nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/06 06:48:24

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-06 15:48:24 +09:00
1 parent 68437a8922
commit db5a0cc8bd
79 files changed
+442 -413
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-06-06T00:06:12Z",
"pushed_at": "2026-06-06T00:06:08Z",
"updated_at": "2026-06-06T02:56:26Z",
"pushed_at": "2026-06-06T02:56:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-0199.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF\/PPSX file and deliver metasploit \/ meterpreter \/ other payload to victim without any complex configuration.",
"fork": false,
"created_at": "2017-04-17T08:10:07Z",
"updated_at": "2026-05-07T08:13:45Z",
"updated_at": "2026-06-06T05:31:58Z",
"pushed_at": "2017-11-19T11:01:16Z",
"stargazers_count": 725,
"watchers_count": 725,
"stargazers_count": 724,
"watchers_count": 724,
"has_discussions": false,
"forks_count": 255,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 255,
"watchers": 725,
"watchers": 724,
"score": 0,
"subscribers_count": 43
},
2017/CVE-2017-1000253.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Linux Kernel 3.10.0-514.21.2.el7.x86_64 \/ 3.10.0-514.26.1.el7.x86_64 (CentOS 7) - SUID Position Independent Executable 'PIE' Local Privilege Escalation",
"fork": false,
"created_at": "2022-10-16T23:08:16Z",
"updated_at": "2026-06-03T20:34:16Z",
"updated_at": "2026-06-06T03:47:32Z",
"pushed_at": "2022-10-16T23:22:39Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -63,7 +63,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
}
2018/CVE-2018-10933.json
+6 -6
View File
@@ -146,12 +146,12 @@
"description": "Script to identify hosts vulnerable to CVE-2018-10933",
"fork": false,
"created_at": "2018-10-17T23:05:10Z",
"updated_at": "2026-04-14T16:43:15Z",
"updated_at": "2026-06-06T04:43:43Z",
"pushed_at": "2018-11-04T17:29:33Z",
"stargazers_count": 234,
"watchers_count": 234,
"stargazers_count": 235,
"watchers_count": 235,
"has_discussions": false,
"forks_count": 52,
"forks_count": 53,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,8 +159,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 52,
"watchers": 234,
"forks": 53,
"watchers": 235,
"score": 0,
"subscribers_count": 17
},
2018/CVE-2018-14634.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "proof-of-concept (PoC) for linux dists based on Debian, CentOS and RedHat - exploit 1",
"fork": false,
"created_at": "2018-10-08T18:12:03Z",
"updated_at": "2026-05-05T15:52:30Z",
"updated_at": "2026-06-06T03:41:34Z",
"pushed_at": "2018-10-09T16:44:32Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2019/CVE-2019-1003000.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Jenkins RCE Proof-of-Concept: SECURITY-1266 \/ CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)",
"fork": false,
"created_at": "2019-02-15T05:59:24Z",
"updated_at": "2026-05-14T02:54:02Z",
"updated_at": "2026-06-06T00:42:37Z",
"pushed_at": "2019-04-01T13:19:49Z",
"stargazers_count": 316,
"watchers_count": 316,
"stargazers_count": 317,
"watchers_count": 317,
"has_discussions": false,
"forks_count": 87,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 87,
"watchers": 316,
"watchers": 317,
"score": 0,
"subscribers_count": 3
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-05T23:20:31Z",
"pushed_at": "2026-06-05T23:20:27Z",
"updated_at": "2026-06-06T05:29:39Z",
"pushed_at": "2026-06-06T05:29:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-06-06T00:06:04Z",
"pushed_at": "2026-06-06T00:06:01Z",
"updated_at": "2026-06-06T02:56:20Z",
"pushed_at": "2026-06-06T02:56:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1350.json
+2 -2
View File
@@ -105,7 +105,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 6,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -113,7 +113,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 4,
"watchers": 4,
"score": 0,
"subscribers_count": 2
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-05T23:36:03Z",
"pushed_at": "2026-06-05T23:35:59Z",
"updated_at": "2026-06-06T05:29:12Z",
"pushed_at": "2026-06-06T05:29:08Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-17103.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"forks": 22,
"watchers": 26,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-27342.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)",
"fork": false,
"created_at": "2021-05-15T01:22:19Z",
"updated_at": "2026-01-18T23:55:49Z",
"updated_at": "2026-06-06T02:24:13Z",
"pushed_at": "2021-05-15T01:26:07Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
}
2021/CVE-2021-3129.json
+4 -4
View File
@@ -348,10 +348,10 @@
"description": "Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)",
"fork": false,
"created_at": "2022-04-16T17:22:55Z",
"updated_at": "2026-05-27T16:19:28Z",
"updated_at": "2026-06-06T04:59:26Z",
"pushed_at": "2026-05-21T06:40:47Z",
"stargazers_count": 145,
"watchers_count": 145,
"stargazers_count": 146,
"watchers_count": 146,
"has_discussions": false,
"forks_count": 27,
"allow_forking": true,
@@ -377,7 +377,7 @@
],
"visibility": "public",
"forks": 27,
"watchers": 145,
"watchers": 146,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-06T00:08:24Z",
"pushed_at": "2026-06-06T00:08:20Z",
"updated_at": "2026-06-06T04:19:32Z",
"pushed_at": "2026-06-06T04:19:29Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-36260.json
+1 -1
View File
@@ -264,7 +264,7 @@
"forks": 63,
"watchers": 358,
"score": 0,
"subscribers_count": 5
"subscribers_count": 4
},
{
"id": 894493486,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-06-06T00:12:56Z",
"pushed_at": "2026-06-06T00:12:52Z",
"updated_at": "2026-06-06T03:03:44Z",
"pushed_at": "2026-06-06T03:03:40Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+3 -3
View File
@@ -2987,7 +2987,7 @@
"forks": 6,
"watchers": 38,
"score": 0,
"subscribers_count": 15
"subscribers_count": 14
},
{
"id": 437560690,
@@ -3189,7 +3189,7 @@
"forks": 16,
"watchers": 72,
"score": 0,
"subscribers_count": 10
"subscribers_count": 11
},
{
"id": 437583301,
@@ -14064,7 +14064,7 @@
"fork": false,
"created_at": "2026-05-31T23:20:17Z",
"updated_at": "2026-06-04T09:14:07Z",
"pushed_at": "2026-06-05T04:19:36Z",
"pushed_at": "2026-06-06T04:02:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": true,
2022/CVE-2022-0847.json
+33
View File
@@ -3716,5 +3716,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260909019,
"name": "CVE-2022-0847-Dirty-Pipe",
"full_name": "t1ckprivate\/CVE-2022-0847-Dirty-Pipe",
"owner": {
"login": "t1ckprivate",
"id": 256938688,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/256938688?v=4",
"html_url": "https:\/\/github.com\/t1ckprivate",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t1ckprivate\/CVE-2022-0847-Dirty-Pipe",
"description": null,
"fork": false,
"created_at": "2026-06-06T02:35:22Z",
"updated_at": "2026-06-06T02:38:19Z",
"pushed_at": "2026-06-06T02:40:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-06-05T20:41:49Z",
"updated_at": "2026-06-06T06:20:23Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 561,
"watchers_count": 561,
"stargazers_count": 562,
"watchers_count": 562,
"has_discussions": true,
"forks_count": 73,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 73,
"watchers": 561,
"watchers": 562,
"score": 0,
"subscribers_count": 13
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-06T00:02:26Z",
"pushed_at": "2026-06-06T00:02:22Z",
"updated_at": "2026-06-06T02:52:24Z",
"pushed_at": "2026-06-06T02:52:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-06-05T21:00:05Z",
"pushed_at": "2026-06-05T21:00:01Z",
"updated_at": "2026-06-06T04:00:33Z",
"pushed_at": "2026-06-06T04:00:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-46604.json
+33
View File
@@ -1170,5 +1170,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260986879,
"name": "CVE-2023-46604-RCE",
"full_name": "REGGYRAIDER\/CVE-2023-46604-RCE",
"owner": {
"login": "REGGYRAIDER",
"id": 265893143,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/265893143?v=4",
"html_url": "https:\/\/github.com\/REGGYRAIDER",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/REGGYRAIDER\/CVE-2023-46604-RCE",
"description": "CVE-2023-46604-RCE exploit with Linux reverse shell payload",
"fork": false,
"created_at": "2026-06-06T05:17:40Z",
"updated_at": "2026-06-06T05:18:26Z",
"pushed_at": "2026-06-06T05:18:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-5043.json
-40
View File
@@ -1,40 +0,0 @@
[
{
"id": 743454639,
"name": "CVE-2023-5043",
"full_name": "r0binak\/CVE-2023-5043",
"owner": {
"login": "r0binak",
"id": 80983900,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80983900?v=4",
"html_url": "https:\/\/github.com\/r0binak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/r0binak\/CVE-2023-5043",
"description": "PoC CVE-2023-5043",
"fork": false,
"created_at": "2024-01-15T09:20:35Z",
"updated_at": "2024-01-15T09:27:28Z",
"pushed_at": "2024-01-15T09:25:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"exploit",
"kubernetes",
"nginx",
"poc"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-05T21:00:36Z",
"pushed_at": "2026-06-05T21:00:25Z",
"updated_at": "2026-06-06T04:00:52Z",
"pushed_at": "2026-06-06T04:00:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-06-05T21:48:50Z",
"pushed_at": "2026-06-05T21:48:46Z",
"updated_at": "2026-06-06T04:47:19Z",
"pushed_at": "2026-06-06T04:47:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-36401.json
+2 -2
View File
@@ -686,8 +686,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-30T09:44:57Z",
"updated_at": "2026-05-30T09:46:00Z",
"pushed_at": "2026-05-30T09:45:57Z",
"updated_at": "2026-06-06T01:45:50Z",
"pushed_at": "2026-06-06T01:45:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-51567.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"cyberpanel"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-05T21:07:45Z",
"pushed_at": "2026-06-05T21:07:40Z",
"updated_at": "2026-06-06T04:06:20Z",
"pushed_at": "2026-06-06T04:06:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-05T21:05:12Z",
"pushed_at": "2026-06-05T21:05:08Z",
"updated_at": "2026-06-06T04:05:28Z",
"pushed_at": "2026-06-06T04:05:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-06-05T21:28:11Z",
"pushed_at": "2026-06-05T21:28:08Z",
"updated_at": "2026-06-06T04:27:57Z",
"pushed_at": "2026-06-06T04:27:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-05T22:02:15Z",
"pushed_at": "2026-06-05T22:02:11Z",
"updated_at": "2026-06-06T04:58:50Z",
"pushed_at": "2026-06-06T04:58:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-06T00:07:48Z",
"pushed_at": "2026-06-06T00:07:45Z",
"updated_at": "2026-06-06T02:58:17Z",
"pushed_at": "2026-06-06T02:58:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+10 -10
View File
@@ -14,10 +14,10 @@
"description": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463",
"fork": false,
"created_at": "2025-07-01T11:26:15Z",
"updated_at": "2026-05-30T05:57:28Z",
"updated_at": "2026-06-06T05:44:44Z",
"pushed_at": "2025-11-19T13:30:29Z",
"stargazers_count": 526,
"watchers_count": 526,
"stargazers_count": 527,
"watchers_count": 527,
"has_discussions": false,
"forks_count": 96,
"allow_forking": true,
@@ -46,7 +46,7 @@
],
"visibility": "public",
"forks": 96,
"watchers": 526,
"watchers": 527,
"score": 0,
"subscribers_count": 2
},
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-06-06T00:01:28Z",
"pushed_at": "2026-06-06T00:01:24Z",
"updated_at": "2026-06-06T02:50:53Z",
"pushed_at": "2026-06-06T02:50:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-06T00:09:06Z",
"pushed_at": "2026-06-06T00:09:03Z",
"updated_at": "2026-06-06T02:59:31Z",
"pushed_at": "2026-06-06T02:59:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-06-06T00:09:12Z",
"pushed_at": "2026-06-06T00:09:08Z",
"updated_at": "2026-06-06T02:59:31Z",
"pushed_at": "2026-06-06T02:59:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32756.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.",
"fork": false,
"created_at": "2025-06-05T14:16:31Z",
"updated_at": "2026-06-02T17:09:59Z",
"updated_at": "2026-06-06T01:13:22Z",
"pushed_at": "2025-06-13T07:55:34Z",
"stargazers_count": 201,
"watchers_count": 201,
"stargazers_count": 202,
"watchers_count": 202,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 201,
"watchers": 202,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-06-05T21:17:33Z",
"pushed_at": "2026-06-05T21:17:29Z",
"updated_at": "2026-06-06T04:17:55Z",
"pushed_at": "2026-06-06T04:17:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-06-06T00:08:59Z",
"pushed_at": "2026-06-06T00:08:55Z",
"updated_at": "2026-06-06T02:59:23Z",
"pushed_at": "2026-06-06T02:59:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-06T00:27:02Z",
"pushed_at": "2026-06-06T00:26:59Z",
"updated_at": "2026-06-06T03:18:10Z",
"pushed_at": "2026-06-06T03:18:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-06T00:27:58Z",
"pushed_at": "2026-06-06T00:27:55Z",
"updated_at": "2026-06-06T03:19:11Z",
"pushed_at": "2026-06-06T03:19:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-05T07:24:02Z",
"updated_at": "2026-06-06T03:27:20Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 780,
"watchers_count": 780,
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-06-05T21:26:17Z",
"pushed_at": "2026-06-05T21:26:14Z",
"updated_at": "2026-06-06T04:26:21Z",
"pushed_at": "2026-06-06T04:26:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-06-06T00:03:37Z",
"pushed_at": "2026-06-06T00:03:34Z",
"updated_at": "2026-06-06T02:53:38Z",
"pushed_at": "2026-06-06T02:53:35Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-06T00:03:37Z",
"pushed_at": "2026-06-06T00:03:34Z",
"updated_at": "2026-06-06T02:53:16Z",
"pushed_at": "2026-06-06T02:53:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+34 -34
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-06-05T20:49:54Z",
"pushed_at": "2026-06-05T20:49:50Z",
"updated_at": "2026-06-06T03:50:08Z",
"pushed_at": "2026-06-06T03:50:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-05T20:50:06Z",
"pushed_at": "2026-06-05T20:50:03Z",
"updated_at": "2026-06-06T03:49:16Z",
"pushed_at": "2026-06-06T03:49:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-06-05T20:49:45Z",
"pushed_at": "2026-06-05T20:49:41Z",
"updated_at": "2026-06-06T03:49:24Z",
"pushed_at": "2026-06-06T03:49:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-06-05T20:50:45Z",
"pushed_at": "2026-06-05T20:50:41Z",
"updated_at": "2026-06-06T03:50:34Z",
"pushed_at": "2026-06-06T03:50:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-06-05T20:48:56Z",
"pushed_at": "2026-06-05T20:48:53Z",
"updated_at": "2026-06-06T03:48:50Z",
"pushed_at": "2026-06-06T03:48:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-05T20:50:19Z",
"pushed_at": "2026-06-05T20:50:15Z",
"updated_at": "2026-06-06T03:50:10Z",
"pushed_at": "2026-06-06T03:50:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-06-05T20:53:44Z",
"pushed_at": "2026-06-05T20:53:40Z",
"updated_at": "2026-06-06T03:53:30Z",
"pushed_at": "2026-06-06T03:53:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-05T20:50:23Z",
"pushed_at": "2026-06-05T20:50:19Z",
"updated_at": "2026-06-06T03:50:09Z",
"pushed_at": "2026-06-06T03:50:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-06-05T20:50:46Z",
"pushed_at": "2026-06-05T20:50:42Z",
"updated_at": "2026-06-06T03:50:35Z",
"pushed_at": "2026-06-06T03:50:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1483,7 +1483,7 @@
"stargazers_count": 1414,
"watchers_count": 1414,
"has_discussions": false,
"forks_count": 196,
"forks_count": 197,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1491,7 +1491,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 196,
"forks": 197,
"watchers": 1414,
"score": 0,
"subscribers_count": 10
@@ -12218,8 +12218,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-05T20:49:16Z",
"pushed_at": "2026-06-05T20:49:12Z",
"updated_at": "2026-06-06T03:49:16Z",
"pushed_at": "2026-06-06T03:49:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12303,8 +12303,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-06-05T20:48:27Z",
"pushed_at": "2026-06-05T20:48:23Z",
"updated_at": "2026-06-06T03:48:25Z",
"pushed_at": "2026-06-06T03:48:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12352,8 +12352,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-06-05T20:48:39Z",
"pushed_at": "2026-06-05T20:48:34Z",
"updated_at": "2026-06-06T03:48:24Z",
"pushed_at": "2026-06-06T03:48:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12437,8 +12437,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-06-05T20:50:25Z",
"pushed_at": "2026-06-05T20:50:21Z",
"updated_at": "2026-06-06T03:50:23Z",
"pushed_at": "2026-06-06T03:50:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12639,8 +12639,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-06-05T20:50:22Z",
"pushed_at": "2026-06-05T20:50:18Z",
"updated_at": "2026-06-06T03:50:15Z",
"pushed_at": "2026-06-06T03:50:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12909,8 +12909,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-05T20:55:57Z",
"pushed_at": "2026-06-05T20:55:53Z",
"updated_at": "2026-06-06T03:55:46Z",
"pushed_at": "2026-06-06T03:55:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13430,8 +13430,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-06-05T21:01:20Z",
"pushed_at": "2026-06-05T21:01:15Z",
"updated_at": "2026-06-06T04:01:51Z",
"pushed_at": "2026-06-06T04:01:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-06-05T20:56:40Z",
"pushed_at": "2026-06-05T20:56:36Z",
"updated_at": "2026-06-06T03:56:22Z",
"pushed_at": "2026-06-06T03:56:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-06-05T21:17:31Z",
"pushed_at": "2026-06-05T21:17:27Z",
"updated_at": "2026-06-06T04:17:55Z",
"pushed_at": "2026-06-06T04:17:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-06-06T00:25:39Z",
"pushed_at": "2026-06-06T00:25:36Z",
"updated_at": "2026-06-06T03:16:51Z",
"pushed_at": "2026-06-06T03:16:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-06-05T20:43:38Z",
"pushed_at": "2026-06-05T20:43:35Z",
"updated_at": "2026-06-06T03:43:29Z",
"pushed_at": "2026-06-06T03:43:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-05T21:54:57Z",
"pushed_at": "2026-06-05T21:54:53Z",
"updated_at": "2026-06-06T04:52:30Z",
"pushed_at": "2026-06-06T04:52:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-05T20:51:20Z",
"pushed_at": "2026-06-05T20:51:15Z",
"updated_at": "2026-06-06T03:51:08Z",
"pushed_at": "2026-06-06T03:51:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-05T21:14:27Z",
"pushed_at": "2026-06-05T21:14:23Z",
"updated_at": "2026-06-06T04:14:25Z",
"pushed_at": "2026-06-06T04:14:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-05T21:40:51Z",
"pushed_at": "2026-06-05T21:40:47Z",
"updated_at": "2026-06-06T04:39:52Z",
"pushed_at": "2026-06-06T04:39:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-05T21:36:20Z",
"pushed_at": "2026-06-05T21:36:16Z",
"updated_at": "2026-06-06T04:35:37Z",
"pushed_at": "2026-06-06T04:35:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-06-05T20:45:16Z",
"pushed_at": "2026-06-05T20:45:12Z",
"updated_at": "2026-06-06T03:44:58Z",
"pushed_at": "2026-06-06T03:44:54Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-06-05T20:55:22Z",
"pushed_at": "2026-06-05T20:55:15Z",
"updated_at": "2026-06-06T03:55:11Z",
"pushed_at": "2026-06-06T03:55:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-06-05T20:57:22Z",
"pushed_at": "2026-06-05T20:57:18Z",
"updated_at": "2026-06-06T03:56:55Z",
"pushed_at": "2026-06-06T03:56:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-05T21:36:20Z",
"pushed_at": "2026-06-05T21:36:16Z",
"updated_at": "2026-06-06T04:35:37Z",
"pushed_at": "2026-06-06T04:35:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2024/CVE-2024-38036.json → 2026/CVE-2026-20245.json
+13 -13
View File
@@ -1,21 +1,21 @@
[
{
"id": 843195399,
"name": "CVE-2024-38036",
"full_name": "hnytgl\/CVE-2024-38036",
"id": 1260960901,
"name": "CVE-2026-20245",
"full_name": "HORKimhab\/CVE-2026-20245",
"owner": {
"login": "hnytgl",
"id": 26022152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4",
"html_url": "https:\/\/github.com\/hnytgl",
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/CVE-2024-38036",
"description": "排查ipv6使用情况",
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-20245",
"description": "CVE-2026-20245 - Cisco SD-WAN - Draft",
"fork": false,
"created_at": "2024-08-16T01:38:21Z",
"updated_at": "2024-08-16T01:44:31Z",
"pushed_at": "2024-08-16T01:44:29Z",
"created_at": "2026-06-06T04:26:16Z",
"updated_at": "2026-06-06T04:26:22Z",
"pushed_at": "2026-06-06T04:26:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-05T21:35:35Z",
"pushed_at": "2026-06-05T21:35:31Z",
"updated_at": "2026-06-06T04:34:46Z",
"pushed_at": "2026-06-06T04:34:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-05T21:34:40Z",
"pushed_at": "2026-06-05T21:34:37Z",
"updated_at": "2026-06-06T04:33:54Z",
"pushed_at": "2026-06-06T04:33:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23744.json
+33
View File
@@ -503,5 +503,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1260976509,
"name": "CVE-2026-23744",
"full_name": "oryk0\/CVE-2026-23744",
"owner": {
"login": "oryk0",
"id": 115665532,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115665532?v=4",
"html_url": "https:\/\/github.com\/oryk0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oryk0\/CVE-2026-23744",
"description": "CVE-2026-23744 Reverse shell",
"fork": false,
"created_at": "2026-06-06T04:57:39Z",
"updated_at": "2026-06-06T05:01:55Z",
"pushed_at": "2026-06-06T05:01:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-06-05T21:25:39Z",
"pushed_at": "2026-06-05T21:25:36Z",
"updated_at": "2026-06-06T04:25:51Z",
"pushed_at": "2026-06-06T04:25:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-05T21:22:00Z",
"pushed_at": "2026-06-05T21:21:56Z",
"updated_at": "2026-06-06T04:22:40Z",
"pushed_at": "2026-06-06T04:22:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-05T21:57:12Z",
"pushed_at": "2026-06-05T21:57:08Z",
"updated_at": "2026-06-06T04:54:23Z",
"pushed_at": "2026-06-06T04:54:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-05T21:38:01Z",
"pushed_at": "2026-06-05T21:37:57Z",
"updated_at": "2026-06-06T04:37:14Z",
"pushed_at": "2026-06-06T04:37:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-05T21:44:11Z",
"pushed_at": "2026-06-05T21:44:07Z",
"updated_at": "2026-06-06T04:42:24Z",
"pushed_at": "2026-06-06T04:42:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-24849.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1261020599,
"name": "CVE-2026-24849",
"full_name": "doany1\/CVE-2026-24849",
"owner": {
"login": "doany1",
"id": 199281076,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199281076?v=4",
"html_url": "https:\/\/github.com\/doany1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/doany1\/CVE-2026-24849",
"description": "Proof-of-concept exploit for CVE-2026-24849, an authenticated path-traversal \/ arbitrary file read in OpenEMR's Fax\/SMS (EtherFax) module. Any authenticated user regardless of privilege level can read arbitrary files from the server filesystem as the web-server user (database credentials, patient documents\/PHI, \/etc\/passwd, …",
"fork": false,
"created_at": "2026-06-06T06:19:10Z",
"updated_at": "2026-06-06T06:22:12Z",
"pushed_at": "2026-06-06T06:20:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-06-05T21:42:04Z",
"pushed_at": "2026-06-05T21:42:01Z",
"updated_at": "2026-06-06T04:41:16Z",
"pushed_at": "2026-06-06T04:41:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-28990.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-28990, an ImageIO bug patched in iOS\/macOS 26.5",
"fork": false,
"created_at": "2026-05-25T12:27:16Z",
"updated_at": "2026-06-06T00:25:15Z",
"updated_at": "2026-06-06T04:27:06Z",
"pushed_at": "2026-06-02T14:04:47Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 2
}
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-06-05T22:02:04Z",
"pushed_at": "2026-06-05T22:02:00Z",
"updated_at": "2026-06-06T04:58:20Z",
"pushed_at": "2026-06-06T04:58:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+8 -74
View File
@@ -439,10 +439,10 @@
"description": "CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2\/3 compatible with ctypes splice fallback",
"fork": false,
"created_at": "2026-04-30T10:49:03Z",
"updated_at": "2026-05-27T05:11:22Z",
"updated_at": "2026-06-06T01:11:30Z",
"pushed_at": "2026-05-06T16:22:13Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -461,7 +461,7 @@
],
"visibility": "public",
"forks": 12,
"watchers": 55,
"watchers": 56,
"score": 0,
"subscribers_count": 0
},
@@ -959,39 +959,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225932886,
"name": "cve-2026-31431-poc",
"full_name": "yuspring\/cve-2026-31431-poc",
"owner": {
"login": "yuspring",
"id": 75129303,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75129303?v=4",
"html_url": "https:\/\/github.com\/yuspring",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yuspring\/cve-2026-31431-poc",
"description": null,
"fork": false,
"created_at": "2026-04-30T19:52:27Z",
"updated_at": "2026-06-05T11:04:52Z",
"pushed_at": "2026-05-01T00:07:59Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225962329,
"name": "copy-fail",
@@ -1141,39 +1108,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1226044650,
"name": "CVE-2026-31431",
"full_name": "offsecguy\/CVE-2026-31431",
"owner": {
"login": "offsecguy",
"id": 77571967,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77571967?v=4",
"html_url": "https:\/\/github.com\/offsecguy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/offsecguy\/CVE-2026-31431",
"description": "Copy Fail is a straight-line logic flaw | C port | CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T23:13:37Z",
"updated_at": "2026-05-01T00:23:06Z",
"pushed_at": "2026-05-01T00:23:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226051708,
"name": "CVE-2026-31431.c",
@@ -5361,8 +5295,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-05T22:23:01Z",
"pushed_at": "2026-06-05T22:22:58Z",
"updated_at": "2026-06-06T05:17:43Z",
"pushed_at": "2026-06-06T05:17:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -6196,8 +6130,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-05T22:23:54Z",
"pushed_at": "2026-06-05T22:23:50Z",
"updated_at": "2026-06-06T05:18:46Z",
"pushed_at": "2026-06-06T05:18:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-05T21:58:22Z",
"pushed_at": "2026-06-05T21:58:18Z",
"updated_at": "2026-06-06T04:55:34Z",
"pushed_at": "2026-06-06T04:55:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-34197.json
+6 -6
View File
@@ -100,8 +100,8 @@
},
{
"id": 1242560997,
"name": "cve-2026-34197",
"full_name": "hnytgl\/cve-2026-34197",
"name": "CVE-2026-34197",
"full_name": "hnytgl\/CVE-2026-34197",
"owner": {
"login": "hnytgl",
"id": 26022152,
@@ -109,12 +109,12 @@
"html_url": "https:\/\/github.com\/hnytgl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/cve-2026-34197",
"description": null,
"html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-34197",
"description": "这是一个面向防守和内网排查的 Apache ActiveMQ Classic 暴露面检测工具，用于辅助评估 CVE-2026-34197 相关风险。",
"fork": false,
"created_at": "2026-05-18T14:36:46Z",
"updated_at": "2026-05-31T04:58:07Z",
"pushed_at": "2026-05-31T04:58:03Z",
"updated_at": "2026-06-06T06:43:20Z",
"pushed_at": "2026-06-06T06:40:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-3609.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-05T07:24:02Z",
"updated_at": "2026-06-06T03:27:20Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 780,
"watchers_count": 780,
2026/CVE-2026-41089.json
+6 -6
View File
@@ -121,11 +121,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/cve-2026-41089-detector",
"description": "Safe detector for CVE-2026-41089 Windows Netlogon RCE",
"description": "这是一个用于防御巡检的 CVE-2026-41089 检测脚本。该漏洞是 Microsoft 在 2026 年 5 月安全更新中披露的 Windows Netlogon 远程代码执行漏洞。",
"fork": false,
"created_at": "2026-06-03T00:59:29Z",
"updated_at": "2026-06-03T02:21:35Z",
"pushed_at": "2026-06-03T02:21:31Z",
"updated_at": "2026-06-06T06:19:49Z",
"pushed_at": "2026-06-06T06:19:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -154,11 +154,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-41089",
"description": "CVE-2026-41089 - Windows Netlogon CLDAP Remote Code Execution Exploit (CVSS 9.8)",
"description": "CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞",
"fork": false,
"created_at": "2026-06-03T02:29:06Z",
"updated_at": "2026-06-05T16:27:25Z",
"pushed_at": "2026-06-03T02:59:47Z",
"updated_at": "2026-06-06T06:37:26Z",
"pushed_at": "2026-06-06T06:37:22Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
2026/CVE-2026-41940.json
+8 -41
View File
@@ -79,39 +79,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1226072271,
"name": "CVE-2026-41940_exploit",
"full_name": "george1-adel\/CVE-2026-41940_exploit",
"owner": {
"login": "george1-adel",
"id": 183099172,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183099172?v=4",
"html_url": "https:\/\/github.com\/george1-adel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/george1-adel\/CVE-2026-41940_exploit",
"description": null,
"fork": false,
"created_at": "2026-05-01T00:17:32Z",
"updated_at": "2026-05-01T20:30:26Z",
"pushed_at": "2026-05-01T00:18:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226107567,
"name": "CVE-2026-41940",
@@ -1443,8 +1410,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-05T22:24:16Z",
"pushed_at": "2026-06-05T22:24:12Z",
"updated_at": "2026-06-06T05:19:02Z",
"pushed_at": "2026-06-06T05:18:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1883,12 +1850,12 @@
"description": "CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel and WHM. This repository is designed to demonstrate its Proof-Of-Concept",
"fork": false,
"created_at": "2026-06-04T17:17:49Z",
"updated_at": "2026-06-06T00:48:26Z",
"updated_at": "2026-06-06T06:43:02Z",
"pushed_at": "2026-06-05T14:05:47Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1901,8 +1868,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 1,
"watchers": 4,
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42588.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1261003065,
"name": "CVE-2026-42588",
"full_name": "hnytgl\/CVE-2026-42588",
"owner": {
"login": "hnytgl",
"id": 26022152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4",
"html_url": "https:\/\/github.com\/hnytgl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-42588",
"description": "CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit)",
"fork": false,
"created_at": "2026-06-06T05:47:28Z",
"updated_at": "2026-06-06T06:20:04Z",
"pushed_at": "2026-06-06T06:20:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42945.json
+8 -8
View File
@@ -727,8 +727,8 @@
},
{
"id": 1242533759,
"name": "cve-2026-42945",
"full_name": "hnytgl\/cve-2026-42945",
"name": "CVE-2026-42945",
"full_name": "hnytgl\/CVE-2026-42945",
"owner": {
"login": "hnytgl",
"id": 26022152,
@@ -736,12 +736,12 @@
"html_url": "https:\/\/github.com\/hnytgl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hnytgl\/cve-2026-42945",
"description": null,
"html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-42945",
"description": "这是一个面向防守和内网排查的 CVE-2026-42945 静态检测工具，用于检查 NGINX ngx_http_rewrite_module 相关配置是否存在高风险 rewrite 组合。",
"fork": false,
"created_at": "2026-05-18T14:09:21Z",
"updated_at": "2026-05-18T14:41:28Z",
"pushed_at": "2026-05-18T14:38:23Z",
"updated_at": "2026-06-06T06:43:44Z",
"pushed_at": "2026-06-06T06:40:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1156,8 +1156,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-26T18:09:23Z",
"updated_at": "2026-05-29T04:59:31Z",
"pushed_at": "2026-05-29T04:59:27Z",
"updated_at": "2026-06-06T05:34:56Z",
"pushed_at": "2026-06-06T05:34:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-44706.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Chatwoot SQL injection in FilterService",
"fork": false,
"created_at": "2026-03-31T20:21:15Z",
"updated_at": "2026-06-05T19:25:53Z",
"updated_at": "2026-06-06T03:08:32Z",
"pushed_at": "2026-06-05T19:25:49Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
"updated_at": "2026-06-05T22:14:03Z",
"updated_at": "2026-06-06T06:33:16Z",
"pushed_at": "2026-05-23T17:24:38Z",
"stargazers_count": 209,
"watchers_count": 209,
"stargazers_count": 214,
"watchers_count": 214,
"has_discussions": false,
"forks_count": 26,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -108,8 +108,8 @@
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 26,
"watchers": 209,
"forks": 28,
"watchers": 214,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-49009.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Mender Server - Authenticated Path Traversal to RCE",
"fork": false,
"created_at": "2026-06-02T08:42:36Z",
"updated_at": "2026-06-03T13:36:07Z",
"pushed_at": "2026-06-03T13:33:34Z",
"updated_at": "2026-06-06T03:06:11Z",
"pushed_at": "2026-06-06T03:06:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-8389.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-04T15:25:26Z",
"updated_at": "2026-06-05T21:10:42Z",
"updated_at": "2026-06-06T06:34:16Z",
"pushed_at": "2026-06-04T15:48:58Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 36,
"watchers_count": 36,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 35,
"watchers": 36,
"score": 0,
"subscribers_count": 0
}
README.md
+20 -19
View File
@@ -895,6 +895,13 @@
- [HORKimhab/CVE-2026-20230](https://github.com/HORKimhab/CVE-2026-20230)
### CVE-2026-20245 (2026-06-04)
<code>A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on an affected system and elevate their privileges as the root user.\r\nTo exploit this vulnerability, the attacker must have netadmin privileges on the affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods. Cisco has observed limited cases where the exploitation of this bug resulted in a configuration change pushed to edge devices.\r\nCisco recommends that customers upgrade to the fixed software that is documented in the that was published on May 14, 2026, and verify the configuration of the edge devices.
</code>
- [HORKimhab/CVE-2026-20245](https://github.com/HORKimhab/CVE-2026-20245)
### CVE-2026-20700 (2026-02-11)
<code>A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.
@@ -1018,6 +1025,7 @@
- [avivyap/CVE-2026-23744](https://github.com/avivyap/CVE-2026-23744)
- [Dahalsamir/CVE-2026-23744-MCPJAM-RCE-exploit](https://github.com/Dahalsamir/CVE-2026-23744-MCPJAM-RCE-exploit)
- [keeieb79/CVE-2026-23744-poc](https://github.com/keeieb79/CVE-2026-23744-poc)
- [oryk0/CVE-2026-23744](https://github.com/oryk0/CVE-2026-23744)
### CVE-2026-23813 (2026-03-11)
@@ -1106,6 +1114,13 @@
- [WhiteTPoison100/Discord-CVE-2026-24332-demo](https://github.com/WhiteTPoison100/Discord-CVE-2026-24332-demo)
### CVE-2026-24849 (2026-02-25)
<code>OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesystem. Any authenticated user (regardless of privilege level) can exploit this vulnerability to read sensitive files. Version 7.0.4 patches the issue.
</code>
- [doany1/CVE-2026-24849](https://github.com/doany1/CVE-2026-24849)
### CVE-2026-25172 (2026-03-10)
<code>Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
@@ -1421,12 +1436,10 @@
- [SeanRickerd/cve-2026-31431](https://github.com/SeanRickerd/cve-2026-31431)
- [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation)
- [devstuff/harden-docker-seccomp](https://github.com/devstuff/harden-docker-seccomp)
- [yuspring/cve-2026-31431-poc](https://github.com/yuspring/cve-2026-31431-poc)
- [Juguitos/copy-fail](https://github.com/Juguitos/copy-fail)
- [liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script](https://github.com/liamromanis101/CVE-2026-31431-Copy-Fail---Vulnerability-Detection-Script)
- [mym0us3r/COPY-FAIL-Detection-with-Wazuh-4.14.4](https://github.com/mym0us3r/COPY-FAIL-Detection-with-Wazuh-4.14.4)
- [maniakh/CVE-2026-31431---Copy-Fail-PoC](https://github.com/maniakh/CVE-2026-31431---Copy-Fail-PoC)
- [offsecguy/CVE-2026-31431](https://github.com/offsecguy/CVE-2026-31431)
- [poyea/CVE-2026-31431.c](https://github.com/poyea/CVE-2026-31431.c)
- [wvverez/CVE-2026-31431-Copy-Fail](https://github.com/wvverez/CVE-2026-31431-Copy-Fail)
- [karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner](https://github.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner)
@@ -1885,7 +1898,7 @@
- [Catherines77/ActiveMQ-EXPtools](https://github.com/Catherines77/ActiveMQ-EXPtools)
- [rootdirective-sec/CVE-2026-34197-Lab](https://github.com/rootdirective-sec/CVE-2026-34197-Lab)
- [LAT-06/CVE-2026-34197](https://github.com/LAT-06/CVE-2026-34197)
- [hnytgl/cve-2026-34197](https://github.com/hnytgl/cve-2026-34197)
- [hnytgl/CVE-2026-34197](https://github.com/hnytgl/CVE-2026-34197)
### CVE-2026-34220 (2026-03-31)
@@ -2371,7 +2384,6 @@
- [assetnote/cpanel2shell-scanner](https://github.com/assetnote/cpanel2shell-scanner)
- [rfxn/cpanel-sessionscribe](https://github.com/rfxn/cpanel-sessionscribe)
- [george1-adel/CVE-2026-41940_exploit](https://github.com/george1-adel/CVE-2026-41940_exploit)
- [senyx122/CVE-2026-41940](https://github.com/senyx122/CVE-2026-41940)
- [merdw/cPanel-CVE-2026-41940-Scanner](https://github.com/merdw/cPanel-CVE-2026-41940-Scanner)
- [mahfuzreham/cpanel-cve-2026-41940](https://github.com/mahfuzreham/cpanel-cve-2026-41940)
@@ -2519,6 +2531,7 @@
</code>
- [strivepan/ActiveMQ-cve-2026-42588-scanner-gui](https://github.com/strivepan/ActiveMQ-cve-2026-42588-scanner-gui)
- [hnytgl/CVE-2026-42588](https://github.com/hnytgl/CVE-2026-42588)
### CVE-2026-42589 (2026-05-14)
@@ -2599,7 +2612,7 @@
- [BarAppTeam/nginx-cve-fix](https://github.com/BarAppTeam/nginx-cve-fix)
- [tal7aouy/nginx-cve-2026-42945](https://github.com/tal7aouy/nginx-cve-2026-42945)
- [Renison-Gohel/CVE-2026-42945-NGINX-Rift](https://github.com/Renison-Gohel/CVE-2026-42945-NGINX-Rift)
- [hnytgl/cve-2026-42945](https://github.com/hnytgl/cve-2026-42945)
- [hnytgl/CVE-2026-42945](https://github.com/hnytgl/CVE-2026-42945)
- [imSre9/CVE-2026-42945](https://github.com/imSre9/CVE-2026-42945)
- [RedCrazyGhost/CVE-2026-42945](https://github.com/RedCrazyGhost/CVE-2026-42945)
- [fkj-src/fix_nginx_cve_2026_42945](https://github.com/fkj-src/fix_nginx_cve_2026_42945)
@@ -22016,13 +22029,6 @@
- [7Ragnarok7/CVE-2024-37888](https://github.com/7Ragnarok7/CVE-2024-37888)
### CVE-2024-38036 (2024-10-04)
<code>There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 and below which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser.
</code>
- [hnytgl/CVE-2024-38036](https://github.com/hnytgl/CVE-2024-38036)
### CVE-2024-38041 (2024-07-09)
<code>Windows Kernel Information Disclosure Vulnerability
@@ -27012,13 +27018,6 @@
- [PH03N1XSP/CVE-2023-5024](https://github.com/PH03N1XSP/CVE-2023-5024)
### CVE-2023-5043 (2023-10-25)
<code>Ingress nginx annotation injection causes arbitrary command execution.
</code>
- [r0binak/CVE-2023-5043](https://github.com/r0binak/CVE-2023-5043)
### CVE-2023-5044 (2023-10-25)
<code>Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.
@@ -33835,6 +33834,7 @@
- [Navya240/intel471-threat-hunting-cve-2023-46604](https://github.com/Navya240/intel471-threat-hunting-cve-2023-46604)
- [KlaasStessens/CVE-2023-46604](https://github.com/KlaasStessens/CVE-2023-46604)
- [trnguyen03/activemq-ids-ips-lab](https://github.com/trnguyen03/activemq-ids-ips-lab)
- [REGGYRAIDER/CVE-2023-46604-RCE](https://github.com/REGGYRAIDER/CVE-2023-46604-RCE)
### CVE-2023-46615 (2024-02-12)
@@ -35336,6 +35336,7 @@
- [real-tim-johnston/megaquagga-pentest-report](https://github.com/real-tim-johnston/megaquagga-pentest-report)
- [JeevanAnand1202/Penetration-Test](https://github.com/JeevanAnand1202/Penetration-Test)
- [gaganhm3018-art/CVE-2022-0847-Dirty-Pipe-](https://github.com/gaganhm3018-art/CVE-2022-0847-Dirty-Pipe-)
- [t1ckprivate/CVE-2022-0847-Dirty-Pipe](https://github.com/t1ckprivate/CVE-2022-0847-Dirty-Pipe)
### CVE-2022-0848 (2022-03-04)