 @@ "description": "CVE-2026-98260 temporary root for HONOR Win2 BRM-AN00, handed to BakaSU. No flashing.", "fork": false, "created_at": "2026-10-24T18:14:12Z", - "updated_at": "2026-10-27T19:44:07Z", + "updated_at": "2026-10-31T15:47:07Z", "pushed_at": "2026-10-24T18:16:47Z", "stargazers_count": 1, "watchers_count": 1, @@ -179,8 +179,8 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-30T09:51:50Z", - "pushed_at": "2026-10-25T19:06:56Z", + "updated_at": "2026-10-31T19:33:45Z", + "pushed_at": "2026-10-31T19:33:42Z", "stargazers_count": 29, "watchers_count": 29, "has_discussions": false, @@ -376,10 +376,10 @@ "description": "REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。", "fork": false, "created_at": "2026-10-26T09:25:45Z", - "updated_at": "2026-10-31T05:09:02Z", + "updated_at": "2026-10-31T18:32:06Z", "pushed_at": "2026-10-31T05:08:59Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -390,7 +390,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -409,10 +409,10 @@ "description": null, "fork": false, "created_at": "2026-10-26T09:32:43Z", - "updated_at": "2026-10-31T12:37:07Z", + "updated_at": "2026-10-31T16:41:26Z", "pushed_at": "2026-10-26T09:50:29Z", - "stargazers_count": 38, - "watchers_count": 38, + "stargazers_count": 39, + "watchers_count": 39, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -423,7 +423,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 38, + "watchers": 39, "score": 0, "subscribers_count": 0 }, @@ -552,10 +552,10 @@ "description": "6.12.69-android16-6-g242e1a07f878", "fork": false, "created_at": "2026-10-27T12:53:47Z", - "updated_at": "2026-10-31T08:47:54Z", + "updated_at": "2026-10-31T16:45:27Z", "pushed_at": "2026-10-27T14:13:02Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -566,7 +566,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 36, + "watchers": 37, "score": 0, "subscribers_count": 0 }, @@ -730,8 +730,8 @@ "description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md", "fork": false, "created_at": "2026-10-28T16:54:41Z", - "updated_at": "2026-10-31T03:49:53Z", - "pushed_at": "2026-10-31T03:49:49Z", + "updated_at": "2026-10-31T16:00:19Z", + "pushed_at": "2026-10-31T16:00:14Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -768,7 +768,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -776,7 +776,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 3, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -796,12 +796,12 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-10-31T11:33:18Z", + "updated_at": "2026-10-31T18:57:05Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 39, + "watchers_count": 39, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -809,8 +809,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 21, - "watchers": 37, + "forks": 22, + "watchers": 39, "score": 0, "subscribers_count": 0 }, @@ -829,12 +829,12 @@ "description": "CVE 2026 98260 vivo x fold6 poc", "fork": false, "created_at": "2026-10-29T09:36:16Z", - "updated_at": "2026-10-31T04:13:51Z", + "updated_at": "2026-10-31T16:38:51Z", "pushed_at": "2026-10-29T09:47:49Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -842,8 +842,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 4, + "forks": 1, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -910,10 +910,10 @@ "description": "Verified CVE-2026-98260 Android port for Xiaomi 15 dada OS4.0.0.22.XOCCNXM", "fork": false, "created_at": "2026-10-29T13:48:03Z", - "updated_at": "2026-10-29T13:56:14Z", + "updated_at": "2026-10-31T15:01:06Z", "pushed_at": "2026-10-29T13:56:10Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -924,7 +924,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index fc2aec2a68..814f8d0225 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-10-29T14:58:31Z", - "updated_at": "2026-10-30T10:56:40Z", - "pushed_at": "2026-10-30T10:56:36Z", + "updated_at": "2026-10-31T14:18:25Z", + "pushed_at": "2026-10-31T14:18:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -218,12 +218,12 @@ "description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).", "fork": false, "created_at": "2026-10-30T00:22:53Z", - "updated_at": "2026-10-31T10:37:19Z", + "updated_at": "2026-10-31T16:18:04Z", "pushed_at": "2026-10-31T06:38:04Z", "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -238,7 +238,7 @@ "use-after-free" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 7, "score": 0, "subscribers_count": 0 @@ -473,12 +473,12 @@ "description": "Local kernel version checker, remote MPTCP capability probe, and interactive scan-and-probe CLI for assessing exposure to the Linux kernel IPv4 TCP use-after-free (CVSS 9.8).", "fork": false, "created_at": "2026-10-30T09:56:32Z", - "updated_at": "2026-10-30T10:35:56Z", + "updated_at": "2026-10-31T16:08:47Z", "pushed_at": "2026-10-30T10:19:43Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -505,8 +505,8 @@ "vulnerability-detection" ], "visibility": "public", - "forks": 0, - "watchers": 1, + "forks": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -525,12 +525,12 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-10-31T12:05:34Z", + "updated_at": "2026-10-31T16:55:01Z", "pushed_at": "2026-10-30T13:51:44Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -553,8 +553,8 @@ "vulnerability-scanner" ], "visibility": "public", - "forks": 0, - "watchers": 5, + "forks": 1, + "watchers": 6, "score": 0, "subscribers_count": 0 }, @@ -606,10 +606,10 @@ "description": "You should patch, but not worry about CVE-2026-98432", "fork": false, "created_at": "2026-10-30T15:38:53Z", - "updated_at": "2026-10-31T12:07:12Z", + "updated_at": "2026-10-31T14:47:09Z", "pushed_at": "2026-10-30T16:10:03Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -620,7 +620,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -672,10 +672,10 @@ "description": "Proof-only PoC for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution", "fork": false, "created_at": "2026-10-30T16:36:43Z", - "updated_at": "2026-10-31T11:30:35Z", + "updated_at": "2026-10-31T18:39:01Z", "pushed_at": "2026-10-30T16:40:41Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -692,7 +692,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -1055,8 +1055,8 @@ "description": "Check an Ubuntu host for CVE-2026-98432 and, after you confirm, apply the interim Red Hat RHSB-2026-016 mitigation. Ubuntu 20.04 to 26.10.", "fork": false, "created_at": "2026-10-31T10:34:49Z", - "updated_at": "2026-10-31T10:38:29Z", - "pushed_at": "2026-10-31T10:38:26Z", + "updated_at": "2026-10-31T17:03:37Z", + "pushed_at": "2026-10-31T17:03:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1088,8 +1088,8 @@ "description": "eBPF (XDP\/tc) mitigation for CVE-2026-98432 \/ RHSB-2026-016 - untested draft", "fork": false, "created_at": "2026-10-31T11:25:56Z", - "updated_at": "2026-10-31T13:26:10Z", - "pushed_at": "2026-10-31T13:26:06Z", + "updated_at": "2026-10-31T19:06:03Z", + "pushed_at": "2026-10-31T19:06:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1121,8 +1121,74 @@ "description": null, "fork": false, "created_at": "2026-10-31T13:14:39Z", - "updated_at": "2026-10-31T13:43:29Z", - "pushed_at": "2026-10-31T13:43:26Z", + "updated_at": "2026-10-31T14:48:59Z", + "pushed_at": "2026-10-31T14:48:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441002171, + "name": "debian-cve-2026-98432-fix", + "full_name": "AronWang001\/debian-cve-2026-98432-fix", + "owner": { + "login": "AronWang001", + "id": 260259579, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260259579?v=4", + "html_url": "https:\/\/github.com\/AronWang001", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AronWang001\/debian-cve-2026-98432-fix", + "description": "One-click kernel security update for CVE-2026-98432 on Debian 12\/13.", + "fork": false, + "created_at": "2026-10-31T15:41:12Z", + "updated_at": "2026-10-31T19:22:36Z", + "pushed_at": "2026-10-31T19:28:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441022553, + "name": "CVE-2026-98432", + "full_name": "googlesky\/CVE-2026-98432", + "owner": { + "login": "googlesky", + "id": 4094347, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4", + "html_url": "https:\/\/github.com\/googlesky", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/googlesky\/CVE-2026-98432", + "description": "PoC for CVE-2026-98432 (Linux kernel IPv4 TCP inet_opt\/ireq_opt use-after-free, CVSS 9.8): KASAN-verified UAF reproduction in inet_csk_route_req with A\/B fixed-kernel control", + "fork": false, + "created_at": "2026-10-31T16:04:50Z", + "updated_at": "2026-10-31T16:10:28Z", + "pushed_at": "2026-10-31T16:10:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false,