diff --git a/2014/CVE-2014-6271.json b/2014/CVE-2014-6271.json
index 70d9d5f43f..d4088c8b70 100644
--- a/2014/CVE-2014-6271.json
+++ b/2014/CVE-2014-6271.json
@@ -3018,5 +3018,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1257356854,
+ "name": "Shocker-TJNULL-OSCP-",
+ "full_name": "R3fr4kt\/Shocker-TJNULL-OSCP-",
+ "owner": {
+ "login": "R3fr4kt",
+ "id": 110236495,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110236495?v=4",
+ "html_url": "https:\/\/github.com\/R3fr4kt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/R3fr4kt\/Shocker-TJNULL-OSCP-",
+ "description": "\"A professional walkthrough of HTB: Shocker. Demonstrates remote directory fuzzing to discover CGI scripts, manual exploitation of the Shellshock vulnerability (CVE-2014-6271), and privilege escalation via misconfigured Sudo Perl permissions using GTFOBins vectors.\"",
+ "fork": false,
+ "created_at": "2026-06-02T15:48:50Z",
+ "updated_at": "2026-06-02T15:52:27Z",
+ "pushed_at": "2026-06-02T15:50:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json
index cdf5575aab..e2eb34731d 100644
--- a/2016/CVE-2016-15042.json
+++ b/2016/CVE-2016-15042.json
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
- "updated_at": "2026-06-02T11:17:29Z",
- "pushed_at": "2026-06-02T11:17:25Z",
+ "updated_at": "2026-06-02T14:25:17Z",
+ "pushed_at": "2026-06-02T14:15:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json
index 2025e06deb..7b79736bbd 100644
--- a/2016/CVE-2016-5195.json
+++ b/2016/CVE-2016-5195.json
@@ -80,10 +80,10 @@
"description": "CVE-2016-5195 (dirtycow\/dirtyc0w) proof of concept for Android",
"fork": false,
"created_at": "2016-10-21T11:19:21Z",
- "updated_at": "2026-05-27T09:42:58Z",
+ "updated_at": "2026-06-02T17:57:03Z",
"pushed_at": "2021-02-03T16:03:40Z",
- "stargazers_count": 1004,
- "watchers_count": 1004,
+ "stargazers_count": 1003,
+ "watchers_count": 1003,
"has_discussions": false,
"forks_count": 390,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 390,
- "watchers": 1004,
+ "watchers": 1003,
"score": 0,
"subscribers_count": 60
},
@@ -857,10 +857,10 @@
"description": "编译好的脏牛漏洞（CVE-2016-5195）EXP",
"fork": false,
"created_at": "2018-05-27T08:06:50Z",
- "updated_at": "2026-05-31T09:45:43Z",
+ "updated_at": "2026-06-02T17:57:14Z",
"pushed_at": "2018-05-27T08:24:17Z",
- "stargazers_count": 141,
- "watchers_count": 141,
+ "stargazers_count": 140,
+ "watchers_count": 140,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -871,7 +871,7 @@
"topics": [],
"visibility": "public",
"forks": 41,
- "watchers": 141,
+ "watchers": 140,
"score": 0,
"subscribers_count": 1
},
diff --git a/2017/CVE-2017-1000486.json b/2017/CVE-2017-1000486.json
index bab1492783..32dcc92c14 100644
--- a/2017/CVE-2017-1000486.json
+++ b/2017/CVE-2017-1000486.json
@@ -14,10 +14,10 @@
"description": "Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit",
"fork": false,
"created_at": "2018-09-03T03:11:24Z",
- "updated_at": "2026-03-10T13:49:54Z",
+ "updated_at": "2026-06-02T17:19:37Z",
"pushed_at": "2024-02-27T11:56:02Z",
- "stargazers_count": 93,
- "watchers_count": 93,
+ "stargazers_count": 94,
+ "watchers_count": 94,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
- "watchers": 93,
+ "watchers": 94,
"score": 0,
"subscribers_count": 2
},
diff --git a/2017/CVE-2017-6558.json b/2017/CVE-2017-6558.json
deleted file mode 100644
index 84c9f583ec..0000000000
--- a/2017/CVE-2017-6558.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 105633536,
- "name": "iBall-UTStar-CVEChecker",
- "full_name": "GemGeorge\/iBall-UTStar-CVEChecker",
- "owner": {
- "login": "GemGeorge",
- "id": 15928266,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15928266?v=4",
- "html_url": "https:\/\/github.com\/GemGeorge",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/GemGeorge\/iBall-UTStar-CVEChecker",
- "description": "POC checks for CVE-2017-6558, CVE-2017-14243 & CVE-2017-14244",
- "fork": false,
- "created_at": "2017-10-03T09:16:57Z",
- "updated_at": "2024-08-12T19:33:01Z",
- "pushed_at": "2021-05-21T12:28:12Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2017/CVE-2017-9841.json b/2017/CVE-2017-9841.json
index fd3872d8bc..fcc3514c79 100644
--- a/2017/CVE-2017-9841.json
+++ b/2017/CVE-2017-9841.json
@@ -469,8 +469,8 @@
"description": "Tool designed to scan a list of websites for a known vulnerability in the PHPUnit framework, specifically the CVE-2017-9841 vulnerability.",
"fork": false,
"created_at": "2025-04-22T01:31:34Z",
- "updated_at": "2026-02-19T22:00:37Z",
- "pushed_at": "2025-11-26T08:58:24Z",
+ "updated_at": "2026-06-02T16:57:40Z",
+ "pushed_at": "2026-06-02T16:57:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2018/CVE-2018-10933.json b/2018/CVE-2018-10933.json
index 7c0512b211..b053ba59f0 100644
--- a/2018/CVE-2018-10933.json
+++ b/2018/CVE-2018-10933.json
@@ -47,10 +47,10 @@
"description": "Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)",
"fork": false,
"created_at": "2018-10-17T14:14:12Z",
- "updated_at": "2026-01-29T10:24:43Z",
+ "updated_at": "2026-06-02T17:57:17Z",
"pushed_at": "2023-12-19T20:46:55Z",
- "stargazers_count": 498,
- "watchers_count": 498,
+ "stargazers_count": 497,
+ "watchers_count": 497,
"has_discussions": false,
"forks_count": 115,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 115,
- "watchers": 498,
+ "watchers": 497,
"score": 0,
"subscribers_count": 22
},
diff --git a/2018/CVE-2018-17254.json b/2018/CVE-2018-17254.json
index 27a0cfb87c..8fe7882d97 100644
--- a/2018/CVE-2018-17254.json
+++ b/2018/CVE-2018-17254.json
@@ -70,38 +70,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 1106563049,
- "name": "script-python-to-detect-CVE-2018-17254",
- "full_name": "7amzahard\/script-python-to-detect-CVE-2018-17254",
- "owner": {
- "login": "7amzahard",
- "id": 145274530,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145274530?v=4",
- "html_url": "https:\/\/github.com\/7amzahard",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/7amzahard\/script-python-to-detect-CVE-2018-17254",
- "description": "script python to detect CVE-2018-17254",
- "fork": false,
- "created_at": "2025-11-29T13:59:05Z",
- "updated_at": "2025-12-02T07:01:57Z",
- "pushed_at": "2025-11-29T14:03:29Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json
index d8ecd4211b..ba8117a79c 100644
--- a/2019/CVE-2019-0708.json
+++ b/2019/CVE-2019-0708.json
@@ -1682,10 +1682,10 @@
"description": "A quick scanner for the CVE-2019-0708 \"BlueKeep\" vulnerability.",
"fork": false,
"created_at": "2019-05-23T22:50:12Z",
- "updated_at": "2026-05-28T12:55:55Z",
+ "updated_at": "2026-06-02T13:28:38Z",
"pushed_at": "2019-06-22T21:48:45Z",
- "stargazers_count": 918,
- "watchers_count": 918,
+ "stargazers_count": 919,
+ "watchers_count": 919,
"has_discussions": false,
"forks_count": 240,
"allow_forking": true,
@@ -1696,7 +1696,7 @@
"topics": [],
"visibility": "public",
"forks": 240,
- "watchers": 918,
+ "watchers": 919,
"score": 0,
"subscribers_count": 53
},
diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json
index 3f31582183..6ac04976ff 100644
--- a/2019/CVE-2019-1040.json
+++ b/2019/CVE-2019-1040.json
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
- "updated_at": "2026-06-02T10:59:41Z",
- "pushed_at": "2026-06-02T10:59:37Z",
+ "updated_at": "2026-06-02T15:11:01Z",
+ "pushed_at": "2026-06-02T15:00:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2020/CVE-2020-0041.json b/2020/CVE-2020-0041.json
index 7bfd105289..9bddaee7c0 100644
--- a/2020/CVE-2020-0041.json
+++ b/2020/CVE-2020-0041.json
@@ -14,10 +14,10 @@
"description": "Exploits for Android Binder bug CVE-2020-0041",
"fork": false,
"created_at": "2020-03-31T17:53:57Z",
- "updated_at": "2026-05-23T05:05:10Z",
+ "updated_at": "2026-06-02T17:57:31Z",
"pushed_at": "2020-04-08T08:55:30Z",
- "stargazers_count": 258,
- "watchers_count": 258,
+ "stargazers_count": 257,
+ "watchers_count": 257,
"has_discussions": false,
"forks_count": 75,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 75,
- "watchers": 258,
+ "watchers": 257,
"score": 0,
"subscribers_count": 10
},
diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json
index e215acac95..7f6115b5fe 100644
--- a/2020/CVE-2020-0610.json
+++ b/2020/CVE-2020-0610.json
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
- "updated_at": "2026-06-02T11:17:23Z",
- "pushed_at": "2026-06-02T11:17:19Z",
+ "updated_at": "2026-06-02T14:22:58Z",
+ "pushed_at": "2026-06-02T14:15:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2020/CVE-2020-12446.json b/2020/CVE-2020-12446.json
index 069160f960..a06609471c 100644
--- a/2020/CVE-2020-12446.json
+++ b/2020/CVE-2020-12446.json
@@ -14,10 +14,10 @@
"description": "Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446(eneio64.sys)",
"fork": false,
"created_at": "2025-11-17T15:55:05Z",
- "updated_at": "2026-04-08T18:22:35Z",
+ "updated_at": "2026-06-02T15:47:14Z",
"pushed_at": "2026-04-08T18:22:32Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json
index b1c166d565..30dbbcb3de 100644
--- a/2020/CVE-2020-1472.json
+++ b/2020/CVE-2020-1472.json
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
- "updated_at": "2026-06-02T10:55:49Z",
- "pushed_at": "2026-06-02T10:55:44Z",
+ "updated_at": "2026-06-02T14:49:13Z",
+ "pushed_at": "2026-06-02T14:42:09Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2020/CVE-2020-14883.json b/2020/CVE-2020-14883.json
index 864d716482..8b0a71a68b 100644
--- a/2020/CVE-2020-14883.json
+++ b/2020/CVE-2020-14883.json
@@ -148,10 +148,10 @@
"description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE",
"fork": false,
"created_at": "2021-03-11T22:49:17Z",
- "updated_at": "2026-05-21T10:51:55Z",
+ "updated_at": "2026-06-02T12:39:55Z",
"pushed_at": "2023-05-11T14:36:58Z",
- "stargazers_count": 1079,
- "watchers_count": 1079,
+ "stargazers_count": 1078,
+ "watchers_count": 1078,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 315,
- "watchers": 1079,
+ "watchers": 1078,
"score": 0,
"subscribers_count": 34
},
diff --git a/2020/CVE-2020-15778.json b/2020/CVE-2020-15778.json
index 71ab607b3b..0c14458151 100644
--- a/2020/CVE-2020-15778.json
+++ b/2020/CVE-2020-15778.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2020-07-18T05:15:05Z",
- "updated_at": "2026-05-26T08:42:19Z",
+ "updated_at": "2026-06-02T17:57:34Z",
"pushed_at": "2023-03-27T14:08:14Z",
- "stargazers_count": 142,
- "watchers_count": 142,
+ "stargazers_count": 141,
+ "watchers_count": 141,
"has_discussions": false,
"forks_count": 25,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 25,
- "watchers": 142,
+ "watchers": 141,
"score": 0,
"subscribers_count": 4
},
diff --git a/2021/CVE-2021-25646.json b/2021/CVE-2021-25646.json
index 51bdb37304..1c304fb1b6 100644
--- a/2021/CVE-2021-25646.json
+++ b/2021/CVE-2021-25646.json
@@ -146,10 +146,10 @@
"description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE",
"fork": false,
"created_at": "2021-03-11T22:49:17Z",
- "updated_at": "2026-05-21T10:51:55Z",
+ "updated_at": "2026-06-02T12:39:55Z",
"pushed_at": "2023-05-11T14:36:58Z",
- "stargazers_count": 1079,
- "watchers_count": 1079,
+ "stargazers_count": 1078,
+ "watchers_count": 1078,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -164,7 +164,7 @@
],
"visibility": "public",
"forks": 315,
- "watchers": 1079,
+ "watchers": 1078,
"score": 0,
"subscribers_count": 34
},
diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json
index 0e1f3701e4..1a9f4d3e50 100644
--- a/2021/CVE-2021-33044.json
+++ b/2021/CVE-2021-33044.json
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
- "updated_at": "2026-06-02T11:12:32Z",
- "pushed_at": "2026-06-02T11:12:28Z",
+ "updated_at": "2026-06-02T15:20:44Z",
+ "pushed_at": "2026-06-02T15:13:07Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json
index 33d0f02f45..37b507aeab 100644
--- a/2021/CVE-2021-4034.json
+++ b/2021/CVE-2021-4034.json
@@ -14,10 +14,10 @@
"description": "CVE-2021-4034 1day",
"fork": false,
"created_at": "2022-01-25T23:51:37Z",
- "updated_at": "2026-06-01T00:30:35Z",
+ "updated_at": "2026-06-02T17:57:52Z",
"pushed_at": "2022-06-08T04:00:28Z",
- "stargazers_count": 2040,
- "watchers_count": 2040,
+ "stargazers_count": 2039,
+ "watchers_count": 2039,
"has_discussions": false,
"forks_count": 508,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 508,
- "watchers": 2040,
+ "watchers": 2039,
"score": 0,
"subscribers_count": 18
},
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
- "updated_at": "2026-06-02T11:24:53Z",
- "pushed_at": "2026-06-02T11:24:49Z",
+ "updated_at": "2026-06-02T14:34:35Z",
+ "pushed_at": "2026-06-02T14:23:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2021/CVE-2021-42008.json b/2021/CVE-2021-42008.json
index f013ba9dcd..e4a098102a 100644
--- a/2021/CVE-2021-42008.json
+++ b/2021/CVE-2021-42008.json
@@ -47,10 +47,10 @@
"description": "CVE-2021-42008: Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver",
"fork": false,
"created_at": "2021-12-03T14:08:26Z",
- "updated_at": "2025-03-25T13:48:57Z",
+ "updated_at": "2026-06-02T17:57:50Z",
"pushed_at": "2022-05-01T15:02:44Z",
- "stargazers_count": 31,
- "watchers_count": 31,
+ "stargazers_count": 30,
+ "watchers_count": 30,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
- "watchers": 31,
+ "watchers": 30,
"score": 0,
"subscribers_count": 1
}
diff --git a/2021/CVE-2021-43798.json b/2021/CVE-2021-43798.json
index a2360b8948..4a396674d1 100644
--- a/2021/CVE-2021-43798.json
+++ b/2021/CVE-2021-43798.json
@@ -80,10 +80,10 @@
"description": "Grafana Unauthorized arbitrary file reading vulnerability",
"fork": false,
"created_at": "2021-12-07T09:02:16Z",
- "updated_at": "2026-05-23T10:52:45Z",
+ "updated_at": "2026-06-02T13:21:29Z",
"pushed_at": "2023-02-14T07:05:22Z",
- "stargazers_count": 369,
- "watchers_count": 369,
+ "stargazers_count": 368,
+ "watchers_count": 368,
"has_discussions": false,
"forks_count": 86,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 86,
- "watchers": 369,
+ "watchers": 368,
"score": 0,
"subscribers_count": 6
},
diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json
index a11583383c..c5a6166bcb 100644
--- a/2022/CVE-2022-0847.json
+++ b/2022/CVE-2022-0847.json
@@ -113,10 +113,10 @@
"description": "A root exploit for CVE-2022-0847 (Dirty Pipe)",
"fork": false,
"created_at": "2022-03-07T18:55:20Z",
- "updated_at": "2026-05-30T05:56:51Z",
+ "updated_at": "2026-06-02T17:57:54Z",
"pushed_at": "2022-03-08T06:20:05Z",
- "stargazers_count": 1126,
- "watchers_count": 1126,
+ "stargazers_count": 1125,
+ "watchers_count": 1125,
"has_discussions": false,
"forks_count": 222,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 222,
- "watchers": 1126,
+ "watchers": 1125,
"score": 0,
"subscribers_count": 17
},
@@ -1138,10 +1138,10 @@
"description": "A Python-based DirtyPipe (CVE-2022-0847) POC to pop a root shell",
"fork": false,
"created_at": "2022-03-11T08:22:56Z",
- "updated_at": "2026-02-18T22:12:24Z",
+ "updated_at": "2026-06-02T17:57:54Z",
"pushed_at": "2022-03-23T22:46:58Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -1152,7 +1152,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
- "watchers": 10,
+ "watchers": 9,
"score": 0,
"subscribers_count": 1
},
diff --git a/2022/CVE-2022-22947.json b/2022/CVE-2022-22947.json
index 7ccb492ada..4aca64b5e7 100644
--- a/2022/CVE-2022-22947.json
+++ b/2022/CVE-2022-22947.json
@@ -1989,5 +1989,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1257276221,
+ "name": "demo-cve-2022-22947",
+ "full_name": "entr0pie\/demo-cve-2022-22947",
+ "owner": {
+ "login": "entr0pie",
+ "id": 73120825,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73120825?v=4",
+ "html_url": "https:\/\/github.com\/entr0pie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/entr0pie\/demo-cve-2022-22947",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-06-02T14:24:24Z",
+ "updated_at": "2026-06-02T14:54:39Z",
+ "pushed_at": "2026-06-02T14:47:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2022/CVE-2022-23222.json b/2022/CVE-2022-23222.json
index f038def631..a30fbdda5b 100644
--- a/2022/CVE-2022-23222.json
+++ b/2022/CVE-2022-23222.json
@@ -14,10 +14,10 @@
"description": "CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation",
"fork": false,
"created_at": "2022-06-07T03:20:23Z",
- "updated_at": "2026-05-30T05:56:55Z",
+ "updated_at": "2026-06-02T17:57:57Z",
"pushed_at": "2022-06-07T03:41:13Z",
- "stargazers_count": 576,
- "watchers_count": 576,
+ "stargazers_count": 575,
+ "watchers_count": 575,
"has_discussions": false,
"forks_count": 98,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 98,
- "watchers": 576,
+ "watchers": 575,
"score": 0,
"subscribers_count": 6
},
diff --git a/2022/CVE-2022-26809.json b/2022/CVE-2022-26809.json
index 37ab160100..b6bb8cb12c 100644
--- a/2022/CVE-2022-26809.json
+++ b/2022/CVE-2022-26809.json
@@ -282,10 +282,10 @@
"description": "警惕 一种针对红队的新型溯源手段!",
"fork": false,
"created_at": "2022-07-27T15:48:19Z",
- "updated_at": "2026-05-23T10:53:40Z",
+ "updated_at": "2026-06-02T12:40:09Z",
"pushed_at": "2022-07-27T15:55:01Z",
- "stargazers_count": 409,
- "watchers_count": 409,
+ "stargazers_count": 408,
+ "watchers_count": 408,
"has_discussions": false,
"forks_count": 81,
"allow_forking": true,
@@ -296,7 +296,7 @@
"topics": [],
"visibility": "public",
"forks": 81,
- "watchers": 409,
+ "watchers": 408,
"score": 0,
"subscribers_count": 1
},
diff --git a/2022/CVE-2022-27254.json b/2022/CVE-2022-27254.json
index 95aa78852b..aeaf4601c2 100644
--- a/2022/CVE-2022-27254.json
+++ b/2022/CVE-2022-27254.json
@@ -14,10 +14,10 @@
"description": "PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)",
"fork": false,
"created_at": "2022-03-23T15:03:09Z",
- "updated_at": "2026-05-13T19:49:27Z",
+ "updated_at": "2026-06-02T12:41:27Z",
"pushed_at": "2022-03-26T05:52:15Z",
- "stargazers_count": 466,
- "watchers_count": 466,
+ "stargazers_count": 465,
+ "watchers_count": 465,
"has_discussions": false,
"forks_count": 54,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 54,
- "watchers": 466,
+ "watchers": 465,
"score": 0,
"subscribers_count": 17
}
diff --git a/2022/CVE-2022-32250.json b/2022/CVE-2022-32250.json
index 59c3892cc1..a4794b9a19 100644
--- a/2022/CVE-2022-32250.json
+++ b/2022/CVE-2022-32250.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-08-24T06:00:47Z",
- "updated_at": "2026-05-25T13:06:26Z",
+ "updated_at": "2026-06-02T17:57:59Z",
"pushed_at": "2023-06-18T14:43:52Z",
- "stargazers_count": 183,
- "watchers_count": 183,
+ "stargazers_count": 182,
+ "watchers_count": 182,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
- "watchers": 183,
+ "watchers": 182,
"score": 0,
"subscribers_count": 2
},
diff --git a/2022/CVE-2022-34918.json b/2022/CVE-2022-34918.json
index d29cbba00e..a5025cf7d4 100644
--- a/2022/CVE-2022-34918.json
+++ b/2022/CVE-2022-34918.json
@@ -146,10 +146,10 @@
"description": "CVE-2022-34918 netfilter nf_tables 本地提权 POC",
"fork": false,
"created_at": "2022-08-02T09:52:02Z",
- "updated_at": "2026-05-23T10:53:42Z",
+ "updated_at": "2026-06-02T12:40:09Z",
"pushed_at": "2022-09-15T03:19:28Z",
- "stargazers_count": 220,
- "watchers_count": 220,
+ "stargazers_count": 219,
+ "watchers_count": 219,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
- "watchers": 220,
+ "watchers": 219,
"score": 0,
"subscribers_count": 5
}
diff --git a/2023/CVE-2023-0386.json b/2023/CVE-2023-0386.json
index 16683f67a1..2e6b14e793 100644
--- a/2023/CVE-2023-0386.json
+++ b/2023/CVE-2023-0386.json
@@ -478,8 +478,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-20T11:44:38Z",
- "updated_at": "2026-06-02T12:22:25Z",
- "pushed_at": "2026-06-02T12:22:21Z",
+ "updated_at": "2026-06-02T13:47:26Z",
+ "pushed_at": "2026-06-02T13:45:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-20887.json b/2023/CVE-2023-20887.json
index eab64c293a..9cb1e64673 100644
--- a/2023/CVE-2023-20887.json
+++ b/2023/CVE-2023-20887.json
@@ -14,10 +14,10 @@
"description": "VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)",
"fork": false,
"created_at": "2023-06-13T13:17:23Z",
- "updated_at": "2026-05-20T11:31:45Z",
+ "updated_at": "2026-06-02T12:40:20Z",
"pushed_at": "2023-06-13T14:39:17Z",
- "stargazers_count": 230,
- "watchers_count": 230,
+ "stargazers_count": 229,
+ "watchers_count": 229,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 41,
- "watchers": 230,
+ "watchers": 229,
"score": 0,
"subscribers_count": 3
},
diff --git a/2023/CVE-2023-21036.json b/2023/CVE-2023-21036.json
index 760c658e07..408d5f50ac 100644
--- a/2023/CVE-2023-21036.json
+++ b/2023/CVE-2023-21036.json
@@ -54,10 +54,10 @@
"description": "Detection and sanitization for Acropalypse Now - CVE-2023-21036",
"fork": false,
"created_at": "2023-03-22T14:59:42Z",
- "updated_at": "2026-03-02T10:04:54Z",
+ "updated_at": "2026-06-02T12:40:16Z",
"pushed_at": "2023-05-15T12:12:33Z",
- "stargazers_count": 82,
- "watchers_count": 82,
+ "stargazers_count": 81,
+ "watchers_count": 81,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -68,7 +68,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
- "watchers": 82,
+ "watchers": 81,
"score": 0,
"subscribers_count": 9
},
diff --git a/2023/CVE-2023-21563.json b/2023/CVE-2023-21563.json
index 4dcce560c8..c7bfc74af4 100644
--- a/2023/CVE-2023-21563.json
+++ b/2023/CVE-2023-21563.json
@@ -47,8 +47,8 @@
"description": "Cracking BitLocker encryption based on CVE-2023-21563 vulnerability",
"fork": false,
"created_at": "2026-05-23T14:45:27Z",
- "updated_at": "2026-06-02T12:24:19Z",
- "pushed_at": "2026-06-02T12:24:15Z",
+ "updated_at": "2026-06-02T15:54:21Z",
+ "pushed_at": "2026-06-02T15:54:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-21839.json b/2023/CVE-2023-21839.json
index 3e2f69f513..7947174dde 100644
--- a/2023/CVE-2023-21839.json
+++ b/2023/CVE-2023-21839.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-02-21T16:08:56Z",
- "updated_at": "2026-04-30T02:19:31Z",
+ "updated_at": "2026-06-02T12:40:15Z",
"pushed_at": "2023-02-26T06:43:18Z",
- "stargazers_count": 238,
- "watchers_count": 238,
+ "stargazers_count": 237,
+ "watchers_count": 237,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
- "watchers": 238,
+ "watchers": 237,
"score": 0,
"subscribers_count": 3
},
@@ -233,5 +233,46 @@
"watchers": 61,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1257262452,
+ "name": "CVE-2024-21182",
+ "full_name": "dinosn\/CVE-2024-21182",
+ "owner": {
+ "login": "dinosn",
+ "id": 3851678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
+ "html_url": "https:\/\/github.com\/dinosn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dinosn\/CVE-2024-21182",
+ "description": "Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3\/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh.",
+ "fork": false,
+ "created_at": "2026-06-02T14:11:12Z",
+ "updated_at": "2026-06-02T14:20:21Z",
+ "pushed_at": "2026-06-02T14:11:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2024-21182",
+ "jndi-injection",
+ "poc",
+ "rce",
+ "security-lab",
+ "vulhub",
+ "weblogic"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2023/CVE-2023-25136.json b/2023/CVE-2023-25136.json
index 69f8a6ff2a..61a1f77ae2 100644
--- a/2023/CVE-2023-25136.json
+++ b/2023/CVE-2023-25136.json
@@ -80,10 +80,10 @@
"description": "OpenSSH 9.1 vulnerability mass scan and exploit",
"fork": false,
"created_at": "2023-02-22T19:44:08Z",
- "updated_at": "2026-04-05T22:52:26Z",
+ "updated_at": "2026-06-02T17:58:09Z",
"pushed_at": "2023-03-07T10:43:36Z",
- "stargazers_count": 108,
- "watchers_count": 108,
+ "stargazers_count": 107,
+ "watchers_count": 107,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
- "watchers": 108,
+ "watchers": 107,
"score": 0,
"subscribers_count": 2
},
diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json
index df817246a9..d1a79f5e36 100644
--- a/2023/CVE-2023-32434.json
+++ b/2023/CVE-2023-32434.json
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
- "updated_at": "2026-06-02T11:13:45Z",
- "pushed_at": "2026-06-02T11:13:12Z",
+ "updated_at": "2026-06-02T18:22:40Z",
+ "pushed_at": "2026-06-02T18:22:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-34312.json b/2023/CVE-2023-34312.json
index e423cd8a19..f4f9c94941 100644
--- a/2023/CVE-2023-34312.json
+++ b/2023/CVE-2023-34312.json
@@ -14,10 +14,10 @@
"description": "CVE-2023-34312",
"fork": false,
"created_at": "2023-05-27T12:44:42Z",
- "updated_at": "2026-05-18T14:02:15Z",
+ "updated_at": "2026-06-02T12:40:19Z",
"pushed_at": "2023-05-27T12:45:10Z",
- "stargazers_count": 422,
- "watchers_count": 422,
+ "stargazers_count": 421,
+ "watchers_count": 421,
"has_discussions": false,
"forks_count": 74,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 74,
- "watchers": 422,
+ "watchers": 421,
"score": 0,
"subscribers_count": 2
},
diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json
index a8ed607c29..ccdb6d798f 100644
--- a/2023/CVE-2023-39910.json
+++ b/2023/CVE-2023-39910.json
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
- "updated_at": "2026-06-02T12:20:24Z",
- "pushed_at": "2026-06-02T12:20:19Z",
+ "updated_at": "2026-06-02T15:34:40Z",
+ "pushed_at": "2026-06-02T15:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json
index 78d3dc411e..7563de6e98 100644
--- a/2023/CVE-2023-45866.json
+++ b/2023/CVE-2023-45866.json
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
- "updated_at": "2026-06-02T06:57:51Z",
+ "updated_at": "2026-06-02T18:06:42Z",
"pushed_at": "2026-02-11T00:03:00Z",
- "stargazers_count": 1858,
- "watchers_count": 1858,
+ "stargazers_count": 1860,
+ "watchers_count": 1860,
"has_discussions": false,
"forks_count": 313,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 313,
- "watchers": 1858,
+ "watchers": 1860,
"score": 0,
"subscribers_count": 29
},
diff --git a/2023/CVE-2023-4863.json b/2023/CVE-2023-4863.json
index f3fe7ed819..2ec129bb71 100644
--- a/2023/CVE-2023-4863.json
+++ b/2023/CVE-2023-4863.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-09-21T05:22:51Z",
- "updated_at": "2026-05-21T08:20:22Z",
+ "updated_at": "2026-06-02T17:58:21Z",
"pushed_at": "2023-12-18T04:25:00Z",
- "stargazers_count": 317,
- "watchers_count": 317,
+ "stargazers_count": 316,
+ "watchers_count": 316,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
- "watchers": 317,
+ "watchers": 316,
"score": 0,
"subscribers_count": 12
},
diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json
index 2c00e7f57c..60e8da8b94 100644
--- a/2024/CVE-2024-0044.json
+++ b/2024/CVE-2024-0044.json
@@ -315,10 +315,10 @@
"description": "RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app",
"fork": false,
"created_at": "2024-09-27T09:02:08Z",
- "updated_at": "2026-05-28T10:43:09Z",
+ "updated_at": "2026-06-02T17:58:29Z",
"pushed_at": "2024-09-30T12:48:08Z",
- "stargazers_count": 179,
- "watchers_count": 179,
+ "stargazers_count": 178,
+ "watchers_count": 178,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -329,7 +329,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
- "watchers": 179,
+ "watchers": 178,
"score": 0,
"subscribers_count": 3
},
diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json
index c4e27e4461..c189f4d2b5 100644
--- a/2024/CVE-2024-0670.json
+++ b/2024/CVE-2024-0670.json
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
- "updated_at": "2026-06-02T12:20:39Z",
- "pushed_at": "2026-06-02T12:20:35Z",
+ "updated_at": "2026-06-02T15:29:49Z",
+ "pushed_at": "2026-06-02T15:23:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-10124.json b/2024/CVE-2024-10124.json
index d90b98218f..d874485b8d 100644
--- a/2024/CVE-2024-10124.json
+++ b/2024/CVE-2024-10124.json
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 912532095,
- "name": "CVE-2024-10124-Poc",
- "full_name": "Nxploited\/CVE-2024-10124-Poc",
- "owner": {
- "login": "Nxploited",
- "id": 188819918,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
- "html_url": "https:\/\/github.com\/Nxploited",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10124-Poc",
- "description": null,
- "fork": false,
- "created_at": "2025-01-05T20:42:10Z",
- "updated_at": "2025-04-13T10:27:15Z",
- "pushed_at": "2025-01-05T21:12:34Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-21182.json b/2024/CVE-2024-21182.json
index 9c3023098f..00ab24b869 100644
--- a/2024/CVE-2024-21182.json
+++ b/2024/CVE-2024-21182.json
@@ -64,5 +64,46 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1257262452,
+ "name": "CVE-2024-21182",
+ "full_name": "dinosn\/CVE-2024-21182",
+ "owner": {
+ "login": "dinosn",
+ "id": 3851678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
+ "html_url": "https:\/\/github.com\/dinosn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dinosn\/CVE-2024-21182",
+ "description": "Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3\/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh.",
+ "fork": false,
+ "created_at": "2026-06-02T14:11:12Z",
+ "updated_at": "2026-06-02T14:20:21Z",
+ "pushed_at": "2026-06-02T14:11:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2024-21182",
+ "jndi-injection",
+ "poc",
+ "rce",
+ "security-lab",
+ "vulhub",
+ "weblogic"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json
index 17a17c39a7..ae85d6bffa 100644
--- a/2024/CVE-2024-21413.json
+++ b/2024/CVE-2024-21413.json
@@ -118,7 +118,7 @@
"stargazers_count": 253,
"watchers_count": 253,
"has_discussions": false,
- "forks_count": 57,
+ "forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 57,
+ "forks": 58,
"watchers": 253,
"score": 0,
"subscribers_count": 2
diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json
index 039046cef7..341f129188 100644
--- a/2024/CVE-2024-23222.json
+++ b/2024/CVE-2024-23222.json
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
- "updated_at": "2026-06-02T09:00:13Z",
- "pushed_at": "2026-06-02T09:00:05Z",
+ "updated_at": "2026-06-02T16:12:17Z",
+ "pushed_at": "2026-06-02T16:09:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2024/CVE-2024-38077.json b/2024/CVE-2024-38077.json
index fc798faa3a..9d83436c71 100644
--- a/2024/CVE-2024-38077.json
+++ b/2024/CVE-2024-38077.json
@@ -19,7 +19,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
- "forks_count": 215,
+ "forks_count": 214,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 215,
+ "forks": 214,
"watchers": 9,
"score": 0,
"subscribers_count": 0
diff --git a/2024/CVE-2024-4309.json b/2024/CVE-2024-4309.json
index 0f9c9d17c9..5032b4cb81 100644
--- a/2024/CVE-2024-4309.json
+++ b/2024/CVE-2024-4309.json
@@ -14,8 +14,8 @@
"description": "BGT-Pentest-LAB Final Project: Xiaomi HyperOS System Updater OTA Signature Verification Bypass (CVE-2024-4309) Deep Analysis.",
"fork": false,
"created_at": "2026-05-28T01:07:26Z",
- "updated_at": "2026-06-02T07:41:24Z",
- "pushed_at": "2026-06-02T00:04:24Z",
+ "updated_at": "2026-06-02T14:27:57Z",
+ "pushed_at": "2026-06-02T14:19:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json
index aa36f87eb4..6485ca101e 100644
--- a/2024/CVE-2024-4367.json
+++ b/2024/CVE-2024-4367.json
@@ -228,10 +228,10 @@
"description": "This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367",
"fork": false,
"created_at": "2024-06-17T11:39:41Z",
- "updated_at": "2026-05-25T17:29:50Z",
+ "updated_at": "2026-06-02T18:17:20Z",
"pushed_at": "2026-05-03T05:34:08Z",
- "stargazers_count": 9,
- "watchers_count": 9,
+ "stargazers_count": 10,
+ "watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -242,7 +242,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 9,
+ "watchers": 10,
"score": 0,
"subscribers_count": 5
},
diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json
index a52e4d8f56..6baefc6cfe 100644
--- a/2024/CVE-2024-6387.json
+++ b/2024/CVE-2024-6387.json
@@ -52,7 +52,7 @@
"stargazers_count": 495,
"watchers_count": 495,
"has_discussions": false,
- "forks_count": 185,
+ "forks_count": 184,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 185,
+ "forks": 184,
"watchers": 495,
"score": 0,
"subscribers_count": 4
diff --git a/2025/CVE-2025-0133.json b/2025/CVE-2025-0133.json
index ca68ddaa2c..541c617464 100644
--- a/2025/CVE-2025-0133.json
+++ b/2025/CVE-2025-0133.json
@@ -138,6 +138,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1018231653,
+ "name": "CVE-2025-0133-exploit",
+ "full_name": "shawarkhanethicalhacker\/CVE-2025-0133-exploit",
+ "owner": {
+ "login": "shawarkhanethicalhacker",
+ "id": 41706151,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41706151?v=4",
+ "html_url": "https:\/\/github.com\/shawarkhanethicalhacker",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shawarkhanethicalhacker\/CVE-2025-0133-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-11T20:58:34Z",
+ "updated_at": "2025-07-11T21:11:11Z",
+ "pushed_at": "2025-07-11T21:11:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062917585,
+ "name": "CVE-2025-0133",
+ "full_name": "adhamelhansye\/CVE-2025-0133",
+ "owner": {
+ "login": "adhamelhansye",
+ "id": 145185592,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145185592?v=4",
+ "html_url": "https:\/\/github.com\/adhamelhansye",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/adhamelhansye\/CVE-2025-0133",
+ "description": "CVE-2025-0133 Exploit",
+ "fork": false,
+ "created_at": "2025-09-23T23:15:00Z",
+ "updated_at": "2025-09-23T23:19:58Z",
+ "pushed_at": "2025-09-23T23:19:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1231407476,
"name": "CVE-2025-0133",
diff --git a/2025/CVE-2025-0184.json b/2025/CVE-2025-0184.json
new file mode 100644
index 0000000000..9078060896
--- /dev/null
+++ b/2025/CVE-2025-0184.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1024336706,
+ "name": "wargame_Re-LS",
+ "full_name": "m0d0ri205\/wargame_Re-LS",
+ "owner": {
+ "login": "m0d0ri205",
+ "id": 96758146,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96758146?v=4",
+ "html_url": "https:\/\/github.com\/m0d0ri205",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/m0d0ri205\/wargame_Re-LS",
+ "description": "YISF 2025, CVE-2025-0184",
+ "fork": false,
+ "created_at": "2025-07-22T14:39:01Z",
+ "updated_at": "2026-01-23T07:23:21Z",
+ "pushed_at": "2025-08-07T10:57:28Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-0309.json b/2025/CVE-2025-0309.json
new file mode 100644
index 0000000000..df1fe0620b
--- /dev/null
+++ b/2025/CVE-2025-0309.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046973039,
+ "name": "UpSkope",
+ "full_name": "AmberWolfCyber\/UpSkope",
+ "owner": {
+ "login": "AmberWolfCyber",
+ "id": 158102449,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158102449?v=4",
+ "html_url": "https:\/\/github.com\/AmberWolfCyber",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AmberWolfCyber\/UpSkope",
+ "description": "Custom IPC Client and Proof of Concept exploit for CVE-2025-0309 (Netskope Windows Client LPE)",
+ "fork": false,
+ "created_at": "2025-08-29T14:26:28Z",
+ "updated_at": "2026-04-08T07:02:53Z",
+ "pushed_at": "2025-08-29T14:26:31Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-10035.json b/2025/CVE-2025-10035.json
index f686bd7b8a..8243794130 100644
--- a/2025/CVE-2025-10035.json
+++ b/2025/CVE-2025-10035.json
@@ -36,5 +36,71 @@
"watchers": 19,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1061069355,
+ "name": "CVE-2025-10035",
+ "full_name": "ThemeHackers\/CVE-2025-10035",
+ "owner": {
+ "login": "ThemeHackers",
+ "id": 107047730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4",
+ "html_url": "https:\/\/github.com\/ThemeHackers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2025-10035",
+ "description": "A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.",
+ "fork": false,
+ "created_at": "2025-09-21T07:08:08Z",
+ "updated_at": "2025-09-26T06:54:01Z",
+ "pushed_at": "2025-09-26T06:53:58Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1065201589,
+ "name": "CVE-2025-10035_GoAnywhere",
+ "full_name": "orange0Mint\/CVE-2025-10035_GoAnywhere",
+ "owner": {
+ "login": "orange0Mint",
+ "id": 218682194,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218682194?v=4",
+ "html_url": "https:\/\/github.com\/orange0Mint",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/orange0Mint\/CVE-2025-10035_GoAnywhere",
+ "description": "CVE-2025-10035_GoAnywhere Get RCE",
+ "fork": false,
+ "created_at": "2025-09-27T08:50:50Z",
+ "updated_at": "2025-09-27T09:17:13Z",
+ "pushed_at": "2025-09-27T09:17:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-10046.json b/2025/CVE-2025-10046.json
new file mode 100644
index 0000000000..cf2abaa5e1
--- /dev/null
+++ b/2025/CVE-2025-10046.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1051884737,
+ "name": "CVE-2025-10046",
+ "full_name": "byteReaper77\/CVE-2025-10046",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-10046",
+ "description": "exploit SQL injection ELEX WooCommerce Google Shopping ",
+ "fork": false,
+ "created_at": "2025-09-06T23:32:48Z",
+ "updated_at": "2026-02-07T05:09:29Z",
+ "pushed_at": "2025-09-07T00:39:21Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-10230.json b/2025/CVE-2025-10230.json
new file mode 100644
index 0000000000..f4c0799383
--- /dev/null
+++ b/2025/CVE-2025-10230.json
@@ -0,0 +1,71 @@
+[
+ {
+ "id": 1102174107,
+ "name": "CVE-2025-10230",
+ "full_name": "nehkark\/CVE-2025-10230",
+ "owner": {
+ "login": "nehkark",
+ "id": 88349393,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88349393?v=4",
+ "html_url": "https:\/\/github.com\/nehkark",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nehkark\/CVE-2025-10230",
+ "description": "CVE-2025-10230 PoC - Samba WINS Hook Command Injection ",
+ "fork": false,
+ "created_at": "2025-11-23T00:28:11Z",
+ "updated_at": "2025-11-23T17:50:36Z",
+ "pushed_at": "2025-11-23T03:14:28Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1104856251,
+ "name": "CVE-2025-10230",
+ "full_name": "marcostolosa\/CVE-2025-10230",
+ "owner": {
+ "login": "marcostolosa",
+ "id": 36050676,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36050676?v=4",
+ "html_url": "https:\/\/github.com\/marcostolosa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/marcostolosa\/CVE-2025-10230",
+ "description": "OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0",
+ "fork": false,
+ "created_at": "2025-11-26T19:37:16Z",
+ "updated_at": "2025-11-26T23:29:24Z",
+ "pushed_at": "2025-11-26T22:34:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "samba"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-10377.json b/2025/CVE-2025-10377.json
new file mode 100644
index 0000000000..6c23c8e96c
--- /dev/null
+++ b/2025/CVE-2025-10377.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042529630,
+ "name": "CVE-2025-10377",
+ "full_name": "NagisaYumaa\/CVE-2025-10377",
+ "owner": {
+ "login": "NagisaYumaa",
+ "id": 64585475,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64585475?v=4",
+ "html_url": "https:\/\/github.com\/NagisaYumaa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NagisaYumaa\/CVE-2025-10377",
+ "description": "CVE-2025-10377",
+ "fork": false,
+ "created_at": "2025-08-22T06:54:15Z",
+ "updated_at": "2025-10-21T16:03:55Z",
+ "pushed_at": "2025-09-12T17:59:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-1055.json b/2025/CVE-2025-1055.json
new file mode 100644
index 0000000000..e1481e45ab
--- /dev/null
+++ b/2025/CVE-2025-1055.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050430030,
+ "name": "CVE-2025-1055-poc",
+ "full_name": "diego-tella\/CVE-2025-1055-poc",
+ "owner": {
+ "login": "diego-tella",
+ "id": 70545257,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70545257?v=4",
+ "html_url": "https:\/\/github.com\/diego-tella",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/diego-tella\/CVE-2025-1055-poc",
+ "description": "PoC for CVE-2025-1055 and CVE-2025-52915 using K7RKScan.sys",
+ "fork": false,
+ "created_at": "2025-09-04T12:24:05Z",
+ "updated_at": "2026-02-01T14:01:18Z",
+ "pushed_at": "2025-09-04T12:28:58Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-10585.json b/2025/CVE-2025-10585.json
new file mode 100644
index 0000000000..36835eceb8
--- /dev/null
+++ b/2025/CVE-2025-10585.json
@@ -0,0 +1,46 @@
+[
+ {
+ "id": 1060371154,
+ "name": "CVE-2025-10585-The-Chrome-V8-Zero-Day",
+ "full_name": "AdityaBhatt3010\/CVE-2025-10585-The-Chrome-V8-Zero-Day",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2025-10585-The-Chrome-V8-Zero-Day",
+ "description": "Google patched CVE-2025-10585, a Chrome V8 zero-day under active exploitation — here’s what it is, why it matters, and how to stay safe.",
+ "fork": false,
+ "created_at": "2025-09-19T19:53:28Z",
+ "updated_at": "2026-05-04T07:53:22Z",
+ "pushed_at": "2025-09-19T20:04:48Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "brave",
+ "browser",
+ "chrome",
+ "cve",
+ "cybersecurity",
+ "edge",
+ "exploit",
+ "microsoft-edge",
+ "opera",
+ "vivaldi"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-10720.json b/2025/CVE-2025-10720.json
index c1c3b40b2c..cb9c0757e5 100644
--- a/2025/CVE-2025-10720.json
+++ b/2025/CVE-2025-10720.json
@@ -14,8 +14,8 @@
"description": "CVE-2025-10720 PoC",
"fork": false,
"created_at": "2025-07-13T17:14:13Z",
- "updated_at": "2025-10-14T06:59:36Z",
- "pushed_at": "2025-10-14T06:58:05Z",
+ "updated_at": "2026-06-02T17:18:59Z",
+ "pushed_at": "2026-06-02T17:18:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-11001.json b/2025/CVE-2025-11001.json
new file mode 100644
index 0000000000..13124f3fbd
--- /dev/null
+++ b/2025/CVE-2025-11001.json
@@ -0,0 +1,169 @@
+[
+ {
+ "id": 1076836515,
+ "name": "CVE-2025-11001",
+ "full_name": "pacbypass\/CVE-2025-11001",
+ "owner": {
+ "login": "pacbypass",
+ "id": 25251453,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25251453?v=4",
+ "html_url": "https:\/\/github.com\/pacbypass",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pacbypass\/CVE-2025-11001",
+ "description": "Exploit for CVE-2025-11001 or CVE-2025-11002",
+ "fork": false,
+ "created_at": "2025-10-15T12:14:31Z",
+ "updated_at": "2026-04-24T05:23:17Z",
+ "pushed_at": "2025-11-06T17:47:05Z",
+ "stargazers_count": 150,
+ "watchers_count": 150,
+ "has_discussions": false,
+ "forks_count": 21,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 21,
+ "watchers": 150,
+ "score": 0,
+ "subscribers_count": 2
+ },
+ {
+ "id": 1100273650,
+ "name": "7zip-CVE-2025-11001",
+ "full_name": "lastvocher\/7zip-CVE-2025-11001",
+ "owner": {
+ "login": "lastvocher",
+ "id": 87108579,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87108579?v=4",
+ "html_url": "https:\/\/github.com\/lastvocher",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lastvocher\/7zip-CVE-2025-11001",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-20T04:16:49Z",
+ "updated_at": "2026-01-09T03:37:41Z",
+ "pushed_at": "2025-11-20T04:17:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1101829318,
+ "name": "CVE-2025-11001---7-Zip",
+ "full_name": "mbanyamer\/CVE-2025-11001---7-Zip",
+ "owner": {
+ "login": "mbanyamer",
+ "id": 213306745,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
+ "html_url": "https:\/\/github.com\/mbanyamer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mbanyamer\/CVE-2025-11001---7-Zip",
+ "description": "CVE-2025-11001 (CVSS 7.0) – 7-Zip < 25.00 Directory Traversal → RCE via crafted ZIP with symlink. Allows arbitrary file write when extracted as Administrator. Fixed in 7-Zip 25.00 (July 2025). ",
+ "fork": false,
+ "created_at": "2025-11-22T10:13:49Z",
+ "updated_at": "2026-04-09T19:04:37Z",
+ "pushed_at": "2025-11-22T10:15:05Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1102042302,
+ "name": "CVE-2025-11001",
+ "full_name": "ranasen-rat\/CVE-2025-11001",
+ "owner": {
+ "login": "ranasen-rat",
+ "id": 82767287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82767287?v=4",
+ "html_url": "https:\/\/github.com\/ranasen-rat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ranasen-rat\/CVE-2025-11001",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-22T17:58:00Z",
+ "updated_at": "2025-11-22T17:58:29Z",
+ "pushed_at": "2025-11-22T17:58:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115308281,
+ "name": "7Ziprowler",
+ "full_name": "I3r1h0n\/7Ziprowler",
+ "owner": {
+ "login": "I3r1h0n",
+ "id": 140952002,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140952002?v=4",
+ "html_url": "https:\/\/github.com\/I3r1h0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/I3r1h0n\/7Ziprowler",
+ "description": "Exploit for CVE-2025-11001",
+ "fork": false,
+ "created_at": "2025-12-12T16:49:26Z",
+ "updated_at": "2026-01-22T11:40:09Z",
+ "pushed_at": "2025-12-12T20:01:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-11001"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11077.json b/2025/CVE-2025-11077.json
new file mode 100644
index 0000000000..1e9d6dbd5d
--- /dev/null
+++ b/2025/CVE-2025-11077.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1066474918,
+ "name": "CVE-2025-11077",
+ "full_name": "byteReaper77\/CVE-2025-11077",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-11077",
+ "description": "Exploit blind SQL Injection in (Online Learning Management System) ",
+ "fork": false,
+ "created_at": "2025-09-29T14:32:29Z",
+ "updated_at": "2026-02-07T04:54:31Z",
+ "pushed_at": "2025-09-29T14:40:43Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11170.json b/2025/CVE-2025-11170.json
new file mode 100644
index 0000000000..c90a4db31f
--- /dev/null
+++ b/2025/CVE-2025-11170.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094529701,
+ "name": "CVE-2025-11170",
+ "full_name": "Nxploited\/CVE-2025-11170",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-11170",
+ "description": "WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-11T20:41:36Z",
+ "updated_at": "2026-03-13T08:56:34Z",
+ "pushed_at": "2025-11-11T20:44:36Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11492.json b/2025/CVE-2025-11492.json
new file mode 100644
index 0000000000..7e0e3e023d
--- /dev/null
+++ b/2025/CVE-2025-11492.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1095428042,
+ "name": "connectwise-automate-AiTM-rce",
+ "full_name": "synap5e\/connectwise-automate-AiTM-rce",
+ "owner": {
+ "login": "synap5e",
+ "id": 2515062,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2515062?v=4",
+ "html_url": "https:\/\/github.com\/synap5e",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/synap5e\/connectwise-automate-AiTM-rce",
+ "description": "Writeup and code for CVE-2025-11492, CVE-2025-11493 - RCE in ConnctWise Automate RMM via Adversary-in-the-Middle",
+ "fork": false,
+ "created_at": "2025-11-13T03:20:56Z",
+ "updated_at": "2026-01-13T11:21:17Z",
+ "pushed_at": "2025-11-13T03:33:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11749.json b/2025/CVE-2025-11749.json
new file mode 100644
index 0000000000..e06e49b2ee
--- /dev/null
+++ b/2025/CVE-2025-11749.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1092123504,
+ "name": "CVE-2025-11749",
+ "full_name": "Nxploited\/CVE-2025-11749",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-11749",
+ "description": "AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-11-08T03:19:59Z",
+ "updated_at": "2026-03-13T08:56:36Z",
+ "pushed_at": "2025-11-08T03:39:57Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11833.json b/2025/CVE-2025-11833.json
new file mode 100644
index 0000000000..00f7a76886
--- /dev/null
+++ b/2025/CVE-2025-11833.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1102598726,
+ "name": "CVE-2025-11833-PoC",
+ "full_name": "bocgoInfosec\/CVE-2025-11833-PoC",
+ "owner": {
+ "login": "bocgoInfosec",
+ "id": 232012844,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232012844?v=4",
+ "html_url": "https:\/\/github.com\/bocgoInfosec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bocgoInfosec\/CVE-2025-11833-PoC",
+ "description": "CVE-2025-11833 Checker",
+ "fork": false,
+ "created_at": "2025-11-23T18:41:01Z",
+ "updated_at": "2025-11-23T18:41:01Z",
+ "pushed_at": "2025-11-18T22:39:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-11953.json b/2025/CVE-2025-11953.json
index a0a5a24ce1..29963ab2bd 100644
--- a/2025/CVE-2025-11953.json
+++ b/2025/CVE-2025-11953.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1094519236,
+ "name": "PoC-CVE-collection",
+ "full_name": "GhoStZA-debug\/PoC-CVE-collection",
+ "owner": {
+ "login": "GhoStZA-debug",
+ "id": 112573627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112573627?v=4",
+ "html_url": "https:\/\/github.com\/GhoStZA-debug",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GhoStZA-debug\/PoC-CVE-collection",
+ "description": "Comprehensive Proof of Concept collection for CVE-2025-11953, CVE-2025-59287, CVE-2025-8941 with exploitation frameworks in Python, C, Bash, PowerShell",
+ "fork": false,
+ "created_at": "2025-11-11T20:19:43Z",
+ "updated_at": "2026-04-17T16:55:57Z",
+ "pushed_at": "2025-11-10T22:27:26Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1132679303,
"name": "CVE-2025-11953-POC-",
diff --git a/2025/CVE-2025-12097.json b/2025/CVE-2025-12097.json
new file mode 100644
index 0000000000..a874dfca89
--- /dev/null
+++ b/2025/CVE-2025-12097.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114681151,
+ "name": "PoC-CVE-2025-12097",
+ "full_name": "matejsmycka\/PoC-CVE-2025-12097",
+ "owner": {
+ "login": "matejsmycka",
+ "id": 45017046,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45017046?v=4",
+ "html_url": "https:\/\/github.com\/matejsmycka",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/matejsmycka\/PoC-CVE-2025-12097",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T18:17:29Z",
+ "updated_at": "2025-12-11T18:35:13Z",
+ "pushed_at": "2025-12-11T18:35:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12101.json b/2025/CVE-2025-12101.json
new file mode 100644
index 0000000000..50a8e76d25
--- /dev/null
+++ b/2025/CVE-2025-12101.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1095328976,
+ "name": "CVE-2025-12101-checker",
+ "full_name": "6h4ack\/CVE-2025-12101-checker",
+ "owner": {
+ "login": "6h4ack",
+ "id": 66249467,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66249467?v=4",
+ "html_url": "https:\/\/github.com\/6h4ack",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/6h4ack\/CVE-2025-12101-checker",
+ "description": "Simple Python PoC to check Citrix NetScaler ADC\/Gateway for CVE-2025-12101 reflected XSS on \/cgi\/logout using a crafted SAMLResponse + RelayState payload",
+ "fork": false,
+ "created_at": "2025-11-12T22:49:04Z",
+ "updated_at": "2026-05-07T14:20:47Z",
+ "pushed_at": "2025-11-12T22:55:13Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097009915,
+ "name": "CVE-2025-12101-Scanner-PoC",
+ "full_name": "boneys\/CVE-2025-12101-Scanner-PoC",
+ "owner": {
+ "login": "boneys",
+ "id": 2472816,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2472816?v=4",
+ "html_url": "https:\/\/github.com\/boneys",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/boneys\/CVE-2025-12101-Scanner-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-15T11:15:53Z",
+ "updated_at": "2025-11-15T11:16:34Z",
+ "pushed_at": "2025-11-15T11:16:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12139.json b/2025/CVE-2025-12139.json
new file mode 100644
index 0000000000..47f1764ad9
--- /dev/null
+++ b/2025/CVE-2025-12139.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1120472297,
+ "name": "CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit",
+ "full_name": "Galaxy-sc\/CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit",
+ "owner": {
+ "login": "Galaxy-sc",
+ "id": 94435150,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94435150?v=4",
+ "html_url": "https:\/\/github.com\/Galaxy-sc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Galaxy-sc\/CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-21T09:41:13Z",
+ "updated_at": "2026-05-02T09:41:10Z",
+ "pushed_at": "2025-12-21T09:50:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12539.json b/2025/CVE-2025-12539.json
new file mode 100644
index 0000000000..2fc52f048a
--- /dev/null
+++ b/2025/CVE-2025-12539.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094204658,
+ "name": "CVE-2025-12539",
+ "full_name": "Nxploited\/CVE-2025-12539",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-12539",
+ "description": "TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation\/cPanel Account Takeover",
+ "fork": false,
+ "created_at": "2025-11-11T11:57:53Z",
+ "updated_at": "2026-04-21T10:38:31Z",
+ "pushed_at": "2025-11-11T12:00:34Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12673.json b/2025/CVE-2025-12673.json
new file mode 100644
index 0000000000..ec4d4e7b68
--- /dev/null
+++ b/2025/CVE-2025-12673.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091138516,
+ "name": "CVE-2025-12673",
+ "full_name": "d0n601\/CVE-2025-12673",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-12673",
+ "description": "Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-06T15:55:46Z",
+ "updated_at": "2025-12-05T17:27:02Z",
+ "pushed_at": "2025-11-06T16:00:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12720.json b/2025/CVE-2025-12720.json
new file mode 100644
index 0000000000..fbad6fec63
--- /dev/null
+++ b/2025/CVE-2025-12720.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091148613,
+ "name": "CVE-2025-12720",
+ "full_name": "d0n601\/CVE-2025-12720",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-12720",
+ "description": "g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion",
+ "fork": false,
+ "created_at": "2025-11-06T16:11:14Z",
+ "updated_at": "2025-12-05T18:02:28Z",
+ "pushed_at": "2025-11-06T16:14:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12721.json b/2025/CVE-2025-12721.json
new file mode 100644
index 0000000000..ffb6810677
--- /dev/null
+++ b/2025/CVE-2025-12721.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091144353,
+ "name": "CVE-2025-12721",
+ "full_name": "d0n601\/CVE-2025-12721",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-12721",
+ "description": "g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure",
+ "fork": false,
+ "created_at": "2025-11-06T16:04:44Z",
+ "updated_at": "2025-12-05T18:02:49Z",
+ "pushed_at": "2025-11-06T16:08:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12735.json b/2025/CVE-2025-12735.json
index 38f13b0748..7b0aca9a23 100644
--- a/2025/CVE-2025-12735.json
+++ b/2025/CVE-2025-12735.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1100915198,
+ "name": "cve-2025-12735-expr-eval-rce",
+ "full_name": "alnashawatirohwederb2167-max\/cve-2025-12735-expr-eval-rce",
+ "owner": {
+ "login": "alnashawatirohwederb2167-max",
+ "id": 231756019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/231756019?v=4",
+ "html_url": "https:\/\/github.com\/alnashawatirohwederb2167-max",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alnashawatirohwederb2167-max\/cve-2025-12735-expr-eval-rce",
+ "description": "Security research tool for detecting and testing CVE-2025-12735 (expr-eval RCE vulnerability)",
+ "fork": false,
+ "created_at": "2025-11-20T23:52:55Z",
+ "updated_at": "2025-11-20T23:53:52Z",
+ "pushed_at": "2025-11-20T23:53:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1100924580,
+ "name": "cve-2025-12735-expr-eval-rce",
+ "full_name": "AN5I\/cve-2025-12735-expr-eval-rce",
+ "owner": {
+ "login": "AN5I",
+ "id": 243373094,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243373094?v=4",
+ "html_url": "https:\/\/github.com\/AN5I",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AN5I\/cve-2025-12735-expr-eval-rce",
+ "description": "Security research tool for detecting and testing CVE-2025-12735 (expr-eval RCE vulnerability)",
+ "fork": false,
+ "created_at": "2025-11-21T00:20:41Z",
+ "updated_at": "2025-11-21T00:20:56Z",
+ "pushed_at": "2025-11-21T00:20:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1105417721,
"name": "safe-expr-eval",
diff --git a/2025/CVE-2025-12744.json b/2025/CVE-2025-12744.json
new file mode 100644
index 0000000000..c22f6dfa1d
--- /dev/null
+++ b/2025/CVE-2025-12744.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1078704679,
+ "name": "abrt_root",
+ "full_name": "initstring\/abrt_root",
+ "owner": {
+ "login": "initstring",
+ "id": 26131150,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26131150?v=4",
+ "html_url": "https:\/\/github.com\/initstring",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/initstring\/abrt_root",
+ "description": "Privilege escalation in Fedora Linux via ABRT (Automatic Bug Reporting Tool): CVE-2025-12744",
+ "fork": false,
+ "created_at": "2025-10-18T08:39:12Z",
+ "updated_at": "2026-02-18T07:30:10Z",
+ "pushed_at": "2025-12-03T08:22:54Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12748.json b/2025/CVE-2025-12748.json
new file mode 100644
index 0000000000..ad0b451552
--- /dev/null
+++ b/2025/CVE-2025-12748.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090787168,
+ "name": "CVE-2025-12748",
+ "full_name": "TERESH1\/CVE-2025-12748",
+ "owner": {
+ "login": "TERESH1",
+ "id": 17130305,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17130305?v=4",
+ "html_url": "https:\/\/github.com\/TERESH1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TERESH1\/CVE-2025-12748",
+ "description": "Proof of concept & details for CVE-2025-12748",
+ "fork": false,
+ "created_at": "2025-11-06T06:16:23Z",
+ "updated_at": "2025-11-12T07:02:23Z",
+ "pushed_at": "2025-11-07T13:30:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12758.json b/2025/CVE-2025-12758.json
new file mode 100644
index 0000000000..aee7a535ab
--- /dev/null
+++ b/2025/CVE-2025-12758.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114193357,
+ "name": "CVE-2025-12758",
+ "full_name": "open-flaw\/CVE-2025-12758",
+ "owner": {
+ "login": "open-flaw",
+ "id": 285214572,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285214572?v=4",
+ "html_url": "https:\/\/github.com\/open-flaw",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/open-flaw\/CVE-2025-12758",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T03:10:17Z",
+ "updated_at": "2026-05-16T13:48:10Z",
+ "pushed_at": "2025-12-11T03:10:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12762.json b/2025/CVE-2025-12762.json
new file mode 100644
index 0000000000..ae7bcaaa33
--- /dev/null
+++ b/2025/CVE-2025-12762.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1102896214,
+ "name": "Blackash-CVE-2025-12762",
+ "full_name": "djayaGit\/Blackash-CVE-2025-12762",
+ "owner": {
+ "login": "djayaGit",
+ "id": 171713266,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171713266?v=4",
+ "html_url": "https:\/\/github.com\/djayaGit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/djayaGit\/Blackash-CVE-2025-12762",
+ "description": "CVE-2025-12762",
+ "fork": false,
+ "created_at": "2025-11-24T07:18:09Z",
+ "updated_at": "2025-11-24T07:18:09Z",
+ "pushed_at": "2025-11-17T09:32:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12904.json b/2025/CVE-2025-12904.json
new file mode 100644
index 0000000000..b89ec55d82
--- /dev/null
+++ b/2025/CVE-2025-12904.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1092099113,
+ "name": "SNORDIAN-s-H5PxAPIkatchu-CVE-Report",
+ "full_name": "MooseLoveti\/SNORDIAN-s-H5PxAPIkatchu-CVE-Report",
+ "owner": {
+ "login": "MooseLoveti",
+ "id": 174096809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174096809?v=4",
+ "html_url": "https:\/\/github.com\/MooseLoveti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MooseLoveti\/SNORDIAN-s-H5PxAPIkatchu-CVE-Report",
+ "description": "Disclosure for CVE-2025-12904",
+ "fork": false,
+ "created_at": "2025-11-08T01:58:45Z",
+ "updated_at": "2025-12-21T11:22:12Z",
+ "pushed_at": "2025-12-21T11:22:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12916.json b/2025/CVE-2025-12916.json
new file mode 100644
index 0000000000..44bc30d305
--- /dev/null
+++ b/2025/CVE-2025-12916.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100983779,
+ "name": "Sangfor-CVE-2025-12916",
+ "full_name": "Jinxia62\/Sangfor-CVE-2025-12916",
+ "owner": {
+ "login": "Jinxia62",
+ "id": 245294348,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245294348?v=4",
+ "html_url": "https:\/\/github.com\/Jinxia62",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jinxia62\/Sangfor-CVE-2025-12916",
+ "description": "深信服CVE-2025-12916远程命令执行漏洞批量检测工具 || 作者：金夏安全",
+ "fork": false,
+ "created_at": "2025-11-21T03:03:55Z",
+ "updated_at": "2025-11-25T12:28:15Z",
+ "pushed_at": "2025-11-21T05:28:56Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12917.json b/2025/CVE-2025-12917.json
new file mode 100644
index 0000000000..b993a0c712
--- /dev/null
+++ b/2025/CVE-2025-12917.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1092884061,
+ "name": "CVE-2025-12917-PoC",
+ "full_name": "0xcucumbersalad\/CVE-2025-12917-PoC",
+ "owner": {
+ "login": "0xcucumbersalad",
+ "id": 39252817,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39252817?v=4",
+ "html_url": "https:\/\/github.com\/0xcucumbersalad",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xcucumbersalad\/CVE-2025-12917-PoC",
+ "description": "A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file \/reqproc\/proc_post of the component Reboot Handler.",
+ "fork": false,
+ "created_at": "2025-11-09T13:58:07Z",
+ "updated_at": "2026-02-10T11:13:19Z",
+ "pushed_at": "2025-11-09T13:59:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-12973.json b/2025/CVE-2025-12973.json
new file mode 100644
index 0000000000..0dbb8e970b
--- /dev/null
+++ b/2025/CVE-2025-12973.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1093717665,
+ "name": "CVE-2025-12973",
+ "full_name": "d0n601\/CVE-2025-12973",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-12973",
+ "description": "S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-10T18:40:37Z",
+ "updated_at": "2025-11-20T17:04:11Z",
+ "pushed_at": "2025-11-10T18:46:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-1302.json b/2025/CVE-2025-1302.json
index 55779e0736..a0b3d86914 100644
--- a/2025/CVE-2025-1302.json
+++ b/2025/CVE-2025-1302.json
@@ -31,5 +31,38 @@
"watchers": 21,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1025727126,
+ "name": "CVE-2025-1302_jsonpath-plus_RCE",
+ "full_name": "abrewer251\/CVE-2025-1302_jsonpath-plus_RCE",
+ "owner": {
+ "login": "abrewer251",
+ "id": 150287770,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4",
+ "html_url": "https:\/\/github.com\/abrewer251",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abrewer251\/CVE-2025-1302_jsonpath-plus_RCE",
+ "description": "PoC exploit and vulnerable server demo for CVE-2025-1302 in jsonpath-plus.",
+ "fork": false,
+ "created_at": "2025-07-24T17:45:36Z",
+ "updated_at": "2025-07-28T03:15:18Z",
+ "pushed_at": "2025-07-24T18:23:14Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-13156.json b/2025/CVE-2025-13156.json
new file mode 100644
index 0000000000..c6115c798a
--- /dev/null
+++ b/2025/CVE-2025-13156.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096736316,
+ "name": "Vitepos-CVE-Report",
+ "full_name": "MooseLoveti\/Vitepos-CVE-Report",
+ "owner": {
+ "login": "MooseLoveti",
+ "id": 174096809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174096809?v=4",
+ "html_url": "https:\/\/github.com\/MooseLoveti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MooseLoveti\/Vitepos-CVE-Report",
+ "description": "Disclosure for CVE-2025-13156",
+ "fork": false,
+ "created_at": "2025-11-14T21:47:59Z",
+ "updated_at": "2026-05-18T02:44:05Z",
+ "pushed_at": "2025-12-21T11:35:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13159.json b/2025/CVE-2025-13159.json
new file mode 100644
index 0000000000..f5c39258da
--- /dev/null
+++ b/2025/CVE-2025-13159.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096723233,
+ "name": "Flo-Forms-CVE-Report",
+ "full_name": "MooseLoveti\/Flo-Forms-CVE-Report",
+ "owner": {
+ "login": "MooseLoveti",
+ "id": 174096809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174096809?v=4",
+ "html_url": "https:\/\/github.com\/MooseLoveti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MooseLoveti\/Flo-Forms-CVE-Report",
+ "description": "Disclosure for CVE-2025-13159",
+ "fork": false,
+ "created_at": "2025-11-14T21:13:27Z",
+ "updated_at": "2025-12-21T11:24:46Z",
+ "pushed_at": "2025-12-21T11:24:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13339.json b/2025/CVE-2025-13339.json
new file mode 100644
index 0000000000..db04bcce5b
--- /dev/null
+++ b/2025/CVE-2025-13339.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1099619942,
+ "name": "Hippoo-Mobile-App-For-WooCommerce-CVE-Report",
+ "full_name": "MooseLoveti\/Hippoo-Mobile-App-For-WooCommerce-CVE-Report",
+ "owner": {
+ "login": "MooseLoveti",
+ "id": 174096809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174096809?v=4",
+ "html_url": "https:\/\/github.com\/MooseLoveti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MooseLoveti\/Hippoo-Mobile-App-For-WooCommerce-CVE-Report",
+ "description": "Disclosure for CVE-2025-13339",
+ "fork": false,
+ "created_at": "2025-11-19T08:21:45Z",
+ "updated_at": "2025-12-21T11:26:39Z",
+ "pushed_at": "2025-12-21T11:26:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13342.json b/2025/CVE-2025-13342.json
index d636251dab..ae2ad63b62 100644
--- a/2025/CVE-2025-13342.json
+++ b/2025/CVE-2025-13342.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1112956830,
+ "name": "CVE-2025-13342",
+ "full_name": "Altelus1\/CVE-2025-13342",
+ "owner": {
+ "login": "Altelus1",
+ "id": 20337489,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20337489?v=4",
+ "html_url": "https:\/\/github.com\/Altelus1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Altelus1\/CVE-2025-13342",
+ "description": "PoC for CVE-2025-13342",
+ "fork": false,
+ "created_at": "2025-12-09T10:28:28Z",
+ "updated_at": "2025-12-09T10:42:07Z",
+ "pushed_at": "2025-12-09T10:42:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1214237648,
"name": "CVE-2025-13342",
diff --git a/2025/CVE-2025-1337.json b/2025/CVE-2025-1337.json
new file mode 100644
index 0000000000..5b4fea996a
--- /dev/null
+++ b/2025/CVE-2025-1337.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042432785,
+ "name": "CVE-2025-1337-PoC",
+ "full_name": "ada-z3r0\/CVE-2025-1337-PoC",
+ "owner": {
+ "login": "ada-z3r0",
+ "id": 227926455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/227926455?v=4",
+ "html_url": "https:\/\/github.com\/ada-z3r0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ada-z3r0\/CVE-2025-1337-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-22T02:34:37Z",
+ "updated_at": "2025-08-22T02:35:18Z",
+ "pushed_at": "2025-08-22T02:35:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13374.json b/2025/CVE-2025-13374.json
new file mode 100644
index 0000000000..31145160f0
--- /dev/null
+++ b/2025/CVE-2025-13374.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100219398,
+ "name": "CVE-2025-13374",
+ "full_name": "d0n601\/CVE-2025-13374",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-13374",
+ "description": "Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action",
+ "fork": false,
+ "created_at": "2025-11-20T02:00:45Z",
+ "updated_at": "2026-01-26T16:57:54Z",
+ "pushed_at": "2025-11-20T02:14:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13380.json b/2025/CVE-2025-13380.json
new file mode 100644
index 0000000000..b726e2f430
--- /dev/null
+++ b/2025/CVE-2025-13380.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100225902,
+ "name": "CVE-2025-13380",
+ "full_name": "d0n601\/CVE-2025-13380",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-13380",
+ "description": "AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read",
+ "fork": false,
+ "created_at": "2025-11-20T02:17:27Z",
+ "updated_at": "2025-11-24T19:19:55Z",
+ "pushed_at": "2025-11-20T02:36:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13390.json b/2025/CVE-2025-13390.json
index 2e67e724d7..92ade24b01 100644
--- a/2025/CVE-2025-13390.json
+++ b/2025/CVE-2025-13390.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1100213511,
+ "name": "CVE-2025-13390",
+ "full_name": "d0n601\/CVE-2025-13390",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-13390",
+ "description": "WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover",
+ "fork": false,
+ "created_at": "2025-11-20T01:45:12Z",
+ "updated_at": "2025-12-03T01:36:27Z",
+ "pushed_at": "2025-11-20T02:06:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1128513348,
"name": "CVE-2025-13390",
diff --git a/2025/CVE-2025-13401.json b/2025/CVE-2025-13401.json
new file mode 100644
index 0000000000..05d2cf3ad2
--- /dev/null
+++ b/2025/CVE-2025-13401.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114577976,
+ "name": "CVE-2025-13401-XSS-Stored",
+ "full_name": "ciscocamelo\/CVE-2025-13401-XSS-Stored",
+ "owner": {
+ "login": "ciscocamelo",
+ "id": 30902781,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30902781?v=4",
+ "html_url": "https:\/\/github.com\/ciscocamelo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ciscocamelo\/CVE-2025-13401-XSS-Stored",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T15:17:35Z",
+ "updated_at": "2025-12-11T15:21:42Z",
+ "pushed_at": "2025-12-11T15:21:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13425.json b/2025/CVE-2025-13425.json
new file mode 100644
index 0000000000..117227acff
--- /dev/null
+++ b/2025/CVE-2025-13425.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091129302,
+ "name": "google-poc",
+ "full_name": "0xXA\/google-poc",
+ "owner": {
+ "login": "0xXA",
+ "id": 45941452,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45941452?v=4",
+ "html_url": "https:\/\/github.com\/0xXA",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xXA\/google-poc",
+ "description": "This repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference \/ Array over-indexing vulnerability that I found in Google's OSV-SCALIBR project.",
+ "fork": false,
+ "created_at": "2025-11-06T15:41:42Z",
+ "updated_at": "2025-11-20T16:23:20Z",
+ "pushed_at": "2025-11-20T16:09:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13486.json b/2025/CVE-2025-13486.json
new file mode 100644
index 0000000000..01b07debb8
--- /dev/null
+++ b/2025/CVE-2025-13486.json
@@ -0,0 +1,216 @@
+[
+ {
+ "id": 1109682430,
+ "name": "CVE-2025-13486.-CVE-2025-13486",
+ "full_name": "0xnemian\/CVE-2025-13486.-CVE-2025-13486",
+ "owner": {
+ "login": "0xnemian",
+ "id": 229107199,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229107199?v=4",
+ "html_url": "https:\/\/github.com\/0xnemian",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xnemian\/CVE-2025-13486.-CVE-2025-13486",
+ "description": "Vulnerable setup for CVE-2025-13486 - Advanced Custom Fields: Extended - Remote Code Execution ",
+ "fork": false,
+ "created_at": "2025-12-04T06:18:43Z",
+ "updated_at": "2025-12-04T06:20:25Z",
+ "pushed_at": "2025-12-04T06:20:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109731948,
+ "name": "CVE-2025-13486-POC",
+ "full_name": "0xanis\/CVE-2025-13486-POC",
+ "owner": {
+ "login": "0xanis",
+ "id": 125704442,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125704442?v=4",
+ "html_url": "https:\/\/github.com\/0xanis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xanis\/CVE-2025-13486-POC",
+ "description": "POC for CVE-2025-13486 ",
+ "fork": false,
+ "created_at": "2025-12-04T07:54:51Z",
+ "updated_at": "2026-02-12T14:59:06Z",
+ "pushed_at": "2025-12-04T08:09:10Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110251059,
+ "name": "cve-2025-13486-vuln-setup",
+ "full_name": "KrE80r\/cve-2025-13486-vuln-setup",
+ "owner": {
+ "login": "KrE80r",
+ "id": 13027962,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13027962?v=4",
+ "html_url": "https:\/\/github.com\/KrE80r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KrE80r\/cve-2025-13486-vuln-setup",
+ "description": "Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.",
+ "fork": false,
+ "created_at": "2025-12-04T23:28:45Z",
+ "updated_at": "2025-12-05T00:18:48Z",
+ "pushed_at": "2025-12-05T00:18:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110449177,
+ "name": "CVE-2025-13486",
+ "full_name": "MataKucing-OFC\/CVE-2025-13486",
+ "owner": {
+ "login": "MataKucing-OFC",
+ "id": 72303820,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72303820?v=4",
+ "html_url": "https:\/\/github.com\/MataKucing-OFC",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MataKucing-OFC\/CVE-2025-13486",
+ "description": "The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function.",
+ "fork": false,
+ "created_at": "2025-12-05T07:57:48Z",
+ "updated_at": "2026-02-16T06:04:05Z",
+ "pushed_at": "2025-12-05T08:19:48Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-13486"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111213128,
+ "name": "CVE-2025-13486",
+ "full_name": "0xgh057r3c0n\/CVE-2025-13486",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-13486",
+ "description": "Advanced Custom Fields Extended (ACFE) WordPress Plugin Exploit RCE - Admin Creation",
+ "fork": false,
+ "created_at": "2025-12-06T13:54:30Z",
+ "updated_at": "2025-12-11T18:35:38Z",
+ "pushed_at": "2025-12-07T08:05:00Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119485952,
+ "name": "CVE-2025-13486",
+ "full_name": "whattheslime\/CVE-2025-13486",
+ "owner": {
+ "login": "whattheslime",
+ "id": 17197583,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17197583?v=4",
+ "html_url": "https:\/\/github.com\/whattheslime",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/whattheslime\/CVE-2025-13486",
+ "description": "CVE-2025-13486 - Remote Code Execution & Privilege Escalation exploit",
+ "fork": false,
+ "created_at": "2025-12-19T10:49:16Z",
+ "updated_at": "2026-04-15T07:59:24Z",
+ "pushed_at": "2025-12-19T10:54:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "acf-extended",
+ "advanced-custom-fields",
+ "create-admin",
+ "cve-2025-13486",
+ "cybersecurity",
+ "exploit",
+ "infosec",
+ "pentest",
+ "plugin",
+ "poc",
+ "privesc",
+ "rce",
+ "wordpress"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13543.json b/2025/CVE-2025-13543.json
index 9833b32773..9fca9b6ca9 100644
--- a/2025/CVE-2025-13543.json
+++ b/2025/CVE-2025-13543.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1101974923,
+ "name": "PostGallery-CVE-Report",
+ "full_name": "MooseLoveti\/PostGallery-CVE-Report",
+ "owner": {
+ "login": "MooseLoveti",
+ "id": 174096809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174096809?v=4",
+ "html_url": "https:\/\/github.com\/MooseLoveti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MooseLoveti\/PostGallery-CVE-Report",
+ "description": "Disclosure for CVE-2025-13543",
+ "fork": false,
+ "created_at": "2025-11-22T15:33:51Z",
+ "updated_at": "2025-12-21T11:28:43Z",
+ "pushed_at": "2025-12-21T11:28:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1136557411,
"name": "sudowp-postgallery",
diff --git a/2025/CVE-2025-13595.json b/2025/CVE-2025-13595.json
new file mode 100644
index 0000000000..8d9a20d019
--- /dev/null
+++ b/2025/CVE-2025-13595.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1104059982,
+ "name": "CVE-2025-13595",
+ "full_name": "d0n601\/CVE-2025-13595",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-13595",
+ "description": "CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-25T17:40:22Z",
+ "updated_at": "2025-12-08T09:40:25Z",
+ "pushed_at": "2025-11-25T17:59:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13597.json b/2025/CVE-2025-13597.json
new file mode 100644
index 0000000000..573d848e21
--- /dev/null
+++ b/2025/CVE-2025-13597.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1104062020,
+ "name": "CVE-2025-13597",
+ "full_name": "d0n601\/CVE-2025-13597",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-13597",
+ "description": "AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-25T17:43:47Z",
+ "updated_at": "2025-11-25T17:58:45Z",
+ "pushed_at": "2025-11-25T17:58:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13780.json b/2025/CVE-2025-13780.json
new file mode 100644
index 0000000000..198b31ed97
--- /dev/null
+++ b/2025/CVE-2025-13780.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1114822997,
+ "name": "pgadmin4-9.10-CVE-2025-13780",
+ "full_name": "zeropwn\/pgadmin4-9.10-CVE-2025-13780",
+ "owner": {
+ "login": "zeropwn",
+ "id": 23712741,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23712741?v=4",
+ "html_url": "https:\/\/github.com\/zeropwn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zeropwn\/pgadmin4-9.10-CVE-2025-13780",
+ "description": "Proof of concept for CVE-2025-13780",
+ "fork": false,
+ "created_at": "2025-12-12T00:01:31Z",
+ "updated_at": "2025-12-21T15:36:42Z",
+ "pushed_at": "2025-12-12T00:17:25Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115059334,
+ "name": "PoC-CVE-2025-13780",
+ "full_name": "meenakshisl\/PoC-CVE-2025-13780",
+ "owner": {
+ "login": "meenakshisl",
+ "id": 43150594,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43150594?v=4",
+ "html_url": "https:\/\/github.com\/meenakshisl",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/meenakshisl\/PoC-CVE-2025-13780",
+ "description": "PoC for CVE-2025-13780",
+ "fork": false,
+ "created_at": "2025-12-12T09:29:23Z",
+ "updated_at": "2025-12-12T09:30:12Z",
+ "pushed_at": "2025-12-12T09:30:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117954563,
+ "name": "CVE-2025-13780",
+ "full_name": "ThemeHackers\/CVE-2025-13780",
+ "owner": {
+ "login": "ThemeHackers",
+ "id": 107047730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4",
+ "html_url": "https:\/\/github.com\/ThemeHackers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2025-13780",
+ "description": "A comprehensive vulnerability scanner for CVE-2025-13780, a Remote Code Execution (RCE) vulnerability in pgAdmin 4 versions ≤ 8.14.",
+ "fork": false,
+ "created_at": "2025-12-17T03:59:29Z",
+ "updated_at": "2026-01-04T02:09:49Z",
+ "pushed_at": "2025-12-18T03:48:45Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-13796.json b/2025/CVE-2025-13796.json
new file mode 100644
index 0000000000..8582bb1300
--- /dev/null
+++ b/2025/CVE-2025-13796.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1107304117,
+ "name": "CVE-2025-13796-PoC",
+ "full_name": "0xcucumbersalad\/CVE-2025-13796-PoC",
+ "owner": {
+ "login": "0xcucumbersalad",
+ "id": 39252817,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39252817?v=4",
+ "html_url": "https:\/\/github.com\/0xcucumbersalad",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xcucumbersalad\/CVE-2025-13796-PoC",
+ "description": "deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery",
+ "fork": false,
+ "created_at": "2025-12-01T00:13:18Z",
+ "updated_at": "2025-12-01T00:14:40Z",
+ "pushed_at": "2025-12-01T00:14:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14156.json b/2025/CVE-2025-14156.json
new file mode 100644
index 0000000000..0f7d644739
--- /dev/null
+++ b/2025/CVE-2025-14156.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1119090758,
+ "name": "CVE-2025-14156",
+ "full_name": "Nxploited\/CVE-2025-14156",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-14156",
+ "description": "Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'",
+ "fork": false,
+ "created_at": "2025-12-18T18:18:01Z",
+ "updated_at": "2026-03-13T08:56:29Z",
+ "pushed_at": "2025-12-18T18:21:17Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14174.json b/2025/CVE-2025-14174.json
index ef6b433eb2..e44d087141 100644
--- a/2025/CVE-2025-14174.json
+++ b/2025/CVE-2025-14174.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1118871387,
+ "name": "CVE-2025-14174-Poc",
+ "full_name": "Satirush\/CVE-2025-14174-Poc",
+ "owner": {
+ "login": "Satirush",
+ "id": 249614007,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249614007?v=4",
+ "html_url": "https:\/\/github.com\/Satirush",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Satirush\/CVE-2025-14174-Poc",
+ "description": "Proof-of-Concept exploit for CVE-2025-14174 (EUVD-2025-203113) - Memory corruption in ANGLE allowing out-of-bounds access and RCE in web browsers. Reliable on iOS\/Android\/Windows, including patched systems with incomplete fixes.",
+ "fork": false,
+ "created_at": "2025-12-18T11:58:23Z",
+ "updated_at": "2026-04-17T06:56:03Z",
+ "pushed_at": "2025-12-18T12:06:22Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1127525759,
"name": "CVE-2025-14174-analysis",
diff --git a/2025/CVE-2025-14221.json b/2025/CVE-2025-14221.json
new file mode 100644
index 0000000000..d2634d48d6
--- /dev/null
+++ b/2025/CVE-2025-14221.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1115757467,
+ "name": "CVE-2025-14221",
+ "full_name": "fatmatrabelsi17\/CVE-2025-14221",
+ "owner": {
+ "login": "fatmatrabelsi17",
+ "id": 158491179,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158491179?v=4",
+ "html_url": "https:\/\/github.com\/fatmatrabelsi17",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fatmatrabelsi17\/CVE-2025-14221",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-13T13:47:04Z",
+ "updated_at": "2025-12-13T14:00:03Z",
+ "pushed_at": "2025-12-13T13:59:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14269.json b/2025/CVE-2025-14269.json
new file mode 100644
index 0000000000..667252169c
--- /dev/null
+++ b/2025/CVE-2025-14269.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118416553,
+ "name": "CVE-2025-14269",
+ "full_name": "r0binak\/CVE-2025-14269",
+ "owner": {
+ "login": "r0binak",
+ "id": 80983900,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80983900?v=4",
+ "html_url": "https:\/\/github.com\/r0binak",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0binak\/CVE-2025-14269",
+ "description": "CVE-2025-14269 PoC exploit",
+ "fork": false,
+ "created_at": "2025-12-17T18:10:17Z",
+ "updated_at": "2025-12-17T18:20:43Z",
+ "pushed_at": "2025-12-17T18:20:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14440.json b/2025/CVE-2025-14440.json
new file mode 100644
index 0000000000..b7dec49733
--- /dev/null
+++ b/2025/CVE-2025-14440.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1119106784,
+ "name": "CVE-2025-14440",
+ "full_name": "Nxploited\/CVE-2025-14440",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-14440",
+ "description": "JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie",
+ "fork": false,
+ "created_at": "2025-12-18T18:51:50Z",
+ "updated_at": "2026-03-13T08:56:29Z",
+ "pushed_at": "2025-12-18T18:54:30Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14558.json b/2025/CVE-2025-14558.json
index f4c42e8c81..db5e52e861 100644
--- a/2025/CVE-2025-14558.json
+++ b/2025/CVE-2025-14558.json
@@ -36,5 +36,38 @@
"watchers": 13,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1121671907,
+ "name": "Blackash-CVE-2025-14558",
+ "full_name": "rockmelodies\/Blackash-CVE-2025-14558",
+ "owner": {
+ "login": "rockmelodies",
+ "id": 24653177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24653177?v=4",
+ "html_url": "https:\/\/github.com\/rockmelodies",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rockmelodies\/Blackash-CVE-2025-14558",
+ "description": "CVE-2025-14558",
+ "fork": false,
+ "created_at": "2025-12-23T11:09:28Z",
+ "updated_at": "2025-12-23T11:09:28Z",
+ "pushed_at": "2025-12-23T10:24:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-14611.json b/2025/CVE-2025-14611.json
new file mode 100644
index 0000000000..03f9048d90
--- /dev/null
+++ b/2025/CVE-2025-14611.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1124647274,
+ "name": "CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit",
+ "full_name": "pl4tyz\/CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit",
+ "owner": {
+ "login": "pl4tyz",
+ "id": 66825349,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66825349?v=4",
+ "html_url": "https:\/\/github.com\/pl4tyz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pl4tyz\/CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit",
+ "description": "CVE-2025-14611 CentreStack and Triofox full Poc\/Exploit",
+ "fork": false,
+ "created_at": "2025-12-29T11:21:07Z",
+ "updated_at": "2025-12-29T11:22:24Z",
+ "pushed_at": "2025-12-29T11:22:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14700.json b/2025/CVE-2025-14700.json
new file mode 100644
index 0000000000..1fcc5e3408
--- /dev/null
+++ b/2025/CVE-2025-14700.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1118474580,
+ "name": "CVE-2025-14700-poc",
+ "full_name": "Nosiume\/CVE-2025-14700-poc",
+ "owner": {
+ "login": "Nosiume",
+ "id": 42848276,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42848276?v=4",
+ "html_url": "https:\/\/github.com\/Nosiume",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nosiume\/CVE-2025-14700-poc",
+ "description": "Proof of Concept for Authenticated RCE in Crafty Controller <= 4.6.1",
+ "fork": false,
+ "created_at": "2025-12-17T20:10:47Z",
+ "updated_at": "2025-12-18T08:46:34Z",
+ "pushed_at": "2025-12-17T20:13:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118846000,
+ "name": "POC_CVE-2025-14700",
+ "full_name": "secdongle\/POC_CVE-2025-14700",
+ "owner": {
+ "login": "secdongle",
+ "id": 13764600,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13764600?v=4",
+ "html_url": "https:\/\/github.com\/secdongle",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/secdongle\/POC_CVE-2025-14700",
+ "description": "Proof of Concept for Authenticated RCE in Crafty Controller",
+ "fork": false,
+ "created_at": "2025-12-18T11:10:38Z",
+ "updated_at": "2025-12-18T11:50:15Z",
+ "pushed_at": "2025-12-18T11:50:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14733.json b/2025/CVE-2025-14733.json
new file mode 100644
index 0000000000..ae488db18d
--- /dev/null
+++ b/2025/CVE-2025-14733.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1121738632,
+ "name": "CVE-2025-14733",
+ "full_name": "machevalia\/CVE-2025-14733",
+ "owner": {
+ "login": "machevalia",
+ "id": 36945847,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36945847?v=4",
+ "html_url": "https:\/\/github.com\/machevalia",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/machevalia\/CVE-2025-14733",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-23T13:25:00Z",
+ "updated_at": "2025-12-23T13:35:12Z",
+ "pushed_at": "2025-12-23T13:35:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14765.json b/2025/CVE-2025-14765.json
new file mode 100644
index 0000000000..8a7ca611d2
--- /dev/null
+++ b/2025/CVE-2025-14765.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1122710892,
+ "name": "CVE-2025-14765-and-CVE-2025-14766",
+ "full_name": "InfoSecAntara\/CVE-2025-14765-and-CVE-2025-14766",
+ "owner": {
+ "login": "InfoSecAntara",
+ "id": 47522510,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47522510?v=4",
+ "html_url": "https:\/\/github.com\/InfoSecAntara",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/InfoSecAntara\/CVE-2025-14765-and-CVE-2025-14766",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-25T10:39:50Z",
+ "updated_at": "2026-02-12T11:22:08Z",
+ "pushed_at": "2025-12-25T11:19:49Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json
index d13f3f86ba..677c32198c 100644
--- a/2025/CVE-2025-14847.json
+++ b/2025/CVE-2025-14847.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
- "updated_at": "2026-06-02T12:26:51Z",
- "pushed_at": "2026-06-02T12:26:09Z",
+ "updated_at": "2026-06-02T15:34:23Z",
+ "pushed_at": "2026-06-02T15:28:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -53,6 +53,283 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1123072156,
+ "name": "CVE-2025-14847",
+ "full_name": "onewinner\/CVE-2025-14847",
+ "owner": {
+ "login": "onewinner",
+ "id": 94044430,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94044430?v=4",
+ "html_url": "https:\/\/github.com\/onewinner",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/onewinner\/CVE-2025-14847",
+ "description": " MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具",
+ "fork": false,
+ "created_at": "2025-12-26T06:13:31Z",
+ "updated_at": "2026-03-06T00:36:45Z",
+ "pushed_at": "2025-12-26T17:01:31Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123106678,
+ "name": "CVE-2025-14847",
+ "full_name": "ProbiusOfficial\/CVE-2025-14847",
+ "owner": {
+ "login": "ProbiusOfficial",
+ "id": 41804496,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41804496?v=4",
+ "html_url": "https:\/\/github.com\/ProbiusOfficial",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ProbiusOfficial\/CVE-2025-14847",
+ "description": "poc for CVE-2025-14847",
+ "fork": false,
+ "created_at": "2025-12-26T07:38:32Z",
+ "updated_at": "2026-02-02T08:26:43Z",
+ "pushed_at": "2025-12-26T09:27:00Z",
+ "stargazers_count": 24,
+ "watchers_count": 24,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 24,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123758660,
+ "name": "CVE-2025-14847_Expolit",
+ "full_name": "cybertechajju\/CVE-2025-14847_Expolit",
+ "owner": {
+ "login": "cybertechajju",
+ "id": 120666627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
+ "html_url": "https:\/\/github.com\/cybertechajju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybertechajju\/CVE-2025-14847_Expolit",
+ "description": "a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances.",
+ "fork": false,
+ "created_at": "2025-12-27T15:01:50Z",
+ "updated_at": "2026-06-01T09:09:02Z",
+ "pushed_at": "2025-12-27T17:50:59Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123780213,
+ "name": "CVE-2025-14847_Expolit",
+ "full_name": "KingHacker353\/CVE-2025-14847_Expolit",
+ "owner": {
+ "login": "KingHacker353",
+ "id": 215260117,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215260117?v=4",
+ "html_url": "https:\/\/github.com\/KingHacker353",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KingHacker353\/CVE-2025-14847_Expolit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-27T15:54:28Z",
+ "updated_at": "2025-12-27T15:56:16Z",
+ "pushed_at": "2025-12-27T15:56:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123901686,
+ "name": "mongobleed-scanner",
+ "full_name": "Black1hp\/mongobleed-scanner",
+ "owner": {
+ "login": "Black1hp",
+ "id": 176351715,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176351715?v=4",
+ "html_url": "https:\/\/github.com\/Black1hp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Black1hp\/mongobleed-scanner",
+ "description": "MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool",
+ "fork": false,
+ "created_at": "2025-12-27T21:57:03Z",
+ "updated_at": "2026-04-29T10:21:37Z",
+ "pushed_at": "2025-12-28T11:03:37Z",
+ "stargazers_count": 36,
+ "watchers_count": 36,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bug-bounty",
+ "cve-2025-14847",
+ "heap-memory-leak",
+ "info-disclosure",
+ "mongodb",
+ "mongodb-exploit",
+ "mongodb-security",
+ "mongodbleed",
+ "op-compressed",
+ "penetration-testing",
+ "red-team",
+ "zlib"
+ ],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 36,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123925616,
+ "name": "mongobleed",
+ "full_name": "nma-io\/mongobleed",
+ "owner": {
+ "login": "nma-io",
+ "id": 9916363,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9916363?v=4",
+ "html_url": "https:\/\/github.com\/nma-io",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nma-io\/mongobleed",
+ "description": "golang test tool for mongobleed (cve-2025-14847)",
+ "fork": false,
+ "created_at": "2025-12-27T23:39:02Z",
+ "updated_at": "2025-12-29T07:15:45Z",
+ "pushed_at": "2025-12-27T23:40:22Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123925696,
+ "name": "CVE-2025-14847---MongoBleed",
+ "full_name": "saereya\/CVE-2025-14847---MongoBleed",
+ "owner": {
+ "login": "saereya",
+ "id": 16262127,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16262127?v=4",
+ "html_url": "https:\/\/github.com\/saereya",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saereya\/CVE-2025-14847---MongoBleed",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-27T23:39:24Z",
+ "updated_at": "2025-12-27T23:44:30Z",
+ "pushed_at": "2025-12-27T23:44:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124270373,
+ "name": "MongoBleed-DFIR-Triage-Script-CVE-2025-14847",
+ "full_name": "JemHadar\/MongoBleed-DFIR-Triage-Script-CVE-2025-14847",
+ "owner": {
+ "login": "JemHadar",
+ "id": 58823454,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58823454?v=4",
+ "html_url": "https:\/\/github.com\/JemHadar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/JemHadar\/MongoBleed-DFIR-Triage-Script-CVE-2025-14847",
+ "description": "The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive suitable for offline investigation on a forensic workstation.",
+ "fork": false,
+ "created_at": "2025-12-28T17:34:48Z",
+ "updated_at": "2025-12-28T20:36:12Z",
+ "pushed_at": "2025-12-28T20:36:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124377233,
"name": "mongobleed-exploit-CVE-2025-14847",
@@ -86,6 +363,42 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1124446036,
+ "name": "CVE-2025-14847",
+ "full_name": "lincemorado97\/CVE-2025-14847",
+ "owner": {
+ "login": "lincemorado97",
+ "id": 243954988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243954988?v=4",
+ "html_url": "https:\/\/github.com\/lincemorado97",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lincemorado97\/CVE-2025-14847",
+ "description": "CVE-2025-14847 – MongoDB Unauthenticated Memory‑Leak Exploit",
+ "fork": false,
+ "created_at": "2025-12-29T03:20:53Z",
+ "updated_at": "2026-01-09T03:37:45Z",
+ "pushed_at": "2025-12-31T03:06:19Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-14847",
+ "mongobleed"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124580827,
"name": "mongobleed-exploit-CVE-2025-14847",
@@ -119,6 +432,77 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1124582553,
+ "name": "CVE-2025-14847-PoC",
+ "full_name": "chinaxploiter\/CVE-2025-14847-PoC",
+ "owner": {
+ "login": "chinaxploiter",
+ "id": 244077382,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244077382?v=4",
+ "html_url": "https:\/\/github.com\/chinaxploiter",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chinaxploiter\/CVE-2025-14847-PoC",
+ "description": "Academic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.",
+ "fork": false,
+ "created_at": "2025-12-29T09:04:37Z",
+ "updated_at": "2026-05-25T09:34:47Z",
+ "pushed_at": "2025-12-29T09:26:47Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "codeb0ss",
+ "cve-2025-14847",
+ "cve-2025-14847-poc",
+ "mongodb"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124626579,
+ "name": "CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026",
+ "full_name": "14mb1v45h\/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026",
+ "owner": {
+ "login": "14mb1v45h",
+ "id": 166547152,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166547152?v=4",
+ "html_url": "https:\/\/github.com\/14mb1v45h",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/14mb1v45h\/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026",
+ "description": "Detect exposed MongoDB instances and CVE-2025-14847 \"MongoBleed\" risks — Zero-Trust Python scanner",
+ "fork": false,
+ "created_at": "2025-12-29T10:36:32Z",
+ "updated_at": "2025-12-29T10:39:22Z",
+ "pushed_at": "2025-12-29T11:07:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124721523,
"name": "cve-2025-14847",
@@ -152,6 +536,116 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1124927920,
+ "name": "CVE-2025-14847",
+ "full_name": "joshuavanderpoll\/CVE-2025-14847",
+ "owner": {
+ "login": "joshuavanderpoll",
+ "id": 16516497,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16516497?v=4",
+ "html_url": "https:\/\/github.com\/joshuavanderpoll",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/joshuavanderpoll\/CVE-2025-14847",
+ "description": "CVE-2025-14847 (MongoBleed)",
+ "fork": false,
+ "created_at": "2025-12-29T21:34:19Z",
+ "updated_at": "2026-01-01T11:40:17Z",
+ "pushed_at": "2025-12-29T21:54:11Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-14847",
+ "cve-2025-14847-poc",
+ "exploit",
+ "exploits",
+ "mongodb",
+ "pentest-tool",
+ "pentesting",
+ "python",
+ "security-tools",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124934441,
+ "name": "MongoDeepDive",
+ "full_name": "tunahantekeoglu\/MongoDeepDive",
+ "owner": {
+ "login": "tunahantekeoglu",
+ "id": 73181018,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73181018?v=4",
+ "html_url": "https:\/\/github.com\/tunahantekeoglu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tunahantekeoglu\/MongoDeepDive",
+ "description": "Context-Aware Memory Leak Scanner & Exploit for CVE-2025-14847.",
+ "fork": false,
+ "created_at": "2025-12-29T21:53:25Z",
+ "updated_at": "2025-12-29T22:10:03Z",
+ "pushed_at": "2025-12-29T22:10:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125003047,
+ "name": "CVE-2025-14847",
+ "full_name": "vfa-tuannt\/CVE-2025-14847",
+ "owner": {
+ "login": "vfa-tuannt",
+ "id": 89450566,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89450566?v=4",
+ "html_url": "https:\/\/github.com\/vfa-tuannt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vfa-tuannt\/CVE-2025-14847",
+ "description": "Remake of CVE-2025-14847 MongoDB vulnerability demonstration",
+ "fork": false,
+ "created_at": "2025-12-30T01:45:39Z",
+ "updated_at": "2025-12-30T01:55:58Z",
+ "pushed_at": "2025-12-30T01:55:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125269169,
"name": "mongobleedburp",
@@ -218,6 +712,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1125545936,
+ "name": "MongoBLEED---CVE-2025-14847-POC-",
+ "full_name": "NoNameError\/MongoBLEED---CVE-2025-14847-POC-",
+ "owner": {
+ "login": "NoNameError",
+ "id": 88937894,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88937894?v=4",
+ "html_url": "https:\/\/github.com\/NoNameError",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NoNameError\/MongoBLEED---CVE-2025-14847-POC-",
+ "description": "This repo contains my python script version of CVE-2025-14847 (MongoBleed)",
+ "fork": false,
+ "created_at": "2025-12-30T23:29:00Z",
+ "updated_at": "2026-01-12T05:06:06Z",
+ "pushed_at": "2025-12-30T23:42:05Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125895436,
+ "name": "CVE-2025-14847-MongoBleed",
+ "full_name": "Rishi-kaul\/CVE-2025-14847-MongoBleed",
+ "owner": {
+ "login": "Rishi-kaul",
+ "id": 134297029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134297029?v=4",
+ "html_url": "https:\/\/github.com\/Rishi-kaul",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rishi-kaul\/CVE-2025-14847-MongoBleed",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-31T15:37:08Z",
+ "updated_at": "2025-12-31T15:58:50Z",
+ "pushed_at": "2025-12-31T15:57:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126351418,
"name": "MongoBleed-CVE-2025-14847",
@@ -569,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
- "updated_at": "2026-06-02T12:25:32Z",
- "pushed_at": "2026-06-02T12:25:05Z",
+ "updated_at": "2026-06-02T15:33:27Z",
+ "pushed_at": "2026-06-02T15:26:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-1489.json b/2025/CVE-2025-1489.json
new file mode 100644
index 0000000000..2fd4ac91dd
--- /dev/null
+++ b/2025/CVE-2025-1489.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114332382,
+ "name": "reproducing-CVE-2025-1489",
+ "full_name": "khaifunglee\/reproducing-CVE-2025-1489",
+ "owner": {
+ "login": "khaifunglee",
+ "id": 174327222,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174327222?v=4",
+ "html_url": "https:\/\/github.com\/khaifunglee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/khaifunglee\/reproducing-CVE-2025-1489",
+ "description": "This repository is to demonstrate and practice my forensic\/vulnerability analysis skills by reproducing a web-related CVE in a safe environment. ",
+ "fork": false,
+ "created_at": "2025-12-11T08:16:54Z",
+ "updated_at": "2026-03-20T04:18:09Z",
+ "pushed_at": "2025-12-12T07:24:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-15474.json b/2025/CVE-2025-15474.json
new file mode 100644
index 0000000000..c0e1d42454
--- /dev/null
+++ b/2025/CVE-2025-15474.json
@@ -0,0 +1,43 @@
+[
+ {
+ "id": 1122143716,
+ "name": "CVE-2025-15474",
+ "full_name": "NSM-Barii\/CVE-2025-15474",
+ "owner": {
+ "login": "NSM-Barii",
+ "id": 33645343,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33645343?v=4",
+ "html_url": "https:\/\/github.com\/NSM-Barii",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NSM-Barii\/CVE-2025-15474",
+ "description": "A denial-of-service vulnerability in the AuntyFey BLE smart padlock allows unauthenticated connection floods to lock out legitimate users. CVE-2025-15474",
+ "fork": false,
+ "created_at": "2025-12-24T07:09:04Z",
+ "updated_at": "2026-04-24T06:47:11Z",
+ "pushed_at": "2025-12-25T03:30:38Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bluetooth",
+ "cve-2025-34462",
+ "denial-of-service",
+ "iot-security",
+ "smart-lock",
+ "vulnerability",
+ "wireless-security"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-1913.json b/2025/CVE-2025-1913.json
new file mode 100644
index 0000000000..b1264e4293
--- /dev/null
+++ b/2025/CVE-2025-1913.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1110634929,
+ "name": "CVE-2025-1913-PoC",
+ "full_name": "S0haib518-KSA\/CVE-2025-1913-PoC",
+ "owner": {
+ "login": "S0haib518-KSA",
+ "id": 132902648,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132902648?v=4",
+ "html_url": "https:\/\/github.com\/S0haib518-KSA",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/S0haib518-KSA\/CVE-2025-1913-PoC",
+ "description": "A PoC demonstrating CVE-2025-1913, showing how the plugin’s unsafe unserialize handling can lead to high-impact behavior in controlled environments. Contains a harmful payload for authorized testing only. Use strictly in isolated labs and for defensive research.",
+ "fork": false,
+ "created_at": "2025-12-05T13:45:50Z",
+ "updated_at": "2025-12-27T14:49:05Z",
+ "pushed_at": "2025-12-27T14:49:02Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": true,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-1974.json b/2025/CVE-2025-1974.json
index e1f119c46f..8604f0dd61 100644
--- a/2025/CVE-2025-1974.json
+++ b/2025/CVE-2025-1974.json
@@ -536,6 +536,173 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1019545397,
+ "name": "Exploit-CVE-2025-1974-Lab",
+ "full_name": "Armand2002\/Exploit-CVE-2025-1974-Lab",
+ "owner": {
+ "login": "Armand2002",
+ "id": 80708875,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80708875?v=4",
+ "html_url": "https:\/\/github.com\/Armand2002",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Armand2002\/Exploit-CVE-2025-1974-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-14T13:46:24Z",
+ "updated_at": "2025-07-14T13:46:28Z",
+ "pushed_at": "2025-07-14T13:46:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1035589306,
+ "name": "POC-IngressNightmare-CVE-2025-1974",
+ "full_name": "BiiTts\/POC-IngressNightmare-CVE-2025-1974",
+ "owner": {
+ "login": "BiiTts",
+ "id": 149285563,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
+ "html_url": "https:\/\/github.com\/BiiTts",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BiiTts\/POC-IngressNightmare-CVE-2025-1974",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-10T18:04:42Z",
+ "updated_at": "2025-08-10T18:12:40Z",
+ "pushed_at": "2025-08-10T18:12:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062756325,
+ "name": "CVE-2025-1974",
+ "full_name": "iteride\/CVE-2025-1974",
+ "owner": {
+ "login": "iteride",
+ "id": 164376455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164376455?v=4",
+ "html_url": "https:\/\/github.com\/iteride",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iteride\/CVE-2025-1974",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-23T17:24:49Z",
+ "updated_at": "2025-09-23T17:41:17Z",
+ "pushed_at": "2025-09-23T17:41:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1088262198,
+ "name": "IngressNightterror",
+ "full_name": "I3r1h0n\/IngressNightterror",
+ "owner": {
+ "login": "I3r1h0n",
+ "id": 140952002,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140952002?v=4",
+ "html_url": "https:\/\/github.com\/I3r1h0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/I3r1h0n\/IngressNightterror",
+ "description": "My view on IngressNightmare vulnerability (CVE-2025-1974)",
+ "fork": false,
+ "created_at": "2025-11-02T16:24:59Z",
+ "updated_at": "2026-01-22T11:38:46Z",
+ "pushed_at": "2025-11-06T23:15:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-1974"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113654857,
+ "name": "CVE-2025-1974-PoC-exploit",
+ "full_name": "gunyakit\/CVE-2025-1974-PoC-exploit",
+ "owner": {
+ "login": "gunyakit",
+ "id": 90493325,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90493325?v=4",
+ "html_url": "https:\/\/github.com\/gunyakit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gunyakit\/CVE-2025-1974-PoC-exploit",
+ "description": "Kubernetes Ingress-nginx RCE (IngressNightmare)",
+ "fork": false,
+ "created_at": "2025-12-10T09:26:46Z",
+ "updated_at": "2025-12-10T09:28:36Z",
+ "pushed_at": "2025-12-10T09:28:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1129699353,
"name": "CVE-2025-1974",
diff --git a/2025/CVE-2025-2011.json b/2025/CVE-2025-2011.json
index 35370eaf17..61cf8ba805 100644
--- a/2025/CVE-2025-2011.json
+++ b/2025/CVE-2025-2011.json
@@ -32,6 +32,39 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1088309466,
+ "name": "CVE-2025-2011",
+ "full_name": "X3RX3SSec\/CVE-2025-2011",
+ "owner": {
+ "login": "X3RX3SSec",
+ "id": 141476851,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141476851?v=4",
+ "html_url": "https:\/\/github.com\/X3RX3SSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/X3RX3SSec\/CVE-2025-2011",
+ "description": "Exploit for CVE-2025-2011",
+ "fork": false,
+ "created_at": "2025-11-02T18:09:15Z",
+ "updated_at": "2026-04-08T21:01:52Z",
+ "pushed_at": "2025-12-03T14:05:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1127982914,
"name": "CVE-2025-2011-poc",
diff --git a/2025/CVE-2025-20124.json b/2025/CVE-2025-20124.json
new file mode 100644
index 0000000000..8874986e65
--- /dev/null
+++ b/2025/CVE-2025-20124.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036990686,
+ "name": "Cisco-ISE-3.0---Remote-Code-Execution-RCE-",
+ "full_name": "ftz7\/Cisco-ISE-3.0---Remote-Code-Execution-RCE-",
+ "owner": {
+ "login": "ftz7",
+ "id": 191657287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191657287?v=4",
+ "html_url": "https:\/\/github.com\/ftz7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ftz7\/Cisco-ISE-3.0---Remote-Code-Execution-RCE-",
+ "description": "Esse script explora a vulnerabilidade CVE-2025-20124 — uma falha de Java Deserialization no Cisco ISE (Identity Services Engine) que permite Remote Code Execution (RCE).",
+ "fork": false,
+ "created_at": "2025-08-12T22:34:20Z",
+ "updated_at": "2025-11-03T17:27:23Z",
+ "pushed_at": "2025-08-12T22:38:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-20260.json b/2025/CVE-2025-20260.json
index 1a1862b362..631e1656e7 100644
--- a/2025/CVE-2025-20260.json
+++ b/2025/CVE-2025-20260.json
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1095361987,
+ "name": "CVE-2025-20260",
+ "full_name": "keyuraghao\/CVE-2025-20260",
+ "owner": {
+ "login": "keyuraghao",
+ "id": 65186247,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65186247?v=4",
+ "html_url": "https:\/\/github.com\/keyuraghao",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/keyuraghao\/CVE-2025-20260",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-13T00:24:05Z",
+ "updated_at": "2026-01-13T11:21:17Z",
+ "pushed_at": "2025-11-13T00:27:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-20265.json b/2025/CVE-2025-20265.json
new file mode 100644
index 0000000000..ae384216ce
--- /dev/null
+++ b/2025/CVE-2025-20265.json
@@ -0,0 +1,107 @@
+[
+ {
+ "id": 1038411205,
+ "name": "cve2025-20265",
+ "full_name": "jordan922\/cve2025-20265",
+ "owner": {
+ "login": "jordan922",
+ "id": 87998876,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87998876?v=4",
+ "html_url": "https:\/\/github.com\/jordan922",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jordan922\/cve2025-20265",
+ "description": "Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single\/multi-target scanning, and includes a harmless local PoC marker.",
+ "fork": false,
+ "created_at": "2025-08-15T06:35:01Z",
+ "updated_at": "2025-09-08T17:31:40Z",
+ "pushed_at": "2025-08-15T06:42:29Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1058160471,
+ "name": "cve_2025_20265",
+ "full_name": "saruman9\/cve_2025_20265",
+ "owner": {
+ "login": "saruman9",
+ "id": 4244396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4244396?v=4",
+ "html_url": "https:\/\/github.com\/saruman9",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saruman9\/cve_2025_20265",
+ "description": "PoC for CVE-2025-20265 Cisco Secure FMC Software RADIUS Remote Code Execution Vulnerability",
+ "fork": false,
+ "created_at": "2025-09-16T17:48:10Z",
+ "updated_at": "2025-09-22T19:31:17Z",
+ "pushed_at": "2025-09-16T17:49:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cisco",
+ "cisco-fmc",
+ "command-injection",
+ "cve",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1060653799,
+ "name": "day08-CISCO-fmc-sim",
+ "full_name": "amalpvatayam67\/day08-CISCO-fmc-sim",
+ "owner": {
+ "login": "amalpvatayam67",
+ "id": 200071444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200071444?v=4",
+ "html_url": "https:\/\/github.com\/amalpvatayam67",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalpvatayam67\/day08-CISCO-fmc-sim",
+ "description": "This is a minimal, educational simulation that demonstrates the _impact_ class of a management-plane parsing RCE (inspired by CVE-2025-20265). It intentionally executes commands from crafted input for local learning only.",
+ "fork": false,
+ "created_at": "2025-09-20T10:15:03Z",
+ "updated_at": "2025-11-07T12:20:10Z",
+ "pushed_at": "2025-09-20T10:22:02Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-20281.json b/2025/CVE-2025-20281.json
index 5b1fc02d76..46bc1a80df 100644
--- a/2025/CVE-2025-20281.json
+++ b/2025/CVE-2025-20281.json
@@ -31,5 +31,71 @@
"watchers": 20,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1012859880,
+ "name": "CVE-2025-20281-Cisco",
+ "full_name": "grupooruss\/CVE-2025-20281-Cisco",
+ "owner": {
+ "login": "grupooruss",
+ "id": 43943489,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43943489?v=4",
+ "html_url": "https:\/\/github.com\/grupooruss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/grupooruss\/CVE-2025-20281-Cisco",
+ "description": "This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.",
+ "fork": false,
+ "created_at": "2025-07-03T02:10:37Z",
+ "updated_at": "2025-12-25T04:53:12Z",
+ "pushed_at": "2025-07-03T02:15:35Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013843636,
+ "name": "Cisco-CVE-2025-20281-illdeed",
+ "full_name": "ill-deed\/Cisco-CVE-2025-20281-illdeed",
+ "owner": {
+ "login": "ill-deed",
+ "id": 210107232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210107232?v=4",
+ "html_url": "https:\/\/github.com\/ill-deed",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ill-deed\/Cisco-CVE-2025-20281-illdeed",
+ "description": "Unauthenticated Remote Code Execution exploit for CVE-2025-20281 in Cisco ISE ERS API. Execute commands or launch reverse shells as root — no authentication required.",
+ "fork": false,
+ "created_at": "2025-07-04T14:59:02Z",
+ "updated_at": "2026-01-21T02:53:03Z",
+ "pushed_at": "2025-07-04T15:07:15Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-20343.json b/2025/CVE-2025-20343.json
new file mode 100644
index 0000000000..66fb8f358f
--- /dev/null
+++ b/2025/CVE-2025-20343.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1092474814,
+ "name": "Blackash-CVE-2025-20343",
+ "full_name": "fevar54\/Blackash-CVE-2025-20343",
+ "owner": {
+ "login": "fevar54",
+ "id": 80516843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
+ "html_url": "https:\/\/github.com\/fevar54",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fevar54\/Blackash-CVE-2025-20343",
+ "description": "CVE-2025-20343",
+ "fork": false,
+ "created_at": "2025-11-08T17:37:02Z",
+ "updated_at": "2025-11-08T17:37:02Z",
+ "pushed_at": "2025-11-08T17:38:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-20352.json b/2025/CVE-2025-20352.json
new file mode 100644
index 0000000000..94f15f3f66
--- /dev/null
+++ b/2025/CVE-2025-20352.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064262360,
+ "name": "CVE-2025-20352",
+ "full_name": "scadastrangelove\/CVE-2025-20352",
+ "owner": {
+ "login": "scadastrangelove",
+ "id": 16428031,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16428031?v=4",
+ "html_url": "https:\/\/github.com\/scadastrangelove",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/scadastrangelove\/CVE-2025-20352",
+ "description": "CVE-2025-20352 SNMP Exposure Check (onesixtyone + parser)",
+ "fork": false,
+ "created_at": "2025-09-25T19:21:26Z",
+ "updated_at": "2026-02-11T09:46:33Z",
+ "pushed_at": "2025-09-25T20:35:06Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-20384.json b/2025/CVE-2025-20384.json
new file mode 100644
index 0000000000..5e7a909aef
--- /dev/null
+++ b/2025/CVE-2025-20384.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1111733521,
+ "name": "CVE-2025-20384",
+ "full_name": "Axselll\/CVE-2025-20384",
+ "owner": {
+ "login": "Axselll",
+ "id": 70375745,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70375745?v=4",
+ "html_url": "https:\/\/github.com\/Axselll",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Axselll\/CVE-2025-20384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T14:36:19Z",
+ "updated_at": "2025-12-15T17:27:31Z",
+ "pushed_at": "2025-12-15T17:27:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-20393.json b/2025/CVE-2025-20393.json
index 232da3232f..bf087e4367 100644
--- a/2025/CVE-2025-20393.json
+++ b/2025/CVE-2025-20393.json
@@ -1,4 +1,141 @@
[
+ {
+ "id": 1118808863,
+ "name": "CVE-2025-20393",
+ "full_name": "cyberleelawat\/CVE-2025-20393",
+ "owner": {
+ "login": "cyberleelawat",
+ "id": 202486122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202486122?v=4",
+ "html_url": "https:\/\/github.com\/cyberleelawat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberleelawat\/CVE-2025-20393",
+ "description": "Cisco is aware of a potential vulnerability. Cisco is currently investigating and will update these details as appropriate as more information becomes available.",
+ "fork": false,
+ "created_at": "2025-12-18T10:02:51Z",
+ "updated_at": "2026-01-14T16:57:30Z",
+ "pushed_at": "2025-12-19T10:06:01Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118878031,
+ "name": "CVE-2025-20393",
+ "full_name": "KingHacker353\/CVE-2025-20393",
+ "owner": {
+ "login": "KingHacker353",
+ "id": 215260117,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215260117?v=4",
+ "html_url": "https:\/\/github.com\/KingHacker353",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KingHacker353\/CVE-2025-20393",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T12:10:51Z",
+ "updated_at": "2025-12-18T12:14:25Z",
+ "pushed_at": "2025-12-18T12:14:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118902727,
+ "name": "cisco-sa-sma-attack-N9bf4",
+ "full_name": "StasonJatham\/cisco-sa-sma-attack-N9bf4",
+ "owner": {
+ "login": "StasonJatham",
+ "id": 63649538,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63649538?v=4",
+ "html_url": "https:\/\/github.com\/StasonJatham",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/StasonJatham\/cisco-sa-sma-attack-N9bf4",
+ "description": "Script to detect CVE-2025-20393 for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager",
+ "fork": false,
+ "created_at": "2025-12-18T12:55:00Z",
+ "updated_at": "2026-01-06T02:06:22Z",
+ "pushed_at": "2025-12-18T14:07:46Z",
+ "stargazers_count": 22,
+ "watchers_count": 22,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cisco",
+ "cve",
+ "cve-2025-20393",
+ "sma"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 22,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124313541,
+ "name": "Blackash-CVE-2025-20393",
+ "full_name": "redpack-kr\/Blackash-CVE-2025-20393",
+ "owner": {
+ "login": "redpack-kr",
+ "id": 49622995,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49622995?v=4",
+ "html_url": "https:\/\/github.com\/redpack-kr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/redpack-kr\/Blackash-CVE-2025-20393",
+ "description": "CVE-2025-20393",
+ "fork": false,
+ "created_at": "2025-12-28T19:32:21Z",
+ "updated_at": "2025-12-28T19:32:21Z",
+ "pushed_at": "2025-12-19T13:43:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1135857839,
"name": "CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner",
diff --git a/2025/CVE-2025-2082.json b/2025/CVE-2025-2082.json
index 65b6260ef4..c11fa5f582 100644
--- a/2025/CVE-2025-2082.json
+++ b/2025/CVE-2025-2082.json
@@ -31,5 +31,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1049849544,
+ "name": "cve-2025-2082-POV",
+ "full_name": "shirabo\/cve-2025-2082-POV",
+ "owner": {
+ "login": "shirabo",
+ "id": 125316705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125316705?v=4",
+ "html_url": "https:\/\/github.com\/shirabo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shirabo\/cve-2025-2082-POV",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-03T15:27:49Z",
+ "updated_at": "2025-10-13T13:02:28Z",
+ "pushed_at": "2025-09-03T17:08:58Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-21042.json b/2025/CVE-2025-21042.json
new file mode 100644
index 0000000000..bd80fa4399
--- /dev/null
+++ b/2025/CVE-2025-21042.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094162164,
+ "name": "Samsung-CVE-2025-21042",
+ "full_name": "patricnilackshan\/Samsung-CVE-2025-21042",
+ "owner": {
+ "login": "patricnilackshan",
+ "id": 126662734,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126662734?v=4",
+ "html_url": "https:\/\/github.com\/patricnilackshan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/patricnilackshan\/Samsung-CVE-2025-21042",
+ "description": "CVE-2025-21042",
+ "fork": false,
+ "created_at": "2025-11-11T10:42:10Z",
+ "updated_at": "2025-11-11T10:42:10Z",
+ "pushed_at": "2025-11-08T09:06:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-21298.json b/2025/CVE-2025-21298.json
index 3d09d7af42..335eeee5ed 100644
--- a/2025/CVE-2025-21298.json
+++ b/2025/CVE-2025-21298.json
@@ -65,6 +65,39 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1061597834,
+ "name": "full-poc-CVE-2025_21298",
+ "full_name": "fy-poc\/full-poc-CVE-2025_21298",
+ "owner": {
+ "login": "fy-poc",
+ "id": 167860953,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167860953?v=4",
+ "html_url": "https:\/\/github.com\/fy-poc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fy-poc\/full-poc-CVE-2025_21298",
+ "description": " Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library in windows. ",
+ "fork": false,
+ "created_at": "2025-09-22T06:17:41Z",
+ "updated_at": "2025-09-23T15:50:48Z",
+ "pushed_at": "2025-09-22T06:26:39Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1190500705,
"name": "Zero-Click-RCE-Incident-Response-CVE-2025-21298",
diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json
index 2a090cf84c..5a638d79e0 100644
--- a/2025/CVE-2025-21479.json
+++ b/2025/CVE-2025-21479.json
@@ -31,5 +31,38 @@
"watchers": 253,
"score": 0,
"subscribers_count": 2
+ },
+ {
+ "id": 1097481345,
+ "name": "cheese-cake",
+ "full_name": "sarabpal-dev\/cheese-cake",
+ "owner": {
+ "login": "sarabpal-dev",
+ "id": 72656344,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72656344?v=4",
+ "html_url": "https:\/\/github.com\/sarabpal-dev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sarabpal-dev\/cheese-cake",
+ "description": "A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.",
+ "fork": false,
+ "created_at": "2025-11-16T09:08:06Z",
+ "updated_at": "2026-06-02T11:32:07Z",
+ "pushed_at": "2025-12-31T03:52:58Z",
+ "stargazers_count": 27,
+ "watchers_count": 27,
+ "has_discussions": false,
+ "forks_count": 8,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 8,
+ "watchers": 27,
+ "score": 0,
+ "subscribers_count": 2
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-21574.json b/2025/CVE-2025-21574.json
new file mode 100644
index 0000000000..d2bbd5effa
--- /dev/null
+++ b/2025/CVE-2025-21574.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1017034888,
+ "name": "CVE-2025-21574-Exploit",
+ "full_name": "mdriaz009\/CVE-2025-21574-Exploit",
+ "owner": {
+ "login": "mdriaz009",
+ "id": 81848487,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81848487?v=4",
+ "html_url": "https:\/\/github.com\/mdriaz009",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mdriaz009\/CVE-2025-21574-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T23:34:49Z",
+ "updated_at": "2025-07-09T23:40:17Z",
+ "pushed_at": "2025-07-09T23:40:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-21628.json b/2025/CVE-2025-21628.json
new file mode 100644
index 0000000000..2bf737765c
--- /dev/null
+++ b/2025/CVE-2025-21628.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118237833,
+ "name": "chatwoot-cve-2025-21628",
+ "full_name": "elahehasanpour\/chatwoot-cve-2025-21628",
+ "owner": {
+ "login": "elahehasanpour",
+ "id": 250149821,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250149821?v=4",
+ "html_url": "https:\/\/github.com\/elahehasanpour",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/elahehasanpour\/chatwoot-cve-2025-21628",
+ "description": "A technical write-up explaining how improper SQL structure handling led to CVE-2025-21628 in Chatwoot.",
+ "fork": false,
+ "created_at": "2025-12-17T13:09:53Z",
+ "updated_at": "2025-12-17T13:16:03Z",
+ "pushed_at": "2025-12-17T13:09:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-21692.json b/2025/CVE-2025-21692.json
new file mode 100644
index 0000000000..c9deacf585
--- /dev/null
+++ b/2025/CVE-2025-21692.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1056240261,
+ "name": "CVE-2025-21692-poc",
+ "full_name": "volticks\/CVE-2025-21692-poc",
+ "owner": {
+ "login": "volticks",
+ "id": 73792438,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73792438?v=4",
+ "html_url": "https:\/\/github.com\/volticks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/volticks\/CVE-2025-21692-poc",
+ "description": "Proof of concept source code and misc files for my CVE-2025-21692 exploit, kernel version 6.6.75",
+ "fork": false,
+ "created_at": "2025-09-13T17:12:34Z",
+ "updated_at": "2026-04-06T02:57:03Z",
+ "pushed_at": "2025-09-16T09:02:17Z",
+ "stargazers_count": 40,
+ "watchers_count": 40,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 40,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-22131.json b/2025/CVE-2025-22131.json
new file mode 100644
index 0000000000..1868bc21d4
--- /dev/null
+++ b/2025/CVE-2025-22131.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1049547293,
+ "name": "CVE-2025-22131-PoC",
+ "full_name": "ZzN1NJ4\/CVE-2025-22131-PoC",
+ "owner": {
+ "login": "ZzN1NJ4",
+ "id": 67939249,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67939249?v=4",
+ "html_url": "https:\/\/github.com\/ZzN1NJ4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ZzN1NJ4\/CVE-2025-22131-PoC",
+ "description": "PoC for CVE-2025-22131",
+ "fork": false,
+ "created_at": "2025-09-03T06:26:03Z",
+ "updated_at": "2026-01-31T16:06:31Z",
+ "pushed_at": "2025-09-03T15:17:11Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1050901709,
+ "name": "CVE-2025-22131-POC",
+ "full_name": "s0ck37\/CVE-2025-22131-POC",
+ "owner": {
+ "login": "s0ck37",
+ "id": 61667997,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61667997?v=4",
+ "html_url": "https:\/\/github.com\/s0ck37",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/s0ck37\/CVE-2025-22131-POC",
+ "description": "POC for the vuln CVE-2025-22131",
+ "fork": false,
+ "created_at": "2025-09-05T05:59:17Z",
+ "updated_at": "2026-02-03T07:08:37Z",
+ "pushed_at": "2025-09-05T06:09:09Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-22235.json b/2025/CVE-2025-22235.json
new file mode 100644
index 0000000000..27afe9806f
--- /dev/null
+++ b/2025/CVE-2025-22235.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041892545,
+ "name": "cve-2025-22235-demo",
+ "full_name": "idealzh\/cve-2025-22235-demo",
+ "owner": {
+ "login": "idealzh",
+ "id": 8623936,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8623936?v=4",
+ "html_url": "https:\/\/github.com\/idealzh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/idealzh\/cve-2025-22235-demo",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-21T07:01:36Z",
+ "updated_at": "2025-08-21T07:38:37Z",
+ "pushed_at": "2025-08-21T07:38:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-22294.json b/2025/CVE-2025-22294.json
new file mode 100644
index 0000000000..5eb79afba5
--- /dev/null
+++ b/2025/CVE-2025-22294.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064175036,
+ "name": "cve-2025-22294",
+ "full_name": "mirmeweu\/cve-2025-22294",
+ "owner": {
+ "login": "mirmeweu",
+ "id": 204829802,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204829802?v=4",
+ "html_url": "https:\/\/github.com\/mirmeweu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mirmeweu\/cve-2025-22294",
+ "description": "the task from C*****k",
+ "fork": false,
+ "created_at": "2025-09-25T16:43:24Z",
+ "updated_at": "2025-09-25T16:59:13Z",
+ "pushed_at": "2025-09-25T16:59:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-2294.json b/2025/CVE-2025-2294.json
index 67c964433b..17888d1a0b 100644
--- a/2025/CVE-2025-2294.json
+++ b/2025/CVE-2025-2294.json
@@ -197,6 +197,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1027428596,
+ "name": "CVE-2025-2294",
+ "full_name": "r0otk3r\/CVE-2025-2294",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-2294",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-28T02:02:04Z",
+ "updated_at": "2025-07-28T02:09:04Z",
+ "pushed_at": "2025-07-28T02:09:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1063453936,
+ "name": "CVE-2025-2294",
+ "full_name": "iteride\/CVE-2025-2294",
+ "owner": {
+ "login": "iteride",
+ "id": 164376455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164376455?v=4",
+ "html_url": "https:\/\/github.com\/iteride",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iteride\/CVE-2025-2294",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-24T16:41:56Z",
+ "updated_at": "2025-09-24T19:56:33Z",
+ "pushed_at": "2025-09-24T19:56:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1140551048,
"name": "CVE-2025-2294-Kubio-2.5.1-LFi-Checker",
diff --git a/2025/CVE-2025-22963.json b/2025/CVE-2025-22963.json
new file mode 100644
index 0000000000..286802165b
--- /dev/null
+++ b/2025/CVE-2025-22963.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1014774707,
+ "name": "CVE-2025-22963",
+ "full_name": "gmh5225\/CVE-2025-22963",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-22963",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-06T11:48:07Z",
+ "updated_at": "2025-07-06T11:48:07Z",
+ "pushed_at": "2025-07-05T06:38:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034264206,
+ "name": "CVE-2025-22963",
+ "full_name": "samplev45\/CVE-2025-22963",
+ "owner": {
+ "login": "samplev45",
+ "id": 219388135,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219388135?v=4",
+ "html_url": "https:\/\/github.com\/samplev45",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/samplev45\/CVE-2025-22963",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-08T05:45:16Z",
+ "updated_at": "2025-08-08T05:45:35Z",
+ "pushed_at": "2025-08-08T05:45:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json
index 23a745916b..cead2d8f1e 100644
--- a/2025/CVE-2025-2304.json
+++ b/2025/CVE-2025-2304.json
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
- "updated_at": "2026-06-02T12:47:06Z",
- "pushed_at": "2026-06-02T12:47:02Z",
+ "updated_at": "2026-06-02T15:51:45Z",
+ "pushed_at": "2026-06-02T15:48:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-23061.json b/2025/CVE-2025-23061.json
index 1adfee9d4a..8b2c0ea7c7 100644
--- a/2025/CVE-2025-23061.json
+++ b/2025/CVE-2025-23061.json
@@ -1,4 +1,41 @@
[
+ {
+ "id": 1114318255,
+ "name": "CVE-2025-23061",
+ "full_name": "open-flaw\/CVE-2025-23061",
+ "owner": {
+ "login": "open-flaw",
+ "id": 285214572,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285214572?v=4",
+ "html_url": "https:\/\/github.com\/open-flaw",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/open-flaw\/CVE-2025-23061",
+ "description": "CVE-2025-23061 - Mongoose Command Injection",
+ "fork": false,
+ "created_at": "2025-12-11T07:50:19Z",
+ "updated_at": "2026-05-16T13:47:49Z",
+ "pushed_at": "2025-12-11T07:59:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "command-injection",
+ "cve-2025-23061",
+ "mongoose"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1202642920,
"name": "CVE-2025-23061-LAB",
diff --git a/2025/CVE-2025-23167.json b/2025/CVE-2025-23167.json
new file mode 100644
index 0000000000..df428f77f4
--- /dev/null
+++ b/2025/CVE-2025-23167.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1020335898,
+ "name": "CVE-2025-23167",
+ "full_name": "abhisek3122\/CVE-2025-23167",
+ "owner": {
+ "login": "abhisek3122",
+ "id": 48170288,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48170288?v=4",
+ "html_url": "https:\/\/github.com\/abhisek3122",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abhisek3122\/CVE-2025-23167",
+ "description": "Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2",
+ "fork": false,
+ "created_at": "2025-07-15T17:51:09Z",
+ "updated_at": "2026-03-19T02:13:09Z",
+ "pushed_at": "2025-07-15T17:58:51Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-23247.json b/2025/CVE-2025-23247.json
new file mode 100644
index 0000000000..6446564ad6
--- /dev/null
+++ b/2025/CVE-2025-23247.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100679005,
+ "name": "CVE-2025-23247",
+ "full_name": "SpiralBL0CK\/CVE-2025-23247",
+ "owner": {
+ "login": "SpiralBL0CK",
+ "id": 25670930,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
+ "html_url": "https:\/\/github.com\/SpiralBL0CK",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2025-23247",
+ "description": "wip for CVE-2025-23247 . ATM just crash PoC which shows we control buffer and offset, so we got aaw ",
+ "fork": false,
+ "created_at": "2025-11-20T15:53:07Z",
+ "updated_at": "2026-01-20T04:26:27Z",
+ "pushed_at": "2025-11-20T15:57:29Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-23266.json b/2025/CVE-2025-23266.json
index 5a5db0b49d..a5c325e8b9 100644
--- a/2025/CVE-2025-23266.json
+++ b/2025/CVE-2025-23266.json
@@ -1,4 +1,39 @@
[
+ {
+ "id": 1022560721,
+ "name": "cve-2025-23266-poc",
+ "full_name": "jpts\/cve-2025-23266-poc",
+ "owner": {
+ "login": "jpts",
+ "id": 5352661,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5352661?v=4",
+ "html_url": "https:\/\/github.com\/jpts",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jpts\/cve-2025-23266-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T10:40:04Z",
+ "updated_at": "2026-03-14T15:48:41Z",
+ "pushed_at": "2025-07-19T10:43:25Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 6,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-23266"
+ ],
+ "visibility": "public",
+ "forks": 6,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1049051891,
"name": "CVE-2025-23266",
@@ -38,6 +73,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1050478718,
+ "name": "cve-2025-23266-migration-bypass",
+ "full_name": "Mindasy\/cve-2025-23266-migration-bypass",
+ "owner": {
+ "login": "Mindasy",
+ "id": 43293443,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43293443?v=4",
+ "html_url": "https:\/\/github.com\/Mindasy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mindasy\/cve-2025-23266-migration-bypass",
+ "description": "cve-2025-23266-migration-bypass",
+ "fork": false,
+ "created_at": "2025-09-04T13:42:27Z",
+ "updated_at": "2026-01-16T01:53:29Z",
+ "pushed_at": "2025-09-04T14:31:30Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1051930565,
+ "name": "CVE-2025-23266",
+ "full_name": "mrk336\/CVE-2025-23266",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-23266",
+ "description": "CVE-2025-23266 targets FastAPI’s parse_request() function, where oversized HTTP headers cause a buffer overflow and remote code execution. The article explains how attackers can escape container boundaries, compromise AI workloads, and how tools like Sentinel can detect and mitigate the threat",
+ "fork": false,
+ "created_at": "2025-09-07T03:03:11Z",
+ "updated_at": "2026-01-05T11:20:24Z",
+ "pushed_at": "2025-09-07T03:35:05Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1131842014,
"name": "security-research",
diff --git a/2025/CVE-2025-23339.json b/2025/CVE-2025-23339.json
new file mode 100644
index 0000000000..4e5b6ff55e
--- /dev/null
+++ b/2025/CVE-2025-23339.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117798097,
+ "name": "ce-for-CVE-2025-23339",
+ "full_name": "SpiralBL0CK\/ce-for-CVE-2025-23339",
+ "owner": {
+ "login": "SpiralBL0CK",
+ "id": 25670930,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
+ "html_url": "https:\/\/github.com\/SpiralBL0CK",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SpiralBL0CK\/ce-for-CVE-2025-23339",
+ "description": "ce for CVE-2025-23339",
+ "fork": false,
+ "created_at": "2025-12-16T20:40:16Z",
+ "updated_at": "2026-01-09T03:37:44Z",
+ "pushed_at": "2025-12-16T20:43:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-24016.json b/2025/CVE-2025-24016.json
index 34da74670f..e479011db4 100644
--- a/2025/CVE-2025-24016.json
+++ b/2025/CVE-2025-24016.json
@@ -253,5 +253,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1019191085,
+ "name": "Wazuh-RCE",
+ "full_name": "guinea-offensive-security\/Wazuh-RCE",
+ "owner": {
+ "login": "guinea-offensive-security",
+ "id": 209405419,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209405419?v=4",
+ "html_url": "https:\/\/github.com\/guinea-offensive-security",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/guinea-offensive-security\/Wazuh-RCE",
+ "description": "Wazuh 8.4 CVE-2025-24016",
+ "fork": false,
+ "created_at": "2025-07-13T23:56:54Z",
+ "updated_at": "2026-04-13T01:46:30Z",
+ "pushed_at": "2025-07-14T00:00:12Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-24054.json b/2025/CVE-2025-24054.json
index 45a496b75d..028788a61f 100644
--- a/2025/CVE-2025-24054.json
+++ b/2025/CVE-2025-24054.json
@@ -145,6 +145,72 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1093043702,
+ "name": "CVE-2025-24054_PoC",
+ "full_name": "Wind010\/CVE-2025-24054_PoC",
+ "owner": {
+ "login": "Wind010",
+ "id": 17187851,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17187851?v=4",
+ "html_url": "https:\/\/github.com\/Wind010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Wind010\/CVE-2025-24054_PoC",
+ "description": "A proof of concept for CVE-2025-24054\/CVE-2025-24071",
+ "fork": false,
+ "created_at": "2025-11-09T19:48:54Z",
+ "updated_at": "2025-11-09T19:48:58Z",
+ "pushed_at": "2025-11-09T19:48:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1102444886,
+ "name": "CVE-2025-24054",
+ "full_name": "Untouchable17\/CVE-2025-24054",
+ "owner": {
+ "login": "Untouchable17",
+ "id": 79522262,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79522262?v=4",
+ "html_url": "https:\/\/github.com\/Untouchable17",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Untouchable17\/CVE-2025-24054",
+ "description": "Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure",
+ "fork": false,
+ "created_at": "2025-11-23T13:30:38Z",
+ "updated_at": "2026-02-05T06:34:33Z",
+ "pushed_at": "2025-11-24T18:51:48Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1198881734,
"name": "CVE-2025-24054-24071---Metasploit-Module",
diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json
index 9a737009aa..ca08f020af 100644
--- a/2025/CVE-2025-24071.json
+++ b/2025/CVE-2025-24071.json
@@ -512,6 +512,190 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014216657,
+ "name": "CVE-2025-24071",
+ "full_name": "Royall-Researchers\/CVE-2025-24071",
+ "owner": {
+ "login": "Royall-Researchers",
+ "id": 151623016,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151623016?v=4",
+ "html_url": "https:\/\/github.com\/Royall-Researchers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Royall-Researchers\/CVE-2025-24071",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-05T09:22:29Z",
+ "updated_at": "2025-07-05T09:29:21Z",
+ "pushed_at": "2025-07-05T09:29:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015575939,
+ "name": "CVE-2025-24071-Exploit",
+ "full_name": "ephunter\/CVE-2025-24071-Exploit",
+ "owner": {
+ "login": "ephunter",
+ "id": 156387485,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156387485?v=4",
+ "html_url": "https:\/\/github.com\/ephunter",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ephunter\/CVE-2025-24071-Exploit",
+ "description": "Exploit CVE-2025-24071",
+ "fork": false,
+ "created_at": "2025-07-07T17:56:53Z",
+ "updated_at": "2025-07-07T17:56:53Z",
+ "pushed_at": "2025-03-21T04:23:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1050794640,
+ "name": "CVE-2025-24071",
+ "full_name": "AC8999\/CVE-2025-24071",
+ "owner": {
+ "login": "AC8999",
+ "id": 207462763,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207462763?v=4",
+ "html_url": "https:\/\/github.com\/AC8999",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AC8999\/CVE-2025-24071",
+ "description": "Python script to execute CVE-2025-24071",
+ "fork": false,
+ "created_at": "2025-09-05T00:32:53Z",
+ "updated_at": "2025-09-05T01:31:09Z",
+ "pushed_at": "2025-09-05T01:31:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117180442,
+ "name": "CVE-2025-24071",
+ "full_name": "Abdelrahman0Sayed\/CVE-2025-24071",
+ "owner": {
+ "login": "Abdelrahman0Sayed",
+ "id": 113141265,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113141265?v=4",
+ "html_url": "https:\/\/github.com\/Abdelrahman0Sayed",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Abdelrahman0Sayed\/CVE-2025-24071",
+ "description": "This is a python PoC scripts for CVE-2025-24071 which is a vulnerability in Windows File Explorer that allows unauthorized access to sensitive information like NTLM Exposure.",
+ "fork": false,
+ "created_at": "2025-12-16T00:20:36Z",
+ "updated_at": "2026-05-19T04:44:53Z",
+ "pushed_at": "2025-12-16T20:12:38Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1120771785,
+ "name": "Fsociety-CVE-2025-24071-NTLM-Coercion",
+ "full_name": "fsoc-ghost-0x\/Fsociety-CVE-2025-24071-NTLM-Coercion",
+ "owner": {
+ "login": "fsoc-ghost-0x",
+ "id": 171997927,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171997927?v=4",
+ "html_url": "https:\/\/github.com\/fsoc-ghost-0x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fsoc-ghost-0x\/Fsociety-CVE-2025-24071-NTLM-Coercion",
+ "description": "Hello friend. This is the Fsociety Exploit Framework for CVE-2025-24071. Generates malicious .library-ms files to steal NTLMv2 hashes. Includes a 'Living Terminal' Cinematic Mode, Deep Trace logging, and stealth evasion techniques. Join the revolution. #Hacking #Exploit #CVE-2025-24071 ",
+ "fork": false,
+ "created_at": "2025-12-21T22:56:55Z",
+ "updated_at": "2026-05-18T22:14:24Z",
+ "pushed_at": "2025-12-21T23:41:52Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "c0deghost",
+ "cve-2025-24071",
+ "elliot-alderson",
+ "exploit",
+ "exploit-development",
+ "exploit-kit",
+ "fsociety",
+ "library-ms",
+ "malware-development",
+ "microsoft",
+ "mr-robot",
+ "ntlm-coercion",
+ "ntlm-relay",
+ "offensive-security",
+ "python-exploits",
+ "red-team",
+ "windows",
+ "windows-exploit"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1244461848,
"name": "CVE-2025-24071-POC",
diff --git a/2025/CVE-2025-24091.json b/2025/CVE-2025-24091.json
new file mode 100644
index 0000000000..eed83e1bef
--- /dev/null
+++ b/2025/CVE-2025-24091.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1109365537,
+ "name": "evilnotify",
+ "full_name": "rooootdev\/evilnotify",
+ "owner": {
+ "login": "rooootdev",
+ "id": 103732419,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103732419?v=4",
+ "html_url": "https:\/\/github.com\/rooootdev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rooootdev\/evilnotify",
+ "description": "iOS app that does stuff with CVE-2025-24091",
+ "fork": false,
+ "created_at": "2025-12-03T17:48:46Z",
+ "updated_at": "2026-05-03T06:56:42Z",
+ "pushed_at": "2025-12-03T18:14:12Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-24201.json b/2025/CVE-2025-24201.json
new file mode 100644
index 0000000000..b055bffe7f
--- /dev/null
+++ b/2025/CVE-2025-24201.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1018040114,
+ "name": "CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-",
+ "full_name": "The-Maxu\/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-",
+ "owner": {
+ "login": "The-Maxu",
+ "id": 75815962,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75815962?v=4",
+ "html_url": "https:\/\/github.com\/The-Maxu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/The-Maxu\/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-",
+ "description": "CVE-2025-24201 WebKit Vulnerability Detector (PoC)",
+ "fork": false,
+ "created_at": "2025-07-11T14:01:00Z",
+ "updated_at": "2026-04-06T13:42:49Z",
+ "pushed_at": "2025-07-11T14:22:58Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047246347,
+ "name": "glass-cage-i18-2025-24085-and-cve-2025-24201",
+ "full_name": "5ky9uy\/glass-cage-i18-2025-24085-and-cve-2025-24201",
+ "owner": {
+ "login": "5ky9uy",
+ "id": 92344902,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92344902?v=4",
+ "html_url": "https:\/\/github.com\/5ky9uy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/5ky9uy\/glass-cage-i18-2025-24085-and-cve-2025-24201",
+ "description": "Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.",
+ "fork": false,
+ "created_at": "2025-08-30T02:21:38Z",
+ "updated_at": "2026-02-10T13:45:13Z",
+ "pushed_at": "2025-08-30T03:20:27Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-24204.json b/2025/CVE-2025-24204.json
index ce75b0eb8a..5c2c3a454b 100644
--- a/2025/CVE-2025-24204.json
+++ b/2025/CVE-2025-24204.json
@@ -31,5 +31,38 @@
"watchers": 109,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1050631254,
+ "name": "decrypted",
+ "full_name": "34306\/decrypted",
+ "owner": {
+ "login": "34306",
+ "id": 79745143,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79745143?v=4",
+ "html_url": "https:\/\/github.com\/34306",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/34306\/decrypted",
+ "description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
+ "fork": false,
+ "created_at": "2025-09-04T17:49:51Z",
+ "updated_at": "2026-05-18T19:14:36Z",
+ "pushed_at": "2025-09-04T17:59:49Z",
+ "stargazers_count": 133,
+ "watchers_count": 133,
+ "has_discussions": false,
+ "forks_count": 19,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 19,
+ "watchers": 133,
+ "score": 0,
+ "subscribers_count": 2
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json
index a869747e83..5fb3c14f7c 100644
--- a/2025/CVE-2025-24257.json
+++ b/2025/CVE-2025-24257.json
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
- "updated_at": "2026-06-02T09:12:32Z",
- "pushed_at": "2026-06-02T09:12:19Z",
+ "updated_at": "2026-06-02T16:22:46Z",
+ "pushed_at": "2026-06-02T16:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-24354.json b/2025/CVE-2025-24354.json
new file mode 100644
index 0000000000..f87db8184d
--- /dev/null
+++ b/2025/CVE-2025-24354.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1034568450,
+ "name": "CVE-2025-24354-PoC",
+ "full_name": "Admin9961\/CVE-2025-24354-PoC",
+ "owner": {
+ "login": "Admin9961",
+ "id": 121270287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121270287?v=4",
+ "html_url": "https:\/\/github.com\/Admin9961",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Admin9961\/CVE-2025-24354-PoC",
+ "description": "SSRF in ImgProxy (only for educational purpose)",
+ "fork": false,
+ "created_at": "2025-08-08T15:47:52Z",
+ "updated_at": "2025-08-08T15:48:29Z",
+ "pushed_at": "2025-08-08T15:48:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-24367.json b/2025/CVE-2025-24367.json
index 96f82349ae..a1ffb2a697 100644
--- a/2025/CVE-2025-24367.json
+++ b/2025/CVE-2025-24367.json
@@ -1,4 +1,103 @@
[
+ {
+ "id": 1086709473,
+ "name": "CVE-2025-24367-Cacti-PoC",
+ "full_name": "TheCyberGeek\/CVE-2025-24367-Cacti-PoC",
+ "owner": {
+ "login": "TheCyberGeek",
+ "id": 52138157,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52138157?v=4",
+ "html_url": "https:\/\/github.com\/TheCyberGeek",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TheCyberGeek\/CVE-2025-24367-Cacti-PoC",
+ "description": "Proof of Concept for CVE-2025-24367",
+ "fork": false,
+ "created_at": "2025-10-30T19:41:59Z",
+ "updated_at": "2026-05-25T18:48:29Z",
+ "pushed_at": "2025-12-08T16:33:46Z",
+ "stargazers_count": 37,
+ "watchers_count": 37,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 37,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115063665,
+ "name": "CVE-2025-24367",
+ "full_name": "r3vpwnx\/CVE-2025-24367",
+ "owner": {
+ "login": "r3vpwnx",
+ "id": 234629294,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234629294?v=4",
+ "html_url": "https:\/\/github.com\/r3vpwnx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r3vpwnx\/CVE-2025-24367",
+ "description": "CVE-2025-24367 - Cacti Authenticated Graph Template RCE",
+ "fork": false,
+ "created_at": "2025-12-12T09:36:51Z",
+ "updated_at": "2025-12-12T10:00:08Z",
+ "pushed_at": "2025-12-12T10:00:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116421090,
+ "name": "CVE-2025-24367-PoC-Cacti",
+ "full_name": "SoftAndoWetto\/CVE-2025-24367-PoC-Cacti",
+ "owner": {
+ "login": "SoftAndoWetto",
+ "id": 188264635,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188264635?v=4",
+ "html_url": "https:\/\/github.com\/SoftAndoWetto",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SoftAndoWetto\/CVE-2025-24367-PoC-Cacti",
+ "description": "Authenticated RCE PoC for Cacti (CVE‑2025‑24367). Uses graph template injection to write and execute a payload via the “Unix – Logged in Users” template. Intended for labs and controlled testing only.",
+ "fork": false,
+ "created_at": "2025-12-14T20:29:14Z",
+ "updated_at": "2025-12-15T13:37:17Z",
+ "pushed_at": "2025-12-15T13:37:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1135076575,
"name": "CVE-2025-24367",
diff --git a/2025/CVE-2025-24799.json b/2025/CVE-2025-24799.json
index 74960c2e41..99c4bc95b4 100644
--- a/2025/CVE-2025-24799.json
+++ b/2025/CVE-2025-24799.json
@@ -75,5 +75,38 @@
"watchers": 33,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1057965567,
+ "name": "CVE-2025-24799-scanner",
+ "full_name": "airbus-cert\/CVE-2025-24799-scanner",
+ "owner": {
+ "login": "airbus-cert",
+ "id": 26453405,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26453405?v=4",
+ "html_url": "https:\/\/github.com\/airbus-cert",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/airbus-cert\/CVE-2025-24799-scanner",
+ "description": "Scanner for GLPI CVE-2025-24799 vulnerability",
+ "fork": false,
+ "created_at": "2025-09-16T12:52:05Z",
+ "updated_at": "2025-09-16T12:55:10Z",
+ "pushed_at": "2025-09-16T12:53:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-24813.json b/2025/CVE-2025-24813.json
index 59d4f4411e..13984ac11c 100644
--- a/2025/CVE-2025-24813.json
+++ b/2025/CVE-2025-24813.json
@@ -1173,6 +1173,237 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1012829628,
+ "name": "cve-2025-24813-poc",
+ "full_name": "yaleman\/cve-2025-24813-poc",
+ "owner": {
+ "login": "yaleman",
+ "id": 168188,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168188?v=4",
+ "html_url": "https:\/\/github.com\/yaleman",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yaleman\/cve-2025-24813-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-03T00:31:30Z",
+ "updated_at": "2025-07-08T06:04:09Z",
+ "pushed_at": "2025-07-08T06:03:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015218162,
+ "name": "CVE-2025-24813",
+ "full_name": "GongWook\/CVE-2025-24813",
+ "owner": {
+ "login": "GongWook",
+ "id": 72791182,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72791182?v=4",
+ "html_url": "https:\/\/github.com\/GongWook",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GongWook\/CVE-2025-24813",
+ "description": "POC",
+ "fork": false,
+ "created_at": "2025-07-07T07:17:31Z",
+ "updated_at": "2025-07-07T12:30:50Z",
+ "pushed_at": "2025-07-07T12:30:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018315407,
+ "name": "CVE-2025-24813-Apache-Tomcat-RCE-PoC",
+ "full_name": "sentilaso1\/CVE-2025-24813-Apache-Tomcat-RCE-PoC",
+ "owner": {
+ "login": "sentilaso1",
+ "id": 166209447,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166209447?v=4",
+ "html_url": "https:\/\/github.com\/sentilaso1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sentilaso1\/CVE-2025-24813-Apache-Tomcat-RCE-PoC",
+ "description": "Proof of Concept for CVE-2025-24813, a Remote Code Execution vulnerability in Apache Tomcat. This PoC exploits unsafe deserialization via crafted session files uploaded through HTTP PUT requests, allowing attackers to execute arbitrary code remotely on vulnerable Tomcat servers.",
+ "fork": false,
+ "created_at": "2025-07-12T02:40:44Z",
+ "updated_at": "2025-07-12T02:55:30Z",
+ "pushed_at": "2025-07-12T02:55:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022654952,
+ "name": "PutScanner",
+ "full_name": "x00byte\/PutScanner",
+ "owner": {
+ "login": "x00byte",
+ "id": 66885629,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66885629?v=4",
+ "html_url": "https:\/\/github.com\/x00byte",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/x00byte\/PutScanner",
+ "description": "A tool that identifies writable web directories in Apache Tomcat via HTTP PUT method [CVE-2025-24813]",
+ "fork": false,
+ "created_at": "2025-07-19T14:41:16Z",
+ "updated_at": "2025-12-12T03:42:32Z",
+ "pushed_at": "2025-07-19T14:44:02Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027948392,
+ "name": "CVE-2025-24813",
+ "full_name": "Shivshantp\/CVE-2025-24813",
+ "owner": {
+ "login": "Shivshantp",
+ "id": 138895783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138895783?v=4",
+ "html_url": "https:\/\/github.com\/Shivshantp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shivshantp\/CVE-2025-24813",
+ "description": " Apache Tomcat PUT JSP RCE - CVE-2025-24813 - Exploit & PoC",
+ "fork": false,
+ "created_at": "2025-07-28T19:25:34Z",
+ "updated_at": "2026-04-02T07:21:56Z",
+ "pushed_at": "2025-07-28T21:02:43Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1033018870,
+ "name": "CVE-2025-24813",
+ "full_name": "cyglegit\/CVE-2025-24813",
+ "owner": {
+ "login": "cyglegit",
+ "id": 164863177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164863177?v=4",
+ "html_url": "https:\/\/github.com\/cyglegit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyglegit\/CVE-2025-24813",
+ "description": "Automated scanner + exploit for CVE-2025-24813",
+ "fork": false,
+ "created_at": "2025-08-06T07:16:54Z",
+ "updated_at": "2025-08-10T05:45:20Z",
+ "pushed_at": "2025-08-06T07:36:50Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1036248528,
+ "name": "PoC-CVE-2025-24813",
+ "full_name": "ftz7\/PoC-CVE-2025-24813",
+ "owner": {
+ "login": "ftz7",
+ "id": 191657287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191657287?v=4",
+ "html_url": "https:\/\/github.com\/ftz7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ftz7\/PoC-CVE-2025-24813",
+ "description": "Este script explora a vulnerabilidade CVE-2025-24813 em versões específicas do Apache Tomcat, permitindo execução remota de código (RCE) através de um vetor de desserialização Java e abuso do método HTTP PUT para gravação arbitrária de arquivos de sessão.",
+ "fork": false,
+ "created_at": "2025-08-11T19:33:10Z",
+ "updated_at": "2025-11-03T17:27:24Z",
+ "pushed_at": "2025-08-12T05:19:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1047819654,
"name": "Apache-GOExploiter",
@@ -1220,6 +1451,171 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1049709442,
+ "name": "CVE-2025-24813-PoC",
+ "full_name": "CEAlbez\/CVE-2025-24813-PoC",
+ "owner": {
+ "login": "CEAlbez",
+ "id": 229980648,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229980648?v=4",
+ "html_url": "https:\/\/github.com\/CEAlbez",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CEAlbez\/CVE-2025-24813-PoC",
+ "description": "This is a PoC for the CVE-2025-24813 and tested in different environments.",
+ "fork": false,
+ "created_at": "2025-09-03T11:36:13Z",
+ "updated_at": "2025-09-07T20:49:22Z",
+ "pushed_at": "2025-09-07T20:49:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1052906670,
+ "name": "POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution",
+ "full_name": "Makavellik\/POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution",
+ "owner": {
+ "login": "Makavellik",
+ "id": 86862594,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86862594?v=4",
+ "html_url": "https:\/\/github.com\/Makavellik",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Makavellik\/POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution",
+ "description": "Este repositorio contiene un exploit automatizado desarrollado con fines educativos y de investigación en ciberseguridad, dirigido a demostrar una potencial vulnerabilidad de ejecución remota de código (RCE) en Apache Tomcat (CVE-2025-24813).",
+ "fork": false,
+ "created_at": "2025-09-08T18:00:50Z",
+ "updated_at": "2025-09-08T18:34:29Z",
+ "pushed_at": "2025-09-08T18:34:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1057783242,
+ "name": "CVE-2025-24813",
+ "full_name": "pirenga\/CVE-2025-24813",
+ "owner": {
+ "login": "pirenga",
+ "id": 10979104,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10979104?v=4",
+ "html_url": "https:\/\/github.com\/pirenga",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pirenga\/CVE-2025-24813",
+ "description": "Example PoC for CVE-2025-24813 (Tomcat RCE)",
+ "fork": false,
+ "created_at": "2025-09-16T07:48:58Z",
+ "updated_at": "2025-12-25T04:22:01Z",
+ "pushed_at": "2025-09-14T23:15:03Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110611089,
+ "name": "POC-CVE-2025-24813",
+ "full_name": "Arthurabriel\/POC-CVE-2025-24813",
+ "owner": {
+ "login": "Arthurabriel",
+ "id": 141558589,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141558589?v=4",
+ "html_url": "https:\/\/github.com\/Arthurabriel",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Arthurabriel\/POC-CVE-2025-24813",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T13:04:16Z",
+ "updated_at": "2025-12-05T14:42:20Z",
+ "pushed_at": "2025-12-05T14:28:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113670998,
+ "name": "CVE-2025-24813-PoC-exploit",
+ "full_name": "gunyakit\/CVE-2025-24813-PoC-exploit",
+ "owner": {
+ "login": "gunyakit",
+ "id": 90493325,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90493325?v=4",
+ "html_url": "https:\/\/github.com\/gunyakit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gunyakit\/CVE-2025-24813-PoC-exploit",
+ "description": "Apache Tomcat Deserialization RCE",
+ "fork": false,
+ "created_at": "2025-12-10T09:53:44Z",
+ "updated_at": "2025-12-10T09:55:00Z",
+ "pushed_at": "2025-12-10T09:54:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1121615505,
"name": "CVE-2025-24813",
diff --git a/2025/CVE-2025-24893.json b/2025/CVE-2025-24893.json
index d689b2567d..06f7867812 100644
--- a/2025/CVE-2025-24893.json
+++ b/2025/CVE-2025-24893.json
@@ -65,6 +65,661 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1031015366,
+ "name": "CVE-2025-24893",
+ "full_name": "nopgadget\/CVE-2025-24893",
+ "owner": {
+ "login": "nopgadget",
+ "id": 46855517,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46855517?v=4",
+ "html_url": "https:\/\/github.com\/nopgadget",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nopgadget\/CVE-2025-24893",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-02T20:26:02Z",
+ "updated_at": "2025-08-10T13:27:16Z",
+ "pushed_at": "2025-08-02T20:42:04Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031256673,
+ "name": "CVE-2024-32019-POC",
+ "full_name": "AliElKhatteb\/CVE-2024-32019-POC",
+ "owner": {
+ "login": "AliElKhatteb",
+ "id": 47481033,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47481033?v=4",
+ "html_url": "https:\/\/github.com\/AliElKhatteb",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AliElKhatteb\/CVE-2024-32019-POC",
+ "description": "this is a poc for the CVE-2025-24893",
+ "fork": false,
+ "created_at": "2025-08-03T11:05:12Z",
+ "updated_at": "2025-12-28T11:25:58Z",
+ "pushed_at": "2025-08-03T11:45:39Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031268623,
+ "name": "CVE-2025-24893-PoC",
+ "full_name": "dhiaZnaidi\/CVE-2025-24893-PoC",
+ "owner": {
+ "login": "dhiaZnaidi",
+ "id": 104912109,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104912109?v=4",
+ "html_url": "https:\/\/github.com\/dhiaZnaidi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dhiaZnaidi\/CVE-2025-24893-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-03T11:38:07Z",
+ "updated_at": "2025-08-03T11:59:44Z",
+ "pushed_at": "2025-08-03T11:59:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031292006,
+ "name": "cve-2025-24893",
+ "full_name": "hackersonsteroids\/cve-2025-24893",
+ "owner": {
+ "login": "hackersonsteroids",
+ "id": 222030829,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/222030829?v=4",
+ "html_url": "https:\/\/github.com\/hackersonsteroids",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hackersonsteroids\/cve-2025-24893",
+ "description": "Modified exploit for CVE-2025-24893",
+ "fork": false,
+ "created_at": "2025-08-03T12:39:52Z",
+ "updated_at": "2025-12-26T12:10:40Z",
+ "pushed_at": "2025-08-03T12:44:28Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031345832,
+ "name": "CVE-2025-24893",
+ "full_name": "Infinit3i\/CVE-2025-24893",
+ "owner": {
+ "login": "Infinit3i",
+ "id": 38301254,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38301254?v=4",
+ "html_url": "https:\/\/github.com\/Infinit3i",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Infinit3i\/CVE-2025-24893",
+ "description": "PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.",
+ "fork": false,
+ "created_at": "2025-08-03T14:49:37Z",
+ "updated_at": "2025-12-31T04:41:56Z",
+ "pushed_at": "2025-09-02T15:30:13Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "asyncrendering",
+ "commandinjection",
+ "cve-2025-24893",
+ "groovyinjection",
+ "poc",
+ "proof-of-concept",
+ "rce",
+ "webappexploit",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031348216,
+ "name": "CVE-2025-24893-Reverse-Shell",
+ "full_name": "AzureADTrent\/CVE-2025-24893-Reverse-Shell",
+ "owner": {
+ "login": "AzureADTrent",
+ "id": 8278208,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8278208?v=4",
+ "html_url": "https:\/\/github.com\/AzureADTrent",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AzureADTrent\/CVE-2025-24893-Reverse-Shell",
+ "description": "Reverse Shell Payload for CVE-2025-24893",
+ "fork": false,
+ "created_at": "2025-08-03T14:54:49Z",
+ "updated_at": "2025-08-27T01:06:56Z",
+ "pushed_at": "2025-08-03T15:07:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031406725,
+ "name": "CVE-2025-24893-RCE-PoC",
+ "full_name": "gmh5225\/CVE-2025-24893-RCE-PoC",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-24893-RCE-PoC",
+ "description": "This is a small script for the rce vulnerability for CVE-2025-24893. It supports basic input\/output",
+ "fork": false,
+ "created_at": "2025-08-03T17:11:13Z",
+ "updated_at": "2025-08-03T17:11:13Z",
+ "pushed_at": "2025-08-03T14:20:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031573022,
+ "name": "CVE-2025-24893",
+ "full_name": "gunzf0x\/CVE-2025-24893",
+ "owner": {
+ "login": "gunzf0x",
+ "id": 31874167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31874167?v=4",
+ "html_url": "https:\/\/github.com\/gunzf0x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gunzf0x\/CVE-2025-24893",
+ "description": "PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.",
+ "fork": false,
+ "created_at": "2025-08-04T02:29:17Z",
+ "updated_at": "2026-05-13T07:36:47Z",
+ "pushed_at": "2025-08-22T05:34:13Z",
+ "stargazers_count": 21,
+ "watchers_count": 21,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-24893",
+ "poc",
+ "proof-of-concept",
+ "rce",
+ "remote-code-execution",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 21,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1032003796,
+ "name": "CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC",
+ "full_name": "dollarboysushil\/CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC",
+ "owner": {
+ "login": "dollarboysushil",
+ "id": 48991715,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991715?v=4",
+ "html_url": "https:\/\/github.com\/dollarboysushil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dollarboysushil\/CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC",
+ "description": "CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.",
+ "fork": false,
+ "created_at": "2025-08-04T16:50:28Z",
+ "updated_at": "2026-05-31T09:53:56Z",
+ "pushed_at": "2025-08-04T16:53:39Z",
+ "stargazers_count": 17,
+ "watchers_count": 17,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-24893",
+ "exploit",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 17,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1032348141,
+ "name": "CVE-2025-24893",
+ "full_name": "zs1n\/CVE-2025-24893",
+ "owner": {
+ "login": "zs1n",
+ "id": 209989581,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209989581?v=4",
+ "html_url": "https:\/\/github.com\/zs1n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zs1n\/CVE-2025-24893",
+ "description": "PoC | XWiki Platform 15.10.10 - Remote Code Execution ",
+ "fork": false,
+ "created_at": "2025-08-05T07:15:16Z",
+ "updated_at": "2025-08-05T07:45:35Z",
+ "pushed_at": "2025-08-05T07:45:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1032665493,
+ "name": "cve-2025-24893-poc",
+ "full_name": "investigato\/cve-2025-24893-poc",
+ "owner": {
+ "login": "investigato",
+ "id": 215036801,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215036801?v=4",
+ "html_url": "https:\/\/github.com\/investigato",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/investigato\/cve-2025-24893-poc",
+ "description": " Proof-of-Concept exploit for CVE-2025-24893, an unauthenticated Remote Code Execution (RCE) vulnerability in XWiki. Exploits a template injection flaw in the SolrSearch endpoint via Groovy script execution.",
+ "fork": false,
+ "created_at": "2025-08-05T16:29:10Z",
+ "updated_at": "2025-08-07T12:49:35Z",
+ "pushed_at": "2025-08-07T12:51:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1033306837,
+ "name": "xwiki-cve-2025-24893-poc",
+ "full_name": "570RMBR3AK3R\/xwiki-cve-2025-24893-poc",
+ "owner": {
+ "login": "570RMBR3AK3R",
+ "id": 139246224,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139246224?v=4",
+ "html_url": "https:\/\/github.com\/570RMBR3AK3R",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/570RMBR3AK3R\/xwiki-cve-2025-24893-poc",
+ "description": "PoC for CVE-2025-24893",
+ "fork": false,
+ "created_at": "2025-08-06T15:56:53Z",
+ "updated_at": "2025-11-11T22:34:41Z",
+ "pushed_at": "2025-08-06T18:57:31Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1033773826,
+ "name": "CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch",
+ "full_name": "IIIeJlyXaKapToIIIKu\/CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch",
+ "owner": {
+ "login": "IIIeJlyXaKapToIIIKu",
+ "id": 99867983,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99867983?v=4",
+ "html_url": "https:\/\/github.com\/IIIeJlyXaKapToIIIKu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IIIeJlyXaKapToIIIKu\/CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch",
+ "description": "CVE-2025-24893 is a critical unauthenticated remote code execution (RCE) vulnerability in XWiki, a popular open-source enterprise wiki platform.",
+ "fork": false,
+ "created_at": "2025-08-07T10:20:22Z",
+ "updated_at": "2025-08-09T10:15:33Z",
+ "pushed_at": "2025-08-07T11:19:41Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034112377,
+ "name": "CVE-2025-24893",
+ "full_name": "mah4nzfr\/CVE-2025-24893",
+ "owner": {
+ "login": "mah4nzfr",
+ "id": 48950917,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48950917?v=4",
+ "html_url": "https:\/\/github.com\/mah4nzfr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mah4nzfr\/CVE-2025-24893",
+ "description": "Bash POC script for RCE vulnerability in XWiki Platform",
+ "fork": false,
+ "created_at": "2025-08-07T21:36:15Z",
+ "updated_at": "2025-08-31T11:28:14Z",
+ "pushed_at": "2025-08-31T11:28:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034129865,
+ "name": "CVE-2025-24893-POC",
+ "full_name": "Th3Gl0w\/CVE-2025-24893-POC",
+ "owner": {
+ "login": "Th3Gl0w",
+ "id": 22825877,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22825877?v=4",
+ "html_url": "https:\/\/github.com\/Th3Gl0w",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Th3Gl0w\/CVE-2025-24893-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-07T22:34:07Z",
+ "updated_at": "2025-08-09T13:28:35Z",
+ "pushed_at": "2025-08-09T12:49:28Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034261306,
+ "name": "CVE-2025-24893-XWiki-RCE",
+ "full_name": "Hex00-0x4\/CVE-2025-24893-XWiki-RCE",
+ "owner": {
+ "login": "Hex00-0x4",
+ "id": 225327350,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225327350?v=4",
+ "html_url": "https:\/\/github.com\/Hex00-0x4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Hex00-0x4\/CVE-2025-24893-XWiki-RCE",
+ "description": "This vulnerability could allow a malicious user to execute remote code by sending appropriately crafted requests to the default search engine SolrSearch",
+ "fork": false,
+ "created_at": "2025-08-08T05:38:11Z",
+ "updated_at": "2025-09-04T13:37:27Z",
+ "pushed_at": "2025-08-08T05:56:06Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034381331,
+ "name": "CVE-2025-24893",
+ "full_name": "The-Red-Serpent\/CVE-2025-24893",
+ "owner": {
+ "login": "The-Red-Serpent",
+ "id": 189882747,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189882747?v=4",
+ "html_url": "https:\/\/github.com\/The-Red-Serpent",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/The-Red-Serpent\/CVE-2025-24893",
+ "description": "POC",
+ "fork": false,
+ "created_at": "2025-08-08T09:48:35Z",
+ "updated_at": "2025-08-08T09:51:00Z",
+ "pushed_at": "2025-08-08T09:50:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034685318,
+ "name": "CVE-2025-24893",
+ "full_name": "alaxar\/CVE-2025-24893",
+ "owner": {
+ "login": "alaxar",
+ "id": 20353178,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20353178?v=4",
+ "html_url": "https:\/\/github.com\/alaxar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alaxar\/CVE-2025-24893",
+ "description": "XWiki 15.10.11, 16.4.1 and 16.5.0RC1 Unauthenticated Remote code execution POC",
+ "fork": false,
+ "created_at": "2025-08-08T20:01:02Z",
+ "updated_at": "2025-08-08T20:22:22Z",
+ "pushed_at": "2025-08-08T20:19:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1035076012,
+ "name": "CVE-2025-24893",
+ "full_name": "D3Ext\/CVE-2025-24893",
+ "owner": {
+ "login": "D3Ext",
+ "id": 67125397,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67125397?v=4",
+ "html_url": "https:\/\/github.com\/D3Ext",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D3Ext\/CVE-2025-24893",
+ "description": "POC exploit for CVE-2025-24893",
+ "fork": false,
+ "created_at": "2025-08-09T15:51:00Z",
+ "updated_at": "2025-11-29T05:56:41Z",
+ "pushed_at": "2025-08-09T16:22:12Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-24893",
+ "python",
+ "rce",
+ "remote-code-execution",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1035227414,
"name": "CVE-2025-24893-POC",
@@ -98,6 +753,77 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1037628901,
+ "name": "CVE-2025-24893",
+ "full_name": "CMassa\/CVE-2025-24893",
+ "owner": {
+ "login": "CMassa",
+ "id": 5712834,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5712834?v=4",
+ "html_url": "https:\/\/github.com\/CMassa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CMassa\/CVE-2025-24893",
+ "description": "PoC exploit for XWiki Remote Code Execution Vulnerability (CVE-2025-24893)",
+ "fork": false,
+ "created_at": "2025-08-13T21:49:39Z",
+ "updated_at": "2026-03-12T05:40:08Z",
+ "pushed_at": "2025-08-15T16:16:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-24893",
+ "poc",
+ "rce-exploit",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1042530894,
+ "name": "POC-for-CVE-2025-24893",
+ "full_name": "x0da6h\/POC-for-CVE-2025-24893",
+ "owner": {
+ "login": "x0da6h",
+ "id": 150444771,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150444771?v=4",
+ "html_url": "https:\/\/github.com\/x0da6h",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/x0da6h\/POC-for-CVE-2025-24893",
+ "description": "Some poorly crafted exploit scripts",
+ "fork": false,
+ "created_at": "2025-08-22T06:56:46Z",
+ "updated_at": "2025-09-20T10:13:55Z",
+ "pushed_at": "2025-09-20T10:13:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1044876154,
"name": "CVE-2025-24893",
@@ -164,6 +890,246 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1050061236,
+ "name": "CVE-2025-24893",
+ "full_name": "b0ySie7e\/CVE-2025-24893",
+ "owner": {
+ "login": "b0ySie7e",
+ "id": 78715318,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78715318?v=4",
+ "html_url": "https:\/\/github.com\/b0ySie7e",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/b0ySie7e\/CVE-2025-24893",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-03T22:25:53Z",
+ "updated_at": "2025-10-04T13:59:35Z",
+ "pushed_at": "2025-09-03T22:50:22Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1051204068,
+ "name": "CVE-2025-24893",
+ "full_name": "andwati\/CVE-2025-24893",
+ "owner": {
+ "login": "andwati",
+ "id": 56686898,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56686898?v=4",
+ "html_url": "https:\/\/github.com\/andwati",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/andwati\/CVE-2025-24893",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-05T15:51:02Z",
+ "updated_at": "2025-09-05T19:02:14Z",
+ "pushed_at": "2025-09-05T19:02:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1054179744,
+ "name": "xwiki-15.10.8-reverse-shell-cve-2025-24893",
+ "full_name": "Bishben\/xwiki-15.10.8-reverse-shell-cve-2025-24893",
+ "owner": {
+ "login": "Bishben",
+ "id": 85511318,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85511318?v=4",
+ "html_url": "https:\/\/github.com\/Bishben",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bishben\/xwiki-15.10.8-reverse-shell-cve-2025-24893",
+ "description": "CVE-2025-24893 RCE exploit for XWiki with reverse shell capability",
+ "fork": false,
+ "created_at": "2025-09-10T13:28:30Z",
+ "updated_at": "2025-09-10T15:23:41Z",
+ "pushed_at": "2025-09-10T13:52:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "15-10-10",
+ "15-10-8",
+ "cve-2015-24893",
+ "exploit",
+ "rce",
+ "remote-command-execution",
+ "reverse-shell",
+ "xwiki"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1088790881,
+ "name": "CVE-2025-24893-PoC",
+ "full_name": "80Ottanta80\/CVE-2025-24893-PoC",
+ "owner": {
+ "login": "80Ottanta80",
+ "id": 167089173,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167089173?v=4",
+ "html_url": "https:\/\/github.com\/80Ottanta80",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/80Ottanta80\/CVE-2025-24893-PoC",
+ "description": "XWiki Unauthenticated RCE Exploit for Reverse Shell",
+ "fork": false,
+ "created_at": "2025-11-03T13:13:29Z",
+ "updated_at": "2025-11-11T23:26:17Z",
+ "pushed_at": "2025-11-11T23:26:13Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109457651,
+ "name": "XWiki-Platform-RCE-CVE-2025-24893",
+ "full_name": "0xDTC\/XWiki-Platform-RCE-CVE-2025-24893",
+ "owner": {
+ "login": "0xDTC",
+ "id": 95960398,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95960398?v=4",
+ "html_url": "https:\/\/github.com\/0xDTC",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xDTC\/XWiki-Platform-RCE-CVE-2025-24893",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-03T20:43:06Z",
+ "updated_at": "2025-12-03T21:03:42Z",
+ "pushed_at": "2025-12-03T21:03:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116951063,
+ "name": "CVE-2025-24893_Shell",
+ "full_name": "o0wo0o\/CVE-2025-24893_Shell",
+ "owner": {
+ "login": "o0wo0o",
+ "id": 182374175,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182374175?v=4",
+ "html_url": "https:\/\/github.com\/o0wo0o",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/o0wo0o\/CVE-2025-24893_Shell",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-15T16:01:49Z",
+ "updated_at": "2025-12-15T16:14:21Z",
+ "pushed_at": "2025-12-15T16:08:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": true,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124295601,
+ "name": "CVE-2025-24893-PoC",
+ "full_name": "BreakingRohit\/CVE-2025-24893-PoC",
+ "owner": {
+ "login": "BreakingRohit",
+ "id": 116087487,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116087487?v=4",
+ "html_url": "https:\/\/github.com\/BreakingRohit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BreakingRohit\/CVE-2025-24893-PoC",
+ "description": "Proof of Concept for CVE-2025-24893 demonstrating unauthenticated remote command execution in XWiki through unsafe server-side template evaluation.",
+ "fork": false,
+ "created_at": "2025-12-28T18:40:21Z",
+ "updated_at": "2026-01-03T12:07:04Z",
+ "pushed_at": "2025-12-28T18:49:55Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1131343415,
"name": "xwiki-cve-2025-24893-exploit",
diff --git a/2025/CVE-2025-2502.json b/2025/CVE-2025-2502.json
new file mode 100644
index 0000000000..dace11bb96
--- /dev/null
+++ b/2025/CVE-2025-2502.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050992869,
+ "name": "CVE-2025-2502",
+ "full_name": "IHK-ONE\/CVE-2025-2502",
+ "owner": {
+ "login": "IHK-ONE",
+ "id": 164609164,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164609164?v=4",
+ "html_url": "https:\/\/github.com\/IHK-ONE",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IHK-ONE\/CVE-2025-2502",
+ "description": "CVE-2025-2502 \/ CNVD-2025-16450 联想电脑管家权限提升漏洞",
+ "fork": false,
+ "created_at": "2025-09-05T09:16:14Z",
+ "updated_at": "2025-10-03T07:03:29Z",
+ "pushed_at": "2025-09-05T09:20:55Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-25256.json b/2025/CVE-2025-25256.json
new file mode 100644
index 0000000000..1cd91b911b
--- /dev/null
+++ b/2025/CVE-2025-25256.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1038618584,
+ "name": "watchTowr-vs-FortiSIEM-CVE-2025-25256",
+ "full_name": "watchtowrlabs\/watchTowr-vs-FortiSIEM-CVE-2025-25256",
+ "owner": {
+ "login": "watchtowrlabs",
+ "id": 99977116,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
+ "html_url": "https:\/\/github.com\/watchtowrlabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-FortiSIEM-CVE-2025-25256",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-15T14:31:00Z",
+ "updated_at": "2026-06-01T20:58:49Z",
+ "pushed_at": "2025-08-15T16:11:50Z",
+ "stargazers_count": 19,
+ "watchers_count": 19,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 19,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-25257.json b/2025/CVE-2025-25257.json
index 8849f24226..c8a0dc46a9 100644
--- a/2025/CVE-2025-25257.json
+++ b/2025/CVE-2025-25257.json
@@ -1,4 +1,244 @@
[
+ {
+ "id": 1017527017,
+ "name": "watchTowr-vs-FortiWeb-CVE-2025-25257",
+ "full_name": "watchtowrlabs\/watchTowr-vs-FortiWeb-CVE-2025-25257",
+ "owner": {
+ "login": "watchtowrlabs",
+ "id": 99977116,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
+ "html_url": "https:\/\/github.com\/watchtowrlabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-FortiWeb-CVE-2025-25257",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-10T17:08:25Z",
+ "updated_at": "2026-02-23T06:34:10Z",
+ "pushed_at": "2025-07-10T17:10:30Z",
+ "stargazers_count": 97,
+ "watchers_count": 97,
+ "has_discussions": false,
+ "forks_count": 25,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 25,
+ "watchers": 97,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017982586,
+ "name": "CVE-2025-25257",
+ "full_name": "0xbigshaq\/CVE-2025-25257",
+ "owner": {
+ "login": "0xbigshaq",
+ "id": 57250448,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57250448?v=4",
+ "html_url": "https:\/\/github.com\/0xbigshaq",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xbigshaq\/CVE-2025-25257",
+ "description": "FortiWeb CVE-2025-25257 exploit",
+ "fork": false,
+ "created_at": "2025-07-11T12:09:02Z",
+ "updated_at": "2026-02-28T08:41:11Z",
+ "pushed_at": "2025-07-11T12:54:26Z",
+ "stargazers_count": 64,
+ "watchers_count": 64,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 64,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1018281169,
+ "name": "CVE-2025-25257",
+ "full_name": "aitorfirm\/CVE-2025-25257",
+ "owner": {
+ "login": "aitorfirm",
+ "id": 187854052,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187854052?v=4",
+ "html_url": "https:\/\/github.com\/aitorfirm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aitorfirm\/CVE-2025-25257",
+ "description": "Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.",
+ "fork": false,
+ "created_at": "2025-07-12T00:05:53Z",
+ "updated_at": "2025-10-11T23:56:24Z",
+ "pushed_at": "2025-07-18T02:05:24Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018569169,
+ "name": "CVE-2025-25257-Exploit-Tool",
+ "full_name": "adilburaksen\/CVE-2025-25257-Exploit-Tool",
+ "owner": {
+ "login": "adilburaksen",
+ "id": 56400880,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56400880?v=4",
+ "html_url": "https:\/\/github.com\/adilburaksen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/adilburaksen\/CVE-2025-25257-Exploit-Tool",
+ "description": "Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.",
+ "fork": false,
+ "created_at": "2025-07-12T14:44:47Z",
+ "updated_at": "2025-07-12T15:05:17Z",
+ "pushed_at": "2025-07-12T15:05:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018581308,
+ "name": "CVE-2025-25257",
+ "full_name": "imbas007\/CVE-2025-25257",
+ "owner": {
+ "login": "imbas007",
+ "id": 100182585,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4",
+ "html_url": "https:\/\/github.com\/imbas007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/imbas007\/CVE-2025-25257",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-12T15:14:01Z",
+ "updated_at": "2025-09-24T18:54:41Z",
+ "pushed_at": "2025-07-12T15:21:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1020078728,
+ "name": "CVE-2025-25257",
+ "full_name": "0xgh057r3c0n\/CVE-2025-25257",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-25257",
+ "description": "PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated.",
+ "fork": false,
+ "created_at": "2025-07-15T10:00:07Z",
+ "updated_at": "2025-12-11T02:38:10Z",
+ "pushed_at": "2025-07-15T10:26:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022415276,
+ "name": "CVE-2025-25257",
+ "full_name": "mrmtwoj\/CVE-2025-25257",
+ "owner": {
+ "login": "mrmtwoj",
+ "id": 22832463,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4",
+ "html_url": "https:\/\/github.com\/mrmtwoj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrmtwoj\/CVE-2025-25257",
+ "description": "CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s",
+ "fork": false,
+ "created_at": "2025-07-19T03:12:21Z",
+ "updated_at": "2026-05-18T02:44:04Z",
+ "pushed_at": "2025-07-19T03:24:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "acyber",
+ "cve-2025-25257",
+ "fortinet",
+ "fortinet-firewall",
+ "fortiweb",
+ "nist",
+ "sql",
+ "sql-injection"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1022686412,
"name": "CVE-2025-25257",
@@ -32,6 +272,105 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1061140213,
+ "name": "CVE-2025-25257",
+ "full_name": "segfault-it\/CVE-2025-25257",
+ "owner": {
+ "login": "segfault-it",
+ "id": 24494334,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24494334?v=4",
+ "html_url": "https:\/\/github.com\/segfault-it",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/segfault-it\/CVE-2025-25257",
+ "description": "A working (at least for me :] ) exploit for CVE-2025-25257",
+ "fork": false,
+ "created_at": "2025-09-21T10:24:27Z",
+ "updated_at": "2026-04-29T05:23:14Z",
+ "pushed_at": "2025-09-21T10:34:07Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1094140449,
+ "name": "CVE-2025-25257",
+ "full_name": "mr-r3b00t\/CVE-2025-25257",
+ "owner": {
+ "login": "mr-r3b00t",
+ "id": 14963690,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14963690?v=4",
+ "html_url": "https:\/\/github.com\/mr-r3b00t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mr-r3b00t\/CVE-2025-25257",
+ "description": "CVE-2025-25257 PoC for educational use and\/or authorised pentesting.",
+ "fork": false,
+ "created_at": "2025-11-11T10:05:53Z",
+ "updated_at": "2026-01-13T11:21:15Z",
+ "pushed_at": "2025-11-11T10:11:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117447202,
+ "name": "cve-2025-25257",
+ "full_name": "lytianahkone-boop\/cve-2025-25257",
+ "owner": {
+ "login": "lytianahkone-boop",
+ "id": 233774349,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233774349?v=4",
+ "html_url": "https:\/\/github.com\/lytianahkone-boop",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lytianahkone-boop\/cve-2025-25257",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-16T10:23:39Z",
+ "updated_at": "2025-12-16T18:24:53Z",
+ "pushed_at": "2025-12-16T18:24:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1170144439,
"name": "Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection",
diff --git a/2025/CVE-2025-2539.json b/2025/CVE-2025-2539.json
index 4930f9f4a0..7b72a8746e 100644
--- a/2025/CVE-2025-2539.json
+++ b/2025/CVE-2025-2539.json
@@ -132,5 +132,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1115588561,
+ "name": "CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read",
+ "full_name": "fazaroot\/CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read",
+ "owner": {
+ "login": "fazaroot",
+ "id": 110224521,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110224521?v=4",
+ "html_url": "https:\/\/github.com\/fazaroot",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fazaroot\/CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read",
+ "description": "CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read",
+ "fork": false,
+ "created_at": "2025-12-13T06:27:11Z",
+ "updated_at": "2025-12-13T06:33:14Z",
+ "pushed_at": "2025-12-13T06:33:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-2598.json b/2025/CVE-2025-2598.json
new file mode 100644
index 0000000000..4bbfc07619
--- /dev/null
+++ b/2025/CVE-2025-2598.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1102613866,
+ "name": "AWSTESTEXPLOIT",
+ "full_name": "Catnip-Express-Maxim\/AWSTESTEXPLOIT",
+ "owner": {
+ "login": "Catnip-Express-Maxim",
+ "id": 182039733,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182039733?v=4",
+ "html_url": "https:\/\/github.com\/Catnip-Express-Maxim",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Catnip-Express-Maxim\/AWSTESTEXPLOIT",
+ "description": "Testing if AWS exploit CVE-2025-2598 still works",
+ "fork": false,
+ "created_at": "2025-11-23T19:16:01Z",
+ "updated_at": "2025-11-25T23:24:42Z",
+ "pushed_at": "2025-11-25T23:24:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1103425957,
+ "name": "Final-Proj",
+ "full_name": "SallyXVIII\/Final-Proj",
+ "owner": {
+ "login": "SallyXVIII",
+ "id": 245957661,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245957661?v=4",
+ "html_url": "https:\/\/github.com\/SallyXVIII",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SallyXVIII\/Final-Proj",
+ "description": "In theory, we exploit cve-2025-2598. Hope it works",
+ "fork": false,
+ "created_at": "2025-11-24T21:22:07Z",
+ "updated_at": "2025-11-24T21:22:55Z",
+ "pushed_at": "2025-11-24T21:22:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-26633.json b/2025/CVE-2025-26633.json
index 4e3fc53b48..f83f759933 100644
--- a/2025/CVE-2025-26633.json
+++ b/2025/CVE-2025-26633.json
@@ -31,5 +31,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1101826955,
+ "name": "MSC-EvilTwin-Local-Privilege-Escalation",
+ "full_name": "mbanyamer\/MSC-EvilTwin-Local-Privilege-Escalation",
+ "owner": {
+ "login": "mbanyamer",
+ "id": 213306745,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
+ "html_url": "https:\/\/github.com\/mbanyamer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mbanyamer\/MSC-EvilTwin-Local-Privilege-Escalation",
+ "description": "CVE-2025-26633 (CVSS 7.8) – Zero-day MMC .msc EvilTwin LPE actively exploited by Water Gamayun APT. PoC creates local admin via malicious MSC file on unpatched Windows 10\/11\/Server. Patched March 2025. Authorized testing only.",
+ "fork": false,
+ "created_at": "2025-11-22T10:08:14Z",
+ "updated_at": "2026-05-20T13:00:01Z",
+ "pushed_at": "2025-11-22T10:09:47Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-26686.json b/2025/CVE-2025-26686.json
new file mode 100644
index 0000000000..afabbc9fae
--- /dev/null
+++ b/2025/CVE-2025-26686.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1057649830,
+ "name": "CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates",
+ "full_name": "mrk336\/CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates",
+ "description": "A critical RCE vulnerability in Windows TCP\/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now",
+ "fork": false,
+ "created_at": "2025-09-16T03:00:32Z",
+ "updated_at": "2026-01-13T11:21:02Z",
+ "pushed_at": "2025-09-16T03:22:15Z",
+ "stargazers_count": 32,
+ "watchers_count": 32,
+ "has_discussions": false,
+ "forks_count": 9,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 9,
+ "watchers": 32,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114071981,
+ "name": "CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack",
+ "full_name": "cyghtinc\/CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack",
+ "owner": {
+ "login": "cyghtinc",
+ "id": 72760988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72760988?v=4",
+ "html_url": "https:\/\/github.com\/cyghtinc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyghtinc\/CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack",
+ "description": "POC for CVE-2025-26686 - A critical RCE vulnerability in Windows TCP\/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now",
+ "fork": false,
+ "created_at": "2025-12-10T21:28:12Z",
+ "updated_at": "2025-12-10T21:28:12Z",
+ "pushed_at": "2025-11-13T16:37:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-26788.json b/2025/CVE-2025-26788.json
index 7f271ebb22..adb889a8ec 100644
--- a/2025/CVE-2025-26788.json
+++ b/2025/CVE-2025-26788.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1039972990,
+ "name": "CVE-2025-26788",
+ "full_name": "EQSTLab\/CVE-2025-26788",
+ "owner": {
+ "login": "EQSTLab",
+ "id": 148991397,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
+ "html_url": "https:\/\/github.com\/EQSTLab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EQSTLab\/CVE-2025-26788",
+ "description": "Strongkey FIDO Server Authorization Bypass",
+ "fork": false,
+ "created_at": "2025-08-18T09:09:46Z",
+ "updated_at": "2026-05-06T01:21:36Z",
+ "pushed_at": "2025-09-22T05:55:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1237450543,
"name": "CVE-2025-26788",
diff --git a/2025/CVE-2025-27210.json b/2025/CVE-2025-27210.json
new file mode 100644
index 0000000000..6ba32c4b45
--- /dev/null
+++ b/2025/CVE-2025-27210.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1020590401,
+ "name": "CVE-2025-27210_NodeJS_Path_Traversal_Exploit",
+ "full_name": "absholi7ly\/CVE-2025-27210_NodeJS_Path_Traversal_Exploit",
+ "owner": {
+ "login": "absholi7ly",
+ "id": 72062217,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72062217?v=4",
+ "html_url": "https:\/\/github.com\/absholi7ly",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/absholi7ly\/CVE-2025-27210_NodeJS_Path_Traversal_Exploit",
+ "description": "(PoC) CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved device file names ",
+ "fork": false,
+ "created_at": "2025-07-16T05:33:08Z",
+ "updated_at": "2025-08-12T05:57:21Z",
+ "pushed_at": "2025-07-16T11:29:13Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1057807180,
+ "name": "Vulnerable-CVE-2025-27210",
+ "full_name": "mindeddu\/Vulnerable-CVE-2025-27210",
+ "owner": {
+ "login": "mindeddu",
+ "id": 156207104,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156207104?v=4",
+ "html_url": "https:\/\/github.com\/mindeddu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mindeddu\/Vulnerable-CVE-2025-27210",
+ "description": "2 web apps vulnerable to CVE-2025-27210",
+ "fork": false,
+ "created_at": "2025-09-16T08:28:53Z",
+ "updated_at": "2025-09-17T14:24:15Z",
+ "pushed_at": "2025-09-17T14:24:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27363.json b/2025/CVE-2025-27363.json
index 4141e1a84b..10644f7157 100644
--- a/2025/CVE-2025-27363.json
+++ b/2025/CVE-2025-27363.json
@@ -64,5 +64,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1024819506,
+ "name": "CVE-2025-27363",
+ "full_name": "tin-z\/CVE-2025-27363",
+ "owner": {
+ "login": "tin-z",
+ "id": 32848129,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32848129?v=4",
+ "html_url": "https:\/\/github.com\/tin-z",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tin-z\/CVE-2025-27363",
+ "description": "Integer overflow in FreeType software, which also affects Chrome",
+ "fork": false,
+ "created_at": "2025-07-23T09:44:58Z",
+ "updated_at": "2026-05-29T21:42:41Z",
+ "pushed_at": "2025-08-27T20:06:22Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-27415.json b/2025/CVE-2025-27415.json
new file mode 100644
index 0000000000..e1c46d838e
--- /dev/null
+++ b/2025/CVE-2025-27415.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1019336759,
+ "name": "CVE-2025-27415-PoC",
+ "full_name": "jiseoung\/CVE-2025-27415-PoC",
+ "owner": {
+ "login": "jiseoung",
+ "id": 106800290,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106800290?v=4",
+ "html_url": "https:\/\/github.com\/jiseoung",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jiseoung\/CVE-2025-27415-PoC",
+ "description": "Nuxt3 Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability",
+ "fork": false,
+ "created_at": "2025-07-14T07:10:37Z",
+ "updated_at": "2025-07-17T03:10:41Z",
+ "pushed_at": "2025-07-14T09:21:50Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27480.json b/2025/CVE-2025-27480.json
new file mode 100644
index 0000000000..98b15f0465
--- /dev/null
+++ b/2025/CVE-2025-27480.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1048374926,
+ "name": "CVE-2025-27480-The-Silent-Gateway-Risk",
+ "full_name": "mrk336\/CVE-2025-27480-The-Silent-Gateway-Risk",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-27480-The-Silent-Gateway-Risk",
+ "description": "Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480",
+ "fork": false,
+ "created_at": "2025-09-01T10:49:54Z",
+ "updated_at": "2025-11-17T13:01:54Z",
+ "pushed_at": "2025-09-01T11:36:14Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049478449,
+ "name": "CVE-2025-27480",
+ "full_name": "mrk336\/CVE-2025-27480",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-27480",
+ "description": "CVE-2025-27480 exposes a buffer overflow in OpenSSH 8.9p1 via a malformed SSH_USERAUTH packet. Attackers can inject shellcode and gain SYSTEM-level access, compromising bastion hosts and downstream CI\/CD agents. The article includes sample exploit code and patching guidance",
+ "fork": false,
+ "created_at": "2025-09-03T03:31:17Z",
+ "updated_at": "2025-11-17T13:01:46Z",
+ "pushed_at": "2025-09-03T03:44:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27519.json b/2025/CVE-2025-27519.json
new file mode 100644
index 0000000000..282f19cbcb
--- /dev/null
+++ b/2025/CVE-2025-27519.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042564102,
+ "name": "CVE-2025-27519",
+ "full_name": "Diabl0xE\/CVE-2025-27519",
+ "owner": {
+ "login": "Diabl0xE",
+ "id": 34719833,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34719833?v=4",
+ "html_url": "https:\/\/github.com\/Diabl0xE",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Diabl0xE\/CVE-2025-27519",
+ "description": "PoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.",
+ "fork": false,
+ "created_at": "2025-08-22T08:05:13Z",
+ "updated_at": "2025-12-16T23:55:40Z",
+ "pushed_at": "2025-08-22T12:36:41Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27520.json b/2025/CVE-2025-27520.json
index 600c4b073d..c457290c06 100644
--- a/2025/CVE-2025-27520.json
+++ b/2025/CVE-2025-27520.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1061834611,
+ "name": "day09-bentoml-deser-lab",
+ "full_name": "amalpvatayam67\/day09-bentoml-deser-lab",
+ "owner": {
+ "login": "amalpvatayam67",
+ "id": 200071444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200071444?v=4",
+ "html_url": "https:\/\/github.com\/amalpvatayam67",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalpvatayam67\/day09-bentoml-deser-lab",
+ "description": "ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab",
+ "fork": false,
+ "created_at": "2025-09-22T12:56:22Z",
+ "updated_at": "2025-09-22T12:58:06Z",
+ "pushed_at": "2025-09-22T12:58:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1149966479,
"name": "CVE-2025-27520-PoC",
diff --git a/2025/CVE-2025-27581.json b/2025/CVE-2025-27581.json
new file mode 100644
index 0000000000..6b41f8cde2
--- /dev/null
+++ b/2025/CVE-2025-27581.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029314300,
+ "name": "CVE-2025-27581",
+ "full_name": "Henryisnotavailable\/CVE-2025-27581",
+ "owner": {
+ "login": "Henryisnotavailable",
+ "id": 112469853,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112469853?v=4",
+ "html_url": "https:\/\/github.com\/Henryisnotavailable",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Henryisnotavailable\/CVE-2025-27581",
+ "description": "Exploit scripts for CVE-2025-27581",
+ "fork": false,
+ "created_at": "2025-07-30T21:13:33Z",
+ "updated_at": "2025-07-30T21:27:38Z",
+ "pushed_at": "2025-07-30T21:27:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27591.json b/2025/CVE-2025-27591.json
index 4025458427..622db36c89 100644
--- a/2025/CVE-2025-27591.json
+++ b/2025/CVE-2025-27591.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1018706662,
+ "name": "CVE-2025-27591",
+ "full_name": "obamalaolu\/CVE-2025-27591",
+ "owner": {
+ "login": "obamalaolu",
+ "id": 51482886,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51482886?v=4",
+ "html_url": "https:\/\/github.com\/obamalaolu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/obamalaolu\/CVE-2025-27591",
+ "description": "CVE-2025-27591",
+ "fork": false,
+ "created_at": "2025-07-12T21:17:40Z",
+ "updated_at": "2025-10-07T02:18:41Z",
+ "pushed_at": "2025-07-12T21:22:15Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1018728419,
"name": "CVE-2025-27591",
@@ -37,6 +70,243 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1018876559,
+ "name": "CVE-2025-27591-PoC",
+ "full_name": "BridgerAlderson\/CVE-2025-27591-PoC",
+ "owner": {
+ "login": "BridgerAlderson",
+ "id": 139403792,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139403792?v=4",
+ "html_url": "https:\/\/github.com\/BridgerAlderson",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BridgerAlderson\/CVE-2025-27591-PoC",
+ "description": "CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0",
+ "fork": false,
+ "created_at": "2025-07-13T08:41:06Z",
+ "updated_at": "2026-05-01T18:54:25Z",
+ "pushed_at": "2025-07-16T09:01:14Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1019945722,
+ "name": "Linux-Privilege-Escalation-CVE-2025-27591",
+ "full_name": "dollarboysushil\/Linux-Privilege-Escalation-CVE-2025-27591",
+ "owner": {
+ "login": "dollarboysushil",
+ "id": 48991715,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991715?v=4",
+ "html_url": "https:\/\/github.com\/dollarboysushil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dollarboysushil\/Linux-Privilege-Escalation-CVE-2025-27591",
+ "description": "CVE-2025-27591 is a known privilege escalation vulnerability in the Below service (version < v0.9.0)",
+ "fork": false,
+ "created_at": "2025-07-15T05:48:00Z",
+ "updated_at": "2025-12-25T23:32:31Z",
+ "pushed_at": "2025-07-15T11:42:42Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021106124,
+ "name": "CVE-2025-27591_PoC",
+ "full_name": "alialucas7\/CVE-2025-27591_PoC",
+ "owner": {
+ "login": "alialucas7",
+ "id": 41133287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41133287?v=4",
+ "html_url": "https:\/\/github.com\/alialucas7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alialucas7\/CVE-2025-27591_PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-16T22:31:16Z",
+ "updated_at": "2025-07-17T13:11:48Z",
+ "pushed_at": "2025-07-17T12:54:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021842682,
+ "name": "CVE-2025-27591-PoC",
+ "full_name": "incommatose\/CVE-2025-27591-PoC",
+ "owner": {
+ "login": "incommatose",
+ "id": 182379761,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182379761?v=4",
+ "html_url": "https:\/\/github.com\/incommatose",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/incommatose\/CVE-2025-27591-PoC",
+ "description": "A Proof of Concept for CVE-2025-27591, a local privilege escalation in Below < v0.9.0",
+ "fork": false,
+ "created_at": "2025-07-18T03:26:31Z",
+ "updated_at": "2026-05-27T01:06:27Z",
+ "pushed_at": "2025-07-19T00:12:34Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bash",
+ "cve-2025-27591",
+ "exploit",
+ "linux",
+ "privilege-escalation"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022813825,
+ "name": "CVE-2025-27591",
+ "full_name": "00xCanelo\/CVE-2025-27591",
+ "owner": {
+ "login": "00xCanelo",
+ "id": 164969443,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164969443?v=4",
+ "html_url": "https:\/\/github.com\/00xCanelo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/00xCanelo\/CVE-2025-27591",
+ "description": "🔥 Local Privilege Escalation Exploit for CVE-2025-27591 | Abuses world-writable log dir in Below to gain root via \/etc\/passwd injection",
+ "fork": false,
+ "created_at": "2025-07-19T22:17:47Z",
+ "updated_at": "2025-11-19T06:09:07Z",
+ "pushed_at": "2025-07-23T12:18:44Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022893911,
+ "name": "CVE-2025-27591-Below",
+ "full_name": "Thekin-ctrl\/CVE-2025-27591-Below",
+ "owner": {
+ "login": "Thekin-ctrl",
+ "id": 190963299,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190963299?v=4",
+ "html_url": "https:\/\/github.com\/Thekin-ctrl",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thekin-ctrl\/CVE-2025-27591-Below",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-20T04:33:59Z",
+ "updated_at": "2025-07-20T04:53:38Z",
+ "pushed_at": "2025-07-20T04:53:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1029688414,
+ "name": "CVE-2025-27591",
+ "full_name": "Cythonic1\/CVE-2025-27591",
+ "owner": {
+ "login": "Cythonic1",
+ "id": 163199970,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163199970?v=4",
+ "html_url": "https:\/\/github.com\/Cythonic1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cythonic1\/CVE-2025-27591",
+ "description": "a C exploit for CVE-2025-27591, which allow an attacker to escalate privilege to root.",
+ "fork": false,
+ "created_at": "2025-07-31T12:22:20Z",
+ "updated_at": "2025-11-19T06:09:01Z",
+ "pushed_at": "2025-07-31T12:42:40Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1039061610,
"name": "CVE-2025-27591",
@@ -74,6 +344,144 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1048423509,
+ "name": "below-log-race-poc",
+ "full_name": "danil-koltsov\/below-log-race-poc",
+ "owner": {
+ "login": "danil-koltsov",
+ "id": 62597478,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62597478?v=4",
+ "html_url": "https:\/\/github.com\/danil-koltsov",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/danil-koltsov\/below-log-race-poc",
+ "description": "PoC for CVE-2025-27591 – Local privilege escalation in the below monitoring tool. By symlinking its log file to \/etc\/passwd, an attacker can inject a root account and gain full system compromise.",
+ "fork": false,
+ "created_at": "2025-09-01T12:24:15Z",
+ "updated_at": "2025-09-01T12:38:15Z",
+ "pushed_at": "2025-09-01T12:32:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049825603,
+ "name": "CVE-2025-27591-below-",
+ "full_name": "VisaiCyber\/CVE-2025-27591-below-",
+ "owner": {
+ "login": "VisaiCyber",
+ "id": 137814531,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137814531?v=4",
+ "html_url": "https:\/\/github.com\/VisaiCyber",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/VisaiCyber\/CVE-2025-27591-below-",
+ "description": "Local Privilege Escalation vai `below` (CVE-2025-27591) - PoC Exploit",
+ "fork": false,
+ "created_at": "2025-09-03T14:49:49Z",
+ "updated_at": "2025-09-04T09:44:55Z",
+ "pushed_at": "2025-09-03T16:11:53Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "below",
+ "cve-2025-27591",
+ "linux",
+ "poc",
+ "privilege-escalation"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1095926058,
+ "name": "Below-Logger-Symlink-Attack_CVE-2025-27591",
+ "full_name": "0xDTC\/Below-Logger-Symlink-Attack_CVE-2025-27591",
+ "owner": {
+ "login": "0xDTC",
+ "id": 95960398,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95960398?v=4",
+ "html_url": "https:\/\/github.com\/0xDTC",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xDTC\/Below-Logger-Symlink-Attack_CVE-2025-27591",
+ "description": "A Bash-based privilege escalation exploit targeting the `below` system performance monitoring tool. This refurbished exploit leverages a symlink vulnerability in the logging mechanism to inject a root user into `\/etc\/passwd`, achieving full root access.",
+ "fork": false,
+ "created_at": "2025-11-13T17:44:57Z",
+ "updated_at": "2026-03-09T06:57:28Z",
+ "pushed_at": "2025-11-13T18:04:32Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1100070375,
+ "name": "CVE-2025-27591",
+ "full_name": "0x00Jeff\/CVE-2025-27591",
+ "owner": {
+ "login": "0x00Jeff",
+ "id": 71389295,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71389295?v=4",
+ "html_url": "https:\/\/github.com\/0x00Jeff",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0x00Jeff\/CVE-2025-27591",
+ "description": "self cleaning CVE-2025-27591 Poc that grants a root reverse shell instead of modifying passwd files",
+ "fork": false,
+ "created_at": "2025-11-19T19:56:14Z",
+ "updated_at": "2026-04-20T07:12:47Z",
+ "pushed_at": "2025-11-22T13:01:44Z",
+ "stargazers_count": 15,
+ "watchers_count": 15,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 15,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126672833,
"name": "CVE-2025-27591",
diff --git a/2025/CVE-2025-2776.json b/2025/CVE-2025-2776.json
new file mode 100644
index 0000000000..1b1b172911
--- /dev/null
+++ b/2025/CVE-2025-2776.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1047892742,
+ "name": "From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack",
+ "full_name": "mrk336\/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack",
+ "description": "It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that means for the defenders.",
+ "fork": false,
+ "created_at": "2025-08-31T13:23:36Z",
+ "updated_at": "2025-08-31T13:34:16Z",
+ "pushed_at": "2025-08-31T13:34:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-27817.json b/2025/CVE-2025-27817.json
index 4eb0e6534f..6295c758a2 100644
--- a/2025/CVE-2025-27817.json
+++ b/2025/CVE-2025-27817.json
@@ -31,5 +31,38 @@
"watchers": 15,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1013486494,
+ "name": "CVE-2025-27817",
+ "full_name": "iSee857\/CVE-2025-27817",
+ "owner": {
+ "login": "iSee857",
+ "id": 73977770,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73977770?v=4",
+ "html_url": "https:\/\/github.com\/iSee857",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iSee857\/CVE-2025-27817",
+ "description": "Apache Kafka客户端未对用户输入进行严格验证和限制，未经身份验证的攻击者可通过构造恶意配置读取环境变量或磁盘任意内容，或向非预期位置发送请求，提升REST API的文件系统\/环境\/URL访问权限。",
+ "fork": false,
+ "created_at": "2025-07-04T01:47:31Z",
+ "updated_at": "2026-02-04T12:28:39Z",
+ "pushed_at": "2025-07-04T01:54:01Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-2825.json b/2025/CVE-2025-2825.json
index b80b068050..d96e4d5201 100644
--- a/2025/CVE-2025-2825.json
+++ b/2025/CVE-2025-2825.json
@@ -97,5 +97,80 @@
"watchers": 13,
"score": 0,
"subscribers_count": 3
+ },
+ {
+ "id": 1024205168,
+ "name": "CVE-2025-2825-CrushFTP-AuthBypass",
+ "full_name": "Shivshantp\/CVE-2025-2825-CrushFTP-AuthBypass",
+ "owner": {
+ "login": "Shivshantp",
+ "id": 138895783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138895783?v=4",
+ "html_url": "https:\/\/github.com\/Shivshantp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shivshantp\/CVE-2025-2825-CrushFTP-AuthBypass",
+ "description": "Authentication Bypass PoC for CVE-2025-2825 – Exploiting CrushFTP 10.x",
+ "fork": false,
+ "created_at": "2025-07-22T10:40:11Z",
+ "updated_at": "2025-12-15T18:36:43Z",
+ "pushed_at": "2025-07-22T20:23:14Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "authentication-bypass",
+ "crushftp",
+ "cve-2025-2825",
+ "cybersecurity",
+ "exploit",
+ "poc",
+ "proof-of-concept",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062834747,
+ "name": "CVE-2025-2825",
+ "full_name": "iteride\/CVE-2025-2825",
+ "owner": {
+ "login": "iteride",
+ "id": 164376455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164376455?v=4",
+ "html_url": "https:\/\/github.com\/iteride",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iteride\/CVE-2025-2825",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-23T19:50:01Z",
+ "updated_at": "2025-12-05T05:05:18Z",
+ "pushed_at": "2025-09-24T13:52:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-29306.json b/2025/CVE-2025-29306.json
index 583d13b8d1..79115eddab 100644
--- a/2025/CVE-2025-29306.json
+++ b/2025/CVE-2025-29306.json
@@ -170,6 +170,39 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1059164505,
+ "name": "day06-foxcms-rce",
+ "full_name": "amalpvatayam67\/day06-foxcms-rce",
+ "owner": {
+ "login": "amalpvatayam67",
+ "id": 200071444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200071444?v=4",
+ "html_url": "https:\/\/github.com\/amalpvatayam67",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalpvatayam67\/day06-foxcms-rce",
+ "description": "This tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.",
+ "fork": false,
+ "created_at": "2025-09-18T04:53:02Z",
+ "updated_at": "2025-09-18T04:54:55Z",
+ "pushed_at": "2025-09-18T04:54:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1129438649,
"name": "Mass-CVE-2025-29306",
diff --git a/2025/CVE-2025-2945.json b/2025/CVE-2025-2945.json
index b1856d057c..0377f11f31 100644
--- a/2025/CVE-2025-2945.json
+++ b/2025/CVE-2025-2945.json
@@ -73,6 +73,74 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1093567600,
+ "name": "pgAdminOpendoor",
+ "full_name": "I3r1h0n\/pgAdminOpendoor",
+ "owner": {
+ "login": "I3r1h0n",
+ "id": 140952002,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140952002?v=4",
+ "html_url": "https:\/\/github.com\/I3r1h0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/I3r1h0n\/pgAdminOpendoor",
+ "description": "Exploit and test stand for CVE-2025-2945",
+ "fork": false,
+ "created_at": "2025-11-10T14:45:35Z",
+ "updated_at": "2026-01-22T11:39:09Z",
+ "pushed_at": "2025-11-11T18:37:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-2945"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1104605653,
+ "name": "CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-",
+ "full_name": "ExtremeUday\/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-",
+ "owner": {
+ "login": "ExtremeUday",
+ "id": 100433677,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100433677?v=4",
+ "html_url": "https:\/\/github.com\/ExtremeUday",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ExtremeUday\/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-26T12:44:20Z",
+ "updated_at": "2026-02-04T19:43:00Z",
+ "pushed_at": "2025-11-26T13:39:46Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1183762303,
"name": "CVE-2025-2945-pgadmin-rce",
diff --git a/2025/CVE-2025-29556.json b/2025/CVE-2025-29556.json
new file mode 100644
index 0000000000..c868c9a615
--- /dev/null
+++ b/2025/CVE-2025-29556.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029295361,
+ "name": "CVE-2025-29556",
+ "full_name": "0xsu3ks\/CVE-2025-29556",
+ "owner": {
+ "login": "0xsu3ks",
+ "id": 97468816,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97468816?v=4",
+ "html_url": "https:\/\/github.com\/0xsu3ks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xsu3ks\/CVE-2025-29556",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-30T20:24:45Z",
+ "updated_at": "2025-07-31T15:43:32Z",
+ "pushed_at": "2025-07-31T15:43:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-29557.json b/2025/CVE-2025-29557.json
new file mode 100644
index 0000000000..8cd830dbd3
--- /dev/null
+++ b/2025/CVE-2025-29557.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029296063,
+ "name": "CVE-2025-29557",
+ "full_name": "0xsu3ks\/CVE-2025-29557",
+ "owner": {
+ "login": "0xsu3ks",
+ "id": 97468816,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97468816?v=4",
+ "html_url": "https:\/\/github.com\/0xsu3ks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xsu3ks\/CVE-2025-29557",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-30T20:26:20Z",
+ "updated_at": "2025-07-30T20:28:59Z",
+ "pushed_at": "2025-07-30T20:28:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-29628.json b/2025/CVE-2025-29628.json
new file mode 100644
index 0000000000..ecffbf6047
--- /dev/null
+++ b/2025/CVE-2025-29628.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1013869572,
+ "name": "gardyn",
+ "full_name": "mselbrede\/gardyn",
+ "owner": {
+ "login": "mselbrede",
+ "id": 43323139,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43323139?v=4",
+ "html_url": "https:\/\/github.com\/mselbrede",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mselbrede\/gardyn",
+ "description": "CVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631",
+ "fork": false,
+ "created_at": "2025-07-04T15:49:12Z",
+ "updated_at": "2026-04-26T17:14:58Z",
+ "pushed_at": "2025-07-04T15:58:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1030017847,
+ "name": "gardyn-hack",
+ "full_name": "kristof-mattei\/gardyn-hack",
+ "owner": {
+ "login": "kristof-mattei",
+ "id": 864376,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/864376?v=4",
+ "html_url": "https:\/\/github.com\/kristof-mattei",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kristof-mattei\/gardyn-hack",
+ "description": "CVE-2025-29628, CVE-2025-29629, CVE-2025-29630, CVE-2025-29631",
+ "fork": false,
+ "created_at": "2025-08-01T00:46:18Z",
+ "updated_at": "2025-08-01T00:46:18Z",
+ "pushed_at": "2025-07-04T15:58:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-29774.json b/2025/CVE-2025-29774.json
index 7c34bffbf9..b1801fe5b4 100644
--- a/2025/CVE-2025-29774.json
+++ b/2025/CVE-2025-29774.json
@@ -1,4 +1,54 @@
[
+ {
+ "id": 1024913391,
+ "name": "Digital-Signature-Forgery-Attack",
+ "full_name": "demining\/Digital-Signature-Forgery-Attack",
+ "owner": {
+ "login": "demining",
+ "id": 87700947,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87700947?v=4",
+ "html_url": "https:\/\/github.com\/demining",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/demining\/Digital-Signature-Forgery-Attack",
+ "description": "How CVE-2025-29774 Vulnerabilities and the SIGHASH_SINGLE Bug Threaten Multi-Signature Wallet Operational Methods with Fake RawTX",
+ "fork": false,
+ "created_at": "2025-07-23T12:42:15Z",
+ "updated_at": "2025-10-13T12:44:41Z",
+ "pushed_at": "2025-07-23T18:10:08Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "attack",
+ "bitcoin",
+ "bitcoin-wallet",
+ "btc",
+ "bug",
+ "cryptocurrency",
+ "cryptography",
+ "cve-2025-29774",
+ "ecdsa",
+ "ecdsa-signature",
+ "multisig-wallets",
+ "sighash",
+ "signature",
+ "signature-verification",
+ "translation",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1135299358,
"name": "Phantom-Signature-Attack",
diff --git a/2025/CVE-2025-29824.json b/2025/CVE-2025-29824.json
index aa37ad9819..5103963e36 100644
--- a/2025/CVE-2025-29824.json
+++ b/2025/CVE-2025-29824.json
@@ -32,6 +32,39 @@
"score": 0,
"subscribers_count": 2
},
+ {
+ "id": 1028891930,
+ "name": "CVE-2025-29824-Exploit",
+ "full_name": "AfanPan\/CVE-2025-29824-Exploit",
+ "owner": {
+ "login": "AfanPan",
+ "id": 129576543,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129576543?v=4",
+ "html_url": "https:\/\/github.com\/AfanPan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AfanPan\/CVE-2025-29824-Exploit",
+ "description": "Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",
+ "fork": false,
+ "created_at": "2025-07-30T08:04:27Z",
+ "updated_at": "2026-03-12T08:04:02Z",
+ "pushed_at": "2025-07-30T08:15:59Z",
+ "stargazers_count": 21,
+ "watchers_count": 21,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 21,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1183945146,
"name": "CVE-2025-29824",
diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json
index b00cafc701..ff390bcced 100644
--- a/2025/CVE-2025-29927.json
+++ b/2025/CVE-2025-29927.json
@@ -3069,6 +3069,176 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014791291,
+ "name": "next-js-auth-bypass",
+ "full_name": "kazuya256\/next-js-auth-bypass",
+ "owner": {
+ "login": "kazuya256",
+ "id": 204841741,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204841741?v=4",
+ "html_url": "https:\/\/github.com\/kazuya256",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kazuya256\/next-js-auth-bypass",
+ "description": "🔓 Next.js Auth Bypass Demo - Educational application demonstrating CVE-2025-29927 middleware authentication bypass vulnerability . ⚠️ For educational use only.[Made using Ai]",
+ "fork": false,
+ "created_at": "2025-07-06T12:28:56Z",
+ "updated_at": "2025-11-17T14:59:19Z",
+ "pushed_at": "2025-07-12T07:19:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "auth-bypass",
+ "cve-2025-29927",
+ "demo",
+ "next"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1019716760,
+ "name": "Thank-u-Next",
+ "full_name": "mickhacking\/Thank-u-Next",
+ "owner": {
+ "login": "mickhacking",
+ "id": 94079102,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94079102?v=4",
+ "html_url": "https:\/\/github.com\/mickhacking",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mickhacking\/Thank-u-Next",
+ "description": "CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit",
+ "fork": false,
+ "created_at": "2025-07-14T18:57:41Z",
+ "updated_at": "2025-07-14T19:06:02Z",
+ "pushed_at": "2025-07-14T19:05:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027265337,
+ "name": "CVE-2025-29927",
+ "full_name": "sahbaazansari\/CVE-2025-29927",
+ "owner": {
+ "login": "sahbaazansari",
+ "id": 121603167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121603167?v=4",
+ "html_url": "https:\/\/github.com\/sahbaazansari",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sahbaazansari\/CVE-2025-29927",
+ "description": "The POC for m6.fr website",
+ "fork": false,
+ "created_at": "2025-07-27T16:59:08Z",
+ "updated_at": "2025-07-27T17:11:32Z",
+ "pushed_at": "2025-07-27T17:11:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1028537338,
+ "name": "PoC-CVE-2025-29927",
+ "full_name": "b4sh0xf\/PoC-CVE-2025-29927",
+ "owner": {
+ "login": "b4sh0xf",
+ "id": 153856077,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153856077?v=4",
+ "html_url": "https:\/\/github.com\/b4sh0xf",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/b4sh0xf\/PoC-CVE-2025-29927",
+ "description": "→ poc for CVE-2025-29927",
+ "fork": false,
+ "created_at": "2025-07-29T17:15:21Z",
+ "updated_at": "2025-08-07T13:37:47Z",
+ "pushed_at": "2025-08-07T13:37:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1029026932,
+ "name": "vulnbox-easy-CVE-2025-29927",
+ "full_name": "rgvillanueva28\/vulnbox-easy-CVE-2025-29927",
+ "owner": {
+ "login": "rgvillanueva28",
+ "id": 45262256,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45262256?v=4",
+ "html_url": "https:\/\/github.com\/rgvillanueva28",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rgvillanueva28\/vulnbox-easy-CVE-2025-29927",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-30T12:13:55Z",
+ "updated_at": "2025-08-07T16:00:48Z",
+ "pushed_at": "2025-08-07T15:48:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1039614163,
"name": "CVE-2025-29927",
@@ -3102,6 +3272,369 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1040790315,
+ "name": "Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927",
+ "full_name": "R3verseIN\/Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927",
+ "owner": {
+ "login": "R3verseIN",
+ "id": 62656061,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62656061?v=4",
+ "html_url": "https:\/\/github.com\/R3verseIN",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/R3verseIN\/Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-19T14:07:04Z",
+ "updated_at": "2025-08-19T14:09:25Z",
+ "pushed_at": "2025-08-19T14:09:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046083905,
+ "name": "CVE-2025-29927",
+ "full_name": "zs1n\/CVE-2025-29927",
+ "owner": {
+ "login": "zs1n",
+ "id": 209989581,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209989581?v=4",
+ "html_url": "https:\/\/github.com\/zs1n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zs1n\/CVE-2025-29927",
+ "description": "PoC | NextJS Middleware 15.2.2 - Authorization Bypass ",
+ "fork": false,
+ "created_at": "2025-08-28T06:55:34Z",
+ "updated_at": "2025-08-28T07:29:47Z",
+ "pushed_at": "2025-08-28T07:29:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1055110112,
+ "name": "CVE-2025-29927-PoC",
+ "full_name": "MKIRAHMET\/CVE-2025-29927-PoC",
+ "owner": {
+ "login": "MKIRAHMET",
+ "id": 172183233,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172183233?v=4",
+ "html_url": "https:\/\/github.com\/MKIRAHMET",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MKIRAHMET\/CVE-2025-29927-PoC",
+ "description": "This repository contains **research and analysis** related to CVE-2025-29927. It demonstrates safe, controlled testing approaches for a path traversal\/middleware misconfiguration vulnerability in web applications.",
+ "fork": false,
+ "created_at": "2025-09-11T19:30:20Z",
+ "updated_at": "2025-09-11T20:44:46Z",
+ "pushed_at": "2025-09-11T20:44:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1058563526,
+ "name": "vulnerable-nextjs-14-CVE-2025-29927",
+ "full_name": "adjscent\/vulnerable-nextjs-14-CVE-2025-29927",
+ "owner": {
+ "login": "adjscent",
+ "id": 29534372,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29534372?v=4",
+ "html_url": "https:\/\/github.com\/adjscent",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/adjscent\/vulnerable-nextjs-14-CVE-2025-29927",
+ "description": "do not use. vulnerable",
+ "fork": false,
+ "created_at": "2025-09-17T08:56:21Z",
+ "updated_at": "2025-09-17T08:56:49Z",
+ "pushed_at": "2025-09-17T08:56:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1060604602,
+ "name": "CVE-2025-29927",
+ "full_name": "sdrtba\/CVE-2025-29927",
+ "owner": {
+ "login": "sdrtba",
+ "id": 64638190,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64638190?v=4",
+ "html_url": "https:\/\/github.com\/sdrtba",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sdrtba\/CVE-2025-29927",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-20T08:12:13Z",
+ "updated_at": "2025-09-22T08:36:55Z",
+ "pushed_at": "2025-09-22T08:36:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1061375097,
+ "name": "CVE-2025-29927",
+ "full_name": "iteride\/CVE-2025-29927",
+ "owner": {
+ "login": "iteride",
+ "id": 164376455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164376455?v=4",
+ "html_url": "https:\/\/github.com\/iteride",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iteride\/CVE-2025-29927",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-21T19:28:03Z",
+ "updated_at": "2025-09-30T07:23:41Z",
+ "pushed_at": "2025-09-23T18:29:48Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062338605,
+ "name": "nextjs-middleware-auth-bypass",
+ "full_name": "sermikr0\/nextjs-middleware-auth-bypass",
+ "owner": {
+ "login": "sermikr0",
+ "id": 230672901,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/230672901?v=4",
+ "html_url": "https:\/\/github.com\/sermikr0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sermikr0\/nextjs-middleware-auth-bypass",
+ "description": "CVE-2025-29927",
+ "fork": false,
+ "created_at": "2025-09-23T06:07:00Z",
+ "updated_at": "2025-11-27T14:48:10Z",
+ "pushed_at": "2025-09-23T06:35:05Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062525180,
+ "name": "day10-nextjs-middleware-lab",
+ "full_name": "amalpvatayam67\/day10-nextjs-middleware-lab",
+ "owner": {
+ "login": "amalpvatayam67",
+ "id": 200071444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200071444?v=4",
+ "html_url": "https:\/\/github.com\/amalpvatayam67",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalpvatayam67\/day10-nextjs-middleware-lab",
+ "description": "Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)",
+ "fork": false,
+ "created_at": "2025-09-23T11:22:00Z",
+ "updated_at": "2025-09-23T11:24:45Z",
+ "pushed_at": "2025-09-23T11:24:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1065706961,
+ "name": "cve-2025-29927",
+ "full_name": "kuyrathdaro\/cve-2025-29927",
+ "owner": {
+ "login": "kuyrathdaro",
+ "id": 92511754,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92511754?v=4",
+ "html_url": "https:\/\/github.com\/kuyrathdaro",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kuyrathdaro\/cve-2025-29927",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-28T09:11:45Z",
+ "updated_at": "2025-09-28T09:11:45Z",
+ "pushed_at": "2025-09-28T09:11:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1071915165,
+ "name": "CVE-2025-29927",
+ "full_name": "Bongni\/CVE-2025-29927",
+ "owner": {
+ "login": "Bongni",
+ "id": 76695416,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76695416?v=4",
+ "html_url": "https:\/\/github.com\/Bongni",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bongni\/CVE-2025-29927",
+ "description": "Reproduction and fix of the CVE-2025-29927 vulnerability.",
+ "fork": false,
+ "created_at": "2025-10-08T02:04:39Z",
+ "updated_at": "2025-11-30T11:22:18Z",
+ "pushed_at": "2025-11-30T11:22:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1108304023,
+ "name": "CVE-2025-29927-NextJS",
+ "full_name": "liamromanis101\/CVE-2025-29927-NextJS",
+ "owner": {
+ "login": "liamromanis101",
+ "id": 67465405,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67465405?v=4",
+ "html_url": "https:\/\/github.com\/liamromanis101",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/liamromanis101\/CVE-2025-29927-NextJS",
+ "description": "PoC for testing CVE-2025-29927 for Next.js versions 11.x, 12.x <= 12.3.5, 13.x <= 13.5.9, 14.x <=14.2.25, 15.x <= 15.2.3",
+ "fork": false,
+ "created_at": "2025-12-02T09:39:02Z",
+ "updated_at": "2025-12-02T14:07:35Z",
+ "pushed_at": "2025-12-02T10:18:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1142706699,
"name": "CVE-2025-29927-Nextjs-Bypass-PoC",
diff --git a/2025/CVE-2025-30406.json b/2025/CVE-2025-30406.json
index 80432ab1dd..dab66af84a 100644
--- a/2025/CVE-2025-30406.json
+++ b/2025/CVE-2025-30406.json
@@ -31,5 +31,38 @@
"watchers": 12,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1029909504,
+ "name": "CVE-2025-30406",
+ "full_name": "mchklt\/CVE-2025-30406",
+ "owner": {
+ "login": "mchklt",
+ "id": 53612008,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53612008?v=4",
+ "html_url": "https:\/\/github.com\/mchklt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mchklt\/CVE-2025-30406",
+ "description": "CVE-2025-30406 ViewState Exploit PoC",
+ "fork": false,
+ "created_at": "2025-07-31T19:14:33Z",
+ "updated_at": "2026-03-29T23:58:40Z",
+ "pushed_at": "2025-07-31T19:26:42Z",
+ "stargazers_count": 90,
+ "watchers_count": 90,
+ "has_discussions": false,
+ "forks_count": 17,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 17,
+ "watchers": 90,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-30749.json b/2025/CVE-2025-30749.json
new file mode 100644
index 0000000000..bd7b9e9634
--- /dev/null
+++ b/2025/CVE-2025-30749.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1102256953,
+ "name": "AegisJava",
+ "full_name": "rashedhasan090\/AegisJava",
+ "owner": {
+ "login": "rashedhasan090",
+ "id": 18316142,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18316142?v=4",
+ "html_url": "https:\/\/github.com\/rashedhasan090",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rashedhasan090\/AegisJava",
+ "description": "I have created AegisJava, a tool to fix (detect and mitigate) CVE-2025-30749.",
+ "fork": false,
+ "created_at": "2025-11-23T05:28:30Z",
+ "updated_at": "2025-11-23T05:29:00Z",
+ "pushed_at": "2025-11-23T05:28:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-31125.json b/2025/CVE-2025-31125.json
index 2da7978d2d..d3efdbb63f 100644
--- a/2025/CVE-2025-31125.json
+++ b/2025/CVE-2025-31125.json
@@ -101,5 +101,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1019059484,
+ "name": "Path-Transversal-CVE-2025-31125-",
+ "full_name": "harshgupptaa\/Path-Transversal-CVE-2025-31125-",
+ "owner": {
+ "login": "harshgupptaa",
+ "id": 71779647,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71779647?v=4",
+ "html_url": "https:\/\/github.com\/harshgupptaa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/harshgupptaa\/Path-Transversal-CVE-2025-31125-",
+ "description": "Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected. This vulnerability is fixed in 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11.",
+ "fork": false,
+ "created_at": "2025-07-13T16:42:41Z",
+ "updated_at": "2025-07-13T16:45:37Z",
+ "pushed_at": "2025-07-13T16:45:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-31133.json b/2025/CVE-2025-31133.json
index eecba3c687..f605827559 100644
--- a/2025/CVE-2025-31133.json
+++ b/2025/CVE-2025-31133.json
@@ -1,4 +1,74 @@
[
+ {
+ "id": 1091019247,
+ "name": "CVE-2025-31133",
+ "full_name": "sahar042\/CVE-2025-31133",
+ "owner": {
+ "login": "sahar042",
+ "id": 49879157,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49879157?v=4",
+ "html_url": "https:\/\/github.com\/sahar042",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sahar042\/CVE-2025-31133",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-06T12:57:59Z",
+ "updated_at": "2026-01-06T03:13:03Z",
+ "pushed_at": "2025-11-06T13:00:03Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1094876763,
+ "name": "CVE-2025-31133",
+ "full_name": "skynet-f-nvidia\/CVE-2025-31133",
+ "owner": {
+ "login": "skynet-f-nvidia",
+ "id": 133852615,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133852615?v=4",
+ "html_url": "https:\/\/github.com\/skynet-f-nvidia",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/skynet-f-nvidia\/CVE-2025-31133",
+ "description": "CVE-2025-31133 PoC",
+ "fork": false,
+ "created_at": "2025-11-12T09:42:37Z",
+ "updated_at": "2025-12-30T10:59:02Z",
+ "pushed_at": "2025-11-12T09:46:45Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-31133",
+ "privilege-escalation",
+ "runc"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125595145,
"name": "container-escape-ebpf",
diff --git a/2025/CVE-2025-31161.json b/2025/CVE-2025-31161.json
index 074849fe44..b75c15bdef 100644
--- a/2025/CVE-2025-31161.json
+++ b/2025/CVE-2025-31161.json
@@ -230,6 +230,138 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1022748206,
+ "name": "CVE-2025-31161",
+ "full_name": "r0otk3r\/CVE-2025-31161",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-31161",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T18:31:42Z",
+ "updated_at": "2025-07-19T18:48:47Z",
+ "pushed_at": "2025-07-19T18:48:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1053795802,
+ "name": "CVE-2025-31161",
+ "full_name": "f4dee-backup\/CVE-2025-31161",
+ "owner": {
+ "login": "f4dee-backup",
+ "id": 191176297,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191176297?v=4",
+ "html_url": "https:\/\/github.com\/f4dee-backup",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/f4dee-backup\/CVE-2025-31161",
+ "description": "PoC CVE-2025-31161 - Authentication Bypass CrushFTP",
+ "fork": false,
+ "created_at": "2025-09-10T00:20:35Z",
+ "updated_at": "2025-12-10T12:39:47Z",
+ "pushed_at": "2025-09-14T15:31:12Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1056944526,
+ "name": "CVE-2025-31161",
+ "full_name": "acan0007\/CVE-2025-31161",
+ "owner": {
+ "login": "acan0007",
+ "id": 169229119,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169229119?v=4",
+ "html_url": "https:\/\/github.com\/acan0007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/acan0007\/CVE-2025-31161",
+ "description": "Authentication bypass vulnerability in versions of the CrushFTP server.",
+ "fork": false,
+ "created_at": "2025-09-15T04:24:27Z",
+ "updated_at": "2025-09-15T04:24:31Z",
+ "pushed_at": "2025-09-15T04:24:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1064990266,
+ "name": "CVE-2025-31161",
+ "full_name": "tdawg506\/CVE-2025-31161",
+ "owner": {
+ "login": "tdawg506",
+ "id": 95342437,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95342437?v=4",
+ "html_url": "https:\/\/github.com\/tdawg506",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tdawg506\/CVE-2025-31161",
+ "description": "Scans target to see if its vulnerable to CVE-2025-31161",
+ "fork": false,
+ "created_at": "2025-09-26T21:52:57Z",
+ "updated_at": "2025-09-26T22:20:01Z",
+ "pushed_at": "2025-09-26T22:19:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1065143587,
"name": "CrushFTP-auth-bypass-CVE-2025-31161",
@@ -263,6 +395,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1111467597,
+ "name": "CVE-2025-31161",
+ "full_name": "ch3m1cl\/CVE-2025-31161",
+ "owner": {
+ "login": "ch3m1cl",
+ "id": 248236681,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248236681?v=4",
+ "html_url": "https:\/\/github.com\/ch3m1cl",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ch3m1cl\/CVE-2025-31161",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T01:49:25Z",
+ "updated_at": "2025-12-13T17:48:39Z",
+ "pushed_at": "2025-12-07T13:35:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1132162219,
"name": "CVE-2025-31161",
diff --git a/2025/CVE-2025-31200.json b/2025/CVE-2025-31200.json
index b1a402ad37..6c61d0259e 100644
--- a/2025/CVE-2025-31200.json
+++ b/2025/CVE-2025-31200.json
@@ -106,5 +106,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1046309639,
+ "name": "CVE-2025-31200",
+ "full_name": "hunters-sec\/CVE-2025-31200",
+ "owner": {
+ "login": "hunters-sec",
+ "id": 223824247,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223824247?v=4",
+ "html_url": "https:\/\/github.com\/hunters-sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hunters-sec\/CVE-2025-31200",
+ "description": "IOS audio buffer overflow CVE-2025-31200 POC",
+ "fork": false,
+ "created_at": "2025-08-28T13:53:14Z",
+ "updated_at": "2026-02-14T14:56:00Z",
+ "pushed_at": "2025-08-28T14:10:23Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json
index 5900c4bd58..2aa9749da2 100644
--- a/2025/CVE-2025-31258.json
+++ b/2025/CVE-2025-31258.json
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
- "updated_at": "2026-06-02T11:19:24Z",
- "pushed_at": "2026-06-02T11:19:20Z",
+ "updated_at": "2026-06-02T18:29:11Z",
+ "pushed_at": "2026-06-02T18:29:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-31324.json b/2025/CVE-2025-31324.json
index 7537c9e613..cf174e7622 100644
--- a/2025/CVE-2025-31324.json
+++ b/2025/CVE-2025-31324.json
@@ -578,6 +578,72 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1038657114,
+ "name": "sap-netweaver-0day-CVE-2025-31324",
+ "full_name": "antichainalysis\/sap-netweaver-0day-CVE-2025-31324",
+ "owner": {
+ "login": "antichainalysis",
+ "id": 196148785,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196148785?v=4",
+ "html_url": "https:\/\/github.com\/antichainalysis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/antichainalysis\/sap-netweaver-0day-CVE-2025-31324",
+ "description": "sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324",
+ "fork": false,
+ "created_at": "2025-08-15T15:45:43Z",
+ "updated_at": "2026-04-16T07:43:37Z",
+ "pushed_at": "2025-08-15T15:54:13Z",
+ "stargazers_count": 22,
+ "watchers_count": 22,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 22,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1041207732,
+ "name": "CVE-2025-31324-Exploits",
+ "full_name": "harshitvarma05\/CVE-2025-31324-Exploits",
+ "owner": {
+ "login": "harshitvarma05",
+ "id": 90782285,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90782285?v=4",
+ "html_url": "https:\/\/github.com\/harshitvarma05",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/harshitvarma05\/CVE-2025-31324-Exploits",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-20T06:30:07Z",
+ "updated_at": "2025-08-31T21:24:53Z",
+ "pushed_at": "2025-08-31T21:24:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1132961656,
"name": "CVE-2025-31324",
diff --git a/2025/CVE-2025-31486.json b/2025/CVE-2025-31486.json
index 1a5e64f2f9..ba67e57897 100644
--- a/2025/CVE-2025-31486.json
+++ b/2025/CVE-2025-31486.json
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1025777034,
+ "name": "CVE-2025-31486-Simulation",
+ "full_name": "hackmelocal\/CVE-2025-31486-Simulation",
+ "owner": {
+ "login": "hackmelocal",
+ "id": 213745023,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213745023?v=4",
+ "html_url": "https:\/\/github.com\/hackmelocal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hackmelocal\/CVE-2025-31486-Simulation",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-24T19:31:38Z",
+ "updated_at": "2025-07-24T19:54:56Z",
+ "pushed_at": "2025-07-24T19:54:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-31650.json b/2025/CVE-2025-31650.json
index 46366f19d5..96f8ca6a2f 100644
--- a/2025/CVE-2025-31650.json
+++ b/2025/CVE-2025-31650.json
@@ -196,5 +196,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1012218233,
+ "name": "Tomcat-CVE-2025-31650",
+ "full_name": "B1gN0Se\/Tomcat-CVE-2025-31650",
+ "owner": {
+ "login": "B1gN0Se",
+ "id": 86577632,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86577632?v=4",
+ "html_url": "https:\/\/github.com\/B1gN0Se",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/B1gN0Se\/Tomcat-CVE-2025-31650",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T02:20:40Z",
+ "updated_at": "2025-07-07T17:39:50Z",
+ "pushed_at": "2025-07-07T17:39:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-31702.json b/2025/CVE-2025-31702.json
new file mode 100644
index 0000000000..f44c64e8c2
--- /dev/null
+++ b/2025/CVE-2025-31702.json
@@ -0,0 +1,40 @@
+[
+ {
+ "id": 1085825433,
+ "name": "CVE-2025-31702",
+ "full_name": "itres-labs\/CVE-2025-31702",
+ "owner": {
+ "login": "itres-labs",
+ "id": 3471950,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3471950?v=4",
+ "html_url": "https:\/\/github.com\/itres-labs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/itres-labs\/CVE-2025-31702",
+ "description": "Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.",
+ "fork": false,
+ "created_at": "2025-10-29T15:04:42Z",
+ "updated_at": "2026-04-26T03:19:17Z",
+ "pushed_at": "2025-12-16T18:25:40Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "dahua",
+ "exploit"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-31931.json b/2025/CVE-2025-31931.json
new file mode 100644
index 0000000000..73e36adc2d
--- /dev/null
+++ b/2025/CVE-2025-31931.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094578758,
+ "name": "POC-CVE-2025-31931",
+ "full_name": "yohanes\/POC-CVE-2025-31931",
+ "owner": {
+ "login": "yohanes",
+ "id": 39844,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39844?v=4",
+ "html_url": "https:\/\/github.com\/yohanes",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yohanes\/POC-CVE-2025-31931",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-11T22:36:24Z",
+ "updated_at": "2025-11-24T13:10:56Z",
+ "pushed_at": "2025-11-18T05:01:18Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32023.json b/2025/CVE-2025-32023.json
new file mode 100644
index 0000000000..b63af37be5
--- /dev/null
+++ b/2025/CVE-2025-32023.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1014948637,
+ "name": "CVE-2025-32023",
+ "full_name": "leesh3288\/CVE-2025-32023",
+ "owner": {
+ "login": "leesh3288",
+ "id": 17825906,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17825906?v=4",
+ "html_url": "https:\/\/github.com\/leesh3288",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/leesh3288\/CVE-2025-32023",
+ "description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"",
+ "fork": false,
+ "created_at": "2025-07-06T18:09:11Z",
+ "updated_at": "2026-05-25T16:26:46Z",
+ "pushed_at": "2025-07-06T18:58:01Z",
+ "stargazers_count": 213,
+ "watchers_count": 213,
+ "has_discussions": false,
+ "forks_count": 40,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 40,
+ "watchers": 213,
+ "score": 0,
+ "subscribers_count": 4
+ },
+ {
+ "id": 1017260669,
+ "name": "CVE-2025-32023",
+ "full_name": "LordBheem\/CVE-2025-32023",
+ "owner": {
+ "login": "LordBheem",
+ "id": 123387668,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123387668?v=4",
+ "html_url": "https:\/\/github.com\/LordBheem",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LordBheem\/CVE-2025-32023",
+ "description": "Exploit for CVE-2025-32023",
+ "fork": false,
+ "created_at": "2025-07-10T09:08:08Z",
+ "updated_at": "2025-07-10T09:08:08Z",
+ "pushed_at": "2025-07-10T07:53:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018834784,
+ "name": "Blackash-CVE-2025-32023",
+ "full_name": "44528zja\/Blackash-CVE-2025-32023",
+ "owner": {
+ "login": "44528zja",
+ "id": 79467027,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79467027?v=4",
+ "html_url": "https:\/\/github.com\/44528zja",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/44528zja\/Blackash-CVE-2025-32023",
+ "description": "CVE-2025-32023",
+ "fork": false,
+ "created_at": "2025-07-13T06:30:47Z",
+ "updated_at": "2025-07-13T06:30:48Z",
+ "pushed_at": "2025-07-09T21:49:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32094.json b/2025/CVE-2025-32094.json
new file mode 100644
index 0000000000..985b2f2cd1
--- /dev/null
+++ b/2025/CVE-2025-32094.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041587911,
+ "name": "echteeteepee",
+ "full_name": "perplext\/echteeteepee",
+ "owner": {
+ "login": "perplext",
+ "id": 1381052,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1381052?v=4",
+ "html_url": "https:\/\/github.com\/perplext",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/perplext\/echteeteepee",
+ "description": "Go tool and Nuclei template for testing James Kettle's (CVE-2025-32094) HTTP\/1.1 must die: the desync endgame",
+ "fork": false,
+ "created_at": "2025-08-20T17:55:13Z",
+ "updated_at": "2026-04-14T23:24:01Z",
+ "pushed_at": "2025-08-20T17:57:33Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32421.json b/2025/CVE-2025-32421.json
new file mode 100644
index 0000000000..febd1bd3ee
--- /dev/null
+++ b/2025/CVE-2025-32421.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1104276960,
+ "name": "CVE-2025-32421---Race-Condition-Vulnerability---Next.js",
+ "full_name": "Delfaster\/CVE-2025-32421---Race-Condition-Vulnerability---Next.js",
+ "owner": {
+ "login": "Delfaster",
+ "id": 54823981,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54823981?v=4",
+ "html_url": "https:\/\/github.com\/Delfaster",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Delfaster\/CVE-2025-32421---Race-Condition-Vulnerability---Next.js",
+ "description": "PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation",
+ "fork": false,
+ "created_at": "2025-11-26T01:59:36Z",
+ "updated_at": "2025-11-26T08:48:08Z",
+ "pushed_at": "2025-11-26T02:18:06Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32429.json b/2025/CVE-2025-32429.json
new file mode 100644
index 0000000000..b838c816b4
--- /dev/null
+++ b/2025/CVE-2025-32429.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1026317607,
+ "name": "CVE-2025-32429",
+ "full_name": "byteReaper77\/CVE-2025-32429",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-32429",
+ "description": "Exploit for CVE-2025-32429 – SQLi in XWiki REST API (getdeleteddocuments.vm).",
+ "fork": false,
+ "created_at": "2025-07-25T17:14:10Z",
+ "updated_at": "2026-02-07T05:14:34Z",
+ "pushed_at": "2025-07-26T15:13:49Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1026645682,
+ "name": "CVE-2025-32429",
+ "full_name": "amir-othman\/CVE-2025-32429",
+ "owner": {
+ "login": "amir-othman",
+ "id": 111237933,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111237933?v=4",
+ "html_url": "https:\/\/github.com\/amir-othman",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amir-othman\/CVE-2025-32429",
+ "description": "Proof-of-Concept exploit for CVE-2025-32429 (SQL Injection in PHP PDO prepared statements) – for educational and security research purposes only",
+ "fork": false,
+ "created_at": "2025-07-26T10:06:56Z",
+ "updated_at": "2025-07-26T17:28:06Z",
+ "pushed_at": "2025-07-26T17:03:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027534568,
+ "name": "CVE-2025-32429-Checker",
+ "full_name": "imbas007\/CVE-2025-32429-Checker",
+ "owner": {
+ "login": "imbas007",
+ "id": 100182585,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4",
+ "html_url": "https:\/\/github.com\/imbas007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/imbas007\/CVE-2025-32429-Checker",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-28T06:48:02Z",
+ "updated_at": "2025-07-28T06:56:06Z",
+ "pushed_at": "2025-07-28T06:55:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32432.json b/2025/CVE-2025-32432.json
index 30a96c445c..096c5ef1ed 100644
--- a/2025/CVE-2025-32432.json
+++ b/2025/CVE-2025-32432.json
@@ -98,6 +98,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1062347858,
+ "name": "CVE-2025-32432",
+ "full_name": "bambooqj\/CVE-2025-32432",
+ "owner": {
+ "login": "bambooqj",
+ "id": 20792621,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20792621?v=4",
+ "html_url": "https:\/\/github.com\/bambooqj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bambooqj\/CVE-2025-32432",
+ "description": "AI修复生成的CVE-2025-32432的poc",
+ "fork": false,
+ "created_at": "2025-09-23T06:23:23Z",
+ "updated_at": "2025-09-24T03:45:07Z",
+ "pushed_at": "2025-09-23T06:26:03Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1225201872,
"name": "CVE-2025-32432",
diff --git a/2025/CVE-2025-32433.json b/2025/CVE-2025-32433.json
index fd98324c2a..b2b3a7e7c5 100644
--- a/2025/CVE-2025-32433.json
+++ b/2025/CVE-2025-32433.json
@@ -702,6 +702,314 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1037104502,
+ "name": "CVE-2025-32433-PoC",
+ "full_name": "NiteeshPujari\/CVE-2025-32433-PoC",
+ "owner": {
+ "login": "NiteeshPujari",
+ "id": 47559537,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47559537?v=4",
+ "html_url": "https:\/\/github.com\/NiteeshPujari",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NiteeshPujari\/CVE-2025-32433-PoC",
+ "description": "CVE-2025-32433 PoC: Unauthenticated Remote Code Execution (RCE) in Erlang\/OTP SSH. A proof-of-concept exploit for CVE-2025-32433",
+ "fork": false,
+ "created_at": "2025-08-13T04:34:40Z",
+ "updated_at": "2026-01-29T04:11:27Z",
+ "pushed_at": "2025-08-14T07:43:35Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045612324,
+ "name": "CVE-2025-32433-Detection",
+ "full_name": "te0rwx\/CVE-2025-32433-Detection",
+ "owner": {
+ "login": "te0rwx",
+ "id": 93838050,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93838050?v=4",
+ "html_url": "https:\/\/github.com\/te0rwx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/te0rwx\/CVE-2025-32433-Detection",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-27T13:00:48Z",
+ "updated_at": "2025-08-27T18:10:14Z",
+ "pushed_at": "2025-08-27T18:10:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046352510,
+ "name": "CVE-2025-32433",
+ "full_name": "Mdusmandasthaheer\/CVE-2025-32433",
+ "owner": {
+ "login": "Mdusmandasthaheer",
+ "id": 122736342,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122736342?v=4",
+ "html_url": "https:\/\/github.com\/Mdusmandasthaheer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mdusmandasthaheer\/CVE-2025-32433",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-28T15:01:56Z",
+ "updated_at": "2025-08-28T15:06:59Z",
+ "pushed_at": "2025-08-28T15:06:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1052204998,
+ "name": "CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE",
+ "full_name": "dollarboysushil\/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE",
+ "owner": {
+ "login": "dollarboysushil",
+ "id": 48991715,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991715?v=4",
+ "html_url": "https:\/\/github.com\/dollarboysushil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dollarboysushil\/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE",
+ "description": "PoC showing unauthenticated remote code execution in Erlang\/OTP SSH server. By exploiting a flaw in SSH protocol message handling, an attacker can execute arbitrary commands on the target without valid credentials.",
+ "fork": false,
+ "created_at": "2025-09-07T16:11:14Z",
+ "updated_at": "2025-09-10T16:58:13Z",
+ "pushed_at": "2025-09-07T16:25:50Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-32433",
+ "erlang-otp",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1059525422,
+ "name": "CVE-2025-32433",
+ "full_name": "iteride\/CVE-2025-32433",
+ "owner": {
+ "login": "iteride",
+ "id": 164376455,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164376455?v=4",
+ "html_url": "https:\/\/github.com\/iteride",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iteride\/CVE-2025-32433",
+ "description": "test",
+ "fork": false,
+ "created_at": "2025-09-18T15:02:26Z",
+ "updated_at": "2025-09-21T19:27:24Z",
+ "pushed_at": "2025-09-21T18:27:07Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1063112546,
+ "name": "cve-2025-32433",
+ "full_name": "mirmeweu\/cve-2025-32433",
+ "owner": {
+ "login": "mirmeweu",
+ "id": 204829802,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204829802?v=4",
+ "html_url": "https:\/\/github.com\/mirmeweu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mirmeweu\/cve-2025-32433",
+ "description": "the task from C*****k",
+ "fork": false,
+ "created_at": "2025-09-24T07:22:56Z",
+ "updated_at": "2025-09-25T09:26:57Z",
+ "pushed_at": "2025-09-25T09:26:54Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1092194511,
+ "name": "CVE-2025-32433-exploit",
+ "full_name": "l1nuxkid\/CVE-2025-32433-exploit",
+ "owner": {
+ "login": "l1nuxkid",
+ "id": 141800731,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141800731?v=4",
+ "html_url": "https:\/\/github.com\/l1nuxkid",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/l1nuxkid\/CVE-2025-32433-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-08T06:58:56Z",
+ "updated_at": "2025-11-08T07:11:10Z",
+ "pushed_at": "2025-11-08T07:11:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105598216,
+ "name": "CVE-2025-32433-Eploit",
+ "full_name": "soltanali0\/CVE-2025-32433-Eploit",
+ "owner": {
+ "login": "soltanali0",
+ "id": 87374678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4",
+ "html_url": "https:\/\/github.com\/soltanali0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/soltanali0\/CVE-2025-32433-Eploit",
+ "description": "Erlang\/OTP SSH Vulnerable to Pre-Authentication RCE",
+ "fork": false,
+ "created_at": "2025-11-27T21:38:43Z",
+ "updated_at": "2025-11-30T13:10:32Z",
+ "pushed_at": "2025-11-30T13:10:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122668013,
+ "name": "cve-2025-32433_rce_exploit",
+ "full_name": "giriaryan694-a11y\/cve-2025-32433_rce_exploit",
+ "owner": {
+ "login": "giriaryan694-a11y",
+ "id": 227362547,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/227362547?v=4",
+ "html_url": "https:\/\/github.com\/giriaryan694-a11y",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/giriaryan694-a11y\/cve-2025-32433_rce_exploit",
+ "description": "This exploit script is designed to simplify exploitation of the Erlang\/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.",
+ "fork": false,
+ "created_at": "2025-12-25T08:42:42Z",
+ "updated_at": "2025-12-25T09:10:18Z",
+ "pushed_at": "2025-12-25T09:10:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-32433",
+ "cve-2025-32433-erlang-otp-ssh-pre-auth-rce",
+ "cve-2025-32433-exploit",
+ "python",
+ "tryhackme",
+ "tryhackme-writeups"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124631889,
"name": "Erlang-OTP-PoC_CVE-2025-32433",
diff --git a/2025/CVE-2025-32434.json b/2025/CVE-2025-32434.json
index 86ab5b39dd..106455ca58 100644
--- a/2025/CVE-2025-32434.json
+++ b/2025/CVE-2025-32434.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1095454510,
+ "name": "cve-2025-32434-poc",
+ "full_name": "cyhe50\/cve-2025-32434-poc",
+ "owner": {
+ "login": "cyhe50",
+ "id": 47143007,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47143007?v=4",
+ "html_url": "https:\/\/github.com\/cyhe50",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyhe50\/cve-2025-32434-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-13T04:27:05Z",
+ "updated_at": "2025-11-25T01:20:46Z",
+ "pushed_at": "2025-11-25T01:20:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1117080197,
"name": "CVE-2025-32434-exploit",
diff --git a/2025/CVE-2025-32462.json b/2025/CVE-2025-32462.json
index 6154be6dfd..8ba3fa188a 100644
--- a/2025/CVE-2025-32462.json
+++ b/2025/CVE-2025-32462.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1011987383,
+ "name": "CVE-2025-32462",
+ "full_name": "Hacksparo\/CVE-2025-32462",
+ "owner": {
+ "login": "Hacksparo",
+ "id": 154036443,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154036443?v=4",
+ "html_url": "https:\/\/github.com\/Hacksparo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Hacksparo\/CVE-2025-32462",
+ "description": "POC script for CVE-2025-32462 a vulnerability in sudo",
+ "fork": false,
+ "created_at": "2025-07-01T16:23:11Z",
+ "updated_at": "2025-07-01T16:23:11Z",
+ "pushed_at": "2025-07-01T16:23:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1013001797,
"name": "CVE-2025-32462",
@@ -32,6 +65,72 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1013260743,
+ "name": "CVE-2025-32462-Exploit",
+ "full_name": "cybersentinelx1\/CVE-2025-32462-Exploit",
+ "owner": {
+ "login": "cybersentinelx1",
+ "id": 187696278,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187696278?v=4",
+ "html_url": "https:\/\/github.com\/cybersentinelx1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybersentinelx1\/CVE-2025-32462-Exploit",
+ "description": "CVE-2025-32462 Exploit",
+ "fork": false,
+ "created_at": "2025-07-03T15:53:18Z",
+ "updated_at": "2025-08-22T09:46:30Z",
+ "pushed_at": "2025-07-03T16:37:58Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013433316,
+ "name": "CVE-2025-32462",
+ "full_name": "mylovem313\/CVE-2025-32462",
+ "owner": {
+ "login": "mylovem313",
+ "id": 211981513,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211981513?v=4",
+ "html_url": "https:\/\/github.com\/mylovem313",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mylovem313\/CVE-2025-32462",
+ "description": "CVE-2025-32462 exploit code",
+ "fork": false,
+ "created_at": "2025-07-03T22:34:04Z",
+ "updated_at": "2025-07-03T22:34:59Z",
+ "pushed_at": "2025-07-03T22:34:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1013978643,
"name": "CVE-2025-32462-POC",
@@ -65,6 +164,184 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014206773,
+ "name": "cve-2025-32462",
+ "full_name": "SpongeBob-369\/cve-2025-32462",
+ "owner": {
+ "login": "SpongeBob-369",
+ "id": 176364273,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176364273?v=4",
+ "html_url": "https:\/\/github.com\/SpongeBob-369",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SpongeBob-369\/cve-2025-32462",
+ "description": "cve-2025-32462' demo",
+ "fork": false,
+ "created_at": "2025-07-05T08:58:30Z",
+ "updated_at": "2025-11-30T08:19:00Z",
+ "pushed_at": "2025-07-08T12:19:36Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015341991,
+ "name": "CVE-2025-32462_32463-Lab",
+ "full_name": "MAAYTHM\/CVE-2025-32462_32463-Lab",
+ "owner": {
+ "login": "MAAYTHM",
+ "id": 86392841,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86392841?v=4",
+ "html_url": "https:\/\/github.com\/MAAYTHM",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MAAYTHM\/CVE-2025-32462_32463-Lab",
+ "description": "Docker PoC for CVE-2025-32462 & CVE-2025-32463 (sudo), based on Stratascale CRU research.",
+ "fork": false,
+ "created_at": "2025-07-07T11:04:29Z",
+ "updated_at": "2025-12-16T23:55:30Z",
+ "pushed_at": "2025-07-07T11:19:42Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chroot",
+ "cve-2025",
+ "cve-2025-32462",
+ "cve-2025-32463",
+ "cybersecurity",
+ "dockerfile",
+ "linux",
+ "poc",
+ "privilege-escalation",
+ "proof-of-concept",
+ "sudo",
+ "sudoers"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017853531,
+ "name": "CVE-2025-32462-32463-Detection-Script-",
+ "full_name": "toohau\/CVE-2025-32462-32463-Detection-Script-",
+ "owner": {
+ "login": "toohau",
+ "id": 26600792,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26600792?v=4",
+ "html_url": "https:\/\/github.com\/toohau",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/toohau\/CVE-2025-32462-32463-Detection-Script-",
+ "description": "Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros",
+ "fork": false,
+ "created_at": "2025-07-11T07:47:13Z",
+ "updated_at": "2025-07-11T07:51:13Z",
+ "pushed_at": "2025-07-11T07:51:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027471547,
+ "name": "CVE-2025-32462",
+ "full_name": "j3r1ch0123\/CVE-2025-32462",
+ "owner": {
+ "login": "j3r1ch0123",
+ "id": 110147529,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110147529?v=4",
+ "html_url": "https:\/\/github.com\/j3r1ch0123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/j3r1ch0123\/CVE-2025-32462",
+ "description": "The vulnerability was found by Rich Mirch. More details on it here: https:\/\/cxsecurity.com\/issue\/WLB-2025070022",
+ "fork": false,
+ "created_at": "2025-07-28T04:18:34Z",
+ "updated_at": "2025-10-31T10:04:49Z",
+ "pushed_at": "2025-07-28T17:40:27Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122847991,
+ "name": "CVE-2025-32462-",
+ "full_name": "OffSecPlaybook\/CVE-2025-32462-",
+ "owner": {
+ "login": "OffSecPlaybook",
+ "id": 250903043,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250903043?v=4",
+ "html_url": "https:\/\/github.com\/OffSecPlaybook",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/OffSecPlaybook\/CVE-2025-32462-",
+ "description": "CVE-2025-32462 is a local privilege escalation vulnerability in sudo",
+ "fork": false,
+ "created_at": "2025-12-25T16:42:04Z",
+ "updated_at": "2025-12-25T16:50:25Z",
+ "pushed_at": "2025-12-25T16:50:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1133447940,
"name": "CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities",
diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json
index d05de5a3d2..a37e7a5a8f 100644
--- a/2025/CVE-2025-32463.json
+++ b/2025/CVE-2025-32463.json
@@ -50,6 +50,586 @@
"score": 0,
"subscribers_count": 2
},
+ {
+ "id": 1011882826,
+ "name": "CVE-2025-32463",
+ "full_name": "4f-kira\/CVE-2025-32463",
+ "owner": {
+ "login": "4f-kira",
+ "id": 15325007,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15325007?v=4",
+ "html_url": "https:\/\/github.com\/4f-kira",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/4f-kira\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-01T13:29:02Z",
+ "updated_at": "2025-07-02T05:58:06Z",
+ "pushed_at": "2025-07-01T13:37:07Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1011894465,
+ "name": "CVE-2025-32463-POC",
+ "full_name": "K1tt3h\/CVE-2025-32463-POC",
+ "owner": {
+ "login": "K1tt3h",
+ "id": 218786764,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218786764?v=4",
+ "html_url": "https:\/\/github.com\/K1tt3h",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/K1tt3h\/CVE-2025-32463-POC",
+ "description": "CVE-2025-32463 Proof of concept",
+ "fork": false,
+ "created_at": "2025-07-01T13:48:05Z",
+ "updated_at": "2026-06-02T16:16:09Z",
+ "pushed_at": "2025-07-01T14:02:22Z",
+ "stargazers_count": 28,
+ "watchers_count": 28,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 28,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1011960984,
+ "name": "linux-root-kit",
+ "full_name": "IC3-512\/linux-root-kit",
+ "owner": {
+ "login": "IC3-512",
+ "id": 101519486,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101519486?v=4",
+ "html_url": "https:\/\/github.com\/IC3-512",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IC3-512\/linux-root-kit",
+ "description": "End-to-end simulation of a Python dependency confusion attack, sudo privilege escalation (CVE-2025-32463), and rootkit-based persistence - with full memory and network forensic analysis.",
+ "fork": false,
+ "created_at": "2025-07-01T15:36:10Z",
+ "updated_at": "2026-04-19T15:10:10Z",
+ "pushed_at": "2025-07-20T13:50:41Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-32463",
+ "dependency-confusion-attack",
+ "digital-forensics",
+ "linux-kernel-module",
+ "reverse-engineering",
+ "rootkit-kernel"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012169568,
+ "name": "cve-2025-32463-lab",
+ "full_name": "7r00t\/cve-2025-32463-lab",
+ "owner": {
+ "login": "7r00t",
+ "id": 123947406,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123947406?v=4",
+ "html_url": "https:\/\/github.com\/7r00t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/7r00t\/cve-2025-32463-lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-01T23:41:25Z",
+ "updated_at": "2025-12-22T17:56:58Z",
+ "pushed_at": "2025-07-01T23:53:06Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012210627,
+ "name": "CVE-2025-32463",
+ "full_name": "SysMancer\/CVE-2025-32463",
+ "owner": {
+ "login": "SysMancer",
+ "id": 71742137,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71742137?v=4",
+ "html_url": "https:\/\/github.com\/SysMancer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SysMancer\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T01:57:33Z",
+ "updated_at": "2025-07-08T16:43:44Z",
+ "pushed_at": "2025-07-02T02:04:30Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012337321,
+ "name": "CVE-2025-32463",
+ "full_name": "kh4sh3i\/CVE-2025-32463",
+ "owner": {
+ "login": "kh4sh3i",
+ "id": 64693844,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64693844?v=4",
+ "html_url": "https:\/\/github.com\/kh4sh3i",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kh4sh3i\/CVE-2025-32463",
+ "description": "Local Privilege Escalation to Root via Sudo chroot in Linux",
+ "fork": false,
+ "created_at": "2025-07-02T07:20:20Z",
+ "updated_at": "2026-05-29T18:48:35Z",
+ "pushed_at": "2025-07-02T08:04:44Z",
+ "stargazers_count": 463,
+ "watchers_count": 463,
+ "has_discussions": false,
+ "forks_count": 62,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chroot",
+ "exploit",
+ "linux",
+ "lpe",
+ "poc",
+ "privelage-escalation",
+ "scanner",
+ "sudo",
+ "tools",
+ "ubuntu",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 62,
+ "watchers": 463,
+ "score": 0,
+ "subscribers_count": 3
+ },
+ {
+ "id": 1012385228,
+ "name": "CVE-2025-32463_Exploit",
+ "full_name": "neko205-mx\/CVE-2025-32463_Exploit",
+ "owner": {
+ "login": "neko205-mx",
+ "id": 69409093,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69409093?v=4",
+ "html_url": "https:\/\/github.com\/neko205-mx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/neko205-mx\/CVE-2025-32463_Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T08:53:44Z",
+ "updated_at": "2025-07-02T08:59:30Z",
+ "pushed_at": "2025-07-02T08:59:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012476846,
+ "name": "CVE-2025-32463",
+ "full_name": "pevinkumar10\/CVE-2025-32463",
+ "owner": {
+ "login": "pevinkumar10",
+ "id": 191495526,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191495526?v=4",
+ "html_url": "https:\/\/github.com\/pevinkumar10",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pevinkumar10\/CVE-2025-32463",
+ "description": "Exploit for Local Privilege Escalation in Sudo via Malicious nsswitch.conf with sudo -R. (CVE-2025-32463) ",
+ "fork": false,
+ "created_at": "2025-07-02T11:47:58Z",
+ "updated_at": "2026-05-09T10:04:47Z",
+ "pushed_at": "2025-07-05T11:13:26Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012569637,
+ "name": "CVE-2025-32463_POC",
+ "full_name": "zhaduchanhzz\/CVE-2025-32463_POC",
+ "owner": {
+ "login": "zhaduchanhzz",
+ "id": 76047186,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76047186?v=4",
+ "html_url": "https:\/\/github.com\/zhaduchanhzz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zhaduchanhzz\/CVE-2025-32463_POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T14:29:49Z",
+ "updated_at": "2025-07-02T15:07:10Z",
+ "pushed_at": "2025-07-02T15:07:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012696307,
+ "name": "CVE-2025-32463_POC",
+ "full_name": "robbert1978\/CVE-2025-32463_POC",
+ "owner": {
+ "login": "robbert1978",
+ "id": 31349426,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31349426?v=4",
+ "html_url": "https:\/\/github.com\/robbert1978",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/robbert1978\/CVE-2025-32463_POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T18:26:29Z",
+ "updated_at": "2025-07-02T18:30:06Z",
+ "pushed_at": "2025-07-02T18:30:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012904280,
+ "name": "sudoinjection",
+ "full_name": "Mikivirus0\/sudoinjection",
+ "owner": {
+ "login": "Mikivirus0",
+ "id": 85563293,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85563293?v=4",
+ "html_url": "https:\/\/github.com\/Mikivirus0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mikivirus0\/sudoinjection",
+ "description": "Sudo Local Privilege Escalation CVE-2025-32463 (Best For Cases Where the shell is not stable to spawn a new root shell)",
+ "fork": false,
+ "created_at": "2025-07-03T04:24:54Z",
+ "updated_at": "2025-11-26T12:27:25Z",
+ "pushed_at": "2025-07-03T04:27:29Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013125878,
+ "name": "CVE-2025-32463",
+ "full_name": "san8383\/CVE-2025-32463",
+ "owner": {
+ "login": "san8383",
+ "id": 19327440,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19327440?v=4",
+ "html_url": "https:\/\/github.com\/san8383",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/san8383\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-03T11:55:29Z",
+ "updated_at": "2025-11-14T22:52:05Z",
+ "pushed_at": "2025-07-03T12:00:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013127277,
+ "name": "CVE-2025-32463",
+ "full_name": "0xAkarii\/CVE-2025-32463",
+ "owner": {
+ "login": "0xAkarii",
+ "id": 69517667,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69517667?v=4",
+ "html_url": "https:\/\/github.com\/0xAkarii",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xAkarii\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-03T11:58:12Z",
+ "updated_at": "2025-07-03T11:58:39Z",
+ "pushed_at": "2025-07-03T11:58:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013356616,
+ "name": "sudo_patch_CVE-2025-32463",
+ "full_name": "CIA911\/sudo_patch_CVE-2025-32463",
+ "owner": {
+ "login": "CIA911",
+ "id": 48140538,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48140538?v=4",
+ "html_url": "https:\/\/github.com\/CIA911",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CIA911\/sudo_patch_CVE-2025-32463",
+ "description": "Mr.CIA's manual patching guide for CVE-2025-32463 (Sudo local privilege escalation) on Kali Linux and Ubuntu WSL.",
+ "fork": false,
+ "created_at": "2025-07-03T19:04:11Z",
+ "updated_at": "2025-10-29T13:05:21Z",
+ "pushed_at": "2025-07-03T20:03:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1013396078,
+ "name": "CVE-2025-32463-sudo-chwoot",
+ "full_name": "mirchr\/CVE-2025-32463-sudo-chwoot",
+ "owner": {
+ "login": "mirchr",
+ "id": 6902669,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6902669?v=4",
+ "html_url": "https:\/\/github.com\/mirchr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mirchr\/CVE-2025-32463-sudo-chwoot",
+ "description": "PoC for CVE-2025-32463 - Sudo chroot Elevation of Privilege Vulnerability",
+ "fork": false,
+ "created_at": "2025-07-03T20:40:10Z",
+ "updated_at": "2026-04-24T09:23:08Z",
+ "pushed_at": "2025-07-05T16:22:28Z",
+ "stargazers_count": 24,
+ "watchers_count": 24,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 24,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1013781214,
+ "name": "CVE-2025-32463_illdeed",
+ "full_name": "ill-deed\/CVE-2025-32463_illdeed",
+ "owner": {
+ "login": "ill-deed",
+ "id": 210107232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210107232?v=4",
+ "html_url": "https:\/\/github.com\/ill-deed",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ill-deed\/CVE-2025-32463_illdeed",
+ "description": "Privilege escalation exploit for CVE-2025-32463 using a malicious NSS module injected via sudo -R. This version creates a stealth payload called illdeed, granting root access through a controlled chroot environment.",
+ "fork": false,
+ "created_at": "2025-07-04T13:02:46Z",
+ "updated_at": "2025-07-04T13:38:05Z",
+ "pushed_at": "2025-07-04T13:38:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013786973,
+ "name": "CVE-2025-32463",
+ "full_name": "zinzloun\/CVE-2025-32463",
+ "owner": {
+ "login": "zinzloun",
+ "id": 24391516,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24391516?v=4",
+ "html_url": "https:\/\/github.com\/zinzloun",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zinzloun\/CVE-2025-32463",
+ "description": "# CVE-2025-32463 – Sudo EoP Exploit (PoC) with precompiled .so",
+ "fork": false,
+ "created_at": "2025-07-04T13:13:31Z",
+ "updated_at": "2026-03-07T13:38:22Z",
+ "pushed_at": "2025-07-14T10:07:09Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1013939074,
"name": "CVE-2025-32463_chwoot",
@@ -65,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
- "updated_at": "2026-06-02T11:11:52Z",
- "pushed_at": "2026-06-02T11:11:48Z",
+ "updated_at": "2026-06-02T18:21:07Z",
+ "pushed_at": "2026-06-02T18:21:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -116,6 +696,177 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014103850,
+ "name": "Blackash-CVE-2025-32463",
+ "full_name": "gmh5225\/Blackash-CVE-2025-32463",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/Blackash-CVE-2025-32463",
+ "description": "CVE-2025-32463",
+ "fork": false,
+ "created_at": "2025-07-05T04:12:41Z",
+ "updated_at": "2026-05-01T03:47:52Z",
+ "pushed_at": "2025-07-04T22:59:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014726969,
+ "name": "CVE-2025-32463-PoC",
+ "full_name": "FreeDurok\/CVE-2025-32463-PoC",
+ "owner": {
+ "login": "FreeDurok",
+ "id": 43138030,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43138030?v=4",
+ "html_url": "https:\/\/github.com\/FreeDurok",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/FreeDurok\/CVE-2025-32463-PoC",
+ "description": "Proof of Concept for CVE-2025-32463 Local privilege escalation exploit targeting sudo -R on vulnerable Linux systems. For educational and authorized security testing only.",
+ "fork": false,
+ "created_at": "2025-07-06T09:45:40Z",
+ "updated_at": "2025-08-23T13:49:04Z",
+ "pushed_at": "2025-08-23T13:49:01Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014792569,
+ "name": "CVE-2025-32463-lab",
+ "full_name": "Chocapikk\/CVE-2025-32463-lab",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-32463-lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-06T12:32:09Z",
+ "updated_at": "2025-11-07T12:42:39Z",
+ "pushed_at": "2025-07-06T13:57:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015017138,
+ "name": "CVE-2025-32463-EXPLOIT",
+ "full_name": "K3ysTr0K3R\/CVE-2025-32463-EXPLOIT",
+ "owner": {
+ "login": "K3ysTr0K3R",
+ "id": 70909693,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4",
+ "html_url": "https:\/\/github.com\/K3ysTr0K3R",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2025-32463-EXPLOIT",
+ "description": "A PoC exploit for CVE-2025-32463 - Sudo Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-07-06T21:15:17Z",
+ "updated_at": "2026-05-24T08:33:29Z",
+ "pushed_at": "2025-07-06T22:44:16Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "exploit",
+ "poc",
+ "privilege-escalation",
+ "root",
+ "sudo-privilege-escalation"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016049917,
+ "name": "cve-2025-32463",
+ "full_name": "SpongeBob-369\/cve-2025-32463",
+ "owner": {
+ "login": "SpongeBob-369",
+ "id": 176364273,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176364273?v=4",
+ "html_url": "https:\/\/github.com\/SpongeBob-369",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SpongeBob-369\/cve-2025-32463",
+ "description": "# cve-2025-32463 - Local Privilege Escalation to Root via Sudo chroot in Linux",
+ "fork": false,
+ "created_at": "2025-07-08T12:16:25Z",
+ "updated_at": "2025-07-16T08:02:24Z",
+ "pushed_at": "2025-07-09T11:47:22Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1016090108,
"name": "CVE-2025-32463_sudo_chroot",
@@ -149,6 +900,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1016251144,
+ "name": "CVE-2025-32463_Sudo_PoC",
+ "full_name": "abrewer251\/CVE-2025-32463_Sudo_PoC",
+ "owner": {
+ "login": "abrewer251",
+ "id": 150287770,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4",
+ "html_url": "https:\/\/github.com\/abrewer251",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abrewer251\/CVE-2025-32463_Sudo_PoC",
+ "description": "PoC for CVE-2025-32463: Local privilege escalation in sudo via --chroot. Exploits NSS module injection through crafted chroot environments. Designed for security researchers and lab-only environments.",
+ "fork": false,
+ "created_at": "2025-07-08T18:05:30Z",
+ "updated_at": "2025-07-11T14:15:17Z",
+ "pushed_at": "2025-07-08T18:07:11Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1016942456,
"name": "CVE-2025-32463-EXPLOIT",
@@ -182,6 +966,49 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1018099412,
+ "name": "sudo-chroot-CVE-2025-32463",
+ "full_name": "morgenm\/sudo-chroot-CVE-2025-32463",
+ "owner": {
+ "login": "morgenm",
+ "id": 51513125,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51513125?v=4",
+ "html_url": "https:\/\/github.com\/morgenm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/morgenm\/sudo-chroot-CVE-2025-32463",
+ "description": "Rust PoC for CVE-2025-32463 (sudo chroot \"chwoot\" Local PrivEsc)",
+ "fork": false,
+ "created_at": "2025-07-11T15:51:21Z",
+ "updated_at": "2025-07-11T18:08:38Z",
+ "pushed_at": "2025-07-11T16:55:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chroot",
+ "chwoot",
+ "cybersecurity",
+ "exploit",
+ "linux",
+ "poc",
+ "privilege-escalation",
+ "sudo",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1019810128,
"name": "CVE-2025-32463",
@@ -227,6 +1054,425 @@
"score": 0,
"subscribers_count": 2
},
+ {
+ "id": 1020772228,
+ "name": "CVE-2025-32463-Chwoot-POC",
+ "full_name": "krypton-0x00\/CVE-2025-32463-Chwoot-POC",
+ "owner": {
+ "login": "krypton-0x00",
+ "id": 164741690,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164741690?v=4",
+ "html_url": "https:\/\/github.com\/krypton-0x00",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/krypton-0x00\/CVE-2025-32463-Chwoot-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-16T11:21:12Z",
+ "updated_at": "2025-12-09T08:47:48Z",
+ "pushed_at": "2025-07-16T11:21:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1020961914,
+ "name": "CVE-2025-32463",
+ "full_name": "Floodnut\/CVE-2025-32463",
+ "owner": {
+ "login": "Floodnut",
+ "id": 15941204,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15941204?v=4",
+ "html_url": "https:\/\/github.com\/Floodnut",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Floodnut\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-16T16:55:44Z",
+ "updated_at": "2025-07-16T16:59:56Z",
+ "pushed_at": "2025-07-16T16:59:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021249252,
+ "name": "CVE-2025-32463",
+ "full_name": "Rajneeshkarya\/CVE-2025-32463",
+ "owner": {
+ "login": "Rajneeshkarya",
+ "id": 125280130,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125280130?v=4",
+ "html_url": "https:\/\/github.com\/Rajneeshkarya",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rajneeshkarya\/CVE-2025-32463",
+ "description": "This is the exploit for the CVE-2025-32463",
+ "fork": false,
+ "created_at": "2025-07-17T05:57:39Z",
+ "updated_at": "2025-07-17T06:16:38Z",
+ "pushed_at": "2025-07-17T06:16:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021982841,
+ "name": "CVE-2025-32463",
+ "full_name": "MGunturG\/CVE-2025-32463",
+ "owner": {
+ "login": "MGunturG",
+ "id": 39583921,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39583921?v=4",
+ "html_url": "https:\/\/github.com\/MGunturG",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MGunturG\/CVE-2025-32463",
+ "description": "Local Privilege Escalation to Root via Sudo chroot in Linux ",
+ "fork": false,
+ "created_at": "2025-07-18T09:03:27Z",
+ "updated_at": "2025-07-18T12:10:13Z",
+ "pushed_at": "2025-07-18T12:10:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022031654,
+ "name": "Sudo-CVE-2021-3156",
+ "full_name": "Maalfer\/Sudo-CVE-2021-3156",
+ "owner": {
+ "login": "Maalfer",
+ "id": 96432001,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96432001?v=4",
+ "html_url": "https:\/\/github.com\/Maalfer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Maalfer\/Sudo-CVE-2021-3156",
+ "description": "Exploit para explotar la vulnerabilidad CVE-2025-32463",
+ "fork": false,
+ "created_at": "2025-07-18T10:39:27Z",
+ "updated_at": "2026-05-29T22:44:52Z",
+ "pushed_at": "2025-07-19T10:00:10Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023122028,
+ "name": "CVE-2025-32463",
+ "full_name": "daryllundy\/CVE-2025-32463",
+ "owner": {
+ "login": "daryllundy",
+ "id": 8924499,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8924499?v=4",
+ "html_url": "https:\/\/github.com\/daryllundy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/daryllundy\/CVE-2025-32463",
+ "description": "Proof-of-concept and analysis for CVE-2025-32463",
+ "fork": false,
+ "created_at": "2025-07-20T15:16:41Z",
+ "updated_at": "2026-04-03T19:31:34Z",
+ "pushed_at": "2025-07-20T15:17:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "linux",
+ "python",
+ "security",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023724044,
+ "name": "Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462",
+ "full_name": "AdityaBhatt3010\/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462",
+ "description": "A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major Linux distributions.",
+ "fork": false,
+ "created_at": "2025-07-21T15:39:48Z",
+ "updated_at": "2026-02-28T08:03:28Z",
+ "pushed_at": "2025-07-21T16:54:23Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "linux",
+ "privilege-escalation",
+ "sudo"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024069285,
+ "name": "sudo_exploit",
+ "full_name": "ChetanKomal\/sudo_exploit",
+ "owner": {
+ "login": "ChetanKomal",
+ "id": 76816799,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76816799?v=4",
+ "html_url": "https:\/\/github.com\/ChetanKomal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ChetanKomal\/sudo_exploit",
+ "description": "CVE-2025-32463",
+ "fork": false,
+ "created_at": "2025-07-22T06:26:39Z",
+ "updated_at": "2025-07-22T06:28:05Z",
+ "pushed_at": "2025-07-22T06:28:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1028252912,
+ "name": "CVE-2025-32463",
+ "full_name": "KaiHT-Ladiant\/CVE-2025-32463",
+ "owner": {
+ "login": "KaiHT-Ladiant",
+ "id": 157885033,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157885033?v=4",
+ "html_url": "https:\/\/github.com\/KaiHT-Ladiant",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KaiHT-Ladiant\/CVE-2025-32463",
+ "description": "CVE-2025-32463 - Sudo Chroot Privilege Escalation Exploit",
+ "fork": false,
+ "created_at": "2025-07-29T08:54:15Z",
+ "updated_at": "2025-09-27T13:14:54Z",
+ "pushed_at": "2025-08-01T00:14:20Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1028946296,
+ "name": "CVE-2025-32463-lab",
+ "full_name": "y4ney\/CVE-2025-32463-lab",
+ "owner": {
+ "login": "y4ney",
+ "id": 44939500,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44939500?v=4",
+ "html_url": "https:\/\/github.com\/y4ney",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/y4ney\/CVE-2025-32463-lab",
+ "description": "本项目基于 Docker 搭建了一个用于复现和测试 sudo 本地权限提升漏洞 CVE-2025-32463 的实验环境。",
+ "fork": false,
+ "created_at": "2025-07-30T09:43:23Z",
+ "updated_at": "2026-01-11T09:20:02Z",
+ "pushed_at": "2025-08-19T14:42:26Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chroot",
+ "cve",
+ "docker",
+ "exploit",
+ "linux",
+ "poc",
+ "privilege-escalation",
+ "security",
+ "sudo",
+ "vulnerability-lab"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1032635338,
+ "name": "CVE-2025-32463",
+ "full_name": "aldoClau98\/CVE-2025-32463",
+ "owner": {
+ "login": "aldoClau98",
+ "id": 44474118,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44474118?v=4",
+ "html_url": "https:\/\/github.com\/aldoClau98",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aldoClau98\/CVE-2025-32463",
+ "description": "Questo script è un proof of concept (PoC) che dimostra una tecnica di privilege escalation (Elevazione di privilegi) sfruttando una vulnerabilità teorica di sudo (es. CVE-2025-32463). Il PoC forza sudo a caricare una libreria .so manipolata sfruttando la funzionalità -R (chroot) e la configurazione personalizzata di NSS (nsswitch.conf).",
+ "fork": false,
+ "created_at": "2025-08-05T15:37:37Z",
+ "updated_at": "2025-08-05T15:42:17Z",
+ "pushed_at": "2025-08-05T15:42:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1032661967,
+ "name": "CVE-2025-32463",
+ "full_name": "painoob\/CVE-2025-32463",
+ "owner": {
+ "login": "painoob",
+ "id": 8389015,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8389015?v=4",
+ "html_url": "https:\/\/github.com\/painoob",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/painoob\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-05T16:22:42Z",
+ "updated_at": "2025-08-05T16:31:15Z",
+ "pushed_at": "2025-08-05T16:31:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1034685183,
"name": "CVE-2025-32463",
@@ -268,6 +1514,105 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1045462956,
+ "name": "CVE-2025-32463_chwoot",
+ "full_name": "Yuy0ung\/CVE-2025-32463_chwoot",
+ "owner": {
+ "login": "Yuy0ung",
+ "id": 164923224,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164923224?v=4",
+ "html_url": "https:\/\/github.com\/Yuy0ung",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yuy0ung\/CVE-2025-32463_chwoot",
+ "description": "用于CVE-2025-32463 sudo_chwoot的权限提升POC，适配了有gcc编译环境和无gcc编译环境的两种情况，下载运行即可一把梭哈",
+ "fork": false,
+ "created_at": "2025-08-27T07:59:55Z",
+ "updated_at": "2026-03-11T03:11:59Z",
+ "pushed_at": "2025-08-27T08:21:59Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045820635,
+ "name": "CVE-2025-32463",
+ "full_name": "hacieda\/CVE-2025-32463",
+ "owner": {
+ "login": "hacieda",
+ "id": 98709677,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98709677?v=4",
+ "html_url": "https:\/\/github.com\/hacieda",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hacieda\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-27T18:58:34Z",
+ "updated_at": "2025-08-27T18:58:34Z",
+ "pushed_at": "2025-08-27T18:58:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1051020962,
+ "name": "CVE-2025-32463_PoC",
+ "full_name": "blackcat4347\/CVE-2025-32463_PoC",
+ "owner": {
+ "login": "blackcat4347",
+ "id": 89696744,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89696744?v=4",
+ "html_url": "https:\/\/github.com\/blackcat4347",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blackcat4347\/CVE-2025-32463_PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-05T10:12:36Z",
+ "updated_at": "2025-09-05T11:24:54Z",
+ "pushed_at": "2025-09-05T11:24:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1060459956,
"name": "CVE-2025-32463_chwoot",
@@ -283,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
- "updated_at": "2026-06-02T11:20:50Z",
- "pushed_at": "2026-06-02T11:20:46Z",
+ "updated_at": "2026-06-02T18:30:29Z",
+ "pushed_at": "2026-06-02T18:30:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -335,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
- "updated_at": "2026-06-02T11:20:44Z",
- "pushed_at": "2026-06-02T11:20:40Z",
+ "updated_at": "2026-06-02T18:30:45Z",
+ "pushed_at": "2026-06-02T18:30:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -372,6 +1717,258 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1062957966,
+ "name": "CVE-2025-32463-Sudo-Chroot-Escape",
+ "full_name": "D3ltaFormation\/CVE-2025-32463-Sudo-Chroot-Escape",
+ "owner": {
+ "login": "D3ltaFormation",
+ "id": 232729796,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232729796?v=4",
+ "html_url": "https:\/\/github.com\/D3ltaFormation",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D3ltaFormation\/CVE-2025-32463-Sudo-Chroot-Escape",
+ "description": "This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation.",
+ "fork": false,
+ "created_at": "2025-09-24T01:17:27Z",
+ "updated_at": "2025-09-24T05:11:35Z",
+ "pushed_at": "2025-09-24T05:11:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1066776919,
+ "name": "CVE-2025-32463",
+ "full_name": "AC8999\/CVE-2025-32463",
+ "owner": {
+ "login": "AC8999",
+ "id": 207462763,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207462763?v=4",
+ "html_url": "https:\/\/github.com\/AC8999",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AC8999\/CVE-2025-32463",
+ "description": "A Python exploit for CVE-2025-32463, a critical local privilege escalation vulnerability in the Sudo binary on Linux systems. This flaw allows local users to obtain root access by exploiting the --chroot option, which incorrectly uses \/etc\/nsswitch.conf from a user-controlled directory.",
+ "fork": false,
+ "created_at": "2025-09-30T00:23:56Z",
+ "updated_at": "2025-09-30T00:36:15Z",
+ "pushed_at": "2025-09-30T00:36:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1078420776,
+ "name": "sudo-chroot",
+ "full_name": "dr4xp\/sudo-chroot",
+ "owner": {
+ "login": "dr4xp",
+ "id": 231748105,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/231748105?v=4",
+ "html_url": "https:\/\/github.com\/dr4xp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dr4xp\/sudo-chroot",
+ "description": "Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python",
+ "fork": false,
+ "created_at": "2025-10-17T17:50:49Z",
+ "updated_at": "2025-12-09T23:53:08Z",
+ "pushed_at": "2025-12-09T23:53:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-32463",
+ "ethical-hacking",
+ "ethical-hacking-tools",
+ "exploit",
+ "hacking",
+ "hacking-tools",
+ "kali-linux",
+ "kernel-exploit",
+ "linux",
+ "linux-kernel",
+ "poc",
+ "privilege-escalation",
+ "python",
+ "python3",
+ "sudo",
+ "sudo-chroot",
+ "sudo-exploitation",
+ "ubuntu",
+ "vulnerabilities"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1093200691,
+ "name": "CVE-2025-32463",
+ "full_name": "Ghstxz\/CVE-2025-32463",
+ "owner": {
+ "login": "Ghstxz",
+ "id": 242834099,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242834099?v=4",
+ "html_url": "https:\/\/github.com\/Ghstxz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ghstxz\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-10T03:40:18Z",
+ "updated_at": "2025-11-10T03:40:18Z",
+ "pushed_at": "2025-11-10T03:40:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097383354,
+ "name": "CVE-2025-32463-Sudo-Privilege-Escalation",
+ "full_name": "ankitpandey383\/CVE-2025-32463-Sudo-Privilege-Escalation",
+ "owner": {
+ "login": "ankitpandey383",
+ "id": 238631250,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238631250?v=4",
+ "html_url": "https:\/\/github.com\/ankitpandey383",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ankitpandey383\/CVE-2025-32463-Sudo-Privilege-Escalation",
+ "description": "Practical security research project exploiting CVE-2025-32463 to gain root access on a vulnerable sudo version. Includes write-up, PoC, and mitigation steps.",
+ "fork": false,
+ "created_at": "2025-11-16T04:13:54Z",
+ "updated_at": "2025-11-16T05:14:05Z",
+ "pushed_at": "2025-11-17T02:13:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105368645,
+ "name": "CVE-2025-32463",
+ "full_name": "justjoeyking\/CVE-2025-32463",
+ "owner": {
+ "login": "justjoeyking",
+ "id": 66114238,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66114238?v=4",
+ "html_url": "https:\/\/github.com\/justjoeyking",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/justjoeyking\/CVE-2025-32463",
+ "description": "Chroot Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-11-27T14:04:03Z",
+ "updated_at": "2025-11-27T14:22:11Z",
+ "pushed_at": "2025-11-27T14:22:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122903691,
+ "name": "CVE-2025-32463",
+ "full_name": "Mr-Alperen\/CVE-2025-32463",
+ "owner": {
+ "login": "Mr-Alperen",
+ "id": 233141657,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233141657?v=4",
+ "html_url": "https:\/\/github.com\/Mr-Alperen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mr-Alperen\/CVE-2025-32463",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-25T19:27:10Z",
+ "updated_at": "2025-12-25T19:27:32Z",
+ "pushed_at": "2025-12-25T19:27:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124631983,
"name": "CVE-2025-32463",
diff --git a/2025/CVE-2025-3248.json b/2025/CVE-2025-3248.json
index 241b5fb59d..8342a1df28 100644
--- a/2025/CVE-2025-3248.json
+++ b/2025/CVE-2025-3248.json
@@ -508,6 +508,105 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014573339,
+ "name": "CVE-2025-3248",
+ "full_name": "r0otk3r\/CVE-2025-3248",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-3248",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-06T01:49:50Z",
+ "updated_at": "2025-07-13T17:17:03Z",
+ "pushed_at": "2025-07-12T10:56:35Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049411921,
+ "name": "CVE-2025-3248",
+ "full_name": "min8282\/CVE-2025-3248",
+ "owner": {
+ "login": "min8282",
+ "id": 137873062,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137873062?v=4",
+ "html_url": "https:\/\/github.com\/min8282",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/min8282\/CVE-2025-3248",
+ "description": "CVE-2025-3248",
+ "fork": false,
+ "created_at": "2025-09-03T00:13:48Z",
+ "updated_at": "2025-09-17T08:57:34Z",
+ "pushed_at": "2025-09-17T08:57:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1056869023,
+ "name": "CVE-2025-3248",
+ "full_name": "EQSTLab\/CVE-2025-3248",
+ "owner": {
+ "login": "EQSTLab",
+ "id": 148991397,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
+ "html_url": "https:\/\/github.com\/EQSTLab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EQSTLab\/CVE-2025-3248",
+ "description": "Langflow Remote Code Execution",
+ "fork": false,
+ "created_at": "2025-09-15T00:38:05Z",
+ "updated_at": "2026-02-23T08:34:43Z",
+ "pushed_at": "2025-09-17T08:56:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1058622204,
"name": "CVE-2025-3248",
@@ -541,6 +640,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1100213523,
+ "name": "cve-2025-3248-exploit",
+ "full_name": "drackyjr\/cve-2025-3248-exploit",
+ "owner": {
+ "login": "drackyjr",
+ "id": 146464209,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146464209?v=4",
+ "html_url": "https:\/\/github.com\/drackyjr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/drackyjr\/cve-2025-3248-exploit",
+ "description": "A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248, a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0.",
+ "fork": false,
+ "created_at": "2025-11-20T01:45:13Z",
+ "updated_at": "2026-02-13T15:54:54Z",
+ "pushed_at": "2025-11-21T06:43:00Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113515155,
+ "name": "CVE-2025-3248-POC",
+ "full_name": "b0ySie7e\/CVE-2025-3248-POC",
+ "owner": {
+ "login": "b0ySie7e",
+ "id": 78715318,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78715318?v=4",
+ "html_url": "https:\/\/github.com\/b0ySie7e",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/b0ySie7e\/CVE-2025-3248-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T04:49:53Z",
+ "updated_at": "2026-03-15T03:07:50Z",
+ "pushed_at": "2025-12-10T21:22:51Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1183271267,
"name": "CVE-2025-3248",
diff --git a/2025/CVE-2025-32709.json b/2025/CVE-2025-32709.json
new file mode 100644
index 0000000000..91c3c9f6a1
--- /dev/null
+++ b/2025/CVE-2025-32709.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050105359,
+ "name": "How-to-Patch-CVE-2025-32709",
+ "full_name": "AdnanSiyat\/How-to-Patch-CVE-2025-32709",
+ "owner": {
+ "login": "AdnanSiyat",
+ "id": 169558555,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169558555?v=4",
+ "html_url": "https:\/\/github.com\/AdnanSiyat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdnanSiyat\/How-to-Patch-CVE-2025-32709",
+ "description": "Real-world patching workflow for CVE-2025-32709. From hotfix install to SIEM alert validation—this repo documents every step with screenshots, commands, and detection logic.",
+ "fork": false,
+ "created_at": "2025-09-04T00:42:15Z",
+ "updated_at": "2025-09-04T18:56:52Z",
+ "pushed_at": "2025-09-04T18:56:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json
index f47bf026b5..e9d05f0aa3 100644
--- a/2025/CVE-2025-32756.json
+++ b/2025/CVE-2025-32756.json
@@ -47,10 +47,10 @@
"description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.",
"fork": false,
"created_at": "2025-06-05T14:16:31Z",
- "updated_at": "2026-06-01T00:56:54Z",
+ "updated_at": "2026-06-02T17:09:59Z",
"pushed_at": "2025-06-13T07:55:34Z",
- "stargazers_count": 200,
- "watchers_count": 200,
+ "stargazers_count": 201,
+ "watchers_count": 201,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 29,
- "watchers": 200,
+ "watchers": 201,
"score": 0,
"subscribers_count": 6
},
@@ -135,5 +135,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1024895026,
+ "name": "cve-2025-32756",
+ "full_name": "shan0ar\/cve-2025-32756",
+ "owner": {
+ "login": "shan0ar",
+ "id": 102218066,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102218066?v=4",
+ "html_url": "https:\/\/github.com\/shan0ar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shan0ar\/cve-2025-32756",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-23T12:08:54Z",
+ "updated_at": "2025-07-23T13:10:36Z",
+ "pushed_at": "2025-07-23T13:10:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-32778.json b/2025/CVE-2025-32778.json
new file mode 100644
index 0000000000..92f9379251
--- /dev/null
+++ b/2025/CVE-2025-32778.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1039402895,
+ "name": "CVE-2025-32778",
+ "full_name": "00xCanelo\/CVE-2025-32778",
+ "owner": {
+ "login": "00xCanelo",
+ "id": 164969443,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164969443?v=4",
+ "html_url": "https:\/\/github.com\/00xCanelo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/00xCanelo\/CVE-2025-32778",
+ "description": "PoC exploit for CVE-2025-32778: command injection in Web-Check OSINT tool",
+ "fork": false,
+ "created_at": "2025-08-17T06:29:21Z",
+ "updated_at": "2025-11-09T01:11:17Z",
+ "pushed_at": "2025-08-18T01:37:36Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-33053.json b/2025/CVE-2025-33053.json
index c97f40a945..d24c01810d 100644
--- a/2025/CVE-2025-33053.json
+++ b/2025/CVE-2025-33053.json
@@ -110,5 +110,71 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1043020151,
+ "name": "CVE-2025-33053_PoC",
+ "full_name": "4n4s4zi\/CVE-2025-33053_PoC",
+ "owner": {
+ "login": "4n4s4zi",
+ "id": 160362386,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160362386?v=4",
+ "html_url": "https:\/\/github.com\/4n4s4zi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/4n4s4zi\/CVE-2025-33053_PoC",
+ "description": "POC exploit for CVE-2025-33053 (external control of file execution path in URL file)",
+ "fork": false,
+ "created_at": "2025-08-23T01:37:35Z",
+ "updated_at": "2026-05-22T05:24:11Z",
+ "pushed_at": "2025-08-23T01:39:55Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118773451,
+ "name": "CVE-2025-33053-POC",
+ "full_name": "Cyberw1ng\/CVE-2025-33053-POC",
+ "owner": {
+ "login": "Cyberw1ng",
+ "id": 60183465,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60183465?v=4",
+ "html_url": "https:\/\/github.com\/Cyberw1ng",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cyberw1ng\/CVE-2025-33053-POC",
+ "description": "POC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on hands-on exploitation steps, reproducible test cases, and observable impact, helping security researchers and defenders understand the issue and validate fixes.",
+ "fork": false,
+ "created_at": "2025-12-18T09:00:54Z",
+ "updated_at": "2025-12-18T09:08:57Z",
+ "pushed_at": "2025-12-18T09:08:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-33073.json b/2025/CVE-2025-33073.json
index 0d3db7c248..91f0b5ff1e 100644
--- a/2025/CVE-2025-33073.json
+++ b/2025/CVE-2025-33073.json
@@ -65,6 +65,138 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1029600184,
+ "name": "CVE-2025-33073-checker",
+ "full_name": "matejsmycka\/CVE-2025-33073-checker",
+ "owner": {
+ "login": "matejsmycka",
+ "id": 45017046,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45017046?v=4",
+ "html_url": "https:\/\/github.com\/matejsmycka",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/matejsmycka\/CVE-2025-33073-checker",
+ "description": "This rough PoC checker script tests targets for CVE-2025-33073 vulnerability by attempting to perform NTLM reflection attacks using NTLM auth coercion via samba RPC, to do this you need to have account with access to the samba.",
+ "fork": false,
+ "created_at": "2025-07-31T09:34:55Z",
+ "updated_at": "2025-08-27T11:16:53Z",
+ "pushed_at": "2025-07-31T11:13:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1051835892,
+ "name": "cve-2025-33073",
+ "full_name": "cve-2025-33073\/cve-2025-33073",
+ "owner": {
+ "login": "cve-2025-33073",
+ "id": 67454687,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67454687?v=4",
+ "html_url": "https:\/\/github.com\/cve-2025-33073",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cve-2025-33073\/cve-2025-33073",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-06T20:24:22Z",
+ "updated_at": "2025-09-06T20:47:53Z",
+ "pushed_at": "2025-09-06T20:47:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1096398873,
+ "name": "CVE-2025-33073",
+ "full_name": "uziii2208\/CVE-2025-33073",
+ "owner": {
+ "login": "uziii2208",
+ "id": 112312970,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112312970?v=4",
+ "html_url": "https:\/\/github.com\/uziii2208",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/uziii2208\/CVE-2025-33073",
+ "description": "Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.",
+ "fork": false,
+ "created_at": "2025-11-14T11:17:00Z",
+ "updated_at": "2026-05-20T09:43:00Z",
+ "pushed_at": "2025-11-14T11:50:13Z",
+ "stargazers_count": 68,
+ "watchers_count": 68,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 68,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097888853,
+ "name": "Blackash-CVE-2025-33073",
+ "full_name": "irjfifndn-prog\/Blackash-CVE-2025-33073",
+ "owner": {
+ "login": "irjfifndn-prog",
+ "id": 226808344,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226808344?v=4",
+ "html_url": "https:\/\/github.com\/irjfifndn-prog",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/irjfifndn-prog\/Blackash-CVE-2025-33073",
+ "description": "CVE-2025-33073",
+ "fork": false,
+ "created_at": "2025-11-17T01:32:23Z",
+ "updated_at": "2025-11-17T01:32:23Z",
+ "pushed_at": "2025-11-15T07:50:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1176821059,
"name": "cupntlm-Automated-Exploit-For-CVE-2025-33073-",
diff --git a/2025/CVE-2025-34030.json b/2025/CVE-2025-34030.json
new file mode 100644
index 0000000000..b720207ef5
--- /dev/null
+++ b/2025/CVE-2025-34030.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1044622182,
+ "name": "CVE-2025-34030-PoC",
+ "full_name": "HackerTyperAbuser\/CVE-2025-34030-PoC",
+ "owner": {
+ "login": "HackerTyperAbuser",
+ "id": 122219995,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122219995?v=4",
+ "html_url": "https:\/\/github.com\/HackerTyperAbuser",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/HackerTyperAbuser\/CVE-2025-34030-PoC",
+ "description": "PoC for CVE-2025-34030 sar2html 'plot' parameter RCE",
+ "fork": false,
+ "created_at": "2025-08-26T01:08:43Z",
+ "updated_at": "2025-08-26T01:11:42Z",
+ "pushed_at": "2025-08-26T01:11:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34040.json b/2025/CVE-2025-34040.json
new file mode 100644
index 0000000000..9443a95d4a
--- /dev/null
+++ b/2025/CVE-2025-34040.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046767252,
+ "name": "CVE-2025-34040Exp",
+ "full_name": "jisi-001\/CVE-2025-34040Exp",
+ "owner": {
+ "login": "jisi-001",
+ "id": 187091784,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187091784?v=4",
+ "html_url": "https:\/\/github.com\/jisi-001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jisi-001\/CVE-2025-34040Exp",
+ "description": "致远OA存在文件上传导致RCE（CVE-2025-34040）",
+ "fork": false,
+ "created_at": "2025-08-29T07:33:53Z",
+ "updated_at": "2025-12-30T07:01:54Z",
+ "pushed_at": "2025-08-29T07:47:04Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34077.json b/2025/CVE-2025-34077.json
index b4cbeaccda..244dc71c3a 100644
--- a/2025/CVE-2025-34077.json
+++ b/2025/CVE-2025-34077.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1017018380,
+ "name": "CVE-2025-34077",
+ "full_name": "MrjHaxcore\/CVE-2025-34077",
+ "owner": {
+ "login": "MrjHaxcore",
+ "id": 110843759,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110843759?v=4",
+ "html_url": "https:\/\/github.com\/MrjHaxcore",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MrjHaxcore\/CVE-2025-34077",
+ "description": " WordPress Pie Register ≤ 3.7.1.4 - Admin Privilege Escalation (Unauthenticated)",
+ "fork": false,
+ "created_at": "2025-07-09T22:37:15Z",
+ "updated_at": "2026-04-30T19:28:05Z",
+ "pushed_at": "2025-07-09T22:51:59Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027965008,
+ "name": "CVE-2025-34077",
+ "full_name": "0xgh057r3c0n\/CVE-2025-34077",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-34077",
+ "description": "Poc for Unauthenticated Admin Session Hijack - Pie Register Plugin (≤ 3.7.1.4)",
+ "fork": false,
+ "created_at": "2025-07-28T20:05:02Z",
+ "updated_at": "2026-04-08T01:10:56Z",
+ "pushed_at": "2025-07-28T20:07:00Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1206222595,
"name": "Web-Penetration-Test",
diff --git a/2025/CVE-2025-34085.json b/2025/CVE-2025-34085.json
index b2036aa04e..f6c493e2b6 100644
--- a/2025/CVE-2025-34085.json
+++ b/2025/CVE-2025-34085.json
@@ -1,4 +1,136 @@
[
+ {
+ "id": 1017061928,
+ "name": "CVE-2025-34085",
+ "full_name": "MrjHaxcore\/CVE-2025-34085",
+ "owner": {
+ "login": "MrjHaxcore",
+ "id": 110843759,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110843759?v=4",
+ "html_url": "https:\/\/github.com\/MrjHaxcore",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MrjHaxcore\/CVE-2025-34085",
+ "description": "Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)",
+ "fork": false,
+ "created_at": "2025-07-10T01:09:39Z",
+ "updated_at": "2025-07-17T03:05:01Z",
+ "pushed_at": "2025-07-10T06:28:59Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018759219,
+ "name": "CVE-2025-34085-Multi-target",
+ "full_name": "ill-deed\/CVE-2025-34085-Multi-target",
+ "owner": {
+ "login": "ill-deed",
+ "id": 210107232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210107232?v=4",
+ "html_url": "https:\/\/github.com\/ill-deed",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ill-deed\/CVE-2025-34085-Multi-target",
+ "description": "Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.",
+ "fork": false,
+ "created_at": "2025-07-13T01:27:49Z",
+ "updated_at": "2026-04-11T15:20:05Z",
+ "pushed_at": "2025-07-13T02:26:31Z",
+ "stargazers_count": 35,
+ "watchers_count": 35,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 35,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023161468,
+ "name": "CVE-2025-34085",
+ "full_name": "0xgh057r3c0n\/CVE-2025-34085",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-34085",
+ "description": "WordPress Simple File List Unauthenticated RCE Exploit",
+ "fork": false,
+ "created_at": "2025-07-20T16:50:20Z",
+ "updated_at": "2026-05-04T13:37:58Z",
+ "pushed_at": "2025-07-20T16:53:46Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024114161,
+ "name": "CVE-2025-34085",
+ "full_name": "yukinime\/CVE-2025-34085",
+ "owner": {
+ "login": "yukinime",
+ "id": 106898895,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106898895?v=4",
+ "html_url": "https:\/\/github.com\/yukinime",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yukinime\/CVE-2025-34085",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T07:53:03Z",
+ "updated_at": "2026-04-04T14:49:02Z",
+ "pushed_at": "2025-07-22T12:15:46Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1154399607,
"name": "CVE-2025-34085",
diff --git a/2025/CVE-2025-34100.json b/2025/CVE-2025-34100.json
new file mode 100644
index 0000000000..b3e009958a
--- /dev/null
+++ b/2025/CVE-2025-34100.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1030749015,
+ "name": "CVE-2025-34100-demo",
+ "full_name": "RyanJohnJames\/CVE-2025-34100-demo",
+ "owner": {
+ "login": "RyanJohnJames",
+ "id": 155868880,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155868880?v=4",
+ "html_url": "https:\/\/github.com\/RyanJohnJames",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RyanJohnJames\/CVE-2025-34100-demo",
+ "description": "Demo web server",
+ "fork": false,
+ "created_at": "2025-08-02T08:35:44Z",
+ "updated_at": "2025-08-15T05:41:33Z",
+ "pushed_at": "2025-08-11T12:01:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062949434,
+ "name": "CVE-2025-34100",
+ "full_name": "hyeonyeonglee\/CVE-2025-34100",
+ "owner": {
+ "login": "hyeonyeonglee",
+ "id": 122016873,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122016873?v=4",
+ "html_url": "https:\/\/github.com\/hyeonyeonglee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hyeonyeonglee\/CVE-2025-34100",
+ "description": "CVE-2025-34100 test",
+ "fork": false,
+ "created_at": "2025-09-24T00:52:36Z",
+ "updated_at": "2025-09-24T05:21:49Z",
+ "pushed_at": "2025-09-24T05:21:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34152.json b/2025/CVE-2025-34152.json
new file mode 100644
index 0000000000..a843c94ed7
--- /dev/null
+++ b/2025/CVE-2025-34152.json
@@ -0,0 +1,77 @@
+[
+ {
+ "id": 1034079485,
+ "name": "CVE-2025-34152",
+ "full_name": "Chocapikk\/CVE-2025-34152",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-34152",
+ "description": "Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)",
+ "fork": false,
+ "created_at": "2025-08-07T20:06:40Z",
+ "updated_at": "2026-03-14T19:08:39Z",
+ "pushed_at": "2025-08-07T20:07:32Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1061226587,
+ "name": "CVE-2025-34152",
+ "full_name": "kh4sh3i\/CVE-2025-34152",
+ "owner": {
+ "login": "kh4sh3i",
+ "id": 64693844,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64693844?v=4",
+ "html_url": "https:\/\/github.com\/kh4sh3i",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kh4sh3i\/CVE-2025-34152",
+ "description": "Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (CVE-2025-34152)",
+ "fork": false,
+ "created_at": "2025-09-21T13:56:29Z",
+ "updated_at": "2025-09-28T12:11:31Z",
+ "pushed_at": "2025-09-21T14:10:53Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "aitemi",
+ "cve",
+ "exploit",
+ "exploitation",
+ "poc",
+ "rce",
+ "scanner",
+ "wifi"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34157.json b/2025/CVE-2025-34157.json
new file mode 100644
index 0000000000..e185db9802
--- /dev/null
+++ b/2025/CVE-2025-34157.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1040293500,
+ "name": "CVE-2025-34157",
+ "full_name": "Eyodav\/CVE-2025-34157",
+ "owner": {
+ "login": "Eyodav",
+ "id": 121509138,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121509138?v=4",
+ "html_url": "https:\/\/github.com\/Eyodav",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Eyodav\/CVE-2025-34157",
+ "description": "A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to delete a project created by a low-privileged user. This can lead to takeover of the Coolify instance (cookies, API tokens, WebSocket\/terminal actions)",
+ "fork": false,
+ "created_at": "2025-08-18T18:48:25Z",
+ "updated_at": "2025-09-22T07:09:49Z",
+ "pushed_at": "2025-09-22T07:09:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34159.json b/2025/CVE-2025-34159.json
new file mode 100644
index 0000000000..eca623ba53
--- /dev/null
+++ b/2025/CVE-2025-34159.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042597469,
+ "name": "CVE-2025-34159",
+ "full_name": "Eyodav\/CVE-2025-34159",
+ "owner": {
+ "login": "Eyodav",
+ "id": 121509138,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121509138?v=4",
+ "html_url": "https:\/\/github.com\/Eyodav",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Eyodav\/CVE-2025-34159",
+ "description": "A critical Remote Code Execution (RCE) vulnerability exists in Coolify's application deployment workflow. This flaw allows a low-privileged member to inject arbitrary Docker Compose directives during project creation or updates. By defining a malicious service that mounts the host filesystem an attacker can achieve root-level command execution on",
+ "fork": false,
+ "created_at": "2025-08-22T09:11:36Z",
+ "updated_at": "2025-08-27T19:00:46Z",
+ "pushed_at": "2025-08-27T18:59:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34227.json b/2025/CVE-2025-34227.json
new file mode 100644
index 0000000000..0a7c8e459a
--- /dev/null
+++ b/2025/CVE-2025-34227.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097177219,
+ "name": "CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard",
+ "full_name": "mcorybillington\/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard",
+ "owner": {
+ "login": "mcorybillington",
+ "id": 24510213,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24510213?v=4",
+ "html_url": "https:\/\/github.com\/mcorybillington",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mcorybillington\/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard",
+ "description": "Simple proof of concept repository for CVE-2025-34227 Nagios XI authenticated command injection in Configuration Wizard",
+ "fork": false,
+ "created_at": "2025-11-15T17:17:09Z",
+ "updated_at": "2025-11-15T18:09:53Z",
+ "pushed_at": "2025-11-15T18:09:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34299.json b/2025/CVE-2025-34299.json
new file mode 100644
index 0000000000..d0a194411a
--- /dev/null
+++ b/2025/CVE-2025-34299.json
@@ -0,0 +1,105 @@
+[
+ {
+ "id": 1094140607,
+ "name": "CVE-2025-34299",
+ "full_name": "rxerium\/CVE-2025-34299",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-34299",
+ "description": "Detection for CVE-2025-34299",
+ "fork": false,
+ "created_at": "2025-11-11T10:06:09Z",
+ "updated_at": "2026-01-13T11:21:15Z",
+ "pushed_at": "2025-11-11T10:08:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-34299",
+ "nuclei",
+ "zero-day"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1099409142,
+ "name": "CVE-2025-34299",
+ "full_name": "Chocapikk\/CVE-2025-34299",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-34299",
+ "description": "MonstaFTP Unauthenticated File Upload",
+ "fork": false,
+ "created_at": "2025-11-19T00:39:42Z",
+ "updated_at": "2025-11-21T08:55:15Z",
+ "pushed_at": "2025-11-19T01:06:09Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114205199,
+ "name": "CVE-2025-34299-lab",
+ "full_name": "KrE80r\/CVE-2025-34299-lab",
+ "owner": {
+ "login": "KrE80r",
+ "id": 13027962,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13027962?v=4",
+ "html_url": "https:\/\/github.com\/KrE80r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KrE80r\/CVE-2025-34299-lab",
+ "description": "Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Auth RCE vulnerability",
+ "fork": false,
+ "created_at": "2025-12-11T03:42:22Z",
+ "updated_at": "2025-12-11T03:42:33Z",
+ "pushed_at": "2025-12-11T03:42:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34300.json b/2025/CVE-2025-34300.json
new file mode 100644
index 0000000000..99572a372c
--- /dev/null
+++ b/2025/CVE-2025-34300.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1048481650,
+ "name": "CVE-2025-34300POC",
+ "full_name": "jisi-001\/CVE-2025-34300POC",
+ "owner": {
+ "login": "jisi-001",
+ "id": 187091784,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187091784?v=4",
+ "html_url": "https:\/\/github.com\/jisi-001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jisi-001\/CVE-2025-34300POC",
+ "description": "Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300",
+ "fork": false,
+ "created_at": "2025-09-01T14:06:23Z",
+ "updated_at": "2025-09-02T11:27:28Z",
+ "pushed_at": "2025-09-01T14:09:25Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34322.json b/2025/CVE-2025-34322.json
new file mode 100644
index 0000000000..f97f853748
--- /dev/null
+++ b/2025/CVE-2025-34322.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1104172950,
+ "name": "CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server",
+ "full_name": "mcorybillington\/CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server",
+ "owner": {
+ "login": "mcorybillington",
+ "id": 24510213,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24510213?v=4",
+ "html_url": "https:\/\/github.com\/mcorybillington",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mcorybillington\/CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server",
+ "description": "Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server",
+ "fork": false,
+ "created_at": "2025-11-25T21:22:00Z",
+ "updated_at": "2025-11-26T03:43:14Z",
+ "pushed_at": "2025-11-26T03:43:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-34324.json b/2025/CVE-2025-34324.json
new file mode 100644
index 0000000000..e9edf6a2c1
--- /dev/null
+++ b/2025/CVE-2025-34324.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096410713,
+ "name": "gosign-desktop-exploit-poc",
+ "full_name": "siddolo\/gosign-desktop-exploit-poc",
+ "owner": {
+ "login": "siddolo",
+ "id": 2439981,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2439981?v=4",
+ "html_url": "https:\/\/github.com\/siddolo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/siddolo\/gosign-desktop-exploit-poc",
+ "description": "CVE-2025-34324, CVE-2025-34327: GoSign Desktop TLS Bypass & Insecure Update Exploit Proof of Concept",
+ "fork": false,
+ "created_at": "2025-11-14T11:39:37Z",
+ "updated_at": "2026-05-29T10:48:23Z",
+ "pushed_at": "2025-11-20T11:28:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-3500.json b/2025/CVE-2025-3500.json
new file mode 100644
index 0000000000..e27255e6c4
--- /dev/null
+++ b/2025/CVE-2025-3500.json
@@ -0,0 +1,37 @@
+[
+ {
+ "id": 1107939324,
+ "name": "CVE-2025-3500-Poc",
+ "full_name": "chicken3962\/CVE-2025-3500-Poc",
+ "owner": {
+ "login": "chicken3962",
+ "id": 247030594,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247030594?v=4",
+ "html_url": "https:\/\/github.com\/chicken3962",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chicken3962\/CVE-2025-3500-Poc",
+ "description": "Public exploit for CVE-2025-3500",
+ "fork": false,
+ "created_at": "2025-12-01T20:09:40Z",
+ "updated_at": "2025-12-01T20:10:32Z",
+ "pushed_at": "2025-12-01T20:11:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "zero-day"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-3515.json b/2025/CVE-2025-3515.json
index eeea8d8cc7..2e42a4c452 100644
--- a/2025/CVE-2025-3515.json
+++ b/2025/CVE-2025-3515.json
@@ -31,5 +31,82 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1048540057,
+ "name": "CVE-2025-3515",
+ "full_name": "blueisbeautiful\/CVE-2025-3515",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-3515",
+ "description": "WordPress File Upload RCE Exploit",
+ "fork": false,
+ "created_at": "2025-09-01T15:50:43Z",
+ "updated_at": "2026-04-06T02:58:34Z",
+ "pushed_at": "2025-09-01T16:21:58Z",
+ "stargazers_count": 17,
+ "watchers_count": 17,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 17,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049650337,
+ "name": "lab-cve-2025-3515",
+ "full_name": "ImBIOS\/lab-cve-2025-3515",
+ "owner": {
+ "login": "ImBIOS",
+ "id": 41441643,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41441643?v=4",
+ "html_url": "https:\/\/github.com\/ImBIOS",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ImBIOS\/lab-cve-2025-3515",
+ "description": "CVE-2025-3515 WordPress lab for Drag and Drop Multiple File Upload for CF7: Dockerized PoC & Nuclei testing",
+ "fork": false,
+ "created_at": "2025-09-03T09:43:06Z",
+ "updated_at": "2025-09-03T11:14:16Z",
+ "pushed_at": "2025-09-03T11:14:13Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "contact-form-7",
+ "cve",
+ "docker",
+ "drag-and-drop",
+ "file-upload",
+ "nuclei",
+ "phar",
+ "rce",
+ "security",
+ "wordpress"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-3639.json b/2025/CVE-2025-3639.json
new file mode 100644
index 0000000000..d10d65ed90
--- /dev/null
+++ b/2025/CVE-2025-3639.json
@@ -0,0 +1,40 @@
+[
+ {
+ "id": 1055913163,
+ "name": "CVE-2025-3639",
+ "full_name": "6lj\/CVE-2025-3639",
+ "owner": {
+ "login": "6lj",
+ "id": 186985676,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186985676?v=4",
+ "html_url": "https:\/\/github.com\/6lj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/6lj\/CVE-2025-3639",
+ "description": " login bypass vulnerability in Liferay Portal (versions 7.3.0–7.4.3.132) and Liferay DXP (various versions from 2024.Q1 to 2025.Q1.6)",
+ "fork": false,
+ "created_at": "2025-09-13T03:09:56Z",
+ "updated_at": "2025-09-28T19:23:25Z",
+ "pushed_at": "2025-09-23T14:40:08Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-3639",
+ "dxp",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-36604.json b/2025/CVE-2025-36604.json
new file mode 100644
index 0000000000..14d8277dd9
--- /dev/null
+++ b/2025/CVE-2025-36604.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1066691439,
+ "name": "watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604",
+ "full_name": "watchtowrlabs\/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604",
+ "owner": {
+ "login": "watchtowrlabs",
+ "id": 99977116,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
+ "html_url": "https:\/\/github.com\/watchtowrlabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604",
+ "description": "Detection Artefact Generator for Dell UnityVSA CVE-2025-36604",
+ "fork": false,
+ "created_at": "2025-09-29T20:40:48Z",
+ "updated_at": "2025-10-09T09:05:58Z",
+ "pushed_at": "2025-09-29T20:41:27Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json
index 75709a1497..7756acf4a6 100644
--- a/2025/CVE-2025-36911.json
+++ b/2025/CVE-2025-36911.json
@@ -86,12 +86,12 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
- "updated_at": "2026-06-01T09:36:52Z",
+ "updated_at": "2026-06-02T18:48:00Z",
"pushed_at": "2026-01-18T00:15:59Z",
- "stargazers_count": 793,
- "watchers_count": 793,
+ "stargazers_count": 794,
+ "watchers_count": 794,
"has_discussions": false,
- "forks_count": 87,
+ "forks_count": 88,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,8 +99,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 87,
- "watchers": 793,
+ "forks": 88,
+ "watchers": 794,
"score": 0,
"subscribers_count": 22
},
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
- "updated_at": "2026-06-02T12:37:12Z",
- "pushed_at": "2026-06-02T12:37:09Z",
+ "updated_at": "2026-06-02T15:40:49Z",
+ "pushed_at": "2026-06-02T15:38:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -414,10 +414,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
- "updated_at": "2026-06-01T15:06:32Z",
+ "updated_at": "2026-06-02T13:53:04Z",
"pushed_at": "2026-05-28T14:44:51Z",
- "stargazers_count": 43,
- "watchers_count": 43,
+ "stargazers_count": 44,
+ "watchers_count": 44,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -433,7 +433,7 @@
],
"visibility": "public",
"forks": 7,
- "watchers": 43,
+ "watchers": 44,
"score": 0,
"subscribers_count": 1
}
diff --git a/2025/CVE-2025-37164.json b/2025/CVE-2025-37164.json
index 57af53dc7b..5c5577c647 100644
--- a/2025/CVE-2025-37164.json
+++ b/2025/CVE-2025-37164.json
@@ -1,4 +1,74 @@
[
+ {
+ "id": 1118929454,
+ "name": "CVE-2025-37164",
+ "full_name": "rxerium\/CVE-2025-37164",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-37164",
+ "description": "Detection for CVE-2025-37164",
+ "fork": false,
+ "created_at": "2025-12-18T13:41:52Z",
+ "updated_at": "2025-12-19T01:49:28Z",
+ "pushed_at": "2025-12-18T13:55:17Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "hp",
+ "rce",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119803289,
+ "name": "CVE-2025-37164-PoC",
+ "full_name": "g0vguy\/CVE-2025-37164-PoC",
+ "owner": {
+ "login": "g0vguy",
+ "id": 176447643,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176447643?v=4",
+ "html_url": "https:\/\/github.com\/g0vguy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/g0vguy\/CVE-2025-37164-PoC",
+ "description": "PoC for CVE-2025-37164",
+ "fork": false,
+ "created_at": "2025-12-19T22:00:51Z",
+ "updated_at": "2026-01-11T04:53:28Z",
+ "pushed_at": "2025-12-19T22:07:13Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1129296084,
"name": "Exploit_CVE-2025-37164",
diff --git a/2025/CVE-2025-38001.json b/2025/CVE-2025-38001.json
index f070fc90d4..8669698d16 100644
--- a/2025/CVE-2025-38001.json
+++ b/2025/CVE-2025-38001.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1018176345,
+ "name": "CVE-2025-38001",
+ "full_name": "0xdevil\/CVE-2025-38001",
+ "owner": {
+ "login": "0xdevil",
+ "id": 52781556,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52781556?v=4",
+ "html_url": "https:\/\/github.com\/0xdevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xdevil\/CVE-2025-38001",
+ "description": "CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC",
+ "fork": false,
+ "created_at": "2025-07-11T18:34:08Z",
+ "updated_at": "2026-04-16T07:46:16Z",
+ "pushed_at": "2025-07-11T18:35:12Z",
+ "stargazers_count": 91,
+ "watchers_count": 91,
+ "has_discussions": false,
+ "forks_count": 13,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 13,
+ "watchers": 91,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1044155200,
+ "name": "cve-2025-38001",
+ "full_name": "khoatran107\/cve-2025-38001",
+ "owner": {
+ "login": "khoatran107",
+ "id": 36724510,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36724510?v=4",
+ "html_url": "https:\/\/github.com\/khoatran107",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/khoatran107\/cve-2025-38001",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-25T09:10:40Z",
+ "updated_at": "2025-09-09T03:14:51Z",
+ "pushed_at": "2025-09-03T07:51:51Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1073498285,
"name": "CVE-2025-38001-test",
@@ -32,6 +98,43 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109301544,
+ "name": "CVE-2025-38001",
+ "full_name": "boeseejykbtanke348\/CVE-2025-38001",
+ "owner": {
+ "login": "boeseejykbtanke348",
+ "id": 247452158,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247452158?v=4",
+ "html_url": "https:\/\/github.com\/boeseejykbtanke348",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/boeseejykbtanke348\/CVE-2025-38001",
+ "description": "Public exploit for CVE-2025-38001",
+ "fork": false,
+ "created_at": "2025-12-03T16:03:23Z",
+ "updated_at": "2025-12-03T16:04:17Z",
+ "pushed_at": "2025-12-03T16:04:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "kernel",
+ "linux",
+ "zero-day"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1179774030,
"name": "CVE-2025-38001",
diff --git a/2025/CVE-2025-38089.json b/2025/CVE-2025-38089.json
new file mode 100644
index 0000000000..6b4bcaf16b
--- /dev/null
+++ b/2025/CVE-2025-38089.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1012378346,
+ "name": "NFSundown",
+ "full_name": "keymaker-arch\/NFSundown",
+ "owner": {
+ "login": "keymaker-arch",
+ "id": 64879779,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64879779?v=4",
+ "html_url": "https:\/\/github.com\/keymaker-arch",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/keymaker-arch\/NFSundown",
+ "description": "PoC for CVE-2025-38089",
+ "fork": false,
+ "created_at": "2025-07-02T08:40:57Z",
+ "updated_at": "2026-01-08T06:37:10Z",
+ "pushed_at": "2025-07-02T09:27:23Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-38352.json b/2025/CVE-2025-38352.json
index 225ceac1ac..5e5064887b 100644
--- a/2025/CVE-2025-38352.json
+++ b/2025/CVE-2025-38352.json
@@ -164,10 +164,10 @@
"description": "CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.",
"fork": false,
"created_at": "2026-05-30T02:37:10Z",
- "updated_at": "2026-06-01T21:47:13Z",
+ "updated_at": "2026-06-02T16:06:36Z",
"pushed_at": "2026-06-01T21:47:09Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -189,7 +189,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-38501.json b/2025/CVE-2025-38501.json
new file mode 100644
index 0000000000..646297ede6
--- /dev/null
+++ b/2025/CVE-2025-38501.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1057065996,
+ "name": "KSMBDrain",
+ "full_name": "keymaker-arch\/KSMBDrain",
+ "owner": {
+ "login": "keymaker-arch",
+ "id": 64879779,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64879779?v=4",
+ "html_url": "https:\/\/github.com\/keymaker-arch",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/keymaker-arch\/KSMBDrain",
+ "description": "CVE-2025-38501, KSMBDrain",
+ "fork": false,
+ "created_at": "2025-09-15T08:26:20Z",
+ "updated_at": "2025-09-20T05:34:55Z",
+ "pushed_at": "2025-09-15T09:11:24Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-38676.json b/2025/CVE-2025-38676.json
new file mode 100644
index 0000000000..e49076e053
--- /dev/null
+++ b/2025/CVE-2025-38676.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1045318477,
+ "name": "CVE-2025-38676",
+ "full_name": "14mb1v45h\/CVE-2025-38676",
+ "owner": {
+ "login": "14mb1v45h",
+ "id": 166547152,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166547152?v=4",
+ "html_url": "https:\/\/github.com\/14mb1v45h",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/14mb1v45h\/CVE-2025-38676",
+ "description": "Stack buffer overflow during cmdline parsing",
+ "fork": false,
+ "created_at": "2025-08-27T01:29:50Z",
+ "updated_at": "2025-10-25T14:14:54Z",
+ "pushed_at": "2025-08-27T01:40:43Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-39401.json b/2025/CVE-2025-39401.json
new file mode 100644
index 0000000000..ae9910813b
--- /dev/null
+++ b/2025/CVE-2025-39401.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1105632312,
+ "name": "CVE-2025-39401",
+ "full_name": "Nxploited\/CVE-2025-39401",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-39401",
+ "description": "WordPress WPAMS Plugin <= 44.0 (17-08-2023) is vulnerable to a high priority Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-27T23:25:15Z",
+ "updated_at": "2026-03-13T08:56:33Z",
+ "pushed_at": "2025-11-27T23:28:07Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-39596.json b/2025/CVE-2025-39596.json
new file mode 100644
index 0000000000..a75ffa40b4
--- /dev/null
+++ b/2025/CVE-2025-39596.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1065170136,
+ "name": "CVE-2025-39596",
+ "full_name": "Nxploited\/CVE-2025-39596",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-39596",
+ "description": "Quentn WP <= 1.2.8 - Unauthenticated Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-09-27T07:27:24Z",
+ "updated_at": "2026-03-13T08:56:49Z",
+ "pushed_at": "2025-09-27T08:02:43Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-39866.json b/2025/CVE-2025-39866.json
new file mode 100644
index 0000000000..027efe4c46
--- /dev/null
+++ b/2025/CVE-2025-39866.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064813141,
+ "name": "CVE-2025-39866",
+ "full_name": "byteReaper77\/CVE-2025-39866",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-39866",
+ "description": "Proof of concept for CVE-2025-39866 (UAF and race condition)",
+ "fork": false,
+ "created_at": "2025-09-26T15:35:50Z",
+ "updated_at": "2026-02-25T11:12:10Z",
+ "pushed_at": "2025-09-26T16:20:53Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-39964.json b/2025/CVE-2025-39964.json
new file mode 100644
index 0000000000..3133710170
--- /dev/null
+++ b/2025/CVE-2025-39964.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1095740303,
+ "name": "CVE-2025-39964_EXP",
+ "full_name": "n1k0oowang\/CVE-2025-39964_EXP",
+ "owner": {
+ "login": "n1k0oowang",
+ "id": 226853933,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226853933?v=4",
+ "html_url": "https:\/\/github.com\/n1k0oowang",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/n1k0oowang\/CVE-2025-39964_EXP",
+ "description": "CVE-2025-39964 EXP",
+ "fork": false,
+ "created_at": "2025-11-13T13:07:19Z",
+ "updated_at": "2026-05-08T15:24:21Z",
+ "pushed_at": "2025-11-13T13:17:54Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-40040.json b/2025/CVE-2025-40040.json
new file mode 100644
index 0000000000..4700f2cb58
--- /dev/null
+++ b/2025/CVE-2025-40040.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1107995641,
+ "name": "CVE-2023-1206-CVE-2025-40040-CVE-2024-49882",
+ "full_name": "SpiralBL0CK\/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882",
+ "owner": {
+ "login": "SpiralBL0CK",
+ "id": 25670930,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
+ "html_url": "https:\/\/github.com\/SpiralBL0CK",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882",
+ "description": "3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;",
+ "fork": false,
+ "created_at": "2025-12-01T22:12:05Z",
+ "updated_at": "2026-01-28T07:17:23Z",
+ "pushed_at": "2025-12-02T21:04:28Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-40602.json b/2025/CVE-2025-40602.json
new file mode 100644
index 0000000000..5ee54548b0
--- /dev/null
+++ b/2025/CVE-2025-40602.json
@@ -0,0 +1,71 @@
+[
+ {
+ "id": 1118727825,
+ "name": "CVE-2025-40602",
+ "full_name": "rxerium\/CVE-2025-40602",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-40602",
+ "description": "Detection for CVE-2025-40602",
+ "fork": false,
+ "created_at": "2025-12-18T07:32:56Z",
+ "updated_at": "2025-12-19T05:39:35Z",
+ "pushed_at": "2025-12-18T07:50:06Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "kev",
+ "sonicwall"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118833889,
+ "name": "CVE-2025-40602",
+ "full_name": "cyberleelawat\/CVE-2025-40602",
+ "owner": {
+ "login": "cyberleelawat",
+ "id": 202486122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202486122?v=4",
+ "html_url": "https:\/\/github.com\/cyberleelawat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberleelawat\/CVE-2025-40602",
+ "description": "CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000 series appliances.",
+ "fork": false,
+ "created_at": "2025-12-18T10:47:56Z",
+ "updated_at": "2026-01-14T16:57:28Z",
+ "pushed_at": "2025-12-18T11:01:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-40629.json b/2025/CVE-2025-40629.json
new file mode 100644
index 0000000000..2a40a9f192
--- /dev/null
+++ b/2025/CVE-2025-40629.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100057057,
+ "name": "CVE-2025-40629",
+ "full_name": "omr00t\/CVE-2025-40629",
+ "owner": {
+ "login": "omr00t",
+ "id": 76473301,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76473301?v=4",
+ "html_url": "https:\/\/github.com\/omr00t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/omr00t\/CVE-2025-40629",
+ "description": "PoC to exploit authenticated path traversal in PNETLab (v4.2.10)",
+ "fork": false,
+ "created_at": "2025-11-19T19:31:56Z",
+ "updated_at": "2025-11-30T06:24:03Z",
+ "pushed_at": "2025-11-19T19:34:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-40677.json b/2025/CVE-2025-40677.json
new file mode 100644
index 0000000000..27ced34643
--- /dev/null
+++ b/2025/CVE-2025-40677.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1061656984,
+ "name": "CVE-2025-40677",
+ "full_name": "PeterGabaldon\/CVE-2025-40677",
+ "owner": {
+ "login": "PeterGabaldon",
+ "id": 34518201,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34518201?v=4",
+ "html_url": "https:\/\/github.com\/PeterGabaldon",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/PeterGabaldon\/CVE-2025-40677",
+ "description": "Summar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677",
+ "fork": false,
+ "created_at": "2025-09-22T08:02:53Z",
+ "updated_at": "2025-09-27T17:54:59Z",
+ "pushed_at": "2025-09-27T17:54:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-40766.json b/2025/CVE-2025-40766.json
new file mode 100644
index 0000000000..332e516e66
--- /dev/null
+++ b/2025/CVE-2025-40766.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1028874131,
+ "name": "ecs_checker",
+ "full_name": "FurkanKAYAPINAR\/ecs_checker",
+ "owner": {
+ "login": "FurkanKAYAPINAR",
+ "id": 5401590,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5401590?v=4",
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR\/ecs_checker",
+ "description": "EDNS Client Subnet (ECS) Remote Detection Tool - CVE-2025-40766",
+ "fork": false,
+ "created_at": "2025-07-30T07:30:26Z",
+ "updated_at": "2025-12-09T08:14:11Z",
+ "pushed_at": "2025-07-30T08:18:45Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-41088.json b/2025/CVE-2025-41088.json
new file mode 100644
index 0000000000..4e1be234af
--- /dev/null
+++ b/2025/CVE-2025-41088.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1073607963,
+ "name": "CVE-2025-41088",
+ "full_name": "Marinafabregat\/CVE-2025-41088",
+ "owner": {
+ "login": "Marinafabregat",
+ "id": 95857558,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95857558?v=4",
+ "html_url": "https:\/\/github.com\/Marinafabregat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Marinafabregat\/CVE-2025-41088",
+ "description": "Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input.",
+ "fork": false,
+ "created_at": "2025-10-10T11:03:19Z",
+ "updated_at": "2025-11-14T11:52:09Z",
+ "pushed_at": "2025-11-14T11:52:06Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-41115.json b/2025/CVE-2025-41115.json
new file mode 100644
index 0000000000..d1db544c78
--- /dev/null
+++ b/2025/CVE-2025-41115.json
@@ -0,0 +1,70 @@
+[
+ {
+ "id": 1102763771,
+ "name": "Blackash-CVE-2025-41115",
+ "full_name": "rockmelodies\/Blackash-CVE-2025-41115",
+ "owner": {
+ "login": "rockmelodies",
+ "id": 24653177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24653177?v=4",
+ "html_url": "https:\/\/github.com\/rockmelodies",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rockmelodies\/Blackash-CVE-2025-41115",
+ "description": "CVE-2025-41115",
+ "fork": false,
+ "created_at": "2025-11-24T02:29:06Z",
+ "updated_at": "2025-11-24T02:29:07Z",
+ "pushed_at": "2025-11-21T11:39:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109209849,
+ "name": "GrafanaSCIMalform",
+ "full_name": "I3r1h0n\/GrafanaSCIMalform",
+ "owner": {
+ "login": "I3r1h0n",
+ "id": 140952002,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140952002?v=4",
+ "html_url": "https:\/\/github.com\/I3r1h0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/I3r1h0n\/GrafanaSCIMalform",
+ "description": "Exploit and test stand for CVE-2025-41115",
+ "fork": false,
+ "created_at": "2025-12-03T13:44:30Z",
+ "updated_at": "2026-01-22T11:39:29Z",
+ "pushed_at": "2025-12-03T16:21:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-41115"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4123.json b/2025/CVE-2025-4123.json
index 4bb10db9a6..844e46542e 100644
--- a/2025/CVE-2025-4123.json
+++ b/2025/CVE-2025-4123.json
@@ -163,5 +163,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1055396365,
+ "name": "Grafana-CVE-2025-4123-POC",
+ "full_name": "ItsNee\/Grafana-CVE-2025-4123-POC",
+ "owner": {
+ "login": "ItsNee",
+ "id": 28183719,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28183719?v=4",
+ "html_url": "https:\/\/github.com\/ItsNee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ItsNee\/Grafana-CVE-2025-4123-POC",
+ "description": "Grafana CVE-2025-4123-POC",
+ "fork": false,
+ "created_at": "2025-09-12T07:53:19Z",
+ "updated_at": "2025-09-12T08:06:42Z",
+ "pushed_at": "2025-09-12T07:57:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-41244.json b/2025/CVE-2025-41244.json
index 89acebb6ce..cad9443f90 100644
--- a/2025/CVE-2025-41244.json
+++ b/2025/CVE-2025-41244.json
@@ -36,5 +36,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1094359473,
+ "name": "CVE-2025-41244",
+ "full_name": "NULL200OK\/CVE-2025-41244",
+ "owner": {
+ "login": "NULL200OK",
+ "id": 130701511,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130701511?v=4",
+ "html_url": "https:\/\/github.com\/NULL200OK",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NULL200OK\/CVE-2025-41244",
+ "description": "CVE-2025-41244 is a critical local privilege escalation vulnerability in VMware Aria Operations and VMware Tools",
+ "fork": false,
+ "created_at": "2025-11-11T15:53:40Z",
+ "updated_at": "2026-02-05T14:43:36Z",
+ "pushed_at": "2025-11-11T16:28:56Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-4126.json b/2025/CVE-2025-4126.json
new file mode 100644
index 0000000000..55d1c1224d
--- /dev/null
+++ b/2025/CVE-2025-4126.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1033563768,
+ "name": "CVE-2025-4126",
+ "full_name": "Slow-Mist\/CVE-2025-4126",
+ "owner": {
+ "login": "Slow-Mist",
+ "id": 225112179,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225112179?v=4",
+ "html_url": "https:\/\/github.com\/Slow-Mist",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Slow-Mist\/CVE-2025-4126",
+ "description": "smart contract reentrancy attack vulnerability POC",
+ "fork": false,
+ "created_at": "2025-08-07T02:42:39Z",
+ "updated_at": "2025-08-07T02:45:57Z",
+ "pushed_at": "2025-08-07T02:45:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-41373.json b/2025/CVE-2025-41373.json
new file mode 100644
index 0000000000..850f4c4bb0
--- /dev/null
+++ b/2025/CVE-2025-41373.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1030547357,
+ "name": "CVE-2025-41373",
+ "full_name": "byteReaper77\/CVE-2025-41373",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-41373",
+ "description": "PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1 ",
+ "fork": false,
+ "created_at": "2025-08-01T20:42:35Z",
+ "updated_at": "2026-04-09T14:34:41Z",
+ "pushed_at": "2025-08-01T20:58:04Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-41646.json b/2025/CVE-2025-41646.json
new file mode 100644
index 0000000000..f381d57fac
--- /dev/null
+++ b/2025/CVE-2025-41646.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1013617113,
+ "name": "CVE-2025-41646---Critical-Authentication-Bypass-",
+ "full_name": "GreenForceNetworks\/CVE-2025-41646---Critical-Authentication-Bypass-",
+ "owner": {
+ "login": "GreenForceNetworks",
+ "id": 172834714,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172834714?v=4",
+ "html_url": "https:\/\/github.com\/GreenForceNetworks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GreenForceNetworks\/CVE-2025-41646---Critical-Authentication-Bypass-",
+ "description": "CVE-2025-41646 - Critical Authentication bypass",
+ "fork": false,
+ "created_at": "2025-07-04T07:31:34Z",
+ "updated_at": "2025-08-11T08:55:16Z",
+ "pushed_at": "2025-07-04T07:33:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022662739,
+ "name": "CVE-2025-41646",
+ "full_name": "r0otk3r\/CVE-2025-41646",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-41646",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T14:59:29Z",
+ "updated_at": "2025-07-19T15:10:08Z",
+ "pushed_at": "2025-07-19T15:10:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-42957.json b/2025/CVE-2025-42957.json
new file mode 100644
index 0000000000..9d9e01ff3a
--- /dev/null
+++ b/2025/CVE-2025-42957.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053860359,
+ "name": "CVE-2025-42957-SAP-S-4HANA-Under-Siege",
+ "full_name": "mrk336\/CVE-2025-42957-SAP-S-4HANA-Under-Siege",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-42957-SAP-S-4HANA-Under-Siege",
+ "description": "CVE‑2025‑42957 exposes an RFC‑enabled SAP S\/4HANA module that lets low‑privileged users inject ABAP code to create admin accounts and gain full control. The article explains the vulnerability, threat model, provides minimal exploit ABAP code, and lists patching & monitoring steps to secure the system",
+ "fork": false,
+ "created_at": "2025-09-10T03:23:47Z",
+ "updated_at": "2026-03-10T14:09:09Z",
+ "pushed_at": "2025-09-10T03:29:19Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-43300.json b/2025/CVE-2025-43300.json
new file mode 100644
index 0000000000..2ae2d6d063
--- /dev/null
+++ b/2025/CVE-2025-43300.json
@@ -0,0 +1,200 @@
+[
+ {
+ "id": 1042649445,
+ "name": "CVE-2025-43300-exp",
+ "full_name": "AR-DEV-1\/CVE-2025-43300-exp",
+ "owner": {
+ "login": "AR-DEV-1",
+ "id": 115883839,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115883839?v=4",
+ "html_url": "https:\/\/github.com\/AR-DEV-1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AR-DEV-1\/CVE-2025-43300-exp",
+ "description": "The exploit code for CVE-2025-43300.",
+ "fork": false,
+ "created_at": "2025-08-22T10:55:56Z",
+ "updated_at": "2025-08-22T11:27:24Z",
+ "pushed_at": "2025-08-22T11:27:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1043778109,
+ "name": "CVE-2025-43300",
+ "full_name": "hunters-sec\/CVE-2025-43300",
+ "owner": {
+ "login": "hunters-sec",
+ "id": 223824247,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223824247?v=4",
+ "html_url": "https:\/\/github.com\/hunters-sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hunters-sec\/CVE-2025-43300",
+ "description": "This is POC for IOS 0click CVE-2025-43300",
+ "fork": false,
+ "created_at": "2025-08-24T15:48:41Z",
+ "updated_at": "2026-05-27T16:22:21Z",
+ "pushed_at": "2025-08-24T16:15:20Z",
+ "stargazers_count": 112,
+ "watchers_count": 112,
+ "has_discussions": false,
+ "forks_count": 30,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 30,
+ "watchers": 112,
+ "score": 0,
+ "subscribers_count": 2
+ },
+ {
+ "id": 1053520109,
+ "name": "CVE-2025-43300",
+ "full_name": "PwnToday\/CVE-2025-43300",
+ "owner": {
+ "login": "PwnToday",
+ "id": 190947704,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190947704?v=4",
+ "html_url": "https:\/\/github.com\/PwnToday",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/PwnToday\/CVE-2025-43300",
+ "description": "CVE-2025-43300: iOS\/macOS DNG Image Processing Memory Corruption",
+ "fork": false,
+ "created_at": "2025-09-09T15:01:10Z",
+ "updated_at": "2026-03-20T08:34:03Z",
+ "pushed_at": "2025-09-09T15:15:51Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1059271942,
+ "name": "cve-2025-43300",
+ "full_name": "veniversum\/cve-2025-43300",
+ "owner": {
+ "login": "veniversum",
+ "id": 6357330,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6357330?v=4",
+ "html_url": "https:\/\/github.com\/veniversum",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/veniversum\/cve-2025-43300",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-18T08:19:14Z",
+ "updated_at": "2025-09-18T08:21:29Z",
+ "pushed_at": "2025-09-18T08:19:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1067169356,
+ "name": "CVE-2025-43300",
+ "full_name": "ticofookfook\/CVE-2025-43300",
+ "owner": {
+ "login": "ticofookfook",
+ "id": 99700348,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99700348?v=4",
+ "html_url": "https:\/\/github.com\/ticofookfook",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ticofookfook\/CVE-2025-43300",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-30T13:26:10Z",
+ "updated_at": "2025-10-14T22:45:15Z",
+ "pushed_at": "2025-09-30T14:55:33Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1067197086,
+ "name": "CVE-2025",
+ "full_name": "Dark-life944\/CVE-2025",
+ "owner": {
+ "login": "Dark-life944",
+ "id": 168915806,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168915806?v=4",
+ "html_url": "https:\/\/github.com\/Dark-life944",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Dark-life944\/CVE-2025",
+ "description": "This is POC for IOS 0click CVE-2025-43300",
+ "fork": false,
+ "created_at": "2025-09-30T14:07:56Z",
+ "updated_at": "2025-10-14T14:11:08Z",
+ "pushed_at": "2025-08-24T16:15:20Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-43400.json b/2025/CVE-2025-43400.json
new file mode 100644
index 0000000000..81cad92b92
--- /dev/null
+++ b/2025/CVE-2025-43400.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1115264461,
+ "name": "CVE-2025-43400",
+ "full_name": "csrXamfi\/CVE-2025-43400",
+ "owner": {
+ "login": "csrXamfi",
+ "id": 232941732,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232941732?v=4",
+ "html_url": "https:\/\/github.com\/csrXamfi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/csrXamfi\/CVE-2025-43400",
+ "description": "CVE-2025-43400 (video + report)",
+ "fork": false,
+ "created_at": "2025-12-12T15:31:23Z",
+ "updated_at": "2026-01-13T07:38:26Z",
+ "pushed_at": "2025-12-12T15:36:50Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-43426.json b/2025/CVE-2025-43426.json
new file mode 100644
index 0000000000..7d08a96708
--- /dev/null
+++ b/2025/CVE-2025-43426.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1115268100,
+ "name": "CVE-2025-43426",
+ "full_name": "csrXamfi\/CVE-2025-43426",
+ "owner": {
+ "login": "csrXamfi",
+ "id": 232941732,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232941732?v=4",
+ "html_url": "https:\/\/github.com\/csrXamfi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/csrXamfi\/CVE-2025-43426",
+ "description": "CVE-2025-43426 (video + report)",
+ "fork": false,
+ "created_at": "2025-12-12T15:37:37Z",
+ "updated_at": "2026-01-13T07:32:01Z",
+ "pushed_at": "2025-12-12T15:41:57Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-43504.json b/2025/CVE-2025-43504.json
new file mode 100644
index 0000000000..b58e9b11f2
--- /dev/null
+++ b/2025/CVE-2025-43504.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097929170,
+ "name": "CVE-2025-43504",
+ "full_name": "calysteon\/CVE-2025-43504",
+ "owner": {
+ "login": "calysteon",
+ "id": 141891401,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141891401?v=4",
+ "html_url": "https:\/\/github.com\/calysteon",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/calysteon\/CVE-2025-43504",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-17T03:15:57Z",
+ "updated_at": "2026-01-27T22:08:17Z",
+ "pushed_at": "2025-11-30T05:03:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-43541.json b/2025/CVE-2025-43541.json
new file mode 100644
index 0000000000..2449cad431
--- /dev/null
+++ b/2025/CVE-2025-43541.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1120682137,
+ "name": "CVE-2025-43541",
+ "full_name": "crypt0bit\/CVE-2025-43541",
+ "owner": {
+ "login": "crypt0bit",
+ "id": 247562803,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247562803?v=4",
+ "html_url": "https:\/\/github.com\/crypt0bit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/crypt0bit\/CVE-2025-43541",
+ "description": "PoC Exploit iOS",
+ "fork": false,
+ "created_at": "2025-12-21T18:15:50Z",
+ "updated_at": "2026-03-25T05:44:18Z",
+ "pushed_at": "2025-12-21T18:20:44Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4380.json b/2025/CVE-2025-4380.json
new file mode 100644
index 0000000000..79e4da2c1e
--- /dev/null
+++ b/2025/CVE-2025-4380.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023204636,
+ "name": "CVE-2025-4380",
+ "full_name": "r0otk3r\/CVE-2025-4380",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-4380",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-20T18:38:03Z",
+ "updated_at": "2025-07-20T18:51:40Z",
+ "pushed_at": "2025-07-20T18:51:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4404.json b/2025/CVE-2025-4404.json
new file mode 100644
index 0000000000..8717fd38df
--- /dev/null
+++ b/2025/CVE-2025-4404.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1034885127,
+ "name": "CVE-2025-4404-POC",
+ "full_name": "Im10n\/CVE-2025-4404-POC",
+ "owner": {
+ "login": "Im10n",
+ "id": 31488526,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31488526?v=4",
+ "html_url": "https:\/\/github.com\/Im10n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Im10n\/CVE-2025-4404-POC",
+ "description": "POC for CVE-2025-4404",
+ "fork": false,
+ "created_at": "2025-08-09T07:19:07Z",
+ "updated_at": "2026-03-31T03:25:56Z",
+ "pushed_at": "2025-08-11T11:02:48Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-44823.json b/2025/CVE-2025-44823.json
new file mode 100644
index 0000000000..097d10358d
--- /dev/null
+++ b/2025/CVE-2025-44823.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1071837123,
+ "name": "CVE-2025-44823",
+ "full_name": "skraft9\/CVE-2025-44823",
+ "owner": {
+ "login": "skraft9",
+ "id": 145692102,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145692102?v=4",
+ "html_url": "https:\/\/github.com\/skraft9",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/skraft9\/CVE-2025-44823",
+ "description": "Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1",
+ "fork": false,
+ "created_at": "2025-10-07T22:06:52Z",
+ "updated_at": "2026-05-16T20:34:03Z",
+ "pushed_at": "2025-11-18T02:47:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": false,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-45346.json b/2025/CVE-2025-45346.json
new file mode 100644
index 0000000000..dbe5af51ed
--- /dev/null
+++ b/2025/CVE-2025-45346.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029298755,
+ "name": "CVE-2025-45346",
+ "full_name": "0xsu3ks\/CVE-2025-45346",
+ "owner": {
+ "login": "0xsu3ks",
+ "id": 97468816,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97468816?v=4",
+ "html_url": "https:\/\/github.com\/0xsu3ks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xsu3ks\/CVE-2025-45346",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-30T20:32:35Z",
+ "updated_at": "2025-07-30T20:33:16Z",
+ "pushed_at": "2025-07-30T20:33:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-45407.json b/2025/CVE-2025-45407.json
new file mode 100644
index 0000000000..76e984ade5
--- /dev/null
+++ b/2025/CVE-2025-45407.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1013090417,
+ "name": "CVE-2025-45407",
+ "full_name": "yallasec\/CVE-2025-45407",
+ "owner": {
+ "login": "yallasec",
+ "id": 206207879,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206207879?v=4",
+ "html_url": "https:\/\/github.com\/yallasec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yallasec\/CVE-2025-45407",
+ "description": "CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025",
+ "fork": false,
+ "created_at": "2025-07-03T10:44:34Z",
+ "updated_at": "2025-07-03T10:45:46Z",
+ "pushed_at": "2025-07-03T10:45:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-45778.json b/2025/CVE-2025-45778.json
new file mode 100644
index 0000000000..b1e3710ed8
--- /dev/null
+++ b/2025/CVE-2025-45778.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1017723607,
+ "name": "CVE-2025-45778",
+ "full_name": "Smarttfoxx\/CVE-2025-45778",
+ "owner": {
+ "login": "Smarttfoxx",
+ "id": 140526026,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140526026?v=4",
+ "html_url": "https:\/\/github.com\/Smarttfoxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Smarttfoxx\/CVE-2025-45778",
+ "description": "A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary javascript or HTML code via injecting a crafted payload into the \"Description\" text field when creating a new project.",
+ "fork": false,
+ "created_at": "2025-07-11T02:15:43Z",
+ "updated_at": "2026-02-16T05:06:11Z",
+ "pushed_at": "2025-07-11T02:28:47Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4578.json b/2025/CVE-2025-4578.json
new file mode 100644
index 0000000000..ed7cdfca5b
--- /dev/null
+++ b/2025/CVE-2025-4578.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1017334608,
+ "name": "CVE-2025-4578",
+ "full_name": "RandomRobbieBF\/CVE-2025-4578",
+ "owner": {
+ "login": "RandomRobbieBF",
+ "id": 51722811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
+ "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2025-4578",
+ "description": "File Provider <= 1.2.3 - Unauthenticated SQL Injection",
+ "fork": false,
+ "created_at": "2025-07-10T11:28:21Z",
+ "updated_at": "2026-02-24T12:58:47Z",
+ "pushed_at": "2025-07-10T11:28:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-45805.json b/2025/CVE-2025-45805.json
new file mode 100644
index 0000000000..36c1e84cb3
--- /dev/null
+++ b/2025/CVE-2025-45805.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117003131,
+ "name": "CVE-2025-45805",
+ "full_name": "mohammed-alsaqqaf\/CVE-2025-45805",
+ "owner": {
+ "login": "mohammed-alsaqqaf",
+ "id": 249795209,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249795209?v=4",
+ "html_url": "https:\/\/github.com\/mohammed-alsaqqaf",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mohammed-alsaqqaf\/CVE-2025-45805",
+ "description": "PoC of CVE-2025-45805",
+ "fork": false,
+ "created_at": "2025-12-15T17:27:59Z",
+ "updated_at": "2025-12-15T17:33:51Z",
+ "pushed_at": "2025-12-15T17:33:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-46018.json b/2025/CVE-2025-46018.json
new file mode 100644
index 0000000000..ead83fea94
--- /dev/null
+++ b/2025/CVE-2025-46018.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1030308632,
+ "name": "CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass",
+ "full_name": "niranjangaire1995\/CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass",
+ "owner": {
+ "login": "niranjangaire1995",
+ "id": 211277660,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211277660?v=4",
+ "html_url": "https:\/\/github.com\/niranjangaire1995",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/niranjangaire1995\/CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass",
+ "description": "Disclosure of CVE-2025-46018: A Bluetooth-based payment bypass vulnerability in CSC Pay Mobile App v2.19.4\"",
+ "fork": false,
+ "created_at": "2025-08-01T12:25:01Z",
+ "updated_at": "2025-08-01T12:34:56Z",
+ "pushed_at": "2025-08-01T12:34:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4606.json b/2025/CVE-2025-4606.json
index 72232ec27b..31c458afc4 100644
--- a/2025/CVE-2025-4606.json
+++ b/2025/CVE-2025-4606.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1030992207,
+ "name": "CVE-2025-4606",
+ "full_name": "Yucaerin\/CVE-2025-4606",
+ "owner": {
+ "login": "Yucaerin",
+ "id": 105861519,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105861519?v=4",
+ "html_url": "https:\/\/github.com\/Yucaerin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yucaerin\/CVE-2025-4606",
+ "description": "Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset\/Account Takeover",
+ "fork": false,
+ "created_at": "2025-08-02T19:14:09Z",
+ "updated_at": "2025-08-02T19:21:35Z",
+ "pushed_at": "2025-08-02T19:21:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1065063038,
+ "name": "CVE-2025-4606",
+ "full_name": "UcenHaxor07\/CVE-2025-4606",
+ "owner": {
+ "login": "UcenHaxor07",
+ "id": 112726486,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112726486?v=4",
+ "html_url": "https:\/\/github.com\/UcenHaxor07",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/UcenHaxor07\/CVE-2025-4606",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-27T02:04:37Z",
+ "updated_at": "2025-09-27T02:05:31Z",
+ "pushed_at": "2025-09-27T02:05:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1155214694,
"name": "CVE-2025-4606",
diff --git a/2025/CVE-2025-46099.json b/2025/CVE-2025-46099.json
new file mode 100644
index 0000000000..12179312f4
--- /dev/null
+++ b/2025/CVE-2025-46099.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022278439,
+ "name": "CVE-Lists",
+ "full_name": "0xC4J\/CVE-Lists",
+ "owner": {
+ "login": "0xC4J",
+ "id": 215865185,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215865185?v=4",
+ "html_url": "https:\/\/github.com\/0xC4J",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xC4J\/CVE-Lists",
+ "description": "CVE-2025-46099",
+ "fork": false,
+ "created_at": "2025-07-18T19:03:52Z",
+ "updated_at": "2025-07-18T19:19:48Z",
+ "pushed_at": "2025-07-18T19:19:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-46295.json b/2025/CVE-2025-46295.json
new file mode 100644
index 0000000000..ce79783c46
--- /dev/null
+++ b/2025/CVE-2025-46295.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1119850423,
+ "name": "CVE-2025-46295-fix-fms",
+ "full_name": "soliantconsulting\/CVE-2025-46295-fix-fms",
+ "owner": {
+ "login": "soliantconsulting",
+ "id": 814884,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/814884?v=4",
+ "html_url": "https:\/\/github.com\/soliantconsulting",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/soliantconsulting\/CVE-2025-46295-fix-fms",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-20T00:58:04Z",
+ "updated_at": "2025-12-30T11:46:13Z",
+ "pushed_at": "2025-12-30T11:46:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-46408.json b/2025/CVE-2025-46408.json
new file mode 100644
index 0000000000..6b0cf48459
--- /dev/null
+++ b/2025/CVE-2025-46408.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053840020,
+ "name": "CVE-2025-46408",
+ "full_name": "shinyColumn\/CVE-2025-46408",
+ "owner": {
+ "login": "shinyColumn",
+ "id": 136841832,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136841832?v=4",
+ "html_url": "https:\/\/github.com\/shinyColumn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shinyColumn\/CVE-2025-46408",
+ "description": "Improper Hostname Verification in EagleEyes Lite Android Application",
+ "fork": false,
+ "created_at": "2025-09-10T02:28:49Z",
+ "updated_at": "2025-11-04T10:52:39Z",
+ "pushed_at": "2025-09-25T09:05:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4660.json b/2025/CVE-2025-4660.json
new file mode 100644
index 0000000000..c6e052a590
--- /dev/null
+++ b/2025/CVE-2025-4660.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1013096342,
+ "name": "CVE-2025-4660",
+ "full_name": "NetSPI\/CVE-2025-4660",
+ "owner": {
+ "login": "NetSPI",
+ "id": 1713856,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1713856?v=4",
+ "html_url": "https:\/\/github.com\/NetSPI",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NetSPI\/CVE-2025-4660",
+ "description": "PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows",
+ "fork": false,
+ "created_at": "2025-07-03T10:56:41Z",
+ "updated_at": "2025-12-24T01:59:57Z",
+ "pushed_at": "2025-07-16T08:48:46Z",
+ "stargazers_count": 16,
+ "watchers_count": 16,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 16,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4679.json b/2025/CVE-2025-4679.json
new file mode 100644
index 0000000000..9214977317
--- /dev/null
+++ b/2025/CVE-2025-4679.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1107691007,
+ "name": "CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo",
+ "full_name": "fevar54\/CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo",
+ "owner": {
+ "login": "fevar54",
+ "id": 80516843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
+ "html_url": "https:\/\/github.com\/fevar54",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fevar54\/CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo",
+ "description": "SecureOAuth-Demo: Laboratorio educativo que recrea de forma segura la vulnerabilidad CVE-2025-4679 (exposición de credenciales OAuth). Aprende seguridad ofensiva y defensiva mediante ejercicios prácticos, análisis de tráfico y desafíos CTF en un entorno 100% aislado. 🔐 Educativo • 🛡️ Seguro • 🎯 Práctico • 📚 Defensivo",
+ "fork": false,
+ "created_at": "2025-12-01T13:38:24Z",
+ "updated_at": "2025-12-01T13:52:54Z",
+ "pushed_at": "2025-12-01T13:52:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-46811.json b/2025/CVE-2025-46811.json
new file mode 100644
index 0000000000..b5b2a5edf1
--- /dev/null
+++ b/2025/CVE-2025-46811.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1030807494,
+ "name": "CVE-2025-46811",
+ "full_name": "b-L-x\/CVE-2025-46811",
+ "owner": {
+ "login": "b-L-x",
+ "id": 95941526,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95941526?v=4",
+ "html_url": "https:\/\/github.com\/b-L-x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/b-L-x\/CVE-2025-46811",
+ "description": "CVE-2025-46811",
+ "fork": false,
+ "created_at": "2025-08-02T11:15:42Z",
+ "updated_at": "2025-08-15T02:35:11Z",
+ "pushed_at": "2025-08-02T11:17:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47175.json b/2025/CVE-2025-47175.json
new file mode 100644
index 0000000000..4749512977
--- /dev/null
+++ b/2025/CVE-2025-47175.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1012492656,
+ "name": "mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE",
+ "full_name": "mbanyamer\/mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE",
+ "owner": {
+ "login": "mbanyamer",
+ "id": 213306745,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
+ "html_url": "https:\/\/github.com\/mbanyamer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mbanyamer\/mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE",
+ "description": "This repository contains a Proof of Concept (PoC) exploit for the **CVE-2025-47175** vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free (UAF) bug that allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted PPTX file.",
+ "fork": false,
+ "created_at": "2025-07-02T12:17:25Z",
+ "updated_at": "2026-05-17T16:00:29Z",
+ "pushed_at": "2025-07-02T12:19:50Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47176.json b/2025/CVE-2025-47176.json
new file mode 100644
index 0000000000..deebb3b743
--- /dev/null
+++ b/2025/CVE-2025-47176.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022199711,
+ "name": "CVE-2025-47176",
+ "full_name": "mahyarx\/CVE-2025-47176",
+ "owner": {
+ "login": "mahyarx",
+ "id": 7817627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7817627?v=4",
+ "html_url": "https:\/\/github.com\/mahyarx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mahyarx\/CVE-2025-47176",
+ "description": "Microsoft Outlook Remote Code Execution Vulnerability",
+ "fork": false,
+ "created_at": "2025-07-18T16:13:36Z",
+ "updated_at": "2025-09-12T03:54:54Z",
+ "pushed_at": "2025-07-18T16:26:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47178.json b/2025/CVE-2025-47178.json
new file mode 100644
index 0000000000..e3182a4499
--- /dev/null
+++ b/2025/CVE-2025-47178.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1032853439,
+ "name": "CVE-2025-47178",
+ "full_name": "synacktiv\/CVE-2025-47178",
+ "owner": {
+ "login": "synacktiv",
+ "id": 50145679,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4",
+ "html_url": "https:\/\/github.com\/synacktiv",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/synacktiv\/CVE-2025-47178",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-05T23:55:46Z",
+ "updated_at": "2025-10-24T02:02:24Z",
+ "pushed_at": "2025-08-05T23:57:14Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47533.json b/2025/CVE-2025-47533.json
new file mode 100644
index 0000000000..0007b27664
--- /dev/null
+++ b/2025/CVE-2025-47533.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1037041908,
+ "name": "CVE-2024-47533",
+ "full_name": "zs1n\/CVE-2024-47533",
+ "owner": {
+ "login": "zs1n",
+ "id": 209989581,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209989581?v=4",
+ "html_url": "https:\/\/github.com\/zs1n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zs1n\/CVE-2024-47533",
+ "description": "PoC of CVE-2025-47533 Clobber RCE",
+ "fork": false,
+ "created_at": "2025-08-13T01:25:58Z",
+ "updated_at": "2025-09-06T02:39:23Z",
+ "pushed_at": "2025-09-06T02:39:19Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47812.json b/2025/CVE-2025-47812.json
index 58d3721e52..9307b0aea6 100644
--- a/2025/CVE-2025-47812.json
+++ b/2025/CVE-2025-47812.json
@@ -1,4 +1,169 @@
[
+ {
+ "id": 1011832467,
+ "name": "CVE-2025-47812-poc",
+ "full_name": "4m3rr0r\/CVE-2025-47812-poc",
+ "owner": {
+ "login": "4m3rr0r",
+ "id": 90191914,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90191914?v=4",
+ "html_url": "https:\/\/github.com\/4m3rr0r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/4m3rr0r\/CVE-2025-47812-poc",
+ "description": "Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)",
+ "fork": false,
+ "created_at": "2025-07-01T12:02:38Z",
+ "updated_at": "2026-05-30T05:50:39Z",
+ "pushed_at": "2025-07-14T08:49:57Z",
+ "stargazers_count": 54,
+ "watchers_count": 54,
+ "has_discussions": false,
+ "forks_count": 13,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 13,
+ "watchers": 54,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1012048482,
+ "name": "CVE-2025-47812-poC",
+ "full_name": "0xcan1337\/CVE-2025-47812-poC",
+ "owner": {
+ "login": "0xcan1337",
+ "id": 76397553,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76397553?v=4",
+ "html_url": "https:\/\/github.com\/0xcan1337",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xcan1337\/CVE-2025-47812-poC",
+ "description": "Simple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.",
+ "fork": false,
+ "created_at": "2025-07-01T18:20:04Z",
+ "updated_at": "2026-02-16T23:22:03Z",
+ "pushed_at": "2025-07-01T19:10:39Z",
+ "stargazers_count": 12,
+ "watchers_count": 12,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 12,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012781263,
+ "name": "CVE-2025-47812",
+ "full_name": "0xgh057r3c0n\/CVE-2025-47812",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-47812",
+ "description": "Wing FTP Server RCE via Lua Injection",
+ "fork": false,
+ "created_at": "2025-07-02T21:51:39Z",
+ "updated_at": "2025-11-11T22:33:34Z",
+ "pushed_at": "2025-07-02T22:38:46Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013885899,
+ "name": "WingFTP-CVE-2025-47812-illdeed",
+ "full_name": "ill-deed\/WingFTP-CVE-2025-47812-illdeed",
+ "owner": {
+ "login": "ill-deed",
+ "id": 210107232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210107232?v=4",
+ "html_url": "https:\/\/github.com\/ill-deed",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ill-deed\/WingFTP-CVE-2025-47812-illdeed",
+ "description": "Remote Command Execution exploit for Wing FTP Server (CVE-2025-47812)",
+ "fork": false,
+ "created_at": "2025-07-04T16:22:22Z",
+ "updated_at": "2025-07-04T16:44:21Z",
+ "pushed_at": "2025-07-04T16:44:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015416526,
+ "name": "CVE-2025-47812",
+ "full_name": "pevinkumar10\/CVE-2025-47812",
+ "owner": {
+ "login": "pevinkumar10",
+ "id": 191495526,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191495526?v=4",
+ "html_url": "https:\/\/github.com\/pevinkumar10",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pevinkumar10\/CVE-2025-47812",
+ "description": "Exploit for CVE-2025-47812 with custom psudo shell and robust error handling.",
+ "fork": false,
+ "created_at": "2025-07-07T13:20:48Z",
+ "updated_at": "2025-11-12T08:49:47Z",
+ "pushed_at": "2025-07-08T10:26:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1020618875,
"name": "CVE-2025-47812",
@@ -37,6 +202,138 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1021282160,
+ "name": "CVE-2025-47812",
+ "full_name": "blindma1den\/CVE-2025-47812",
+ "owner": {
+ "login": "blindma1den",
+ "id": 16064310,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16064310?v=4",
+ "html_url": "https:\/\/github.com\/blindma1den",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blindma1den\/CVE-2025-47812",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-17T07:02:49Z",
+ "updated_at": "2026-02-25T20:36:26Z",
+ "pushed_at": "2025-07-17T07:32:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027285506,
+ "name": "CVE-2025-47812",
+ "full_name": "r0otk3r\/CVE-2025-47812",
+ "owner": {
+ "login": "r0otk3r",
+ "id": 211012408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4",
+ "html_url": "https:\/\/github.com\/r0otk3r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2025-47812",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-27T17:47:40Z",
+ "updated_at": "2025-08-02T11:38:13Z",
+ "pushed_at": "2025-07-27T18:36:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1052057603,
+ "name": "CVE-2025-47812_Lab_environment",
+ "full_name": "CTY-Research-1\/CVE-2025-47812_Lab_environment",
+ "owner": {
+ "login": "CTY-Research-1",
+ "id": 214373191,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214373191?v=4",
+ "html_url": "https:\/\/github.com\/CTY-Research-1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CTY-Research-1\/CVE-2025-47812_Lab_environment",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-07T10:10:34Z",
+ "updated_at": "2025-09-07T10:10:35Z",
+ "pushed_at": "2025-09-07T10:10:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1053044100,
+ "name": "Blackash-CVE-2025-47812",
+ "full_name": "dkstar11q\/Blackash-CVE-2025-47812",
+ "owner": {
+ "login": "dkstar11q",
+ "id": 123830677,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123830677?v=4",
+ "html_url": "https:\/\/github.com\/dkstar11q",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dkstar11q\/Blackash-CVE-2025-47812",
+ "description": "CVE-2025-47812",
+ "fork": false,
+ "created_at": "2025-09-08T23:09:01Z",
+ "updated_at": "2025-09-08T23:09:01Z",
+ "pushed_at": "2025-07-18T10:33:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1158210584,
"name": "CVE-2025-47812",
diff --git a/2025/CVE-2025-47916.json b/2025/CVE-2025-47916.json
new file mode 100644
index 0000000000..c5ef6f4e8d
--- /dev/null
+++ b/2025/CVE-2025-47916.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1101289110,
+ "name": "CVE-2025-47916",
+ "full_name": "Web3-Serializer\/CVE-2025-47916",
+ "owner": {
+ "login": "Web3-Serializer",
+ "id": 218253225,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218253225?v=4",
+ "html_url": "https:\/\/github.com\/Web3-Serializer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Web3-Serializer\/CVE-2025-47916",
+ "description": "Proof‑of‑concept description for CVE‑2025‑47916, a Remote Code Execution vulnerability affecting Invision Community 5.0.0–5.0.6 via unsafe template processing in the \"customCss()\" method.",
+ "fork": false,
+ "created_at": "2025-11-21T13:16:49Z",
+ "updated_at": "2025-11-21T13:21:26Z",
+ "pushed_at": "2025-11-21T13:20:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47917.json b/2025/CVE-2025-47917.json
new file mode 100644
index 0000000000..70e44fa7b0
--- /dev/null
+++ b/2025/CVE-2025-47917.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023944519,
+ "name": "CVE-2025-47917",
+ "full_name": "byteReaper77\/CVE-2025-47917",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-47917",
+ "description": "PoC exploit for CVE-2025-47917: Use-After-Free in mbedTLS leading to remote code execution.",
+ "fork": false,
+ "created_at": "2025-07-22T00:34:25Z",
+ "updated_at": "2025-07-24T23:08:01Z",
+ "pushed_at": "2025-07-22T01:47:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-4796.json b/2025/CVE-2025-4796.json
new file mode 100644
index 0000000000..0229d64078
--- /dev/null
+++ b/2025/CVE-2025-4796.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094941871,
+ "name": "CVE-2025-4796",
+ "full_name": "AnotherSec\/CVE-2025-4796",
+ "owner": {
+ "login": "AnotherSec",
+ "id": 178832315,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178832315?v=4",
+ "html_url": "https:\/\/github.com\/AnotherSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AnotherSec\/CVE-2025-4796",
+ "description": "eventin <= 4.0.34 - privilege escalation via user email change \/ account takeover for authenticated contributor+",
+ "fork": false,
+ "created_at": "2025-11-12T11:34:11Z",
+ "updated_at": "2026-01-20T04:03:45Z",
+ "pushed_at": "2025-11-21T06:34:38Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47962.json b/2025/CVE-2025-47962.json
new file mode 100644
index 0000000000..1afc802302
--- /dev/null
+++ b/2025/CVE-2025-47962.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1125195150,
+ "name": "CVE-2025-47962-POC",
+ "full_name": "q1uf3ng\/CVE-2025-47962-POC",
+ "owner": {
+ "login": "q1uf3ng",
+ "id": 186373426,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186373426?v=4",
+ "html_url": "https:\/\/github.com\/q1uf3ng",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/q1uf3ng\/CVE-2025-47962-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-30T09:54:39Z",
+ "updated_at": "2026-04-20T11:39:26Z",
+ "pushed_at": "2025-12-30T10:00:36Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-47987.json b/2025/CVE-2025-47987.json
index 22c123fb89..72016f0f69 100644
--- a/2025/CVE-2025-47987.json
+++ b/2025/CVE-2025-47987.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1042613319,
+ "name": "CVE-2025-47987_PoC",
+ "full_name": "Kryptoenix\/CVE-2025-47987_PoC",
+ "owner": {
+ "login": "Kryptoenix",
+ "id": 79808962,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79808962?v=4",
+ "html_url": "https:\/\/github.com\/Kryptoenix",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kryptoenix\/CVE-2025-47987_PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-22T09:42:02Z",
+ "updated_at": "2025-09-24T08:05:57Z",
+ "pushed_at": "2025-08-28T17:25:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1228393483,
"name": "CVE-2025-47987",
diff --git a/2025/CVE-2025-48060.json b/2025/CVE-2025-48060.json
new file mode 100644
index 0000000000..92a639382f
--- /dev/null
+++ b/2025/CVE-2025-48060.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097438598,
+ "name": "jq-els-backport-cve-2025-48060",
+ "full_name": "leorivass\/jq-els-backport-cve-2025-48060",
+ "owner": {
+ "login": "leorivass",
+ "id": 183232665,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183232665?v=4",
+ "html_url": "https:\/\/github.com\/leorivass",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/leorivass\/jq-els-backport-cve-2025-48060",
+ "description": "Backported the upstream fix for CVE-2025-48060 (heap buffer overflow in jv_string_empty) to jq 1.6.",
+ "fork": false,
+ "created_at": "2025-11-16T07:08:35Z",
+ "updated_at": "2025-11-23T22:45:13Z",
+ "pushed_at": "2025-11-16T08:03:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-48384.json b/2025/CVE-2025-48384.json
index 893ee992fb..6fa95c8b81 100644
--- a/2025/CVE-2025-48384.json
+++ b/2025/CVE-2025-48384.json
@@ -1,4 +1,1133 @@
[
+ {
+ "id": 1016348740,
+ "name": "CVE-2025-48384",
+ "full_name": "acheong08\/CVE-2025-48384",
+ "owner": {
+ "login": "acheong08",
+ "id": 36258159,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36258159?v=4",
+ "html_url": "https:\/\/github.com\/acheong08",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/acheong08\/CVE-2025-48384",
+ "description": "Breaking git with a carriage return and cloning RCE",
+ "fork": false,
+ "created_at": "2025-07-08T21:56:17Z",
+ "updated_at": "2026-05-13T06:26:48Z",
+ "pushed_at": "2025-07-08T22:12:06Z",
+ "stargazers_count": 52,
+ "watchers_count": 52,
+ "has_discussions": false,
+ "forks_count": 25,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 25,
+ "watchers": 52,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016612426,
+ "name": "CVE-2025-48384",
+ "full_name": "fishyyh\/CVE-2025-48384",
+ "owner": {
+ "login": "fishyyh",
+ "id": 40795156,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40795156?v=4",
+ "html_url": "https:\/\/github.com\/fishyyh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fishyyh\/CVE-2025-48384",
+ "description": "for CVE-2025-48384 test",
+ "fork": false,
+ "created_at": "2025-07-09T09:11:19Z",
+ "updated_at": "2025-07-09T09:35:53Z",
+ "pushed_at": "2025-07-09T09:35:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016742988,
+ "name": "cve-2025-48384-hook",
+ "full_name": "kallydev\/cve-2025-48384-hook",
+ "owner": {
+ "login": "kallydev",
+ "id": 36319157,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36319157?v=4",
+ "html_url": "https:\/\/github.com\/kallydev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kallydev\/cve-2025-48384-hook",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T13:07:14Z",
+ "updated_at": "2025-07-09T13:09:09Z",
+ "pushed_at": "2025-07-09T13:09:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016746826,
+ "name": "CVE-2025-48384-POC",
+ "full_name": "fishyyh\/CVE-2025-48384-POC",
+ "owner": {
+ "login": "fishyyh",
+ "id": 40795156,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40795156?v=4",
+ "html_url": "https:\/\/github.com\/fishyyh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fishyyh\/CVE-2025-48384-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T13:13:44Z",
+ "updated_at": "2025-07-09T13:16:41Z",
+ "pushed_at": "2025-07-09T13:16:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016848432,
+ "name": "CVE-2025-48384-submodule",
+ "full_name": "liamg\/CVE-2025-48384-submodule",
+ "owner": {
+ "login": "liamg",
+ "id": 1187060,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1187060?v=4",
+ "html_url": "https:\/\/github.com\/liamg",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/liamg\/CVE-2025-48384-submodule",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T16:07:04Z",
+ "updated_at": "2025-07-09T16:18:56Z",
+ "pushed_at": "2025-07-09T16:18:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016854521,
+ "name": "CVE-2025-48384",
+ "full_name": "liamg\/CVE-2025-48384",
+ "owner": {
+ "login": "liamg",
+ "id": 1187060,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1187060?v=4",
+ "html_url": "https:\/\/github.com\/liamg",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/liamg\/CVE-2025-48384",
+ "description": "PoC for CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-07-09T16:18:19Z",
+ "updated_at": "2026-04-01T14:26:57Z",
+ "pushed_at": "2025-07-09T18:00:57Z",
+ "stargazers_count": 21,
+ "watchers_count": 21,
+ "has_discussions": false,
+ "forks_count": 20,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-48384",
+ "exploit",
+ "git",
+ "poc",
+ "proof-of-concept",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 20,
+ "watchers": 21,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016938255,
+ "name": "CVE-2025-48384",
+ "full_name": "ppd520\/CVE-2025-48384",
+ "owner": {
+ "login": "ppd520",
+ "id": 43989361,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43989361?v=4",
+ "html_url": "https:\/\/github.com\/ppd520",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ppd520\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T19:01:20Z",
+ "updated_at": "2025-07-09T19:44:52Z",
+ "pushed_at": "2025-07-09T19:44:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017090527,
+ "name": "CVE-2025-48384",
+ "full_name": "NigelX\/CVE-2025-48384",
+ "owner": {
+ "login": "NigelX",
+ "id": 25973989,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25973989?v=4",
+ "html_url": "https:\/\/github.com\/NigelX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NigelX\/CVE-2025-48384",
+ "description": "漏洞测试",
+ "fork": false,
+ "created_at": "2025-07-10T02:39:00Z",
+ "updated_at": "2025-07-10T02:39:55Z",
+ "pushed_at": "2025-07-10T02:39:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017214628,
+ "name": "CVE-2025-48384-p",
+ "full_name": "greatyy\/CVE-2025-48384-p",
+ "owner": {
+ "login": "greatyy",
+ "id": 48902334,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48902334?v=4",
+ "html_url": "https:\/\/github.com\/greatyy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/greatyy\/CVE-2025-48384-p",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-10T07:42:15Z",
+ "updated_at": "2025-07-10T07:47:28Z",
+ "pushed_at": "2025-07-10T07:47:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017245054,
+ "name": "CVE-2025-48384",
+ "full_name": "testdjshan\/CVE-2025-48384",
+ "owner": {
+ "login": "testdjshan",
+ "id": 214580783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214580783?v=4",
+ "html_url": "https:\/\/github.com\/testdjshan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/testdjshan\/CVE-2025-48384",
+ "description": "CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-07-10T08:39:57Z",
+ "updated_at": "2025-07-10T08:42:36Z",
+ "pushed_at": "2025-07-10T08:41:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017411356,
+ "name": "cve-2025-48384",
+ "full_name": "altm4n\/cve-2025-48384",
+ "owner": {
+ "login": "altm4n",
+ "id": 33285681,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33285681?v=4",
+ "html_url": "https:\/\/github.com\/altm4n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/altm4n\/cve-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-10T13:45:53Z",
+ "updated_at": "2025-07-16T02:11:51Z",
+ "pushed_at": "2025-07-16T02:11:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017411579,
+ "name": "cve-2025-48384-hub",
+ "full_name": "altm4n\/cve-2025-48384-hub",
+ "owner": {
+ "login": "altm4n",
+ "id": 33285681,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33285681?v=4",
+ "html_url": "https:\/\/github.com\/altm4n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/altm4n\/cve-2025-48384-hub",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-10T13:46:16Z",
+ "updated_at": "2025-07-16T02:11:47Z",
+ "pushed_at": "2025-07-16T02:11:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017815201,
+ "name": "CVE-2025-48384",
+ "full_name": "p1026\/CVE-2025-48384",
+ "owner": {
+ "login": "p1026",
+ "id": 125525132,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125525132?v=4",
+ "html_url": "https:\/\/github.com\/p1026",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/p1026\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-11T06:26:48Z",
+ "updated_at": "2025-07-11T06:26:48Z",
+ "pushed_at": "2025-07-11T06:26:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017954598,
+ "name": "vinieger-CVE-2025-48384-Dockerfile",
+ "full_name": "vinieger\/vinieger-CVE-2025-48384-Dockerfile",
+ "owner": {
+ "login": "vinieger",
+ "id": 12261060,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12261060?v=4",
+ "html_url": "https:\/\/github.com\/vinieger",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vinieger\/vinieger-CVE-2025-48384-Dockerfile",
+ "description": "PoC dockerfile image for CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-07-11T11:10:17Z",
+ "updated_at": "2025-08-01T09:56:48Z",
+ "pushed_at": "2025-07-11T11:19:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1020155119,
+ "name": "CVE-2025-48384-submodule",
+ "full_name": "ECHO6789\/CVE-2025-48384-submodule",
+ "owner": {
+ "login": "ECHO6789",
+ "id": 82739982,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82739982?v=4",
+ "html_url": "https:\/\/github.com\/ECHO6789",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ECHO6789\/CVE-2025-48384-submodule",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-15T12:26:53Z",
+ "updated_at": "2025-07-15T12:28:52Z",
+ "pushed_at": "2025-07-15T12:28:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1020554039,
+ "name": "cve-2025-48384-poc",
+ "full_name": "nguyentranbaotran\/cve-2025-48384-poc",
+ "owner": {
+ "login": "nguyentranbaotran",
+ "id": 221007226,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221007226?v=4",
+ "html_url": "https:\/\/github.com\/nguyentranbaotran",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nguyentranbaotran\/cve-2025-48384-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-16T03:59:12Z",
+ "updated_at": "2025-07-17T02:15:11Z",
+ "pushed_at": "2025-07-17T02:15:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021152983,
+ "name": "CVE-2025-48384-RCE",
+ "full_name": "admin-ping\/CVE-2025-48384-RCE",
+ "owner": {
+ "login": "admin-ping",
+ "id": 98550228,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98550228?v=4",
+ "html_url": "https:\/\/github.com\/admin-ping",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/admin-ping\/CVE-2025-48384-RCE",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-17T01:22:23Z",
+ "updated_at": "2025-07-17T01:28:58Z",
+ "pushed_at": "2025-07-17T01:28:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021635325,
+ "name": "CVE-2025-48384-submodule_test",
+ "full_name": "simplyfurious\/CVE-2025-48384-submodule_test",
+ "owner": {
+ "login": "simplyfurious",
+ "id": 98497312,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98497312?v=4",
+ "html_url": "https:\/\/github.com\/simplyfurious",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/simplyfurious\/CVE-2025-48384-submodule_test",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-17T17:43:14Z",
+ "updated_at": "2025-07-17T17:45:11Z",
+ "pushed_at": "2025-07-17T17:43:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022474003,
+ "name": "CVE-2025-48384-submodule",
+ "full_name": "Anezatraa\/CVE-2025-48384-submodule",
+ "owner": {
+ "login": "Anezatraa",
+ "id": 131853534,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131853534?v=4",
+ "html_url": "https:\/\/github.com\/Anezatraa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Anezatraa\/CVE-2025-48384-submodule",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T06:34:12Z",
+ "updated_at": "2025-07-19T06:41:49Z",
+ "pushed_at": "2025-07-19T06:41:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023097167,
+ "name": "CVE-2025-48384",
+ "full_name": "IK-20211125\/CVE-2025-48384",
+ "owner": {
+ "login": "IK-20211125",
+ "id": 95004425,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95004425?v=4",
+ "html_url": "https:\/\/github.com\/IK-20211125",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IK-20211125\/CVE-2025-48384",
+ "description": "CVE-2025-48384 PoC",
+ "fork": false,
+ "created_at": "2025-07-20T14:18:30Z",
+ "updated_at": "2025-08-28T22:48:44Z",
+ "pushed_at": "2025-07-21T08:48:13Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025909489,
+ "name": "CVE-2025-48384",
+ "full_name": "elprogramadorgt\/CVE-2025-48384",
+ "owner": {
+ "login": "elprogramadorgt",
+ "id": 96149783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96149783?v=4",
+ "html_url": "https:\/\/github.com\/elprogramadorgt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/elprogramadorgt\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-25T02:35:31Z",
+ "updated_at": "2025-07-25T02:38:23Z",
+ "pushed_at": "2025-07-25T02:38:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1030106448,
+ "name": "CVE-2025-48384",
+ "full_name": "f1shh\/CVE-2025-48384",
+ "owner": {
+ "login": "f1shh",
+ "id": 24825302,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24825302?v=4",
+ "html_url": "https:\/\/github.com\/f1shh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/f1shh\/CVE-2025-48384",
+ "description": "test for CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-08-01T05:20:18Z",
+ "updated_at": "2025-08-01T06:44:09Z",
+ "pushed_at": "2025-08-01T06:44:06Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031114894,
+ "name": "CVE-2025-48384",
+ "full_name": "fluoworite\/CVE-2025-48384",
+ "owner": {
+ "login": "fluoworite",
+ "id": 141347208,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141347208?v=4",
+ "html_url": "https:\/\/github.com\/fluoworite",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fluoworite\/CVE-2025-48384",
+ "description": "PoC for CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-08-03T03:29:29Z",
+ "updated_at": "2025-08-03T04:34:56Z",
+ "pushed_at": "2025-08-03T04:34:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031114965,
+ "name": "CVE-2025-48384-sub",
+ "full_name": "fluoworite\/CVE-2025-48384-sub",
+ "owner": {
+ "login": "fluoworite",
+ "id": 141347208,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141347208?v=4",
+ "html_url": "https:\/\/github.com\/fluoworite",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fluoworite\/CVE-2025-48384-sub",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-03T03:29:47Z",
+ "updated_at": "2025-08-03T04:33:05Z",
+ "pushed_at": "2025-08-03T04:33:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031268135,
+ "name": "CVE-2025-48384",
+ "full_name": "beishanxueyuan\/CVE-2025-48384",
+ "owner": {
+ "login": "beishanxueyuan",
+ "id": 138347114,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138347114?v=4",
+ "html_url": "https:\/\/github.com\/beishanxueyuan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/beishanxueyuan\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-03T11:36:45Z",
+ "updated_at": "2025-09-10T07:34:31Z",
+ "pushed_at": "2025-09-10T07:34:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031621759,
+ "name": "CVE-2025-48384-test",
+ "full_name": "beishanxueyuan\/CVE-2025-48384-test",
+ "owner": {
+ "login": "beishanxueyuan",
+ "id": 138347114,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138347114?v=4",
+ "html_url": "https:\/\/github.com\/beishanxueyuan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/beishanxueyuan\/CVE-2025-48384-test",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-04T04:56:02Z",
+ "updated_at": "2025-08-04T13:33:52Z",
+ "pushed_at": "2025-08-04T05:01:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1041519924,
+ "name": "CVE-2025-48384",
+ "full_name": "replicatorbot\/CVE-2025-48384",
+ "owner": {
+ "login": "replicatorbot",
+ "id": 222667623,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/222667623?v=4",
+ "html_url": "https:\/\/github.com\/replicatorbot",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/replicatorbot\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-20T15:52:58Z",
+ "updated_at": "2025-08-20T17:52:57Z",
+ "pushed_at": "2025-08-20T17:52:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1041520141,
+ "name": "CVE-2025-48384-POC",
+ "full_name": "replicatorbot\/CVE-2025-48384-POC",
+ "owner": {
+ "login": "replicatorbot",
+ "id": 222667623,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/222667623?v=4",
+ "html_url": "https:\/\/github.com\/replicatorbot",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/replicatorbot\/CVE-2025-48384-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-20T15:53:19Z",
+ "updated_at": "2025-08-20T19:06:27Z",
+ "pushed_at": "2025-08-20T19:06:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1044551271,
+ "name": "CVE-2025-48384",
+ "full_name": "eliox01\/CVE-2025-48384",
+ "owner": {
+ "login": "eliox01",
+ "id": 49138275,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49138275?v=4",
+ "html_url": "https:\/\/github.com\/eliox01",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/eliox01\/CVE-2025-48384",
+ "description": "PoC",
+ "fork": false,
+ "created_at": "2025-08-25T21:27:49Z",
+ "updated_at": "2025-08-25T21:27:53Z",
+ "pushed_at": "2025-08-25T21:27:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046357774,
+ "name": "CVE-2025-48384-poc",
+ "full_name": "jacobholtz\/CVE-2025-48384-poc",
+ "owner": {
+ "login": "jacobholtz",
+ "id": 87547604,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87547604?v=4",
+ "html_url": "https:\/\/github.com\/jacobholtz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jacobholtz\/CVE-2025-48384-poc",
+ "description": "PoC for CVE-2025-48384",
+ "fork": false,
+ "created_at": "2025-08-28T15:10:25Z",
+ "updated_at": "2025-09-02T15:24:39Z",
+ "pushed_at": "2025-09-02T15:24:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046384187,
+ "name": "CVE-2025-48384-submodule",
+ "full_name": "jacobholtz\/CVE-2025-48384-submodule",
+ "owner": {
+ "login": "jacobholtz",
+ "id": 87547604,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87547604?v=4",
+ "html_url": "https:\/\/github.com\/jacobholtz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jacobholtz\/CVE-2025-48384-submodule",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-28T15:54:22Z",
+ "updated_at": "2025-08-29T01:02:12Z",
+ "pushed_at": "2025-08-28T23:38:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046445895,
+ "name": "CVE-2025-48384-PoC-Part2",
+ "full_name": "butyraldehyde\/CVE-2025-48384-PoC-Part2",
+ "owner": {
+ "login": "butyraldehyde",
+ "id": 99754153,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99754153?v=4",
+ "html_url": "https:\/\/github.com\/butyraldehyde",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/butyraldehyde\/CVE-2025-48384-PoC-Part2",
+ "description": "RCE hook",
+ "fork": false,
+ "created_at": "2025-08-28T17:43:26Z",
+ "updated_at": "2025-09-23T20:14:37Z",
+ "pushed_at": "2025-09-23T20:14:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046484945,
+ "name": "CVE-2025-48384-PoC",
+ "full_name": "butyraldehyde\/CVE-2025-48384-PoC",
+ "owner": {
+ "login": "butyraldehyde",
+ "id": 99754153,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99754153?v=4",
+ "html_url": "https:\/\/github.com\/butyraldehyde",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/butyraldehyde\/CVE-2025-48384-PoC",
+ "description": "Built to call on CVE-2025-48384-PoC-Part2 for RCE",
+ "fork": false,
+ "created_at": "2025-08-28T18:54:58Z",
+ "updated_at": "2025-09-23T20:30:01Z",
+ "pushed_at": "2025-09-23T20:29:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046889797,
+ "name": "CVE-2025-48384",
+ "full_name": "arun1033\/CVE-2025-48384",
+ "owner": {
+ "login": "arun1033",
+ "id": 97432396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97432396?v=4",
+ "html_url": "https:\/\/github.com\/arun1033",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/arun1033\/CVE-2025-48384",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-29T11:48:10Z",
+ "updated_at": "2025-08-29T12:22:53Z",
+ "pushed_at": "2025-08-29T12:22:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1055422018,
"name": "CVE-2025-48384",
@@ -65,6 +1194,138 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109881195,
+ "name": "CVE-2025-48384-sub",
+ "full_name": "zr0n\/CVE-2025-48384-sub",
+ "owner": {
+ "login": "zr0n",
+ "id": 1934730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1934730?v=4",
+ "html_url": "https:\/\/github.com\/zr0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zr0n\/CVE-2025-48384-sub",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T12:13:01Z",
+ "updated_at": "2026-01-24T03:34:15Z",
+ "pushed_at": "2025-12-04T12:36:36Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109884019,
+ "name": "CVE-2025-48384-main",
+ "full_name": "zr0n\/CVE-2025-48384-main",
+ "owner": {
+ "login": "zr0n",
+ "id": 1934730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1934730?v=4",
+ "html_url": "https:\/\/github.com\/zr0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zr0n\/CVE-2025-48384-main",
+ "description": "A proof of concept of remote code execution",
+ "fork": false,
+ "created_at": "2025-12-04T12:17:58Z",
+ "updated_at": "2026-01-24T03:34:14Z",
+ "pushed_at": "2025-12-04T12:39:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116154392,
+ "name": "CVE-2025-48384",
+ "full_name": "vignesh21-git\/CVE-2025-48384",
+ "owner": {
+ "login": "vignesh21-git",
+ "id": 65699270,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65699270?v=4",
+ "html_url": "https:\/\/github.com\/vignesh21-git",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vignesh21-git\/CVE-2025-48384",
+ "description": "GIT vulnerability | Carriage Return and RCE on cloning",
+ "fork": false,
+ "created_at": "2025-12-14T10:04:41Z",
+ "updated_at": "2025-12-16T17:07:29Z",
+ "pushed_at": "2025-12-16T17:07:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116155780,
+ "name": "CVE-2025-48384-submodule",
+ "full_name": "vignesh21-git\/CVE-2025-48384-submodule",
+ "owner": {
+ "login": "vignesh21-git",
+ "id": 65699270,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65699270?v=4",
+ "html_url": "https:\/\/github.com\/vignesh21-git",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vignesh21-git\/CVE-2025-48384-submodule",
+ "description": "Test",
+ "fork": false,
+ "created_at": "2025-12-14T10:08:07Z",
+ "updated_at": "2025-12-16T17:07:00Z",
+ "pushed_at": "2025-12-16T17:06:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1146884632,
"name": "backup-exec-cve-48384",
diff --git a/2025/CVE-2025-4840.json b/2025/CVE-2025-4840.json
new file mode 100644
index 0000000000..3e056308cd
--- /dev/null
+++ b/2025/CVE-2025-4840.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1017295975,
+ "name": "CVE-2025-4840",
+ "full_name": "RandomRobbieBF\/CVE-2025-4840",
+ "owner": {
+ "login": "RandomRobbieBF",
+ "id": 51722811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
+ "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2025-4840",
+ "description": "Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection",
+ "fork": false,
+ "created_at": "2025-07-10T10:11:32Z",
+ "updated_at": "2026-02-24T12:58:48Z",
+ "pushed_at": "2025-07-10T10:11:54Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-48593.json b/2025/CVE-2025-48593.json
index bcbba09c8e..cc92f5b8a0 100644
--- a/2025/CVE-2025-48593.json
+++ b/2025/CVE-2025-48593.json
@@ -36,5 +36,73 @@
"watchers": 7,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1093166994,
+ "name": "blueshrimp",
+ "full_name": "zhuowei\/blueshrimp",
+ "owner": {
+ "login": "zhuowei",
+ "id": 704768,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/704768?v=4",
+ "html_url": "https:\/\/github.com\/zhuowei",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zhuowei\/blueshrimp",
+ "description": "Proof-of-concept for CVE-2025-48593",
+ "fork": false,
+ "created_at": "2025-11-10T02:08:08Z",
+ "updated_at": "2026-04-17T06:56:53Z",
+ "pushed_at": "2025-12-02T08:02:49Z",
+ "stargazers_count": 54,
+ "watchers_count": 54,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-48593"
+ ],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 54,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097694623,
+ "name": "CVE-2025-48593",
+ "full_name": "ranasen-rat\/CVE-2025-48593",
+ "owner": {
+ "login": "ranasen-rat",
+ "id": 82767287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82767287?v=4",
+ "html_url": "https:\/\/github.com\/ranasen-rat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ranasen-rat\/CVE-2025-48593",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-16T16:59:20Z",
+ "updated_at": "2026-02-08T08:33:38Z",
+ "pushed_at": "2025-11-16T17:00:37Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-4866.json b/2025/CVE-2025-4866.json
new file mode 100644
index 0000000000..2470643861
--- /dev/null
+++ b/2025/CVE-2025-4866.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016124877,
+ "name": "ble-cve2025-attack-new-version",
+ "full_name": "bloodcode-spasov\/ble-cve2025-attack-new-version",
+ "owner": {
+ "login": "bloodcode-spasov",
+ "id": 192834551,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192834551?v=4",
+ "html_url": "https:\/\/github.com\/bloodcode-spasov",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bloodcode-spasov\/ble-cve2025-attack-new-version",
+ "description": "# android-ble-cve-2025-4866 🔐 **PoC za CVE-2025-4866 — Android BLE ranjivost (javna verzija)** 📡 Iskorišćavanje slabosti u BLE autorizaciji na Android uređajima (public PoC only). 👨💻 Razvijeno od strane BloodCode Labs — 2025.",
+ "fork": false,
+ "created_at": "2025-07-08T14:22:25Z",
+ "updated_at": "2026-04-17T06:55:22Z",
+ "pushed_at": "2025-07-08T14:23:50Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-48703.json b/2025/CVE-2025-48703.json
index f3d20a2f54..122352f306 100644
--- a/2025/CVE-2025-48703.json
+++ b/2025/CVE-2025-48703.json
@@ -31,5 +31,76 @@
"watchers": 4,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1030050429,
+ "name": "CVE-2025-48703",
+ "full_name": "itstarsec\/CVE-2025-48703",
+ "owner": {
+ "login": "itstarsec",
+ "id": 75014161,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75014161?v=4",
+ "html_url": "https:\/\/github.com\/itstarsec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/itstarsec\/CVE-2025-48703",
+ "description": "CVE-2025-48703 là lỗ hổng mức độ nghiêm trọng trong CentOS Web Panel (CWP) cho phép kẻ tấn công không xác thực (unauthenticated) có thể thực thi mã từ xa (RCE) thông qua bỏ qua cơ chế xác thực và thực thi câu lệnh hệ thống. Lỗ hổng ảnh hưởng CWP từ phiên bản 0.9.8.1204 trở về trước, và đã được vá trên phiên bản mới nhất 0.9.8.1205.",
+ "fork": false,
+ "created_at": "2025-08-01T02:34:34Z",
+ "updated_at": "2025-08-02T09:03:25Z",
+ "pushed_at": "2025-08-02T09:03:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1094468306,
+ "name": "PoC-CVE-2025-48703",
+ "full_name": "ftz7\/PoC-CVE-2025-48703",
+ "owner": {
+ "login": "ftz7",
+ "id": 191657287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191657287?v=4",
+ "html_url": "https:\/\/github.com\/ftz7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ftz7\/PoC-CVE-2025-48703",
+ "description": "CVE-2025-48703 é uma vulnerabilidade de Execução Remota de Código (RCE) no módulo filemanager de um painel de hospedagem web (por exemplo, cPanel). Ocorre devido ao tratamento de entrada não sanitizado na função acc=changePerm, que permite que um atacante injete e execute comandos.",
+ "fork": false,
+ "created_at": "2025-11-11T18:42:57Z",
+ "updated_at": "2026-01-13T11:21:15Z",
+ "pushed_at": "2025-11-11T18:46:09Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "exploit",
+ "hacking",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-48757.json b/2025/CVE-2025-48757.json
index 442d06ce93..5ad9b18cde 100644
--- a/2025/CVE-2025-48757.json
+++ b/2025/CVE-2025-48757.json
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
- "updated_at": "2026-06-01T05:56:11Z",
+ "updated_at": "2026-06-02T16:27:14Z",
"pushed_at": "2026-04-30T08:42:55Z",
- "stargazers_count": 29,
- "watchers_count": 29,
+ "stargazers_count": 30,
+ "watchers_count": 30,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 3,
- "watchers": 29,
+ "watchers": 30,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-48799.json b/2025/CVE-2025-48799.json
new file mode 100644
index 0000000000..ace8a037ba
--- /dev/null
+++ b/2025/CVE-2025-48799.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1016163727,
+ "name": "CVE-2025-48799",
+ "full_name": "Wh04m1001\/CVE-2025-48799",
+ "owner": {
+ "login": "Wh04m1001",
+ "id": 44291883,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44291883?v=4",
+ "html_url": "https:\/\/github.com\/Wh04m1001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Wh04m1001\/CVE-2025-48799",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-08T15:26:04Z",
+ "updated_at": "2026-05-17T06:53:12Z",
+ "pushed_at": "2025-07-08T19:35:55Z",
+ "stargazers_count": 270,
+ "watchers_count": 270,
+ "has_discussions": false,
+ "forks_count": 69,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 69,
+ "watchers": 270,
+ "score": 0,
+ "subscribers_count": 3
+ },
+ {
+ "id": 1032550368,
+ "name": "CVE-2025-48799",
+ "full_name": "painoob\/CVE-2025-48799",
+ "owner": {
+ "login": "painoob",
+ "id": 8389015,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8389015?v=4",
+ "html_url": "https:\/\/github.com\/painoob",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/painoob\/CVE-2025-48799",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-05T13:22:32Z",
+ "updated_at": "2025-08-05T13:34:34Z",
+ "pushed_at": "2025-08-05T13:34:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1048927479,
+ "name": "CVE-2025-48799-",
+ "full_name": "gmh5225\/CVE-2025-48799-",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-48799-",
+ "description": "Sample exploit of patched vulnerability ",
+ "fork": false,
+ "created_at": "2025-09-02T08:29:35Z",
+ "updated_at": "2025-09-02T08:29:35Z",
+ "pushed_at": "2025-08-30T04:32:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-48827.json b/2025/CVE-2025-48827.json
index 636d6113f3..129025eef7 100644
--- a/2025/CVE-2025-48827.json
+++ b/2025/CVE-2025-48827.json
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1019227417,
+ "name": "CVE-2025-48827",
+ "full_name": "SystemVll\/CVE-2025-48827",
+ "owner": {
+ "login": "SystemVll",
+ "id": 69421356,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69421356?v=4",
+ "html_url": "https:\/\/github.com\/SystemVll",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SystemVll\/CVE-2025-48827",
+ "description": "This repository contains a proof-of-concept exploit for CVE-2025-48827, a critical authentication bypass vulnerability affecting vBulletin 5.0.0–5.7.5 and 6.0.0–6.0.3 when running on PHP 8.1 or later. The vulnerability allows unauthenticated attackers to invoke protected API methods remotely.",
+ "fork": false,
+ "created_at": "2025-07-14T02:17:46Z",
+ "updated_at": "2025-08-12T22:24:27Z",
+ "pushed_at": "2025-07-14T02:18:07Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-48932.json b/2025/CVE-2025-48932.json
new file mode 100644
index 0000000000..fc095ae6ba
--- /dev/null
+++ b/2025/CVE-2025-48932.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096243693,
+ "name": "CVE-2025-48932---exploit",
+ "full_name": "XploitGh0st\/CVE-2025-48932---exploit",
+ "owner": {
+ "login": "XploitGh0st",
+ "id": 174451410,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174451410?v=4",
+ "html_url": "https:\/\/github.com\/XploitGh0st",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/XploitGh0st\/CVE-2025-48932---exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-14T06:20:19Z",
+ "updated_at": "2026-05-22T04:07:20Z",
+ "pushed_at": "2025-11-14T06:20:25Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49029.json b/2025/CVE-2025-49029.json
new file mode 100644
index 0000000000..52c410e576
--- /dev/null
+++ b/2025/CVE-2025-49029.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1011971495,
+ "name": "CVE-2025-49029",
+ "full_name": "Nxploited\/CVE-2025-49029",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-49029",
+ "description": " WordPress Custom Login And Signup Widget Plugin <= 1.0 is vulnerable to Arbitrary Code Execution ",
+ "fork": false,
+ "created_at": "2025-07-01T15:54:44Z",
+ "updated_at": "2025-12-12T19:12:53Z",
+ "pushed_at": "2025-07-01T16:05:52Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49113.json b/2025/CVE-2025-49113.json
index 95808cc866..0c264aacd8 100644
--- a/2025/CVE-2025-49113.json
+++ b/2025/CVE-2025-49113.json
@@ -299,6 +299,371 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1018018485,
+ "name": "CVE-2025-49113-Simulation",
+ "full_name": "hackmelocal\/CVE-2025-49113-Simulation",
+ "owner": {
+ "login": "hackmelocal",
+ "id": 213745023,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213745023?v=4",
+ "html_url": "https:\/\/github.com\/hackmelocal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hackmelocal\/CVE-2025-49113-Simulation",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-11T13:19:57Z",
+ "updated_at": "2025-07-24T19:30:22Z",
+ "pushed_at": "2025-07-24T19:30:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1021786301,
+ "name": "CVE-2025-49113",
+ "full_name": "Joelp03\/CVE-2025-49113",
+ "owner": {
+ "login": "Joelp03",
+ "id": 68335278,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68335278?v=4",
+ "html_url": "https:\/\/github.com\/Joelp03",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Joelp03\/CVE-2025-49113",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-18T00:36:34Z",
+ "updated_at": "2025-09-29T07:38:58Z",
+ "pushed_at": "2025-07-18T00:38:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1022817935,
+ "name": "CVE-2025-49113",
+ "full_name": "00xCanelo\/CVE-2025-49113",
+ "owner": {
+ "login": "00xCanelo",
+ "id": 164969443,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164969443?v=4",
+ "html_url": "https:\/\/github.com\/00xCanelo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/00xCanelo\/CVE-2025-49113",
+ "description": "💥 Python Exploit for CVE-2025-49113 | Roundcube Webmail RCE via PHP Object Injection",
+ "fork": false,
+ "created_at": "2025-07-19T22:35:27Z",
+ "updated_at": "2026-04-28T13:46:42Z",
+ "pushed_at": "2025-07-19T22:49:29Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 6,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 6,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1040240775,
+ "name": "CVE-2025-49113-Roundcube_1.6.10",
+ "full_name": "CyberQuestor-infosec\/CVE-2025-49113-Roundcube_1.6.10",
+ "owner": {
+ "login": "CyberQuestor-infosec",
+ "id": 214915913,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214915913?v=4",
+ "html_url": "https:\/\/github.com\/CyberQuestor-infosec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CyberQuestor-infosec\/CVE-2025-49113-Roundcube_1.6.10",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-18T17:06:11Z",
+ "updated_at": "2025-08-18T17:29:57Z",
+ "pushed_at": "2025-08-18T17:29:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1040457952,
+ "name": "CVE-2025-49113-Roundcube-RCE-PHP",
+ "full_name": "SteamPunk424\/CVE-2025-49113-Roundcube-RCE-PHP",
+ "owner": {
+ "login": "SteamPunk424",
+ "id": 32554693,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32554693?v=4",
+ "html_url": "https:\/\/github.com\/SteamPunk424",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SteamPunk424\/CVE-2025-49113-Roundcube-RCE-PHP",
+ "description": "This is a rewritten exploit to work with php",
+ "fork": false,
+ "created_at": "2025-08-19T02:35:15Z",
+ "updated_at": "2025-08-19T02:46:55Z",
+ "pushed_at": "2025-08-19T02:46:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1043613788,
+ "name": "CVE-2025-49113",
+ "full_name": "Zwique\/CVE-2025-49113",
+ "owner": {
+ "login": "Zwique",
+ "id": 97537483,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97537483?v=4",
+ "html_url": "https:\/\/github.com\/Zwique",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Zwique\/CVE-2025-49113",
+ "description": "POC of CVE-2025-49113",
+ "fork": false,
+ "created_at": "2025-08-24T08:37:47Z",
+ "updated_at": "2026-05-01T23:14:31Z",
+ "pushed_at": "2025-08-25T05:35:20Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-49113"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047154262,
+ "name": "CVE-2025-49113",
+ "full_name": "AC8999\/CVE-2025-49113",
+ "owner": {
+ "login": "AC8999",
+ "id": 207462763,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207462763?v=4",
+ "html_url": "https:\/\/github.com\/AC8999",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AC8999\/CVE-2025-49113",
+ "description": "Python Script for CVE-2025-49113. Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program\/actions\/settings\/upload.php, leading to PHP Object Deserialization.",
+ "fork": false,
+ "created_at": "2025-08-29T20:40:40Z",
+ "updated_at": "2025-08-29T20:43:39Z",
+ "pushed_at": "2025-08-29T20:43:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047240711,
+ "name": "CVE-2025-49113",
+ "full_name": "LeakForge\/CVE-2025-49113",
+ "owner": {
+ "login": "LeakForge",
+ "id": 191879251,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191879251?v=4",
+ "html_url": "https:\/\/github.com\/LeakForge",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LeakForge\/CVE-2025-49113",
+ "description": "Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization",
+ "fork": false,
+ "created_at": "2025-08-30T01:56:35Z",
+ "updated_at": "2025-08-30T01:56:54Z",
+ "pushed_at": "2025-08-30T01:56:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1053843232,
+ "name": "Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-",
+ "full_name": "Zuack55\/Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-",
+ "owner": {
+ "login": "Zuack55",
+ "id": 101743518,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101743518?v=4",
+ "html_url": "https:\/\/github.com\/Zuack55",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Zuack55\/Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-10T02:37:49Z",
+ "updated_at": "2025-09-10T03:05:39Z",
+ "pushed_at": "2025-09-10T03:05:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1059915732,
+ "name": "CVE-2025-49113_exploit_cookies",
+ "full_name": "l4f2s4\/CVE-2025-49113_exploit_cookies",
+ "owner": {
+ "login": "l4f2s4",
+ "id": 88287385,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88287385?v=4",
+ "html_url": "https:\/\/github.com\/l4f2s4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/l4f2s4\/CVE-2025-49113_exploit_cookies",
+ "description": "CVE-2025-49113 - Roundcube Remote Code Execution",
+ "fork": false,
+ "created_at": "2025-09-19T06:07:52Z",
+ "updated_at": "2025-09-19T08:01:32Z",
+ "pushed_at": "2025-09-19T06:34:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097891202,
+ "name": "roundcube-cve-2025-49113-lab",
+ "full_name": "ankitpandey383\/roundcube-cve-2025-49113-lab",
+ "owner": {
+ "login": "ankitpandey383",
+ "id": 238631250,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238631250?v=4",
+ "html_url": "https:\/\/github.com\/ankitpandey383",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ankitpandey383\/roundcube-cve-2025-49113-lab",
+ "description": "Hands-on exploitation lab for Roundcube Webmail CVE-2025-49113 (authenticated PHP object deserialization → RCE) to read \/secret.txt.",
+ "fork": false,
+ "created_at": "2025-11-17T01:39:27Z",
+ "updated_at": "2025-11-17T02:08:01Z",
+ "pushed_at": "2025-11-17T02:07:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1149953987,
"name": "CVE-2025-49113-PoC",
diff --git a/2025/CVE-2025-49131.json b/2025/CVE-2025-49131.json
new file mode 100644
index 0000000000..79ebb80e8f
--- /dev/null
+++ b/2025/CVE-2025-49131.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1125055039,
+ "name": "cve-2025-49131-poc",
+ "full_name": "Wenura17125\/cve-2025-49131-poc",
+ "owner": {
+ "login": "Wenura17125",
+ "id": 95497272,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95497272?v=4",
+ "html_url": "https:\/\/github.com\/Wenura17125",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Wenura17125\/cve-2025-49131-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-30T04:30:57Z",
+ "updated_at": "2025-12-30T04:35:17Z",
+ "pushed_at": "2025-12-30T04:35:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49132.json b/2025/CVE-2025-49132.json
index dd142c34e8..089a6bfe02 100644
--- a/2025/CVE-2025-49132.json
+++ b/2025/CVE-2025-49132.json
@@ -230,6 +230,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1040068920,
+ "name": "CVE-2025-49132_poc",
+ "full_name": "GRodolphe\/CVE-2025-49132_poc",
+ "owner": {
+ "login": "GRodolphe",
+ "id": 38458403,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38458403?v=4",
+ "html_url": "https:\/\/github.com\/GRodolphe",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GRodolphe\/CVE-2025-49132_poc",
+ "description": "This is an improved version of the CVE-2025-49132 proof of concept exploit.",
+ "fork": false,
+ "created_at": "2025-08-18T12:10:12Z",
+ "updated_at": "2026-02-20T13:14:50Z",
+ "pushed_at": "2025-08-18T12:11:57Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1064147378,
+ "name": "CVE-2025-49132",
+ "full_name": "WebSafety-2tina\/CVE-2025-49132",
+ "owner": {
+ "login": "WebSafety-2tina",
+ "id": 59686577,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59686577?v=4",
+ "html_url": "https:\/\/github.com\/WebSafety-2tina",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/WebSafety-2tina\/CVE-2025-49132",
+ "description": "CVE-2025-49132",
+ "fork": false,
+ "created_at": "2025-09-25T15:55:36Z",
+ "updated_at": "2025-09-25T16:10:17Z",
+ "pushed_at": "2025-09-25T16:10:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1152431389,
"name": "CVE-2025-49132",
@@ -763,39 +829,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1166871280,
- "name": "CVE-2025-49132-Pterodactyl-RCE",
- "full_name": "unixskid\/CVE-2025-49132-Pterodactyl-RCE",
- "owner": {
- "login": "unixskid",
- "id": 263952147,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/263952147?v=4",
- "html_url": "https:\/\/github.com\/unixskid",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/unixskid\/CVE-2025-49132-Pterodactyl-RCE",
- "description": null,
- "fork": false,
- "created_at": "2026-02-25T17:43:35Z",
- "updated_at": "2026-05-02T23:40:30Z",
- "pushed_at": "2026-02-25T18:30:25Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1205173859,
"name": "HTB-Pterodactyl-Writeup",
diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json
index 40324a9c76..ac1d86c96f 100644
--- a/2025/CVE-2025-49144.json
+++ b/2025/CVE-2025-49144.json
@@ -137,6 +137,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1012252636,
+ "name": "CVE-2025-49144-Research",
+ "full_name": "timsonner\/CVE-2025-49144-Research",
+ "owner": {
+ "login": "timsonner",
+ "id": 66705347,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66705347?v=4",
+ "html_url": "https:\/\/github.com\/timsonner",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/timsonner\/CVE-2025-49144-Research",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-02T04:03:48Z",
+ "updated_at": "2025-07-02T04:03:56Z",
+ "pushed_at": "2025-07-02T04:03:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1024476370,
"name": "cve-2025-49144",
@@ -170,6 +203,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1058707508,
+ "name": "CVE-2025-49144",
+ "full_name": "onniio\/CVE-2025-49144",
+ "owner": {
+ "login": "onniio",
+ "id": 58563974,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58563974?v=4",
+ "html_url": "https:\/\/github.com\/onniio",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/onniio\/CVE-2025-49144",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-17T12:51:29Z",
+ "updated_at": "2025-09-17T12:51:34Z",
+ "pushed_at": "2025-09-17T12:51:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1060296085,
"name": "CVE-2025-49144_PoC",
@@ -185,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
- "updated_at": "2026-06-02T11:20:37Z",
- "pushed_at": "2026-06-02T11:20:33Z",
+ "updated_at": "2026-06-02T18:30:26Z",
+ "pushed_at": "2026-06-02T18:30:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-49388.json b/2025/CVE-2025-49388.json
new file mode 100644
index 0000000000..d540b4e567
--- /dev/null
+++ b/2025/CVE-2025-49388.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1051031547,
+ "name": "CVE-2025-49388",
+ "full_name": "Nxploited\/CVE-2025-49388",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-49388",
+ "description": "Miraculous Core (kamleshyadav) ≤ 2.0.7 — Unauthenticated Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-09-05T10:34:05Z",
+ "updated_at": "2026-03-13T08:56:52Z",
+ "pushed_at": "2025-09-05T10:39:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49493.json b/2025/CVE-2025-49493.json
new file mode 100644
index 0000000000..97709deda8
--- /dev/null
+++ b/2025/CVE-2025-49493.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1019223861,
+ "name": "CVE-2025-49493",
+ "full_name": "SystemVll\/CVE-2025-49493",
+ "owner": {
+ "login": "SystemVll",
+ "id": 69421356,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69421356?v=4",
+ "html_url": "https:\/\/github.com\/SystemVll",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SystemVll\/CVE-2025-49493",
+ "description": "This is a Python-based exploit for CVE-2025-49493, which affects Akamai CloudTest versions before 60 2025.06.02 (12988). The vulnerability allows for XML External Entity (XXE) injection through the SOAP service endpoint.",
+ "fork": false,
+ "created_at": "2025-07-14T02:05:27Z",
+ "updated_at": "2025-08-12T22:24:51Z",
+ "pushed_at": "2025-07-14T02:07:28Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49596.json b/2025/CVE-2025-49596.json
index 8551f83866..424b0324c4 100644
--- a/2025/CVE-2025-49596.json
+++ b/2025/CVE-2025-49596.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1013270647,
+ "name": "MCP-Inspector-CVE-2025-49596",
+ "full_name": "ashiqrehan-21\/MCP-Inspector-CVE-2025-49596",
+ "owner": {
+ "login": "ashiqrehan-21",
+ "id": 216858794,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216858794?v=4",
+ "html_url": "https:\/\/github.com\/ashiqrehan-21",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ashiqrehan-21\/MCP-Inspector-CVE-2025-49596",
+ "description": "MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the \/sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.",
+ "fork": false,
+ "created_at": "2025-07-03T16:12:27Z",
+ "updated_at": "2025-07-04T01:52:26Z",
+ "pushed_at": "2025-07-03T16:23:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1191179803,
"name": "CVE-2025-49596-PoC",
diff --git a/2025/CVE-2025-49706.json b/2025/CVE-2025-49706.json
new file mode 100644
index 0000000000..296ece3f64
--- /dev/null
+++ b/2025/CVE-2025-49706.json
@@ -0,0 +1,43 @@
+[
+ {
+ "id": 1023087261,
+ "name": "CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation",
+ "full_name": "AdityaBhatt3010\/CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation",
+ "description": "A deep dive into CVE-2025-49706 — the SharePoint spoofing flaw now exploited in the wild for stealthy web shell deployment and privilege escalation.",
+ "fork": false,
+ "created_at": "2025-07-20T13:55:28Z",
+ "updated_at": "2026-02-28T08:03:29Z",
+ "pushed_at": "2025-07-20T14:06:49Z",
+ "stargazers_count": 18,
+ "watchers_count": 18,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-49706",
+ "cybersecurity",
+ "microsoft-sharepoint",
+ "sharepoint",
+ "sharepoint-2016",
+ "toolshell"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 18,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json
index a0387c7991..8d073ad2a6 100644
--- a/2025/CVE-2025-49844.json
+++ b/2025/CVE-2025-49844.json
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
- "updated_at": "2026-06-02T11:40:23Z",
- "pushed_at": "2026-06-02T11:40:19Z",
+ "updated_at": "2026-06-02T14:47:43Z",
+ "pushed_at": "2026-06-02T14:38:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
- "updated_at": "2026-06-02T11:41:15Z",
- "pushed_at": "2026-06-02T11:41:11Z",
+ "updated_at": "2026-06-02T14:51:57Z",
+ "pushed_at": "2026-06-02T14:39:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -103,6 +103,77 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1086936331,
+ "name": "cve-2025-49844",
+ "full_name": "saneki\/cve-2025-49844",
+ "owner": {
+ "login": "saneki",
+ "id": 4348610,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4348610?v=4",
+ "html_url": "https:\/\/github.com\/saneki",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saneki\/cve-2025-49844",
+ "description": "Proof-of-concept for CVE-2025-49844",
+ "fork": false,
+ "created_at": "2025-10-31T05:59:25Z",
+ "updated_at": "2026-05-23T06:44:44Z",
+ "pushed_at": "2025-11-20T07:22:56Z",
+ "stargazers_count": 25,
+ "watchers_count": 25,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-49844",
+ "lua",
+ "redis",
+ "redishell"
+ ],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 25,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1108954126,
+ "name": "CVE-2025-49844-RediShell-AI-made-Revshell",
+ "full_name": "zbyszkok\/CVE-2025-49844-RediShell-AI-made-Revshell",
+ "owner": {
+ "login": "zbyszkok",
+ "id": 86567653,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86567653?v=4",
+ "html_url": "https:\/\/github.com\/zbyszkok",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zbyszkok\/CVE-2025-49844-RediShell-AI-made-Revshell",
+ "description": "Untested completition of the Redishell PoC made by AI",
+ "fork": false,
+ "created_at": "2025-12-03T06:22:38Z",
+ "updated_at": "2025-12-03T06:22:38Z",
+ "pushed_at": "2025-11-15T17:55:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1177305425,
"name": "CVE-2025-49844",
diff --git a/2025/CVE-2025-50110.json b/2025/CVE-2025-50110.json
new file mode 100644
index 0000000000..74b0227478
--- /dev/null
+++ b/2025/CVE-2025-50110.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1054233034,
+ "name": "CVE-2025-50110",
+ "full_name": "shinyColumn\/CVE-2025-50110",
+ "owner": {
+ "login": "shinyColumn",
+ "id": 136841832,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136841832?v=4",
+ "html_url": "https:\/\/github.com\/shinyColumn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shinyColumn\/CVE-2025-50110",
+ "description": "Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application",
+ "fork": false,
+ "created_at": "2025-09-10T14:47:55Z",
+ "updated_at": "2025-09-25T09:05:24Z",
+ "pushed_at": "2025-09-25T09:05:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50154.json b/2025/CVE-2025-50154.json
index 8f84e2db3a..64bfbe4b0c 100644
--- a/2025/CVE-2025-50154.json
+++ b/2025/CVE-2025-50154.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1037130204,
+ "name": "CVE-2025-50154",
+ "full_name": "zenzue\/CVE-2025-50154",
+ "owner": {
+ "login": "zenzue",
+ "id": 19271340,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19271340?v=4",
+ "html_url": "https:\/\/github.com\/zenzue",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zenzue\/CVE-2025-50154",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-13T05:40:53Z",
+ "updated_at": "2026-02-02T14:41:46Z",
+ "pushed_at": "2025-08-13T06:01:33Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1037206420,
"name": "CVE-2025-50154",
@@ -38,5 +71,38 @@
"watchers": 53,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1038881154,
+ "name": "CVE-2025-50154-Aggressor-Script",
+ "full_name": "Ash1996x\/CVE-2025-50154-Aggressor-Script",
+ "owner": {
+ "login": "Ash1996x",
+ "id": 157934027,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157934027?v=4",
+ "html_url": "https:\/\/github.com\/Ash1996x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ash1996x\/CVE-2025-50154-Aggressor-Script",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-16T02:12:24Z",
+ "updated_at": "2025-09-12T16:56:17Z",
+ "pushed_at": "2025-09-12T16:56:14Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-50165.json b/2025/CVE-2025-50165.json
index 12f9cfef13..b95c3c6f8b 100644
--- a/2025/CVE-2025-50165.json
+++ b/2025/CVE-2025-50165.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1111907115,
+ "name": "CVE-2025-50165-x64-Exploit",
+ "full_name": "encrypter15\/CVE-2025-50165-x64-Exploit",
+ "owner": {
+ "login": "encrypter15",
+ "id": 131310758,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131310758?v=4",
+ "html_url": "https:\/\/github.com\/encrypter15",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/encrypter15\/CVE-2025-50165-x64-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T21:14:50Z",
+ "updated_at": "2026-06-01T00:58:07Z",
+ "pushed_at": "2025-12-07T21:14:54Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1246416714,
"name": "CVE-2025-50165-Windows-Graphics-Component-RCE",
diff --git a/2025/CVE-2025-5025.json b/2025/CVE-2025-5025.json
new file mode 100644
index 0000000000..837e9da39c
--- /dev/null
+++ b/2025/CVE-2025-5025.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023987433,
+ "name": "cve-2025-5025",
+ "full_name": "KiPhuong\/cve-2025-5025",
+ "owner": {
+ "login": "KiPhuong",
+ "id": 128106302,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128106302?v=4",
+ "html_url": "https:\/\/github.com\/KiPhuong",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KiPhuong\/cve-2025-5025",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T02:52:06Z",
+ "updated_at": "2025-07-22T04:12:35Z",
+ "pushed_at": "2025-07-22T04:12:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50286.json b/2025/CVE-2025-50286.json
index 7c4c6cf213..7036ddc9ca 100644
--- a/2025/CVE-2025-50286.json
+++ b/2025/CVE-2025-50286.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1032212350,
+ "name": "CVE-2025-50286",
+ "full_name": "binneko\/CVE-2025-50286",
+ "owner": {
+ "login": "binneko",
+ "id": 205937237,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205937237?v=4",
+ "html_url": "https:\/\/github.com\/binneko",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/binneko\/CVE-2025-50286",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-05T01:46:20Z",
+ "updated_at": "2026-03-25T16:19:37Z",
+ "pushed_at": "2025-08-05T07:51:07Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1169443539,
"name": "CVE-2025-50286",
diff --git a/2025/CVE-2025-50340.json b/2025/CVE-2025-50340.json
new file mode 100644
index 0000000000..fbae925c12
--- /dev/null
+++ b/2025/CVE-2025-50340.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029551494,
+ "name": "SOGo_web_mail-vulnerability-CVE-2025-50340",
+ "full_name": "millad7\/SOGo_web_mail-vulnerability-CVE-2025-50340",
+ "owner": {
+ "login": "millad7",
+ "id": 37615343,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37615343?v=4",
+ "html_url": "https:\/\/github.com\/millad7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/millad7\/SOGo_web_mail-vulnerability-CVE-2025-50340",
+ "description": "Insecure Direct Object Reference (IDOR vulnerability) in SOGo Webmail Allows a user to send emails on behalf of another user. ",
+ "fork": false,
+ "created_at": "2025-07-31T08:04:53Z",
+ "updated_at": "2025-07-31T08:43:44Z",
+ "pushed_at": "2025-07-31T08:43:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50341.json b/2025/CVE-2025-50341.json
new file mode 100644
index 0000000000..80be89d2c9
--- /dev/null
+++ b/2025/CVE-2025-50341.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029521923,
+ "name": "Axelor-vulnerability-CVE-2025-50341",
+ "full_name": "millad7\/Axelor-vulnerability-CVE-2025-50341",
+ "owner": {
+ "login": "millad7",
+ "id": 37615343,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37615343?v=4",
+ "html_url": "https:\/\/github.com\/millad7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/millad7\/Axelor-vulnerability-CVE-2025-50341",
+ "description": "Public advisory for CVE-2025-50341 in Axelor",
+ "fork": false,
+ "created_at": "2025-07-31T07:08:48Z",
+ "updated_at": "2025-07-31T07:58:32Z",
+ "pushed_at": "2025-07-31T07:58:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50360.json b/2025/CVE-2025-50360.json
new file mode 100644
index 0000000000..15f7d178bf
--- /dev/null
+++ b/2025/CVE-2025-50360.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023561164,
+ "name": "CVE-2025-50360",
+ "full_name": "Ch1keen\/CVE-2025-50360",
+ "owner": {
+ "login": "Ch1keen",
+ "id": 40013212,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40013212?v=4",
+ "html_url": "https:\/\/github.com\/Ch1keen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ch1keen\/CVE-2025-50360",
+ "description": "Report and PoC of Heap Buffer Overflow in Pepper Language before version 0.1.1, commit 961a5d9988c5986d563310275adad3fd181b2bb7",
+ "fork": false,
+ "created_at": "2025-07-21T10:48:59Z",
+ "updated_at": "2025-08-13T13:19:04Z",
+ "pushed_at": "2025-08-13T13:03:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50361.json b/2025/CVE-2025-50361.json
new file mode 100644
index 0000000000..ead9eb39a5
--- /dev/null
+++ b/2025/CVE-2025-50361.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016670909,
+ "name": "CVE-2025-50361",
+ "full_name": "Ch1keen\/CVE-2025-50361",
+ "owner": {
+ "login": "Ch1keen",
+ "id": 40013212,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40013212?v=4",
+ "html_url": "https:\/\/github.com\/Ch1keen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ch1keen\/CVE-2025-50361",
+ "description": "Report and PoC of Global Buffer Overflow on SmallBASIC before 02364eff880ba62afac67bcceebafade2b40d21f",
+ "fork": false,
+ "created_at": "2025-07-09T10:56:10Z",
+ "updated_at": "2025-08-13T13:18:21Z",
+ "pushed_at": "2025-08-13T13:13:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50383.json b/2025/CVE-2025-50383.json
new file mode 100644
index 0000000000..59a2f20db3
--- /dev/null
+++ b/2025/CVE-2025-50383.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1040691342,
+ "name": "CVE-2025-50383",
+ "full_name": "Abdullah4eb\/CVE-2025-50383",
+ "owner": {
+ "login": "Abdullah4eb",
+ "id": 89554399,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89554399?v=4",
+ "html_url": "https:\/\/github.com\/Abdullah4eb",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Abdullah4eb\/CVE-2025-50383",
+ "description": "A low-privileged user can exploit this via a crafted order_by parameter, causing time-based blind SQL injection.",
+ "fork": false,
+ "created_at": "2025-08-19T11:11:40Z",
+ "updated_at": "2025-08-29T21:47:11Z",
+ "pushed_at": "2025-08-29T21:47:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50428.json b/2025/CVE-2025-50428.json
new file mode 100644
index 0000000000..2b9e16b801
--- /dev/null
+++ b/2025/CVE-2025-50428.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1037590728,
+ "name": "cve-2025-50428",
+ "full_name": "security-smarttecs\/cve-2025-50428",
+ "owner": {
+ "login": "security-smarttecs",
+ "id": 127349162,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127349162?v=4",
+ "html_url": "https:\/\/github.com\/security-smarttecs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/security-smarttecs\/cve-2025-50428",
+ "description": "Proof of concept for the vulnerability CVE-2025-50428: Authenticated OS Command Injection in RaspAP",
+ "fork": false,
+ "created_at": "2025-08-13T20:08:35Z",
+ "updated_at": "2025-08-13T20:19:49Z",
+ "pushed_at": "2025-08-13T20:19:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50433.json b/2025/CVE-2025-50433.json
new file mode 100644
index 0000000000..c6e82feda2
--- /dev/null
+++ b/2025/CVE-2025-50433.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100029441,
+ "name": "CVE-2025-50433",
+ "full_name": "0xMandor\/CVE-2025-50433",
+ "owner": {
+ "login": "0xMandor",
+ "id": 144027767,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144027767?v=4",
+ "html_url": "https:\/\/github.com\/0xMandor",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xMandor\/CVE-2025-50433",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-19T18:43:24Z",
+ "updated_at": "2025-11-27T15:23:34Z",
+ "pushed_at": "2025-11-27T15:23:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": true,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "collaborators_only",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50460.json b/2025/CVE-2025-50460.json
new file mode 100644
index 0000000000..8fc40f779b
--- /dev/null
+++ b/2025/CVE-2025-50460.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1028846608,
+ "name": "CVE-2025-50460",
+ "full_name": "Anchor0221\/CVE-2025-50460",
+ "owner": {
+ "login": "Anchor0221",
+ "id": 72548964,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72548964?v=4",
+ "html_url": "https:\/\/github.com\/Anchor0221",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Anchor0221\/CVE-2025-50460",
+ "description": "Technical Details and Exploit for CVE-2025-50460",
+ "fork": false,
+ "created_at": "2025-07-30T06:37:46Z",
+ "updated_at": "2025-08-15T02:35:23Z",
+ "pushed_at": "2025-08-15T02:35:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50461.json b/2025/CVE-2025-50461.json
new file mode 100644
index 0000000000..7cbb77bb6c
--- /dev/null
+++ b/2025/CVE-2025-50461.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1038408173,
+ "name": "CVE-2025-50461",
+ "full_name": "Anchor0221\/CVE-2025-50461",
+ "owner": {
+ "login": "Anchor0221",
+ "id": 72548964,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72548964?v=4",
+ "html_url": "https:\/\/github.com\/Anchor0221",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Anchor0221\/CVE-2025-50461",
+ "description": "Technical Details and Exploit for CVE-2025-50461",
+ "fork": false,
+ "created_at": "2025-08-15T06:26:57Z",
+ "updated_at": "2025-08-15T08:14:02Z",
+ "pushed_at": "2025-08-15T08:13:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50472.json b/2025/CVE-2025-50472.json
new file mode 100644
index 0000000000..dfd1dcf36f
--- /dev/null
+++ b/2025/CVE-2025-50472.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1028740292,
+ "name": "CVE-2025-50472",
+ "full_name": "Before-Rain\/CVE-2025-50472",
+ "owner": {
+ "login": "Before-Rain",
+ "id": 65607895,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65607895?v=4",
+ "html_url": "https:\/\/github.com\/Before-Rain",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Before-Rain\/CVE-2025-50472",
+ "description": "Technical Details and Exploit for CVE-2025-50472",
+ "fork": false,
+ "created_at": "2025-07-30T02:02:13Z",
+ "updated_at": "2025-08-15T08:14:22Z",
+ "pushed_at": "2025-08-04T02:20:50Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50481.json b/2025/CVE-2025-50481.json
new file mode 100644
index 0000000000..7847556f4b
--- /dev/null
+++ b/2025/CVE-2025-50481.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1014437887,
+ "name": "Mezzanine-CMS-6.1.0-XSS",
+ "full_name": "kevinpdicks\/Mezzanine-CMS-6.1.0-XSS",
+ "owner": {
+ "login": "kevinpdicks",
+ "id": 31097827,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31097827?v=4",
+ "html_url": "https:\/\/github.com\/kevinpdicks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kevinpdicks\/Mezzanine-CMS-6.1.0-XSS",
+ "description": "Mezzanine CMS 6.1.0 XSS (CVE-2025-50481)",
+ "fork": false,
+ "created_at": "2025-07-05T18:15:01Z",
+ "updated_at": "2025-07-23T21:11:00Z",
+ "pushed_at": "2025-07-23T21:10:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-505050.json b/2025/CVE-2025-505050.json
new file mode 100644
index 0000000000..73c929e7cb
--- /dev/null
+++ b/2025/CVE-2025-505050.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113975728,
+ "name": "CVE-2025-505050",
+ "full_name": "aljoharasubaie\/CVE-2025-505050",
+ "owner": {
+ "login": "aljoharasubaie",
+ "id": 90615766,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90615766?v=4",
+ "html_url": "https:\/\/github.com\/aljoharasubaie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aljoharasubaie\/CVE-2025-505050",
+ "description": "An issue was discovered in machpanel 8 allowing attackers to execute arbitrary commands via the ticket text box.",
+ "fork": false,
+ "created_at": "2025-12-10T18:14:14Z",
+ "updated_at": "2025-12-26T13:07:23Z",
+ "pushed_at": "2025-12-26T13:07:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2023/CVE-2023-1415.json b/2025/CVE-2025-50565.json
similarity index 56%
rename from 2023/CVE-2023-1415.json
rename to 2025/CVE-2025-50565.json
index ca7c20f835..97bf945b3d 100644
--- a/2023/CVE-2023-1415.json
+++ b/2025/CVE-2025-50565.json
@@ -1,21 +1,21 @@
[
{
- "id": 614268694,
- "name": "CVE-2023-1415",
- "full_name": "0xxtoby\/CVE-2023-1415",
+ "id": 1048128222,
+ "name": "CVE-2025-50565",
+ "full_name": "m0b1u3\/CVE-2025-50565",
"owner": {
- "login": "0xxtoby",
- "id": 64345433,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64345433?v=4",
- "html_url": "https:\/\/github.com\/0xxtoby",
+ "login": "m0b1u3",
+ "id": 108753162,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108753162?v=4",
+ "html_url": "https:\/\/github.com\/m0b1u3",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/0xxtoby\/CVE-2023-1415",
+ "html_url": "https:\/\/github.com\/m0b1u3\/CVE-2025-50565",
"description": null,
"fork": false,
- "created_at": "2023-03-15T08:44:59Z",
- "updated_at": "2023-03-17T04:50:55Z",
- "pushed_at": "2023-03-15T08:48:43Z",
+ "created_at": "2025-09-01T01:04:00Z",
+ "updated_at": "2025-09-01T01:25:55Z",
+ "pushed_at": "2025-09-01T01:25:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
- "subscribers_count": 1
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-50592.json b/2025/CVE-2025-50592.json
new file mode 100644
index 0000000000..11710c7409
--- /dev/null
+++ b/2025/CVE-2025-50592.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1031981717,
+ "name": "CVE-2025-50592",
+ "full_name": "1515601525\/CVE-2025-50592",
+ "owner": {
+ "login": "1515601525",
+ "id": 56240467,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56240467?v=4",
+ "html_url": "https:\/\/github.com\/1515601525",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/1515601525\/CVE-2025-50592",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-04T16:11:20Z",
+ "updated_at": "2025-10-01T11:54:38Z",
+ "pushed_at": "2025-08-04T16:12:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50675.json b/2025/CVE-2025-50675.json
new file mode 100644
index 0000000000..95d73a33d1
--- /dev/null
+++ b/2025/CVE-2025-50675.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1032564825,
+ "name": "CVE-2025-50675-GPMAW-Permissions",
+ "full_name": "LukeSec\/CVE-2025-50675-GPMAW-Permissions",
+ "owner": {
+ "login": "LukeSec",
+ "id": 224803894,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224803894?v=4",
+ "html_url": "https:\/\/github.com\/LukeSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LukeSec\/CVE-2025-50675-GPMAW-Permissions",
+ "description": "CVE-2025-50675: Insecure install folder permissions in GPMAW bioinformatics software",
+ "fork": false,
+ "created_at": "2025-08-05T13:45:33Z",
+ "updated_at": "2025-08-05T13:50:44Z",
+ "pushed_at": "2025-08-05T13:50:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50754.json b/2025/CVE-2025-50754.json
new file mode 100644
index 0000000000..41bc7707c7
--- /dev/null
+++ b/2025/CVE-2025-50754.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029556220,
+ "name": "CVE-2025-50754-PoC",
+ "full_name": "furk4nyildiz\/CVE-2025-50754-PoC",
+ "owner": {
+ "login": "furk4nyildiz",
+ "id": 56441541,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56441541?v=4",
+ "html_url": "https:\/\/github.com\/furk4nyildiz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/furk4nyildiz\/CVE-2025-50754-PoC",
+ "description": "Stored XSS in a CMS platform leads to remote code execution (CVE-2025-50754)",
+ "fork": false,
+ "created_at": "2025-07-31T08:13:56Z",
+ "updated_at": "2025-10-25T20:44:35Z",
+ "pushed_at": "2025-08-05T04:05:27Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50777.json b/2025/CVE-2025-50777.json
new file mode 100644
index 0000000000..0e4b3fef9b
--- /dev/null
+++ b/2025/CVE-2025-50777.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1025058426,
+ "name": "aziot-cctv-cve-2025-50777",
+ "full_name": "veereshgadige\/aziot-cctv-cve-2025-50777",
+ "owner": {
+ "login": "veereshgadige",
+ "id": 131801818,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131801818?v=4",
+ "html_url": "https:\/\/github.com\/veereshgadige",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/veereshgadige\/aziot-cctv-cve-2025-50777",
+ "description": "CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV",
+ "fork": false,
+ "created_at": "2025-07-23T16:50:34Z",
+ "updated_at": "2025-07-23T17:21:33Z",
+ "pushed_at": "2025-07-23T17:21:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50866.json b/2025/CVE-2025-50866.json
new file mode 100644
index 0000000000..1cf46a15c6
--- /dev/null
+++ b/2025/CVE-2025-50866.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1027875710,
+ "name": "CVE-2025-50866",
+ "full_name": "SacX-7\/CVE-2025-50866",
+ "owner": {
+ "login": "SacX-7",
+ "id": 215162409,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215162409?v=4",
+ "html_url": "https:\/\/github.com\/SacX-7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SacX-7\/CVE-2025-50866",
+ "description": "Cross Site Scripting (XSS)",
+ "fork": false,
+ "created_at": "2025-07-28T17:03:14Z",
+ "updated_at": "2025-07-28T17:28:27Z",
+ "pushed_at": "2025-07-28T17:28:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50867.json b/2025/CVE-2025-50867.json
new file mode 100644
index 0000000000..704a3a7d06
--- /dev/null
+++ b/2025/CVE-2025-50867.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1027892295,
+ "name": "CVE-2025-50867",
+ "full_name": "SacX-7\/CVE-2025-50867",
+ "owner": {
+ "login": "SacX-7",
+ "id": 215162409,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215162409?v=4",
+ "html_url": "https:\/\/github.com\/SacX-7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SacX-7\/CVE-2025-50867",
+ "description": "SQL Injection",
+ "fork": false,
+ "created_at": "2025-07-28T17:33:28Z",
+ "updated_at": "2025-07-28T17:38:12Z",
+ "pushed_at": "2025-07-28T17:38:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-50944.json b/2025/CVE-2025-50944.json
new file mode 100644
index 0000000000..842944c451
--- /dev/null
+++ b/2025/CVE-2025-50944.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053808772,
+ "name": "CVE-2025-50944",
+ "full_name": "shinyColumn\/CVE-2025-50944",
+ "owner": {
+ "login": "shinyColumn",
+ "id": 136841832,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136841832?v=4",
+ "html_url": "https:\/\/github.com\/shinyColumn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shinyColumn\/CVE-2025-50944",
+ "description": "Improper Certificate Chain Validation in EagleEyes Lite Android Application",
+ "fork": false,
+ "created_at": "2025-09-10T00:59:37Z",
+ "updated_at": "2025-09-25T09:05:06Z",
+ "pushed_at": "2025-09-25T09:05:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5095.json b/2025/CVE-2025-5095.json
new file mode 100644
index 0000000000..8fe73765d1
--- /dev/null
+++ b/2025/CVE-2025-5095.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053622791,
+ "name": "CVE-2025-5095-POC",
+ "full_name": "TeteuXD2\/CVE-2025-5095-POC",
+ "owner": {
+ "login": "TeteuXD2",
+ "id": 105228527,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105228527?v=4",
+ "html_url": "https:\/\/github.com\/TeteuXD2",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TeteuXD2\/CVE-2025-5095-POC",
+ "description": "Python POC for CVE-2025-5095",
+ "fork": false,
+ "created_at": "2025-09-09T17:44:24Z",
+ "updated_at": "2025-09-09T18:50:17Z",
+ "pushed_at": "2025-09-09T18:50:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51005.json b/2025/CVE-2025-51005.json
new file mode 100644
index 0000000000..e600c513e6
--- /dev/null
+++ b/2025/CVE-2025-51005.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1062270599,
+ "name": "CVE-2025-51005",
+ "full_name": "sy460129\/CVE-2025-51005",
+ "owner": {
+ "login": "sy460129",
+ "id": 78065521,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78065521?v=4",
+ "html_url": "https:\/\/github.com\/sy460129",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sy460129\/CVE-2025-51005",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-23T03:31:54Z",
+ "updated_at": "2025-09-23T03:45:41Z",
+ "pushed_at": "2025-09-23T03:45:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51006.json b/2025/CVE-2025-51006.json
new file mode 100644
index 0000000000..961ff4b094
--- /dev/null
+++ b/2025/CVE-2025-51006.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1055634172,
+ "name": "CVE-2025-51006",
+ "full_name": "sy460129\/CVE-2025-51006",
+ "owner": {
+ "login": "sy460129",
+ "id": 78065521,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78065521?v=4",
+ "html_url": "https:\/\/github.com\/sy460129",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sy460129\/CVE-2025-51006",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-12T14:59:22Z",
+ "updated_at": "2025-09-23T03:44:14Z",
+ "pushed_at": "2025-09-23T03:44:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51385.json b/2025/CVE-2025-51385.json
new file mode 100644
index 0000000000..cf855f5c22
--- /dev/null
+++ b/2025/CVE-2025-51385.json
@@ -0,0 +1,41 @@
+[
+ {
+ "id": 1024078158,
+ "name": "CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC",
+ "full_name": "saarcastified\/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC",
+ "owner": {
+ "login": "saarcastified",
+ "id": 67947065,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67947065?v=4",
+ "html_url": "https:\/\/github.com\/saarcastified",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saarcastified\/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC",
+ "description": "This repository contains a proof-of-concept (PoC) for exploiting the OpenSSH ProxyCommand vulnerability — CVE-2025-51385 — affecting OpenSSH servers <9.6 Version",
+ "fork": false,
+ "created_at": "2025-07-22T06:43:47Z",
+ "updated_at": "2025-07-29T08:03:17Z",
+ "pushed_at": "2025-07-29T08:03:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve202451385",
+ "cybersecurity",
+ "exploits",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51396.json b/2025/CVE-2025-51396.json
new file mode 100644
index 0000000000..b0ff27aba2
--- /dev/null
+++ b/2025/CVE-2025-51396.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022965046,
+ "name": "CVE-2025-51396",
+ "full_name": "Thewhiteevil\/CVE-2025-51396",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51396",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username",
+ "fork": false,
+ "created_at": "2025-07-20T08:26:10Z",
+ "updated_at": "2025-07-20T09:42:48Z",
+ "pushed_at": "2025-07-20T09:42:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51397.json b/2025/CVE-2025-51397.json
new file mode 100644
index 0000000000..f3ad6e0cd4
--- /dev/null
+++ b/2025/CVE-2025-51397.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022968122,
+ "name": "CVE-2025-51397",
+ "full_name": "Thewhiteevil\/CVE-2025-51397",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51397",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Operator Surname",
+ "fork": false,
+ "created_at": "2025-07-20T08:35:08Z",
+ "updated_at": "2025-07-20T09:41:51Z",
+ "pushed_at": "2025-07-20T09:41:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51398.json b/2025/CVE-2025-51398.json
new file mode 100644
index 0000000000..693ecfdd74
--- /dev/null
+++ b/2025/CVE-2025-51398.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022970446,
+ "name": "CVE-2025-51398",
+ "full_name": "Thewhiteevil\/CVE-2025-51398",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51398",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field",
+ "fork": false,
+ "created_at": "2025-07-20T08:42:05Z",
+ "updated_at": "2025-07-20T09:42:30Z",
+ "pushed_at": "2025-07-20T09:42:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51400.json b/2025/CVE-2025-51400.json
new file mode 100644
index 0000000000..93cf8ffcde
--- /dev/null
+++ b/2025/CVE-2025-51400.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022971960,
+ "name": "CVE-2025-51400",
+ "full_name": "Thewhiteevil\/CVE-2025-51400",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51400",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Personal Canned Messages # Date: 09\/06\/2025",
+ "fork": false,
+ "created_at": "2025-07-20T08:46:33Z",
+ "updated_at": "2025-07-20T09:42:40Z",
+ "pushed_at": "2025-07-20T09:42:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51401.json b/2025/CVE-2025-51401.json
new file mode 100644
index 0000000000..870afd6c4c
--- /dev/null
+++ b/2025/CVE-2025-51401.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022973664,
+ "name": "CVE-2025-51401",
+ "full_name": "Thewhiteevil\/CVE-2025-51401",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51401",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Operator Chat Name Field Triggers on Chat Owner Transfer",
+ "fork": false,
+ "created_at": "2025-07-20T08:51:58Z",
+ "updated_at": "2025-07-20T09:42:21Z",
+ "pushed_at": "2025-07-20T09:42:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51403.json b/2025/CVE-2025-51403.json
new file mode 100644
index 0000000000..3bd160e57c
--- /dev/null
+++ b/2025/CVE-2025-51403.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022976286,
+ "name": "CVE-2025-51403",
+ "full_name": "Thewhiteevil\/CVE-2025-51403",
+ "owner": {
+ "login": "Thewhiteevil",
+ "id": 69752843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69752843?v=4",
+ "html_url": "https:\/\/github.com\/Thewhiteevil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Thewhiteevil\/CVE-2025-51403",
+ "description": "LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field",
+ "fork": false,
+ "created_at": "2025-07-20T08:59:24Z",
+ "updated_at": "2025-07-20T09:41:00Z",
+ "pushed_at": "2025-07-20T09:40:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51411.json b/2025/CVE-2025-51411.json
new file mode 100644
index 0000000000..984200e935
--- /dev/null
+++ b/2025/CVE-2025-51411.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1025920597,
+ "name": "CVE-2025-51411",
+ "full_name": "tansique-17\/CVE-2025-51411",
+ "owner": {
+ "login": "tansique-17",
+ "id": 63148306,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63148306?v=4",
+ "html_url": "https:\/\/github.com\/tansique-17",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tansique-17\/CVE-2025-51411",
+ "description": "Public Disclosure",
+ "fork": false,
+ "created_at": "2025-07-25T03:09:58Z",
+ "updated_at": "2025-10-14T17:23:34Z",
+ "pushed_at": "2025-07-25T03:13:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51471.json b/2025/CVE-2025-51471.json
new file mode 100644
index 0000000000..1ce7432bd2
--- /dev/null
+++ b/2025/CVE-2025-51471.json
@@ -0,0 +1,39 @@
+[
+ {
+ "id": 1122493911,
+ "name": "CVE-2025-51471-POC",
+ "full_name": "ajtazer\/CVE-2025-51471-POC",
+ "owner": {
+ "login": "ajtazer",
+ "id": 37796611,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37796611?v=4",
+ "html_url": "https:\/\/github.com\/ajtazer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ajtazer\/CVE-2025-51471-POC",
+ "description": "This PoC is for educational and authorized security testing purposes only. Do NOT use against systems you don't own.",
+ "fork": false,
+ "created_at": "2025-12-24T21:25:13Z",
+ "updated_at": "2026-01-04T17:31:44Z",
+ "pushed_at": "2025-12-24T23:01:07Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "ollama",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51482.json b/2025/CVE-2025-51482.json
new file mode 100644
index 0000000000..771d61073c
--- /dev/null
+++ b/2025/CVE-2025-51482.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029553078,
+ "name": "Letta-CVE-2025-51482-RCE",
+ "full_name": "Kai-One001\/Letta-CVE-2025-51482-RCE",
+ "owner": {
+ "login": "Kai-One001",
+ "id": 76192879,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76192879?v=4",
+ "html_url": "https:\/\/github.com\/Kai-One001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kai-One001\/Letta-CVE-2025-51482-RCE",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-31T08:07:59Z",
+ "updated_at": "2026-03-03T08:11:24Z",
+ "pushed_at": "2025-07-31T08:43:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51495.json b/2025/CVE-2025-51495.json
new file mode 100644
index 0000000000..306bdb2e03
--- /dev/null
+++ b/2025/CVE-2025-51495.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064132619,
+ "name": "CVE-2025-51495",
+ "full_name": "cainiao159357\/CVE-2025-51495",
+ "owner": {
+ "login": "cainiao159357",
+ "id": 76136742,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76136742?v=4",
+ "html_url": "https:\/\/github.com\/cainiao159357",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cainiao159357\/CVE-2025-51495",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-25T15:30:33Z",
+ "updated_at": "2025-09-25T15:38:12Z",
+ "pushed_at": "2025-09-25T15:38:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51529.json b/2025/CVE-2025-51529.json
new file mode 100644
index 0000000000..526d794812
--- /dev/null
+++ b/2025/CVE-2025-51529.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036897930,
+ "name": "CVE-2025-51529",
+ "full_name": "piotrmaciejbednarski\/CVE-2025-51529",
+ "owner": {
+ "login": "piotrmaciejbednarski",
+ "id": 115151408,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115151408?v=4",
+ "html_url": "https:\/\/github.com\/piotrmaciejbednarski",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/piotrmaciejbednarski\/CVE-2025-51529",
+ "description": "Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29",
+ "fork": false,
+ "created_at": "2025-08-12T18:42:35Z",
+ "updated_at": "2026-03-02T01:26:19Z",
+ "pushed_at": "2025-08-12T18:42:37Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51643.json b/2025/CVE-2025-51643.json
new file mode 100644
index 0000000000..09584703ef
--- /dev/null
+++ b/2025/CVE-2025-51643.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036243640,
+ "name": "CVE-2025-51643",
+ "full_name": "NastyCrow\/CVE-2025-51643",
+ "owner": {
+ "login": "NastyCrow",
+ "id": 60935461,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60935461?v=4",
+ "html_url": "https:\/\/github.com\/NastyCrow",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NastyCrow\/CVE-2025-51643",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-11T19:22:19Z",
+ "updated_at": "2025-08-28T18:43:41Z",
+ "pushed_at": "2025-08-28T18:43:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5182.json b/2025/CVE-2025-5182.json
new file mode 100644
index 0000000000..726c626c81
--- /dev/null
+++ b/2025/CVE-2025-5182.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1125787775,
+ "name": "react2shell",
+ "full_name": "vulnvault\/react2shell",
+ "owner": {
+ "login": "vulnvault",
+ "id": 211477592,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211477592?v=4",
+ "html_url": "https:\/\/github.com\/vulnvault",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vulnvault\/react2shell",
+ "description": "Official Walkthrough for lab React2Shell: CVE-2025-5182",
+ "fork": false,
+ "created_at": "2025-12-31T11:09:29Z",
+ "updated_at": "2025-12-31T11:10:13Z",
+ "pushed_at": "2025-12-31T11:10:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51820.json b/2025/CVE-2025-51820.json
new file mode 100644
index 0000000000..a53d555f22
--- /dev/null
+++ b/2025/CVE-2025-51820.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1031622252,
+ "name": "CVE-2025-51820",
+ "full_name": "shk-mubashshir\/CVE-2025-51820",
+ "owner": {
+ "login": "shk-mubashshir",
+ "id": 216832838,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216832838?v=4",
+ "html_url": "https:\/\/github.com\/shk-mubashshir",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shk-mubashshir\/CVE-2025-51820",
+ "description": "A critical Remote Code Execution (RCE) vulnerability (CVE-2025-51820) has been discovered in the Shopping Portal v1.0.",
+ "fork": false,
+ "created_at": "2025-08-04T04:57:27Z",
+ "updated_at": "2025-08-04T05:39:55Z",
+ "pushed_at": "2025-08-04T05:39:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51858.json b/2025/CVE-2025-51858.json
new file mode 100644
index 0000000000..0a01e54c95
--- /dev/null
+++ b/2025/CVE-2025-51858.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022511077,
+ "name": "CVE-2025-51858",
+ "full_name": "Secsys-FDU\/CVE-2025-51858",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51858",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T08:22:54Z",
+ "updated_at": "2025-07-23T03:04:47Z",
+ "pushed_at": "2025-07-19T08:43:24Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51859.json b/2025/CVE-2025-51859.json
new file mode 100644
index 0000000000..d88be82e49
--- /dev/null
+++ b/2025/CVE-2025-51859.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022525376,
+ "name": "CVE-2025-51859",
+ "full_name": "Secsys-FDU\/CVE-2025-51859",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51859",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T09:03:43Z",
+ "updated_at": "2025-07-19T09:09:59Z",
+ "pushed_at": "2025-07-19T09:08:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51860.json b/2025/CVE-2025-51860.json
new file mode 100644
index 0000000000..aa2f634a2b
--- /dev/null
+++ b/2025/CVE-2025-51860.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022530007,
+ "name": "CVE-2025-51860",
+ "full_name": "Secsys-FDU\/CVE-2025-51860",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51860",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T09:15:56Z",
+ "updated_at": "2025-07-19T09:18:48Z",
+ "pushed_at": "2025-07-19T09:18:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51862.json b/2025/CVE-2025-51862.json
new file mode 100644
index 0000000000..f42996f1d2
--- /dev/null
+++ b/2025/CVE-2025-51862.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022597713,
+ "name": "CVE-2025-51862",
+ "full_name": "Secsys-FDU\/CVE-2025-51862",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51862",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T12:19:32Z",
+ "updated_at": "2025-07-19T12:20:58Z",
+ "pushed_at": "2025-07-19T12:20:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51863.json b/2025/CVE-2025-51863.json
new file mode 100644
index 0000000000..5d0378fae2
--- /dev/null
+++ b/2025/CVE-2025-51863.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022621500,
+ "name": "CVE-2025-51863",
+ "full_name": "Secsys-FDU\/CVE-2025-51863",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51863",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T13:21:18Z",
+ "updated_at": "2025-07-19T13:22:58Z",
+ "pushed_at": "2025-07-19T13:22:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51864.json b/2025/CVE-2025-51864.json
new file mode 100644
index 0000000000..ca20bb5961
--- /dev/null
+++ b/2025/CVE-2025-51864.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022624398,
+ "name": "CVE-2025-51864",
+ "full_name": "Secsys-FDU\/CVE-2025-51864",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51864",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T13:28:27Z",
+ "updated_at": "2025-07-19T13:35:19Z",
+ "pushed_at": "2025-07-19T13:35:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51865.json b/2025/CVE-2025-51865.json
new file mode 100644
index 0000000000..022de8246f
--- /dev/null
+++ b/2025/CVE-2025-51865.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022627462,
+ "name": "CVE-2025-51865",
+ "full_name": "Secsys-FDU\/CVE-2025-51865",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51865",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T13:35:57Z",
+ "updated_at": "2025-08-18T03:45:33Z",
+ "pushed_at": "2025-07-19T13:43:28Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51867.json b/2025/CVE-2025-51867.json
new file mode 100644
index 0000000000..4a16573796
--- /dev/null
+++ b/2025/CVE-2025-51867.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022640491,
+ "name": "CVE-2025-51867",
+ "full_name": "Secsys-FDU\/CVE-2025-51867",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51867",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T14:07:28Z",
+ "updated_at": "2025-07-19T14:08:16Z",
+ "pushed_at": "2025-07-19T14:08:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51868.json b/2025/CVE-2025-51868.json
new file mode 100644
index 0000000000..89470a1e9e
--- /dev/null
+++ b/2025/CVE-2025-51868.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022643790,
+ "name": "CVE-2025-51868",
+ "full_name": "Secsys-FDU\/CVE-2025-51868",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51868",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T14:15:07Z",
+ "updated_at": "2025-07-19T14:15:53Z",
+ "pushed_at": "2025-07-19T14:15:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51869.json b/2025/CVE-2025-51869.json
new file mode 100644
index 0000000000..fc8a21dbe6
--- /dev/null
+++ b/2025/CVE-2025-51869.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022647178,
+ "name": "CVE-2025-51869",
+ "full_name": "Secsys-FDU\/CVE-2025-51869",
+ "owner": {
+ "login": "Secsys-FDU",
+ "id": 212300797,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212300797?v=4",
+ "html_url": "https:\/\/github.com\/Secsys-FDU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Secsys-FDU\/CVE-2025-51869",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-19T14:23:05Z",
+ "updated_at": "2025-07-23T03:07:23Z",
+ "pushed_at": "2025-07-19T14:23:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-51970.json b/2025/CVE-2025-51970.json
new file mode 100644
index 0000000000..5389486908
--- /dev/null
+++ b/2025/CVE-2025-51970.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023001231,
+ "name": "CVE-2025-51970",
+ "full_name": "M4xIq\/CVE-2025-51970",
+ "owner": {
+ "login": "M4xIq",
+ "id": 79747792,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79747792?v=4",
+ "html_url": "https:\/\/github.com\/M4xIq",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/M4xIq\/CVE-2025-51970",
+ "description": "SQL Injection in Online Shopping System Advanced (CVE-2025-51970)",
+ "fork": false,
+ "created_at": "2025-07-20T10:11:05Z",
+ "updated_at": "2025-11-08T09:58:52Z",
+ "pushed_at": "2025-07-20T10:42:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52097.json b/2025/CVE-2025-52097.json
new file mode 100644
index 0000000000..3dbd3f7a51
--- /dev/null
+++ b/2025/CVE-2025-52097.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1018194683,
+ "name": "CVE-2025-52097",
+ "full_name": "rwilsonecs\/CVE-2025-52097",
+ "owner": {
+ "login": "rwilsonecs",
+ "id": 204913118,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204913118?v=4",
+ "html_url": "https:\/\/github.com\/rwilsonecs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rwilsonecs\/CVE-2025-52097",
+ "description": "Public Disclosure of CVE-2025-52097",
+ "fork": false,
+ "created_at": "2025-07-11T19:18:29Z",
+ "updated_at": "2025-07-11T19:36:36Z",
+ "pushed_at": "2025-07-11T19:36:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52100.json b/2025/CVE-2025-52100.json
new file mode 100644
index 0000000000..fd6ecb94e5
--- /dev/null
+++ b/2025/CVE-2025-52100.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046689668,
+ "name": "CVE-2025-52100",
+ "full_name": "changyaoyou\/CVE-2025-52100",
+ "owner": {
+ "login": "changyaoyou",
+ "id": 97238843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97238843?v=4",
+ "html_url": "https:\/\/github.com\/changyaoyou",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/changyaoyou\/CVE-2025-52100",
+ "description": "CVE-2025-52100",
+ "fork": false,
+ "created_at": "2025-08-29T04:32:32Z",
+ "updated_at": "2025-08-29T04:34:12Z",
+ "pushed_at": "2025-08-29T04:34:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52216.json b/2025/CVE-2025-52216.json
new file mode 100644
index 0000000000..b08fee9f41
--- /dev/null
+++ b/2025/CVE-2025-52216.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036869356,
+ "name": "coolermaster-masterctrl-vuln",
+ "full_name": "Arbatinis1\/coolermaster-masterctrl-vuln",
+ "owner": {
+ "login": "Arbatinis1",
+ "id": 195824285,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195824285?v=4",
+ "html_url": "https:\/\/github.com\/Arbatinis1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Arbatinis1\/coolermaster-masterctrl-vuln",
+ "description": "CVE-2025-52216 – Cooler Master MasterCTRL Silent Installation of Insecure Services",
+ "fork": false,
+ "created_at": "2025-08-12T17:47:30Z",
+ "updated_at": "2025-08-12T17:47:34Z",
+ "pushed_at": "2025-08-12T17:47:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52289.json b/2025/CVE-2025-52289.json
new file mode 100644
index 0000000000..9a7041e02c
--- /dev/null
+++ b/2025/CVE-2025-52289.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1029806375,
+ "name": "CVE-2025-52289",
+ "full_name": "Whit3-d3viL-hacker\/CVE-2025-52289",
+ "owner": {
+ "login": "Whit3-d3viL-hacker",
+ "id": 160129838,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160129838?v=4",
+ "html_url": "https:\/\/github.com\/Whit3-d3viL-hacker",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Whit3-d3viL-hacker\/CVE-2025-52289",
+ "description": "f",
+ "fork": false,
+ "created_at": "2025-07-31T15:49:10Z",
+ "updated_at": "2025-07-31T15:49:10Z",
+ "pushed_at": "2025-07-31T15:49:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1029807236,
+ "name": "CVE-2025-52289",
+ "full_name": "Madhav-Bhardwaj\/CVE-2025-52289",
+ "owner": {
+ "login": "Madhav-Bhardwaj",
+ "id": 170874439,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170874439?v=4",
+ "html_url": "https:\/\/github.com\/Madhav-Bhardwaj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Madhav-Bhardwaj\/CVE-2025-52289",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-31T15:50:45Z",
+ "updated_at": "2025-08-28T10:41:13Z",
+ "pushed_at": "2025-07-31T15:51:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52385.json b/2025/CVE-2025-52385.json
new file mode 100644
index 0000000000..354867f8f2
--- /dev/null
+++ b/2025/CVE-2025-52385.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036835431,
+ "name": "CVE-2025-52385",
+ "full_name": "Kov404\/CVE-2025-52385",
+ "owner": {
+ "login": "Kov404",
+ "id": 177751667,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177751667?v=4",
+ "html_url": "https:\/\/github.com\/Kov404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kov404\/CVE-2025-52385",
+ "description": "Studio 3T v.2025.1.0 ",
+ "fork": false,
+ "created_at": "2025-08-12T16:48:25Z",
+ "updated_at": "2025-08-12T18:17:05Z",
+ "pushed_at": "2025-08-12T18:17:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52389.json b/2025/CVE-2025-52389.json
new file mode 100644
index 0000000000..ef6f99d436
--- /dev/null
+++ b/2025/CVE-2025-52389.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050106280,
+ "name": "CVE-2025-52389",
+ "full_name": "milamrk\/CVE-2025-52389",
+ "owner": {
+ "login": "milamrk",
+ "id": 140921392,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140921392?v=4",
+ "html_url": "https:\/\/github.com\/milamrk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/milamrk\/CVE-2025-52389",
+ "description": "An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.",
+ "fork": false,
+ "created_at": "2025-09-04T00:44:52Z",
+ "updated_at": "2025-09-04T00:44:52Z",
+ "pushed_at": "2025-09-04T00:44:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52392.json b/2025/CVE-2025-52392.json
new file mode 100644
index 0000000000..e49e564ce4
--- /dev/null
+++ b/2025/CVE-2025-52392.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041668895,
+ "name": "Soosyze-CMS-2.0---CVE-2025-52392",
+ "full_name": "ftz7\/Soosyze-CMS-2.0---CVE-2025-52392",
+ "owner": {
+ "login": "ftz7",
+ "id": 191657287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191657287?v=4",
+ "html_url": "https:\/\/github.com\/ftz7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ftz7\/Soosyze-CMS-2.0---CVE-2025-52392",
+ "description": "Este script em Bash demonstra como seria um ataque automatizado contra um formulário de login web via WorldList conhecida.",
+ "fork": false,
+ "created_at": "2025-08-20T20:45:42Z",
+ "updated_at": "2025-11-03T17:27:20Z",
+ "pushed_at": "2025-08-20T20:54:40Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52399.json b/2025/CVE-2025-52399.json
new file mode 100644
index 0000000000..c532a93d28
--- /dev/null
+++ b/2025/CVE-2025-52399.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1026268470,
+ "name": "CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "full_name": "Userr404\/CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "owner": {
+ "login": "Userr404",
+ "id": 183587236,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183587236?v=4",
+ "html_url": "https:\/\/github.com\/Userr404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Userr404\/CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-25T15:35:47Z",
+ "updated_at": "2025-08-31T03:49:39Z",
+ "pushed_at": "2025-07-25T15:49:05Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1026308228,
+ "name": "CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "full_name": "gmh5225\/CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-52399-SQLi-Institute-of-Current-Students",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-25T16:55:08Z",
+ "updated_at": "2025-07-25T16:55:08Z",
+ "pushed_at": "2025-07-25T15:49:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52413.json b/2025/CVE-2025-52413.json
new file mode 100644
index 0000000000..3845036329
--- /dev/null
+++ b/2025/CVE-2025-52413.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1048014336,
+ "name": "CVE-2025-52413",
+ "full_name": "GoldenTicketLabs\/CVE-2025-52413",
+ "owner": {
+ "login": "GoldenTicketLabs",
+ "id": 216616404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216616404?v=4",
+ "html_url": "https:\/\/github.com\/GoldenTicketLabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GoldenTicketLabs\/CVE-2025-52413",
+ "description": "repo for CVE-2025-52413",
+ "fork": false,
+ "created_at": "2025-08-31T18:17:00Z",
+ "updated_at": "2025-08-31T18:20:13Z",
+ "pushed_at": "2025-08-31T18:20:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52688.json b/2025/CVE-2025-52688.json
new file mode 100644
index 0000000000..c93029f7fa
--- /dev/null
+++ b/2025/CVE-2025-52688.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1020781306,
+ "name": "CVE-2025-52688",
+ "full_name": "joelczk\/CVE-2025-52688",
+ "owner": {
+ "login": "joelczk",
+ "id": 42378287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42378287?v=4",
+ "html_url": "https:\/\/github.com\/joelczk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/joelczk\/CVE-2025-52688",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-16T11:38:48Z",
+ "updated_at": "2025-07-28T08:56:11Z",
+ "pushed_at": "2025-07-16T11:39:39Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52689.json b/2025/CVE-2025-52689.json
new file mode 100644
index 0000000000..38d5d893f4
--- /dev/null
+++ b/2025/CVE-2025-52689.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1019403250,
+ "name": "CVE-2025-52689-PoC",
+ "full_name": "UltimateHG\/CVE-2025-52689-PoC",
+ "owner": {
+ "login": "UltimateHG",
+ "id": 26477993,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26477993?v=4",
+ "html_url": "https:\/\/github.com\/UltimateHG",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/UltimateHG\/CVE-2025-52689-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-14T09:18:51Z",
+ "updated_at": "2025-07-16T07:48:01Z",
+ "pushed_at": "2025-07-16T02:58:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52691.json b/2025/CVE-2025-52691.json
index fe93cd5fd0..6d1e5c5972 100644
--- a/2025/CVE-2025-52691.json
+++ b/2025/CVE-2025-52691.json
@@ -1,4 +1,141 @@
[
+ {
+ "id": 1124797523,
+ "name": "CVE-2025-52691",
+ "full_name": "yt2w\/CVE-2025-52691",
+ "owner": {
+ "login": "yt2w",
+ "id": 240546344,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/240546344?v=4",
+ "html_url": "https:\/\/github.com\/yt2w",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yt2w\/CVE-2025-52691",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-29T16:23:54Z",
+ "updated_at": "2026-05-28T13:23:54Z",
+ "pushed_at": "2025-12-29T16:24:39Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125093593,
+ "name": "CVE-2025-52691",
+ "full_name": "rxerium\/CVE-2025-52691",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-52691",
+ "description": "Detection for CVE-2025-52691",
+ "fork": false,
+ "created_at": "2025-12-30T06:13:10Z",
+ "updated_at": "2026-02-18T15:27:49Z",
+ "pushed_at": "2025-12-30T06:41:49Z",
+ "stargazers_count": 19,
+ "watchers_count": 19,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "critical",
+ "nuclei",
+ "smartermail",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 19,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125342349,
+ "name": "CVE-2025-52691",
+ "full_name": "you-ssef9\/CVE-2025-52691",
+ "owner": {
+ "login": "you-ssef9",
+ "id": 206147093,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206147093?v=4",
+ "html_url": "https:\/\/github.com\/you-ssef9",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/you-ssef9\/CVE-2025-52691",
+ "description": "This repository contains a safe Proof of Concept (PoC) to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability.",
+ "fork": false,
+ "created_at": "2025-12-30T14:58:49Z",
+ "updated_at": "2026-03-06T02:01:22Z",
+ "pushed_at": "2025-12-30T15:10:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125440260,
+ "name": "CVE-2025-52691-APT-PoC",
+ "full_name": "DeathShotXD\/CVE-2025-52691-APT-PoC",
+ "owner": {
+ "login": "DeathShotXD",
+ "id": 87466051,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87466051?v=4",
+ "html_url": "https:\/\/github.com\/DeathShotXD",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DeathShotXD\/CVE-2025-52691-APT-PoC",
+ "description": "An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w\/CVE-2025-52691.",
+ "fork": false,
+ "created_at": "2025-12-30T18:21:29Z",
+ "updated_at": "2026-04-09T19:04:32Z",
+ "pushed_at": "2025-12-30T18:47:12Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126154414,
"name": "Ashwesker-CVE-2025-52691",
diff --git a/2025/CVE-2025-52881.json b/2025/CVE-2025-52881.json
new file mode 100644
index 0000000000..f5dc5700cf
--- /dev/null
+++ b/2025/CVE-2025-52881.json
@@ -0,0 +1,46 @@
+[
+ {
+ "id": 1094430358,
+ "name": "proxmox-lxc-docker-fix",
+ "full_name": "jq6l43d1\/proxmox-lxc-docker-fix",
+ "owner": {
+ "login": "jq6l43d1",
+ "id": 110377310,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110377310?v=4",
+ "html_url": "https:\/\/github.com\/jq6l43d1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jq6l43d1\/proxmox-lxc-docker-fix",
+ "description": "Workaround for CVE-2025-52881: Fixes Docker\/Podman breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+. Universal wrapper for community-scripts with automatic AppArmor configuration.",
+ "fork": false,
+ "created_at": "2025-11-11T17:40:20Z",
+ "updated_at": "2026-05-13T14:38:30Z",
+ "pushed_at": "2025-11-13T18:21:01Z",
+ "stargazers_count": 15,
+ "watchers_count": 15,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "apparmor",
+ "containers",
+ "cve-2025-52881",
+ "docker",
+ "lxc",
+ "podman",
+ "proxmox",
+ "runc",
+ "security",
+ "workaround"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 15,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json
index 3ad1967257..0feb9cab9f 100644
--- a/2025/CVE-2025-52915.json
+++ b/2025/CVE-2025-52915.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-06-02T11:13:48Z",
+ "updated_at": "2026-06-02T15:41:28Z",
"pushed_at": "2026-06-02T11:07:33Z",
- "stargazers_count": 771,
- "watchers_count": 771,
+ "stargazers_count": 772,
+ "watchers_count": 772,
"has_discussions": false,
"forks_count": 113,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 113,
- "watchers": 771,
+ "watchers": 772,
"score": 0,
"subscribers_count": 19
}
diff --git a/2025/CVE-2025-52970.json b/2025/CVE-2025-52970.json
new file mode 100644
index 0000000000..e551658ce6
--- /dev/null
+++ b/2025/CVE-2025-52970.json
@@ -0,0 +1,73 @@
+[
+ {
+ "id": 1043117071,
+ "name": "FortiWeb-CVE-2025-52970-Authentication-Bypass",
+ "full_name": "Hex00-0x4\/FortiWeb-CVE-2025-52970-Authentication-Bypass",
+ "owner": {
+ "login": "Hex00-0x4",
+ "id": 225327350,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225327350?v=4",
+ "html_url": "https:\/\/github.com\/Hex00-0x4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Hex00-0x4\/FortiWeb-CVE-2025-52970-Authentication-Bypass",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-23T07:09:10Z",
+ "updated_at": "2026-03-12T08:35:11Z",
+ "pushed_at": "2025-08-23T08:33:46Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1052348205,
+ "name": "CVE-2025-52970",
+ "full_name": "34zY\/CVE-2025-52970",
+ "owner": {
+ "login": "34zY",
+ "id": 55347142,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55347142?v=4",
+ "html_url": "https:\/\/github.com\/34zY",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/34zY\/CVE-2025-52970",
+ "description": " CVE-2025-52970 - FortiWeb Authentication Bypass to Remote Code Execution Exploit ",
+ "fork": false,
+ "created_at": "2025-09-07T22:52:57Z",
+ "updated_at": "2026-04-06T02:56:33Z",
+ "pushed_at": "2025-09-07T22:59:51Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "auth",
+ "cve-2025-52970",
+ "fortiweb",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5304.json b/2025/CVE-2025-5304.json
new file mode 100644
index 0000000000..bd307d65a9
--- /dev/null
+++ b/2025/CVE-2025-5304.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1065067122,
+ "name": "CVE-2025-5304",
+ "full_name": "Nxploited\/CVE-2025-5304",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-5304",
+ "description": "PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-09-27T02:19:06Z",
+ "updated_at": "2026-03-13T08:56:50Z",
+ "pushed_at": "2025-09-27T02:54:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53367.json b/2025/CVE-2025-53367.json
new file mode 100644
index 0000000000..e990259bfe
--- /dev/null
+++ b/2025/CVE-2025-53367.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1022118286,
+ "name": "DjVuLibre-poc-CVE-2025-53367",
+ "full_name": "kevinbackhouse\/DjVuLibre-poc-CVE-2025-53367",
+ "owner": {
+ "login": "kevinbackhouse",
+ "id": 4358136,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4358136?v=4",
+ "html_url": "https:\/\/github.com\/kevinbackhouse",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kevinbackhouse\/DjVuLibre-poc-CVE-2025-53367",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-18T13:36:24Z",
+ "updated_at": "2025-07-18T15:14:12Z",
+ "pushed_at": "2025-07-18T15:14:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098420803,
+ "name": "CVE-2025-53367-POC",
+ "full_name": "ThePhykon\/CVE-2025-53367-POC",
+ "owner": {
+ "login": "ThePhykon",
+ "id": 156785466,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156785466?v=4",
+ "html_url": "https:\/\/github.com\/ThePhykon",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ThePhykon\/CVE-2025-53367-POC",
+ "description": "A simple POC of the CVE-2025-53367, creating a .djvu-file which triggers an OOB-write in the heap",
+ "fork": false,
+ "created_at": "2025-11-17T17:03:46Z",
+ "updated_at": "2025-12-01T05:30:03Z",
+ "pushed_at": "2025-12-01T05:30:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5349.json b/2025/CVE-2025-5349.json
new file mode 100644
index 0000000000..1b192f8a91
--- /dev/null
+++ b/2025/CVE-2025-5349.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1020242863,
+ "name": "CVE-2025-5349-Scanner",
+ "full_name": "olimpiofreitas\/CVE-2025-5349-Scanner",
+ "owner": {
+ "login": "olimpiofreitas",
+ "id": 2387747,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2387747?v=4",
+ "html_url": "https:\/\/github.com\/olimpiofreitas",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/olimpiofreitas\/CVE-2025-5349-Scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-15T15:02:10Z",
+ "updated_at": "2025-07-16T02:07:30Z",
+ "pushed_at": "2025-07-15T15:06:35Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53547.json b/2025/CVE-2025-53547.json
new file mode 100644
index 0000000000..a253258435
--- /dev/null
+++ b/2025/CVE-2025-53547.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016608388,
+ "name": "CVE-2025-53547-POC",
+ "full_name": "DVKunion\/CVE-2025-53547-POC",
+ "owner": {
+ "login": "DVKunion",
+ "id": 42199853,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42199853?v=4",
+ "html_url": "https:\/\/github.com\/DVKunion",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DVKunion\/CVE-2025-53547-POC",
+ "description": "CVE-2025-53547 one of poc code",
+ "fork": false,
+ "created_at": "2025-07-09T09:03:47Z",
+ "updated_at": "2025-11-13T15:09:21Z",
+ "pushed_at": "2025-07-09T09:17:19Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53558.json b/2025/CVE-2025-53558.json
new file mode 100644
index 0000000000..46f39e47f7
--- /dev/null
+++ b/2025/CVE-2025-53558.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114337830,
+ "name": "POC_CVE-2025-53558",
+ "full_name": "houqe\/POC_CVE-2025-53558",
+ "owner": {
+ "login": "houqe",
+ "id": 44364208,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44364208?v=4",
+ "html_url": "https:\/\/github.com\/houqe",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/houqe\/POC_CVE-2025-53558",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T08:26:57Z",
+ "updated_at": "2025-12-11T09:15:24Z",
+ "pushed_at": "2025-12-11T09:15:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53632.json b/2025/CVE-2025-53632.json
new file mode 100644
index 0000000000..28d178f333
--- /dev/null
+++ b/2025/CVE-2025-53632.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042699335,
+ "name": "CVE-2025-53632",
+ "full_name": "pandatix\/CVE-2025-53632",
+ "owner": {
+ "login": "pandatix",
+ "id": 57038071,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57038071?v=4",
+ "html_url": "https:\/\/github.com\/pandatix",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pandatix\/CVE-2025-53632",
+ "description": "An exploit of CVE-2025-53632 to confirm exploitability",
+ "fork": false,
+ "created_at": "2025-08-22T12:37:59Z",
+ "updated_at": "2025-08-22T15:08:04Z",
+ "pushed_at": "2025-08-22T15:07:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53652.json b/2025/CVE-2025-53652.json
new file mode 100644
index 0000000000..ade87d9128
--- /dev/null
+++ b/2025/CVE-2025-53652.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1026190230,
+ "name": "CVE-2025-53652-Jenkins-Git-Parameter-Analysis",
+ "full_name": "pl4tyz\/CVE-2025-53652-Jenkins-Git-Parameter-Analysis",
+ "owner": {
+ "login": "pl4tyz",
+ "id": 66825349,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66825349?v=4",
+ "html_url": "https:\/\/github.com\/pl4tyz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pl4tyz\/CVE-2025-53652-Jenkins-Git-Parameter-Analysis",
+ "description": "CVE-2025-53652: Jenkins Git Parameter Analysis",
+ "fork": false,
+ "created_at": "2025-07-25T13:10:17Z",
+ "updated_at": "2025-08-11T01:19:09Z",
+ "pushed_at": "2025-07-25T13:30:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53690.json b/2025/CVE-2025-53690.json
index ace129edae..c493d19ec8 100644
--- a/2025/CVE-2025-53690.json
+++ b/2025/CVE-2025-53690.json
@@ -37,5 +37,38 @@
"watchers": 5,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1051934498,
+ "name": "CVE-2025-53690-Analysis",
+ "full_name": "m0d0ri205\/CVE-2025-53690-Analysis",
+ "owner": {
+ "login": "m0d0ri205",
+ "id": 96758146,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96758146?v=4",
+ "html_url": "https:\/\/github.com\/m0d0ri205",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/m0d0ri205\/CVE-2025-53690-Analysis",
+ "description": "This is CVE-2025-53690 Analysis Documents.",
+ "fork": false,
+ "created_at": "2025-09-07T03:20:13Z",
+ "updated_at": "2025-11-17T04:05:06Z",
+ "pushed_at": "2025-09-07T03:22:43Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-53691.json b/2025/CVE-2025-53691.json
new file mode 100644
index 0000000000..8bff6ddf1d
--- /dev/null
+++ b/2025/CVE-2025-53691.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1048495520,
+ "name": "CVE-2025-53691",
+ "full_name": "blueisbeautiful\/CVE-2025-53691",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-53691",
+ "description": "Remote code execution (RCE) through insecure deserialization",
+ "fork": false,
+ "created_at": "2025-09-01T14:30:08Z",
+ "updated_at": "2025-09-01T14:35:22Z",
+ "pushed_at": "2025-09-01T14:35:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53693.json b/2025/CVE-2025-53693.json
new file mode 100644
index 0000000000..3128289536
--- /dev/null
+++ b/2025/CVE-2025-53693.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1048489537,
+ "name": "CVE-2025-53693",
+ "full_name": "blueisbeautiful\/CVE-2025-53693",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-53693",
+ "description": "HTML cache poisoning through unsafe reflections",
+ "fork": false,
+ "created_at": "2025-09-01T14:19:44Z",
+ "updated_at": "2025-09-17T05:14:39Z",
+ "pushed_at": "2025-09-01T14:27:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53694.json b/2025/CVE-2025-53694.json
new file mode 100644
index 0000000000..e3175b97e3
--- /dev/null
+++ b/2025/CVE-2025-53694.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1048499231,
+ "name": "CVE-2025-53694",
+ "full_name": "blueisbeautiful\/CVE-2025-53694",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-53694",
+ "description": "Information Disclosure in ItemService API with a restricted anonymous user, leading to exposure of cache keys using a brute-force approach",
+ "fork": false,
+ "created_at": "2025-09-01T14:36:47Z",
+ "updated_at": "2025-09-01T14:39:31Z",
+ "pushed_at": "2025-09-01T14:39:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1048503174,
+ "name": "CVE-2025-53694-to-CVE-2025-53691",
+ "full_name": "blueisbeautiful\/CVE-2025-53694-to-CVE-2025-53691",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-53694-to-CVE-2025-53691",
+ "description": "From Information Disclosure to RCE in Sitecore Experience Platform (XP)",
+ "fork": false,
+ "created_at": "2025-09-01T14:43:56Z",
+ "updated_at": "2025-09-01T15:38:55Z",
+ "pushed_at": "2025-09-01T15:38:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json
index 47c650d078..d5c2a122f6 100644
--- a/2025/CVE-2025-53770.json
+++ b/2025/CVE-2025-53770.json
@@ -1,4 +1,206 @@
[
+ {
+ "id": 1023377089,
+ "name": "CVE-2025-53770",
+ "full_name": "RukshanaAlikhan\/CVE-2025-53770",
+ "owner": {
+ "login": "RukshanaAlikhan",
+ "id": 118185407,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118185407?v=4",
+ "html_url": "https:\/\/github.com\/RukshanaAlikhan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RukshanaAlikhan\/CVE-2025-53770",
+ "description": "A critical zero-day vulnerability CVE‑2025‑53770 has been actively exploited in the wild against on-premises Microsoft SharePoint Server. Dubbed \"ToolShell,\" this exploit leverages a deserialization flaw (variant of CVE‑2025‑49706, CVSS: 6.3).",
+ "fork": false,
+ "created_at": "2025-07-21T04:41:10Z",
+ "updated_at": "2025-07-21T04:43:31Z",
+ "pushed_at": "2025-07-21T04:43:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023392871,
+ "name": "bluefire-sharepoint-cve-2025-53770",
+ "full_name": "Bluefire-Redteam-Cybersecurity\/bluefire-sharepoint-cve-2025-53770",
+ "owner": {
+ "login": "Bluefire-Redteam-Cybersecurity",
+ "id": 200455781,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200455781?v=4",
+ "html_url": "https:\/\/github.com\/Bluefire-Redteam-Cybersecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bluefire-Redteam-Cybersecurity\/bluefire-sharepoint-cve-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-21T05:21:59Z",
+ "updated_at": "2025-07-22T13:18:53Z",
+ "pushed_at": "2025-07-21T06:43:30Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023427607,
+ "name": "CVE-2025-53770",
+ "full_name": "kaizensecurity\/CVE-2025-53770",
+ "owner": {
+ "login": "kaizensecurity",
+ "id": 50189722,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50189722?v=4",
+ "html_url": "https:\/\/github.com\/kaizensecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kaizensecurity\/CVE-2025-53770",
+ "description": "POC",
+ "fork": false,
+ "created_at": "2025-07-21T06:39:21Z",
+ "updated_at": "2026-02-11T03:07:07Z",
+ "pushed_at": "2025-07-21T13:52:29Z",
+ "stargazers_count": 43,
+ "watchers_count": 43,
+ "has_discussions": false,
+ "forks_count": 20,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 20,
+ "watchers": 43,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023502810,
+ "name": "Blackash-CVE-2025-53770",
+ "full_name": "yosasasutsut\/Blackash-CVE-2025-53770",
+ "owner": {
+ "login": "yosasasutsut",
+ "id": 17229719,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17229719?v=4",
+ "html_url": "https:\/\/github.com\/yosasasutsut",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yosasasutsut\/Blackash-CVE-2025-53770",
+ "description": "CVE-2025-53770",
+ "fork": false,
+ "created_at": "2025-07-21T09:00:03Z",
+ "updated_at": "2025-07-21T09:00:03Z",
+ "pushed_at": "2025-07-20T22:58:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 6,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 6,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023626316,
+ "name": "SharePointSecurityMonitor",
+ "full_name": "paolokappa\/SharePointSecurityMonitor",
+ "owner": {
+ "login": "paolokappa",
+ "id": 7937286,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7937286?v=4",
+ "html_url": "https:\/\/github.com\/paolokappa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/paolokappa\/SharePointSecurityMonitor",
+ "description": "A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and automated alerting capabilities.",
+ "fork": false,
+ "created_at": "2025-07-21T12:52:27Z",
+ "updated_at": "2025-08-01T18:05:24Z",
+ "pushed_at": "2025-08-04T14:39:44Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-53770",
+ "security",
+ "sharepoint"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023641163,
+ "name": "ZeroPoint",
+ "full_name": "gmh5225\/ZeroPoint",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/ZeroPoint",
+ "description": "This PowerShell script detects indicators of compromise for CVE-2025-53770 — a critical RCE vulnerability in Microsoft SharePoint. Created by @n1chr0x and @BlackRazer67",
+ "fork": false,
+ "created_at": "2025-07-21T13:18:43Z",
+ "updated_at": "2025-07-21T13:18:44Z",
+ "pushed_at": "2025-07-21T06:52:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1023658638,
"name": "CVE-2025-53770-Exploit",
@@ -106,6 +308,370 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1023751831,
+ "name": "CVE-2025-53770-Hunting",
+ "full_name": "siag-itsec\/CVE-2025-53770-Hunting",
+ "owner": {
+ "login": "siag-itsec",
+ "id": 139255110,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139255110?v=4",
+ "html_url": "https:\/\/github.com\/siag-itsec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/siag-itsec\/CVE-2025-53770-Hunting",
+ "description": "Hunting for Critical SharePoint Vulnerability CVE-2025-53770",
+ "fork": false,
+ "created_at": "2025-07-21T16:29:53Z",
+ "updated_at": "2025-07-21T16:29:54Z",
+ "pushed_at": "2025-07-21T16:29:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1023822435,
+ "name": "CVE-2025-53770-Checker",
+ "full_name": "grupooruss\/CVE-2025-53770-Checker",
+ "owner": {
+ "login": "grupooruss",
+ "id": 43943489,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43943489?v=4",
+ "html_url": "https:\/\/github.com\/grupooruss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/grupooruss\/CVE-2025-53770-Checker",
+ "description": "Comprueba si un servidor SharePoint on-premises es vulnerable a CVE-2025-53770",
+ "fork": false,
+ "created_at": "2025-07-21T18:43:51Z",
+ "updated_at": "2025-07-21T18:52:50Z",
+ "pushed_at": "2025-07-21T18:52:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024019522,
+ "name": "CVE-2025-53770-scanner",
+ "full_name": "tripoloski1337\/CVE-2025-53770-scanner",
+ "owner": {
+ "login": "tripoloski1337",
+ "id": 14104177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14104177?v=4",
+ "html_url": "https:\/\/github.com\/tripoloski1337",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tripoloski1337\/CVE-2025-53770-scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T04:26:59Z",
+ "updated_at": "2025-07-22T13:05:04Z",
+ "pushed_at": "2025-07-22T04:28:32Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024168445,
+ "name": "CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE",
+ "full_name": "AdityaBhatt3010\/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE",
+ "description": "A critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw CVE-2025-49706.",
+ "fork": false,
+ "created_at": "2025-07-22T09:32:14Z",
+ "updated_at": "2026-02-28T08:03:27Z",
+ "pushed_at": "2025-07-22T09:54:31Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-49706",
+ "cve-2025-53770",
+ "cybersecurity",
+ "microsoft-sharepoint",
+ "sharepoint",
+ "sharepoint-2016",
+ "toolshell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024210633,
+ "name": "Toolshell_CVE-2025-53770",
+ "full_name": "GreenForceNetworks\/Toolshell_CVE-2025-53770",
+ "owner": {
+ "login": "GreenForceNetworks",
+ "id": 172834714,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172834714?v=4",
+ "html_url": "https:\/\/github.com\/GreenForceNetworks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GreenForceNetworks\/Toolshell_CVE-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T10:51:08Z",
+ "updated_at": "2025-07-22T11:37:02Z",
+ "pushed_at": "2025-07-22T11:36:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024310687,
+ "name": "CVE-2025-53770-Vulnerable-Scanner",
+ "full_name": "imbas007\/CVE-2025-53770-Vulnerable-Scanner",
+ "owner": {
+ "login": "imbas007",
+ "id": 100182585,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4",
+ "html_url": "https:\/\/github.com\/imbas007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/imbas007\/CVE-2025-53770-Vulnerable-Scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T13:55:47Z",
+ "updated_at": "2025-07-28T06:47:28Z",
+ "pushed_at": "2025-07-22T14:14:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024484644,
+ "name": "CVE-2025-53770-Scanner",
+ "full_name": "Sec-Dan\/CVE-2025-53770-Scanner",
+ "owner": {
+ "login": "Sec-Dan",
+ "id": 3199612,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3199612?v=4",
+ "html_url": "https:\/\/github.com\/Sec-Dan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Sec-Dan\/CVE-2025-53770-Scanner",
+ "description": "A Python-based reconnaissance scanner for safely identifying potential exposure to SharePoint vulnerability CVE-2025-53770.",
+ "fork": false,
+ "created_at": "2025-07-22T19:17:13Z",
+ "updated_at": "2025-07-30T10:29:09Z",
+ "pushed_at": "2025-07-22T19:22:23Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "blueteam",
+ "cve",
+ "cve-2025-53770",
+ "infosec",
+ "osint",
+ "pentest",
+ "reconnaissance",
+ "security-tool",
+ "sharepoint",
+ "sharepoint-2016",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024486144,
+ "name": "CVE-2025-53770",
+ "full_name": "MuhammadWaseem29\/CVE-2025-53770",
+ "owner": {
+ "login": "MuhammadWaseem29",
+ "id": 161931698,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161931698?v=4",
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29\/CVE-2025-53770",
+ "description": "Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)",
+ "fork": false,
+ "created_at": "2025-07-22T19:20:23Z",
+ "updated_at": "2026-05-23T06:52:00Z",
+ "pushed_at": "2025-08-04T13:03:00Z",
+ "stargazers_count": 56,
+ "watchers_count": 56,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bugbounty",
+ "cve-2025-53770",
+ "sharepoint",
+ "sharepoint-exploit"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 56,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024557532,
+ "name": "cve-2025-53770",
+ "full_name": "0xray5c68616e37\/cve-2025-53770",
+ "owner": {
+ "login": "0xray5c68616e37",
+ "id": 28060070,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28060070?v=4",
+ "html_url": "https:\/\/github.com\/0xray5c68616e37",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xray5c68616e37\/cve-2025-53770",
+ "description": "Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)",
+ "fork": false,
+ "created_at": "2025-07-22T22:33:13Z",
+ "updated_at": "2025-07-22T22:33:13Z",
+ "pushed_at": "2025-07-22T19:22:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025174039,
+ "name": "CVE-2025-53770",
+ "full_name": "exfil0\/CVE-2025-53770",
+ "owner": {
+ "login": "exfil0",
+ "id": 84948741,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84948741?v=4",
+ "html_url": "https:\/\/github.com\/exfil0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/exfil0\/CVE-2025-53770",
+ "description": "A sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770, a critical (CVSS 9.8) unauthenticated remote code execution (RCE) vulnerability in on-premises Microsoft SharePoint Server (2016, 2019, Subscription Edition)",
+ "fork": false,
+ "created_at": "2025-07-23T21:02:14Z",
+ "updated_at": "2026-05-13T16:26:24Z",
+ "pushed_at": "2025-07-23T21:21:53Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "attack",
+ "cve-2025-53770",
+ "exploit",
+ "poc",
+ "postexplotation",
+ "python",
+ "sharepoint"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1025222469,
"name": "ToolShellFinder",
@@ -142,6 +708,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1025247829,
+ "name": "suricata-rule-CVE-2025-53770",
+ "full_name": "nisargsuthar\/suricata-rule-CVE-2025-53770",
+ "owner": {
+ "login": "nisargsuthar",
+ "id": 28131554,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28131554?v=4",
+ "html_url": "https:\/\/github.com\/nisargsuthar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nisargsuthar\/suricata-rule-CVE-2025-53770",
+ "description": "Detection rules for CVE-2025-53770",
+ "fork": false,
+ "created_at": "2025-07-24T01:14:15Z",
+ "updated_at": "2025-07-24T23:33:35Z",
+ "pushed_at": "2025-07-24T23:33:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025681369,
+ "name": "sharepoint-toolshell-cve-2025-53770",
+ "full_name": "bharath-cyber-root\/sharepoint-toolshell-cve-2025-53770",
+ "owner": {
+ "login": "bharath-cyber-root",
+ "id": 221559257,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221559257?v=4",
+ "html_url": "https:\/\/github.com\/bharath-cyber-root",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bharath-cyber-root\/sharepoint-toolshell-cve-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-24T16:19:23Z",
+ "updated_at": "2025-07-24T16:21:34Z",
+ "pushed_at": "2025-07-24T16:21:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1025734397,
"name": "OurSharePoint-CVE-2025-53770",
@@ -175,6 +807,507 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1025998386,
+ "name": "CVE-2025-53770-Exploit",
+ "full_name": "Udyz\/CVE-2025-53770-Exploit",
+ "owner": {
+ "login": "Udyz",
+ "id": 39673284,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39673284?v=4",
+ "html_url": "https:\/\/github.com\/Udyz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Udyz\/CVE-2025-53770-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-25T06:34:28Z",
+ "updated_at": "2026-03-11T18:27:47Z",
+ "pushed_at": "2025-07-25T07:07:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1026214435,
+ "name": "ToolShell-Honeypot",
+ "full_name": "bitsalv\/ToolShell-Honeypot",
+ "owner": {
+ "login": "bitsalv",
+ "id": 48736957,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48736957?v=4",
+ "html_url": "https:\/\/github.com\/bitsalv",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bitsalv\/ToolShell-Honeypot",
+ "description": "Honeypot for CVE-2025-53770 aka ToolShell",
+ "fork": false,
+ "created_at": "2025-07-25T13:54:05Z",
+ "updated_at": "2025-07-29T08:48:26Z",
+ "pushed_at": "2025-07-29T08:48:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1026446578,
+ "name": "CVE-2025-53770_Raw-HTTP-Request-Generator",
+ "full_name": "BirdsAreFlyingCameras\/CVE-2025-53770_Raw-HTTP-Request-Generator",
+ "owner": {
+ "login": "BirdsAreFlyingCameras",
+ "id": 118756597,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118756597?v=4",
+ "html_url": "https:\/\/github.com\/BirdsAreFlyingCameras",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BirdsAreFlyingCameras\/CVE-2025-53770_Raw-HTTP-Request-Generator",
+ "description": "Just a quick script I cooked up to exploit CVE-2025-53770",
+ "fork": false,
+ "created_at": "2025-07-25T22:58:03Z",
+ "updated_at": "2025-08-07T08:15:59Z",
+ "pushed_at": "2025-07-25T23:39:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027188610,
+ "name": "-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE",
+ "full_name": "bossnick98\/-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE",
+ "owner": {
+ "login": "bossnick98",
+ "id": 199456702,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199456702?v=4",
+ "html_url": "https:\/\/github.com\/bossnick98",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bossnick98\/-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE",
+ "description": "An activity to train analysis skills and reporting",
+ "fork": false,
+ "created_at": "2025-07-27T13:58:48Z",
+ "updated_at": "2025-07-27T15:23:49Z",
+ "pushed_at": "2025-07-27T15:17:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027349889,
+ "name": "CVE-2025-53770",
+ "full_name": "3a7\/CVE-2025-53770",
+ "owner": {
+ "login": "3a7",
+ "id": 58238467,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58238467?v=4",
+ "html_url": "https:\/\/github.com\/3a7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/3a7\/CVE-2025-53770",
+ "description": "CVE-2025-53770 Mass Scanner",
+ "fork": false,
+ "created_at": "2025-07-27T20:55:09Z",
+ "updated_at": "2026-05-23T06:52:00Z",
+ "pushed_at": "2025-07-29T09:40:05Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027458917,
+ "name": "CVE-2025-53770",
+ "full_name": "r3xbugbounty\/CVE-2025-53770",
+ "owner": {
+ "login": "r3xbugbounty",
+ "id": 120879189,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120879189?v=4",
+ "html_url": "https:\/\/github.com\/r3xbugbounty",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r3xbugbounty\/CVE-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-28T03:39:57Z",
+ "updated_at": "2025-07-28T03:40:28Z",
+ "pushed_at": "2025-07-28T03:40:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1027821376,
+ "name": "CVE-2025-53770",
+ "full_name": "daryllundy\/CVE-2025-53770",
+ "owner": {
+ "login": "daryllundy",
+ "id": 8924499,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8924499?v=4",
+ "html_url": "https:\/\/github.com\/daryllundy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/daryllundy\/CVE-2025-53770",
+ "description": "Tools for detecting and assessing systems vulnerable to CVE-2025-53770 (CWE-502: Deserialization of Untrusted Data).",
+ "fork": false,
+ "created_at": "2025-07-28T15:27:28Z",
+ "updated_at": "2026-04-03T19:31:29Z",
+ "pushed_at": "2025-09-16T22:13:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "deserialization",
+ "python",
+ "security",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1028018589,
+ "name": "CVE-2025-53770-Scanner",
+ "full_name": "0xisfet\/CVE-2025-53770-Scanner",
+ "owner": {
+ "login": "0xisfet",
+ "id": 223371330,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223371330?v=4",
+ "html_url": "https:\/\/github.com\/0xisfet",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xisfet\/CVE-2025-53770-Scanner",
+ "description": "🎯 Vulnerability scanner for SharePoint servers affected by CVE-2025-53770. Detects unsafe deserialization using ToolPane.aspx with a crafted base64+gzip payload. 🛡️ Developed by Ahmed Tamer.",
+ "fork": false,
+ "created_at": "2025-07-28T22:41:05Z",
+ "updated_at": "2025-07-28T22:53:01Z",
+ "pushed_at": "2025-07-28T22:52:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1028436929,
+ "name": "SharePoint-CVE-2025-53770-POC",
+ "full_name": "Immersive-Labs-Sec\/SharePoint-CVE-2025-53770-POC",
+ "owner": {
+ "login": "Immersive-Labs-Sec",
+ "id": 79456607,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79456607?v=4",
+ "html_url": "https:\/\/github.com\/Immersive-Labs-Sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Immersive-Labs-Sec\/SharePoint-CVE-2025-53770-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-29T14:24:47Z",
+ "updated_at": "2025-12-29T09:11:19Z",
+ "pushed_at": "2025-07-29T14:28:55Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1030736969,
+ "name": "CVE-2025-53770-SharePoint-Deserialization-RCE-PoC",
+ "full_name": "harryhaxor\/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC",
+ "owner": {
+ "login": "harryhaxor",
+ "id": 189852781,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189852781?v=4",
+ "html_url": "https:\/\/github.com\/harryhaxor",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/harryhaxor\/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC",
+ "description": "A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical.",
+ "fork": false,
+ "created_at": "2025-08-02T08:00:43Z",
+ "updated_at": "2026-03-15T08:44:42Z",
+ "pushed_at": "2025-08-02T08:11:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1033932743,
+ "name": "CVE-2025-53770",
+ "full_name": "Agampreet-Singh\/CVE-2025-53770",
+ "owner": {
+ "login": "Agampreet-Singh",
+ "id": 73707055,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73707055?v=4",
+ "html_url": "https:\/\/github.com\/Agampreet-Singh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Agampreet-Singh\/CVE-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-07T15:14:31Z",
+ "updated_at": "2025-08-07T15:17:47Z",
+ "pushed_at": "2025-08-07T15:17:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1037352832,
+ "name": "ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend",
+ "full_name": "CyprianAtsyor\/ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend",
+ "owner": {
+ "login": "CyprianAtsyor",
+ "id": 172041723,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172041723?v=4",
+ "html_url": "https:\/\/github.com\/CyprianAtsyor",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CyprianAtsyor\/ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-13T12:52:37Z",
+ "updated_at": "2025-08-13T14:43:01Z",
+ "pushed_at": "2025-08-13T14:42:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1037874870,
+ "name": "CVE-2025-53770",
+ "full_name": "ghostn4444\/CVE-2025-53770",
+ "owner": {
+ "login": "ghostn4444",
+ "id": 114788746,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114788746?v=4",
+ "html_url": "https:\/\/github.com\/ghostn4444",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ghostn4444\/CVE-2025-53770",
+ "description": "CVE-2025-53770 - SharePoint",
+ "fork": false,
+ "created_at": "2025-08-14T08:57:39Z",
+ "updated_at": "2025-08-14T09:11:53Z",
+ "pushed_at": "2025-08-14T09:11:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1050677655,
+ "name": "CVE-2025-53770",
+ "full_name": "saladin0x1\/CVE-2025-53770",
+ "owner": {
+ "login": "saladin0x1",
+ "id": 50548046,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50548046?v=4",
+ "html_url": "https:\/\/github.com\/saladin0x1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saladin0x1\/CVE-2025-53770",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-04T19:12:13Z",
+ "updated_at": "2025-11-13T17:05:13Z",
+ "pushed_at": "2025-09-04T19:30:38Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1062812873,
+ "name": "LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell",
+ "full_name": "Michaael01\/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell",
+ "owner": {
+ "login": "Michaael01",
+ "id": 159445697,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159445697?v=4",
+ "html_url": "https:\/\/github.com\/Michaael01",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Michaael01\/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-23T19:05:57Z",
+ "updated_at": "2025-09-24T16:42:25Z",
+ "pushed_at": "2025-09-24T16:42:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1066460703,
"name": "LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320",
@@ -208,6 +1341,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1101467153,
+ "name": "sharepoint-toolshell-micro-postmortem",
+ "full_name": "Cameloo1\/sharepoint-toolshell-micro-postmortem",
+ "owner": {
+ "login": "Cameloo1",
+ "id": 147629513,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147629513?v=4",
+ "html_url": "https:\/\/github.com\/Cameloo1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cameloo1\/sharepoint-toolshell-micro-postmortem",
+ "description": "Reproducible incident micro-postmortem for on-prem Microsoft SharePoint “ToolShell” (CVE-2025-53770): ATT&CK snapshot, “logs that matter” table, three hunts (KQL\/SPL\/Sigma), first-4-hours comms, sample data, and figures. Built for fast triage; no org data; SharePoint Online out of scope.",
+ "fork": false,
+ "created_at": "2025-11-21T18:02:36Z",
+ "updated_at": "2025-12-19T18:07:44Z",
+ "pushed_at": "2025-12-19T18:07:40Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1155696191,
"name": "CVE-2025-53770",
diff --git a/2025/CVE-2025-53772.json b/2025/CVE-2025-53772.json
new file mode 100644
index 0000000000..275a3ed376
--- /dev/null
+++ b/2025/CVE-2025-53772.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1050449333,
+ "name": "CVE-2025-53772-IIS-WebDeploy-RCE",
+ "full_name": "Momollax\/CVE-2025-53772-IIS-WebDeploy-RCE",
+ "owner": {
+ "login": "Momollax",
+ "id": 91879564,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91879564?v=4",
+ "html_url": "https:\/\/github.com\/Momollax",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Momollax\/CVE-2025-53772-IIS-WebDeploy-RCE",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-04T12:56:43Z",
+ "updated_at": "2025-11-27T04:24:00Z",
+ "pushed_at": "2025-09-05T08:43:25Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113577027,
+ "name": "CVE-2025-53772",
+ "full_name": "sailay1996\/CVE-2025-53772",
+ "owner": {
+ "login": "sailay1996",
+ "id": 16739401,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16739401?v=4",
+ "html_url": "https:\/\/github.com\/sailay1996",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sailay1996\/CVE-2025-53772",
+ "description": "poc for cve-2025-53772",
+ "fork": false,
+ "created_at": "2025-12-10T07:02:21Z",
+ "updated_at": "2026-04-16T07:46:22Z",
+ "pushed_at": "2025-12-10T13:24:03Z",
+ "stargazers_count": 47,
+ "watchers_count": 47,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 47,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53779.json b/2025/CVE-2025-53779.json
new file mode 100644
index 0000000000..f49b39a6db
--- /dev/null
+++ b/2025/CVE-2025-53779.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1099476765,
+ "name": "Invoke-BadSuccessor.ps1",
+ "full_name": "b5null\/Invoke-BadSuccessor.ps1",
+ "owner": {
+ "login": "b5null",
+ "id": 149713491,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149713491?v=4",
+ "html_url": "https:\/\/github.com\/b5null",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/b5null\/Invoke-BadSuccessor.ps1",
+ "description": "PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)",
+ "fork": false,
+ "created_at": "2025-11-19T03:27:51Z",
+ "updated_at": "2026-03-05T08:03:48Z",
+ "pushed_at": "2025-11-19T17:27:29Z",
+ "stargazers_count": 45,
+ "watchers_count": 45,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 45,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53786.json b/2025/CVE-2025-53786.json
new file mode 100644
index 0000000000..8f7bf3a3bd
--- /dev/null
+++ b/2025/CVE-2025-53786.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041993303,
+ "name": "CVE-2025-53786",
+ "full_name": "vincentdthe\/CVE-2025-53786",
+ "owner": {
+ "login": "vincentdthe",
+ "id": 48346305,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48346305?v=4",
+ "html_url": "https:\/\/github.com\/vincentdthe",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vincentdthe\/CVE-2025-53786",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-21T10:16:47Z",
+ "updated_at": "2025-08-21T10:16:48Z",
+ "pushed_at": "2025-08-08T10:12:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-53833.json b/2025/CVE-2025-53833.json
new file mode 100644
index 0000000000..babdfe8ac8
--- /dev/null
+++ b/2025/CVE-2025-53833.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1020595732,
+ "name": "Blackash-CVE-2025-53833",
+ "full_name": "iQingshan\/Blackash-CVE-2025-53833",
+ "owner": {
+ "login": "iQingshan",
+ "id": 102872581,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102872581?v=4",
+ "html_url": "https:\/\/github.com\/iQingshan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iQingshan\/Blackash-CVE-2025-53833",
+ "description": "CVE-2025-53833",
+ "fork": false,
+ "created_at": "2025-07-16T05:45:41Z",
+ "updated_at": "2025-07-16T05:45:41Z",
+ "pushed_at": "2025-07-15T11:41:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5394.json b/2025/CVE-2025-5394.json
new file mode 100644
index 0000000000..ce35da64f7
--- /dev/null
+++ b/2025/CVE-2025-5394.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1029794191,
+ "name": "CVE-2025-5394",
+ "full_name": "fokda-prodz\/CVE-2025-5394",
+ "owner": {
+ "login": "fokda-prodz",
+ "id": 78784590,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78784590?v=4",
+ "html_url": "https:\/\/github.com\/fokda-prodz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fokda-prodz\/CVE-2025-5394",
+ "description": "CVE‑2025‑5394 WP Alone ≤ 7.8.3",
+ "fork": false,
+ "created_at": "2025-07-31T15:26:39Z",
+ "updated_at": "2026-05-16T14:14:41Z",
+ "pushed_at": "2025-07-31T15:29:16Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1030987496,
+ "name": "CVE-2025-5394",
+ "full_name": "Nxploited\/CVE-2025-5394",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-5394",
+ "description": "Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation",
+ "fork": false,
+ "created_at": "2025-08-02T19:00:47Z",
+ "updated_at": "2025-10-31T00:43:27Z",
+ "pushed_at": "2025-08-03T11:55:56Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1031007271,
+ "name": "CVE-2025-5394",
+ "full_name": "Yucaerin\/CVE-2025-5394",
+ "owner": {
+ "login": "Yucaerin",
+ "id": 105861519,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105861519?v=4",
+ "html_url": "https:\/\/github.com\/Yucaerin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yucaerin\/CVE-2025-5394",
+ "description": "Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation",
+ "fork": false,
+ "created_at": "2025-08-02T20:01:25Z",
+ "updated_at": "2025-08-06T17:39:04Z",
+ "pushed_at": "2025-08-02T20:03:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54100.json b/2025/CVE-2025-54100.json
index c51e8b343a..83121e11ae 100644
--- a/2025/CVE-2025-54100.json
+++ b/2025/CVE-2025-54100.json
@@ -32,6 +32,44 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1115593342,
+ "name": "CVE-2025-54100",
+ "full_name": "ThemeHackers\/CVE-2025-54100",
+ "owner": {
+ "login": "ThemeHackers",
+ "id": 107047730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4",
+ "html_url": "https:\/\/github.com\/ThemeHackers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2025-54100",
+ "description": "CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from improper neutralization of special elements during the automatic parsing of Web responses.",
+ "fork": false,
+ "created_at": "2025-12-13T06:40:19Z",
+ "updated_at": "2026-05-08T12:35:47Z",
+ "pushed_at": "2025-12-13T08:43:07Z",
+ "stargazers_count": 28,
+ "watchers_count": 28,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-54100",
+ "poc",
+ "powershell",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 28,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124527415,
"name": "CVE-2025-54100",
diff --git a/2025/CVE-2025-54135.json b/2025/CVE-2025-54135.json
new file mode 100644
index 0000000000..7cf960b684
--- /dev/null
+++ b/2025/CVE-2025-54135.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1031769703,
+ "name": "CVE-2025-54135",
+ "full_name": "anntsmart\/CVE-2025-54135",
+ "owner": {
+ "login": "anntsmart",
+ "id": 41144849,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41144849?v=4",
+ "html_url": "https:\/\/github.com\/anntsmart",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/anntsmart\/CVE-2025-54135",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-04T09:56:12Z",
+ "updated_at": "2025-08-04T09:56:13Z",
+ "pushed_at": "2025-08-02T12:01:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047223116,
+ "name": "test-mcp",
+ "full_name": "hn1e13\/test-mcp",
+ "owner": {
+ "login": "hn1e13",
+ "id": 55699545,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55699545?v=4",
+ "html_url": "https:\/\/github.com\/hn1e13",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hn1e13\/test-mcp",
+ "description": "A repo for CVE-2025-54135 reproduction",
+ "fork": false,
+ "created_at": "2025-08-30T00:41:29Z",
+ "updated_at": "2025-08-30T00:41:29Z",
+ "pushed_at": "2025-08-07T07:35:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json
index 01ba08ab8e..ff479a3d65 100644
--- a/2025/CVE-2025-5419.json
+++ b/2025/CVE-2025-5419.json
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
- "updated_at": "2026-06-02T12:45:19Z",
- "pushed_at": "2026-06-02T12:45:14Z",
+ "updated_at": "2026-06-02T15:47:13Z",
+ "pushed_at": "2026-06-02T15:47:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -85,6 +85,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1037208367,
+ "name": "CVE-2025-5419",
+ "full_name": "riemannj\/CVE-2025-5419",
+ "owner": {
+ "login": "riemannj",
+ "id": 35067594,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35067594?v=4",
+ "html_url": "https:\/\/github.com\/riemannj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/riemannj\/CVE-2025-5419",
+ "description": "Dissecting CVEin Chrome",
+ "fork": false,
+ "created_at": "2025-08-13T08:20:16Z",
+ "updated_at": "2025-08-14T19:27:36Z",
+ "pushed_at": "2025-08-14T19:27:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1044114488,
+ "name": "CVE-2025-5419",
+ "full_name": "mistymntncop\/CVE-2025-5419",
+ "owner": {
+ "login": "mistymntncop",
+ "id": 105329747,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105329747?v=4",
+ "html_url": "https:\/\/github.com\/mistymntncop",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mistymntncop\/CVE-2025-5419",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-25T07:54:12Z",
+ "updated_at": "2026-05-12T20:43:00Z",
+ "pushed_at": "2025-08-26T06:34:24Z",
+ "stargazers_count": 94,
+ "watchers_count": 94,
+ "has_discussions": false,
+ "forks_count": 18,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 18,
+ "watchers": 94,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1144886270,
"name": "CVE-2025-5419",
diff --git a/2025/CVE-2025-54236.json b/2025/CVE-2025-54236.json
index f5df3f7c93..bfd399f6d8 100644
--- a/2025/CVE-2025-54236.json
+++ b/2025/CVE-2025-54236.json
@@ -1,4 +1,81 @@
[
+ {
+ "id": 1053966464,
+ "name": "day01-sessionreaper-lab",
+ "full_name": "amalpvatayam67\/day01-sessionreaper-lab",
+ "owner": {
+ "login": "amalpvatayam67",
+ "id": 200071444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200071444?v=4",
+ "html_url": "https:\/\/github.com\/amalpvatayam67",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalpvatayam67\/day01-sessionreaper-lab",
+ "description": "This is a tiny lab that simulates the core idea reported for CVE-2025-54236 (“SessionReaper”)",
+ "fork": false,
+ "created_at": "2025-09-10T07:19:12Z",
+ "updated_at": "2026-03-06T09:56:59Z",
+ "pushed_at": "2025-09-10T07:21:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1079044624,
+ "name": "magento2-session-reaper-patch",
+ "full_name": "wubinworks\/magento2-session-reaper-patch",
+ "owner": {
+ "login": "wubinworks",
+ "id": 127310257,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127310257?v=4",
+ "html_url": "https:\/\/github.com\/wubinworks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wubinworks\/magento2-session-reaper-patch",
+ "description": "Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.",
+ "fork": false,
+ "created_at": "2025-10-19T01:08:24Z",
+ "updated_at": "2026-04-28T07:49:49Z",
+ "pushed_at": "2025-11-09T11:30:00Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "customer-account-takeover",
+ "cve-2025-54236",
+ "magento2-extension",
+ "patch",
+ "rce",
+ "security",
+ "session-reaper",
+ "session-takeover",
+ "sessionreaper",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125104768,
"name": "cve-2025-54236",
diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json
index 419a1c63e4..229a952a15 100644
--- a/2025/CVE-2025-54253.json
+++ b/2025/CVE-2025-54253.json
@@ -1,4 +1,57 @@
[
+ {
+ "id": 1033416101,
+ "name": "CVE-2025-54253-Exploit-Demo",
+ "full_name": "Shivshantp\/CVE-2025-54253-Exploit-Demo",
+ "owner": {
+ "login": "Shivshantp",
+ "id": 138895783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138895783?v=4",
+ "html_url": "https:\/\/github.com\/Shivshantp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shivshantp\/CVE-2025-54253-Exploit-Demo",
+ "description": "Simulated PoC for CVE-2025-54253: Adobe AEM OGNL Injection Vulnerability",
+ "fork": false,
+ "created_at": "2025-08-06T19:28:00Z",
+ "updated_at": "2025-08-07T09:45:44Z",
+ "pushed_at": "2025-08-06T21:00:55Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "adobe-aem",
+ "aem-forms-on-jee",
+ "curl",
+ "cve-2025-54253",
+ "cybersecurity",
+ "ethical-hacking",
+ "exploit",
+ "infosec",
+ "local-testing",
+ "offensive-security",
+ "ognl-injection-vulnerability",
+ "penetration-testing",
+ "poc",
+ "proof-of-concept",
+ "rce",
+ "red-team",
+ "remote-code-execution",
+ "vmware-lab",
+ "vulnerability-research"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1039738165,
"name": "CVE-2025-54253-Exploit-Demo",
@@ -14,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
- "updated_at": "2026-06-02T11:14:42Z",
- "pushed_at": "2026-06-02T11:14:38Z",
+ "updated_at": "2026-06-02T18:24:25Z",
+ "pushed_at": "2026-06-02T18:24:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-54309.json b/2025/CVE-2025-54309.json
index e0cd1b04ab..9fa6cf9067 100644
--- a/2025/CVE-2025-54309.json
+++ b/2025/CVE-2025-54309.json
@@ -1,4 +1,169 @@
[
+ {
+ "id": 1043994758,
+ "name": "watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309",
+ "full_name": "watchtowrlabs\/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309",
+ "owner": {
+ "login": "watchtowrlabs",
+ "id": 99977116,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
+ "html_url": "https:\/\/github.com\/watchtowrlabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-25T03:07:13Z",
+ "updated_at": "2026-04-05T21:38:35Z",
+ "pushed_at": "2025-08-25T03:10:24Z",
+ "stargazers_count": 28,
+ "watchers_count": 28,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 28,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1046661536,
+ "name": "CVE-2025-54309",
+ "full_name": "blueisbeautiful\/CVE-2025-54309",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-54309",
+ "description": "CrushFTP AS2 Authentication Bypass",
+ "fork": false,
+ "created_at": "2025-08-29T03:05:20Z",
+ "updated_at": "2025-08-30T03:36:29Z",
+ "pushed_at": "2025-08-30T03:36:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049693361,
+ "name": "CVE-2025-54309",
+ "full_name": "foregenix\/CVE-2025-54309",
+ "owner": {
+ "login": "foregenix",
+ "id": 60466166,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60466166?v=4",
+ "html_url": "https:\/\/github.com\/foregenix",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/foregenix\/CVE-2025-54309",
+ "description": "Exploitation scripts for the CrushFTP CVE-2025-54309: vulnerability",
+ "fork": false,
+ "created_at": "2025-09-03T11:05:05Z",
+ "updated_at": "2026-03-09T14:40:40Z",
+ "pushed_at": "2025-09-03T11:06:46Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1051858335,
+ "name": "CVE-2025-54309__Enhanced_exploit",
+ "full_name": "whisperer1290\/CVE-2025-54309__Enhanced_exploit",
+ "owner": {
+ "login": "whisperer1290",
+ "id": 68425420,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68425420?v=4",
+ "html_url": "https:\/\/github.com\/whisperer1290",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/whisperer1290\/CVE-2025-54309__Enhanced_exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-06T21:43:50Z",
+ "updated_at": "2025-09-10T18:32:34Z",
+ "pushed_at": "2025-09-06T22:02:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1056005144,
+ "name": "CrushFTP_CVE-2025-54309",
+ "full_name": "chin-tech\/CrushFTP_CVE-2025-54309",
+ "owner": {
+ "login": "chin-tech",
+ "id": 195065467,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195065467?v=4",
+ "html_url": "https:\/\/github.com\/chin-tech",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chin-tech\/CrushFTP_CVE-2025-54309",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-13T07:42:08Z",
+ "updated_at": "2025-09-13T07:42:42Z",
+ "pushed_at": "2025-09-13T07:42:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1143298996,
"name": "CVE-2025-54309",
diff --git a/2025/CVE-2025-54313.json b/2025/CVE-2025-54313.json
index 62be64702d..f7229686b0 100644
--- a/2025/CVE-2025-54313.json
+++ b/2025/CVE-2025-54313.json
@@ -1,4 +1,42 @@
[
+ {
+ "id": 1026677566,
+ "name": "cve-2025-54313",
+ "full_name": "nihilor\/cve-2025-54313",
+ "owner": {
+ "login": "nihilor",
+ "id": 12661131,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12661131?v=4",
+ "html_url": "https:\/\/github.com\/nihilor",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nihilor\/cve-2025-54313",
+ "description": "Checks projects for compromised packages, suspicious files, and import statements.",
+ "fork": false,
+ "created_at": "2025-07-26T11:32:20Z",
+ "updated_at": "2025-07-27T10:30:49Z",
+ "pushed_at": "2025-07-27T10:32:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-54313",
+ "node-gyp",
+ "npm-package",
+ "supply-chain-attacks"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1026918916,
"name": "scavenger_scanner",
diff --git a/2025/CVE-2025-54320.json b/2025/CVE-2025-54320.json
new file mode 100644
index 0000000000..e52e43135b
--- /dev/null
+++ b/2025/CVE-2025-54320.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097460853,
+ "name": "CVE-2025-54320",
+ "full_name": "saykino\/CVE-2025-54320",
+ "owner": {
+ "login": "saykino",
+ "id": 90106740,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90106740?v=4",
+ "html_url": "https:\/\/github.com\/saykino",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saykino\/CVE-2025-54320",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-16T08:11:50Z",
+ "updated_at": "2025-11-16T08:17:26Z",
+ "pushed_at": "2025-11-16T08:17:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54321.json b/2025/CVE-2025-54321.json
new file mode 100644
index 0000000000..443084a9f0
--- /dev/null
+++ b/2025/CVE-2025-54321.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097454982,
+ "name": "CVE-2025-54321",
+ "full_name": "saykino\/CVE-2025-54321",
+ "owner": {
+ "login": "saykino",
+ "id": 90106740,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90106740?v=4",
+ "html_url": "https:\/\/github.com\/saykino",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/saykino\/CVE-2025-54321",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-16T07:54:53Z",
+ "updated_at": "2025-11-16T08:24:36Z",
+ "pushed_at": "2025-11-16T08:24:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54322.json b/2025/CVE-2025-54322.json
index 5eb1b4de99..039a034de7 100644
--- a/2025/CVE-2025-54322.json
+++ b/2025/CVE-2025-54322.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1123422031,
+ "name": "CVE-2025-54322",
+ "full_name": "Sachinart\/CVE-2025-54322",
+ "owner": {
+ "login": "Sachinart",
+ "id": 18497191,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18497191?v=4",
+ "html_url": "https:\/\/github.com\/Sachinart",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Sachinart\/CVE-2025-54322",
+ "description": "CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick",
+ "fork": false,
+ "created_at": "2025-12-26T20:54:08Z",
+ "updated_at": "2026-01-13T15:14:18Z",
+ "pushed_at": "2025-12-26T21:06:29Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125933803,
"name": "CVE-2025-54322-exploit",
diff --git a/2025/CVE-2025-54352.json b/2025/CVE-2025-54352.json
new file mode 100644
index 0000000000..04f2a95278
--- /dev/null
+++ b/2025/CVE-2025-54352.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1027745710,
+ "name": "CVE-2025-54352",
+ "full_name": "yohannslm\/CVE-2025-54352",
+ "owner": {
+ "login": "yohannslm",
+ "id": 84133313,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84133313?v=4",
+ "html_url": "https:\/\/github.com\/yohannslm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yohannslm\/CVE-2025-54352",
+ "description": "CVE-2025-54352 PoC",
+ "fork": false,
+ "created_at": "2025-07-28T13:22:02Z",
+ "updated_at": "2026-03-02T08:47:03Z",
+ "pushed_at": "2025-07-29T15:12:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117323064,
+ "name": "XML-RPC-Pingback-Vulnerability",
+ "full_name": "mufasa4o4\/XML-RPC-Pingback-Vulnerability",
+ "owner": {
+ "login": "mufasa4o4",
+ "id": 217181236,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217181236?v=4",
+ "html_url": "https:\/\/github.com\/mufasa4o4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mufasa4o4\/XML-RPC-Pingback-Vulnerability",
+ "description": "This is my own written POC on the xmlrpc-pingback vulnerabiity found on wordpress. CVE-2025-54352. This vulnerability affects wordpress 3.5 all through 6.8.2",
+ "fork": false,
+ "created_at": "2025-12-16T06:39:05Z",
+ "updated_at": "2025-12-16T06:43:45Z",
+ "pushed_at": "2025-12-16T06:41:27Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54381.json b/2025/CVE-2025-54381.json
new file mode 100644
index 0000000000..f9e2d9f545
--- /dev/null
+++ b/2025/CVE-2025-54381.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1028694417,
+ "name": "bentoml_CVE-2025-54381",
+ "full_name": "rockmelodies\/bentoml_CVE-2025-54381",
+ "owner": {
+ "login": "rockmelodies",
+ "id": 24653177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24653177?v=4",
+ "html_url": "https:\/\/github.com\/rockmelodies",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rockmelodies\/bentoml_CVE-2025-54381",
+ "description": "Ai相关",
+ "fork": false,
+ "created_at": "2025-07-29T23:33:38Z",
+ "updated_at": "2025-07-29T23:42:57Z",
+ "pushed_at": "2025-07-29T23:42:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1103290294,
+ "name": "CVE-2025-54381",
+ "full_name": "IS8123\/CVE-2025-54381",
+ "owner": {
+ "login": "IS8123",
+ "id": 124526970,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124526970?v=4",
+ "html_url": "https:\/\/github.com\/IS8123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IS8123\/CVE-2025-54381",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-24T17:14:12Z",
+ "updated_at": "2025-11-24T17:14:12Z",
+ "pushed_at": "2025-11-24T17:14:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json
index 3a39a38ad5..df725204a0 100644
--- a/2025/CVE-2025-54424.json
+++ b/2025/CVE-2025-54424.json
@@ -1,4 +1,43 @@
[
+ {
+ "id": 1031882478,
+ "name": "CVE-2025-54424",
+ "full_name": "Mr-xn\/CVE-2025-54424",
+ "owner": {
+ "login": "Mr-xn",
+ "id": 18260135,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18260135?v=4",
+ "html_url": "https:\/\/github.com\/Mr-xn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mr-xn\/CVE-2025-54424",
+ "description": "CVE-2025-54424：1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)",
+ "fork": false,
+ "created_at": "2025-08-04T13:24:47Z",
+ "updated_at": "2026-04-14T13:50:50Z",
+ "pushed_at": "2025-08-05T02:59:56Z",
+ "stargazers_count": 59,
+ "watchers_count": 59,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "1panel",
+ "exploit",
+ "rce",
+ "rce-exploit",
+ "rce-scanner"
+ ],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 59,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1037771504,
"name": "CVE-2025-54424",
@@ -14,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
- "updated_at": "2026-06-02T11:14:26Z",
- "pushed_at": "2026-06-02T11:14:10Z",
+ "updated_at": "2026-06-02T18:23:47Z",
+ "pushed_at": "2026-06-02T18:23:44Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -37,5 +76,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1123721341,
+ "name": "1Panel-CVE-2025-54424-",
+ "full_name": "anonnymous5\/1Panel-CVE-2025-54424-",
+ "owner": {
+ "login": "anonnymous5",
+ "id": 54352182,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54352182?v=4",
+ "html_url": "https:\/\/github.com\/anonnymous5",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/anonnymous5\/1Panel-CVE-2025-54424-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-27T13:31:39Z",
+ "updated_at": "2025-12-27T13:32:21Z",
+ "pushed_at": "2025-12-27T13:32:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-54554.json b/2025/CVE-2025-54554.json
new file mode 100644
index 0000000000..cf94203b74
--- /dev/null
+++ b/2025/CVE-2025-54554.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1026268651,
+ "name": "CVE-2025-54554",
+ "full_name": "Aman-Parmar\/CVE-2025-54554",
+ "owner": {
+ "login": "Aman-Parmar",
+ "id": 23705482,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23705482?v=4",
+ "html_url": "https:\/\/github.com\/Aman-Parmar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Aman-Parmar\/CVE-2025-54554",
+ "description": "CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure",
+ "fork": false,
+ "created_at": "2025-07-25T15:36:07Z",
+ "updated_at": "2025-07-26T01:47:59Z",
+ "pushed_at": "2025-07-26T01:46:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54574.json b/2025/CVE-2025-54574.json
index fea6586b12..8c92db8297 100644
--- a/2025/CVE-2025-54574.json
+++ b/2025/CVE-2025-54574.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1032318509,
+ "name": "Blackash-CVE-2025-54574",
+ "full_name": "gmh5225\/Blackash-CVE-2025-54574",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/Blackash-CVE-2025-54574",
+ "description": "CVE-2025-54574",
+ "fork": false,
+ "created_at": "2025-08-05T06:20:40Z",
+ "updated_at": "2025-08-05T06:20:40Z",
+ "pushed_at": "2025-08-04T15:20:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1098224162,
"name": "CVE-2025-54574-Squid-Heap-Buffer-Overflow",
diff --git a/2025/CVE-2025-54589.json b/2025/CVE-2025-54589.json
new file mode 100644
index 0000000000..694c3fa0eb
--- /dev/null
+++ b/2025/CVE-2025-54589.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029968305,
+ "name": "CVE-2025-54589",
+ "full_name": "byteReaper77\/CVE-2025-54589",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-54589",
+ "description": "PoC for CVE-2025-54589 – a reflected XSS vulnerability in Copyparty ≤ 1.18.6.",
+ "fork": false,
+ "created_at": "2025-07-31T21:47:42Z",
+ "updated_at": "2026-02-07T05:12:53Z",
+ "pushed_at": "2025-08-01T21:39:11Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54726.json b/2025/CVE-2025-54726.json
new file mode 100644
index 0000000000..034b8b50bf
--- /dev/null
+++ b/2025/CVE-2025-54726.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064135968,
+ "name": "CVE-2025-54726",
+ "full_name": "RandomRobbieBF\/CVE-2025-54726",
+ "owner": {
+ "login": "RandomRobbieBF",
+ "id": 51722811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
+ "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2025-54726",
+ "description": "JS Archive List <= 6.1.5 - Unauthenticated SQL Injection",
+ "fork": false,
+ "created_at": "2025-09-25T15:36:06Z",
+ "updated_at": "2026-02-24T12:58:46Z",
+ "pushed_at": "2025-09-25T15:39:26Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54769.json b/2025/CVE-2025-54769.json
new file mode 100644
index 0000000000..b301034390
--- /dev/null
+++ b/2025/CVE-2025-54769.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1029124944,
+ "name": "CVE-2025-54769",
+ "full_name": "byteReaper77\/CVE-2025-54769",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-54769",
+ "description": "A C‑based proof‑of‑concept exploit for CVE‑2025‑54769, automating the creation and upload of a malicious Perl CGI script to LPAR2RRD’s upgrade endpoint, leveraging directory traversal for remote code execution.",
+ "fork": false,
+ "created_at": "2025-07-30T14:59:51Z",
+ "updated_at": "2026-02-07T05:13:22Z",
+ "pushed_at": "2025-07-30T16:04:15Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54782.json b/2025/CVE-2025-54782.json
new file mode 100644
index 0000000000..9004dc95ea
--- /dev/null
+++ b/2025/CVE-2025-54782.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090802856,
+ "name": "CVE-2025-54782",
+ "full_name": "DDestinys\/CVE-2025-54782",
+ "owner": {
+ "login": "DDestinys",
+ "id": 73631761,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73631761?v=4",
+ "html_url": "https:\/\/github.com\/DDestinys",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DDestinys\/CVE-2025-54782",
+ "description": "CVE-2025-54782",
+ "fork": false,
+ "created_at": "2025-11-06T06:46:56Z",
+ "updated_at": "2025-11-06T06:48:35Z",
+ "pushed_at": "2025-11-06T06:48:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54794.json b/2025/CVE-2025-54794.json
new file mode 100644
index 0000000000..12c22b9868
--- /dev/null
+++ b/2025/CVE-2025-54794.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1033055362,
+ "name": "CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back",
+ "full_name": "AdityaBhatt3010\/CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back",
+ "description": "A high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of code.",
+ "fork": false,
+ "created_at": "2025-08-06T08:29:35Z",
+ "updated_at": "2026-05-20T16:10:12Z",
+ "pushed_at": "2025-08-06T08:43:29Z",
+ "stargazers_count": 26,
+ "watchers_count": 26,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 26,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54887.json b/2025/CVE-2025-54887.json
new file mode 100644
index 0000000000..f273a9eea7
--- /dev/null
+++ b/2025/CVE-2025-54887.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1036785585,
+ "name": "PoC_CVE-2025-54887",
+ "full_name": "shinigami-777\/PoC_CVE-2025-54887",
+ "owner": {
+ "login": "shinigami-777",
+ "id": 139495942,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139495942?v=4",
+ "html_url": "https:\/\/github.com\/shinigami-777",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shinigami-777\/PoC_CVE-2025-54887",
+ "description": "Proof of Concept for CVE-2025-54887",
+ "fork": false,
+ "created_at": "2025-08-12T15:22:41Z",
+ "updated_at": "2025-08-24T05:53:19Z",
+ "pushed_at": "2025-08-13T17:54:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54914.json b/2025/CVE-2025-54914.json
new file mode 100644
index 0000000000..47762be6b2
--- /dev/null
+++ b/2025/CVE-2025-54914.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1052430008,
+ "name": "Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914",
+ "full_name": "mrk336\/Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914",
+ "description": "CVE-2025-54914 exposes a critical flaw in Azure Networking that allows attackers to escalate privileges and control routing across subnets. The article explains how a missing privilege check in the “GetRouteTable” API enables lateral movement and remote exploitation, urging immediate patching and monitoring",
+ "fork": false,
+ "created_at": "2025-09-08T03:33:02Z",
+ "updated_at": "2025-11-17T13:01:42Z",
+ "pushed_at": "2025-09-08T03:41:36Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1055673780,
+ "name": "CVE-2025-54914-PoC",
+ "full_name": "Ash1996x\/CVE-2025-54914-PoC",
+ "owner": {
+ "login": "Ash1996x",
+ "id": 157934027,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157934027?v=4",
+ "html_url": "https:\/\/github.com\/Ash1996x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ash1996x\/CVE-2025-54914-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-12T16:11:09Z",
+ "updated_at": "2025-10-20T11:46:57Z",
+ "pushed_at": "2025-09-14T20:15:27Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54918.json b/2025/CVE-2025-54918.json
index 8dd408f095..e14ce26ba9 100644
--- a/2025/CVE-2025-54918.json
+++ b/2025/CVE-2025-54918.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1058386049,
+ "name": "From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps",
+ "full_name": "mrk336\/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps",
+ "description": "Simulated exploitation and mitigation of CVE-2025-54918 (Windows NTLM flaw). Includes detection scripts, Ansible patching, and CI\/CD hardening. Demonstrates privilege escalation from low-level access to SYSTEM in hybrid cloud environments.",
+ "fork": false,
+ "created_at": "2025-09-17T02:54:44Z",
+ "updated_at": "2026-03-05T14:19:04Z",
+ "pushed_at": "2025-09-17T03:14:34Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1132975680,
"name": "CVE-2025-54918-POC",
diff --git a/2025/CVE-2025-54939.json b/2025/CVE-2025-54939.json
new file mode 100644
index 0000000000..6a4ca5238e
--- /dev/null
+++ b/2025/CVE-2025-54939.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1045411003,
+ "name": "CVE-2025-54939",
+ "full_name": "yohannslm\/CVE-2025-54939",
+ "owner": {
+ "login": "yohannslm",
+ "id": 84133313,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84133313?v=4",
+ "html_url": "https:\/\/github.com\/yohannslm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yohannslm\/CVE-2025-54939",
+ "description": "POC for CVE-2025-54939. ~ forcibly loads 200MiB\/s in server's memory",
+ "fork": false,
+ "created_at": "2025-08-27T06:02:23Z",
+ "updated_at": "2026-02-25T09:58:48Z",
+ "pushed_at": "2025-08-27T06:36:17Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54962.json b/2025/CVE-2025-54962.json
new file mode 100644
index 0000000000..afb1d711cc
--- /dev/null
+++ b/2025/CVE-2025-54962.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1028504297,
+ "name": "CVE-2025-54962",
+ "full_name": "Eyodav\/CVE-2025-54962",
+ "owner": {
+ "login": "Eyodav",
+ "id": 121509138,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121509138?v=4",
+ "html_url": "https:\/\/github.com\/Eyodav",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Eyodav\/CVE-2025-54962",
+ "description": "Authenticated users can upload arbitrary files (e.g. .html, .svg) as profile images in OpenPLC Runtime. These files are publicly accessible without authentication, allowing stored XSS or malicious content delivery .",
+ "fork": false,
+ "created_at": "2025-07-29T16:16:57Z",
+ "updated_at": "2025-11-22T16:34:37Z",
+ "pushed_at": "2025-08-04T07:43:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-54988.json b/2025/CVE-2025-54988.json
new file mode 100644
index 0000000000..57a3cd54d0
--- /dev/null
+++ b/2025/CVE-2025-54988.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1050138222,
+ "name": "POC-CVE-2025-54988",
+ "full_name": "mgthuramoemyint\/POC-CVE-2025-54988",
+ "owner": {
+ "login": "mgthuramoemyint",
+ "id": 22011815,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22011815?v=4",
+ "html_url": "https:\/\/github.com\/mgthuramoemyint",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mgthuramoemyint\/POC-CVE-2025-54988",
+ "description": "A PDF generator for CVE-2025-54988",
+ "fork": false,
+ "created_at": "2025-09-04T02:19:13Z",
+ "updated_at": "2026-02-13T01:46:52Z",
+ "pushed_at": "2025-09-04T02:23:33Z",
+ "stargazers_count": 18,
+ "watchers_count": 18,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 18,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118479995,
+ "name": "cve-2025-54988-VulnTikaProject",
+ "full_name": "galoryber\/cve-2025-54988-VulnTikaProject",
+ "owner": {
+ "login": "galoryber",
+ "id": 51980089,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51980089?v=4",
+ "html_url": "https:\/\/github.com\/galoryber",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/galoryber\/cve-2025-54988-VulnTikaProject",
+ "description": "Creating a vulnerable instance to test against",
+ "fork": false,
+ "created_at": "2025-12-17T20:23:16Z",
+ "updated_at": "2025-12-18T19:35:13Z",
+ "pushed_at": "2025-12-18T19:35:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json
index cb41b095e9..9318f01165 100644
--- a/2025/CVE-2025-55182.json
+++ b/2025/CVE-2025-55182.json
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
- "updated_at": "2026-06-02T12:10:19Z",
- "pushed_at": "2026-06-02T12:10:15Z",
+ "updated_at": "2026-06-02T15:24:25Z",
+ "pushed_at": "2026-06-02T15:13:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
- "updated_at": "2026-06-02T12:09:57Z",
- "pushed_at": "2026-06-02T12:09:53Z",
+ "updated_at": "2026-06-02T15:18:57Z",
+ "pushed_at": "2026-06-02T15:12:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
- "updated_at": "2026-06-02T12:10:00Z",
- "pushed_at": "2026-06-02T12:09:56Z",
+ "updated_at": "2026-06-02T15:20:46Z",
+ "pushed_at": "2026-06-02T15:13:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
- "updated_at": "2026-06-02T12:11:07Z",
- "pushed_at": "2026-06-02T12:11:02Z",
+ "updated_at": "2026-06-02T15:21:02Z",
+ "pushed_at": "2026-06-02T15:14:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
- "updated_at": "2026-06-02T12:09:36Z",
- "pushed_at": "2026-06-02T12:09:32Z",
+ "updated_at": "2026-06-02T15:19:20Z",
+ "pushed_at": "2026-06-02T15:12:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
- "updated_at": "2026-06-02T12:10:49Z",
- "pushed_at": "2026-06-02T12:10:40Z",
+ "updated_at": "2026-06-02T15:22:02Z",
+ "pushed_at": "2026-06-02T15:13:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
- "updated_at": "2026-06-02T12:13:50Z",
- "pushed_at": "2026-06-02T12:13:45Z",
+ "updated_at": "2026-06-02T15:22:35Z",
+ "pushed_at": "2026-06-02T15:16:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
- "updated_at": "2026-06-02T12:10:13Z",
- "pushed_at": "2026-06-02T12:10:07Z",
+ "updated_at": "2026-06-02T15:19:31Z",
+ "pushed_at": "2026-06-02T15:13:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
- "updated_at": "2026-06-02T12:11:07Z",
- "pushed_at": "2026-06-02T12:11:00Z",
+ "updated_at": "2026-06-02T15:21:31Z",
+ "pushed_at": "2026-06-02T15:13:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -528,6 +528,237 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109349830,
+ "name": "Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
+ "full_name": "BankkRoll\/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
+ "owner": {
+ "login": "BankkRoll",
+ "id": 106103625,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106103625?v=4",
+ "html_url": "https:\/\/github.com\/BankkRoll",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BankkRoll\/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
+ "description": "Script to quick check CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Critical unauthenticated RCE vulnerabilities in the React Server Components (RSC) “Flight” protocol.",
+ "fork": false,
+ "created_at": "2025-12-03T17:21:52Z",
+ "updated_at": "2026-02-24T10:53:22Z",
+ "pushed_at": "2025-12-09T03:22:29Z",
+ "stargazers_count": 12,
+ "watchers_count": 12,
+ "has_discussions": false,
+ "forks_count": 6,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 6,
+ "watchers": 12,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1109472359,
+ "name": "CVE-2025-55182-research",
+ "full_name": "ejpir\/CVE-2025-55182-research",
+ "owner": {
+ "login": "ejpir",
+ "id": 16493171,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16493171?v=4",
+ "html_url": "https:\/\/github.com\/ejpir",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ejpir\/CVE-2025-55182-research",
+ "description": "CVE-2025-55182 POC",
+ "fork": false,
+ "created_at": "2025-12-03T21:16:22Z",
+ "updated_at": "2026-05-31T04:24:39Z",
+ "pushed_at": "2025-12-08T21:21:26Z",
+ "stargazers_count": 796,
+ "watchers_count": 796,
+ "has_discussions": false,
+ "forks_count": 204,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 204,
+ "watchers": 796,
+ "score": 0,
+ "subscribers_count": 3
+ },
+ {
+ "id": 1109477572,
+ "name": "CVE-2025-55182",
+ "full_name": "sickwell\/CVE-2025-55182",
+ "owner": {
+ "login": "sickwell",
+ "id": 32671944,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32671944?v=4",
+ "html_url": "https:\/\/github.com\/sickwell",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sickwell\/CVE-2025-55182",
+ "description": "CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface",
+ "fork": false,
+ "created_at": "2025-12-03T21:28:03Z",
+ "updated_at": "2026-05-25T14:19:58Z",
+ "pushed_at": "2025-12-05T11:30:32Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109488174,
+ "name": "CVE-2025-55182-scanner",
+ "full_name": "fatguru\/CVE-2025-55182-scanner",
+ "owner": {
+ "login": "fatguru",
+ "id": 53537268,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53537268?v=4",
+ "html_url": "https:\/\/github.com\/fatguru",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fatguru\/CVE-2025-55182-scanner",
+ "description": "A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications",
+ "fork": false,
+ "created_at": "2025-12-03T21:52:18Z",
+ "updated_at": "2026-04-01T10:34:54Z",
+ "pushed_at": "2025-12-10T23:34:00Z",
+ "stargazers_count": 113,
+ "watchers_count": 113,
+ "has_discussions": false,
+ "forks_count": 19,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 19,
+ "watchers": 113,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1109504576,
+ "name": "CVE-2025-55182",
+ "full_name": "atastycookie\/CVE-2025-55182",
+ "owner": {
+ "login": "atastycookie",
+ "id": 2944373,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2944373?v=4",
+ "html_url": "https:\/\/github.com\/atastycookie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/atastycookie\/CVE-2025-55182",
+ "description": "CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface",
+ "fork": false,
+ "created_at": "2025-12-03T22:33:25Z",
+ "updated_at": "2025-12-03T22:33:25Z",
+ "pushed_at": "2025-12-03T22:36:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 8,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 8,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109508497,
+ "name": "CVE-2025-55182-analysis",
+ "full_name": "santihabib\/CVE-2025-55182-analysis",
+ "owner": {
+ "login": "santihabib",
+ "id": 55243343,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55243343?v=4",
+ "html_url": "https:\/\/github.com\/santihabib",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/santihabib\/CVE-2025-55182-analysis",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-03T22:44:03Z",
+ "updated_at": "2025-12-05T13:11:36Z",
+ "pushed_at": "2025-12-05T13:11:32Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1109554901,
+ "name": "cve-2025-55182-scanner",
+ "full_name": "xkillbit\/cve-2025-55182-scanner",
+ "owner": {
+ "login": "xkillbit",
+ "id": 74510491,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74510491?v=4",
+ "html_url": "https:\/\/github.com\/xkillbit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xkillbit\/cve-2025-55182-scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T00:58:58Z",
+ "updated_at": "2026-04-05T17:05:27Z",
+ "pushed_at": "2025-12-04T01:27:44Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1109565745,
"name": "CVE-2025-55182-poc",
@@ -566,6 +797,237 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109568167,
+ "name": "Blackash-CVE-2025-55182",
+ "full_name": "shen771\/Blackash-CVE-2025-55182",
+ "owner": {
+ "login": "shen771",
+ "id": 46846049,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46846049?v=4",
+ "html_url": "https:\/\/github.com\/shen771",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shen771\/Blackash-CVE-2025-55182",
+ "description": "CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T01:36:38Z",
+ "updated_at": "2025-12-04T01:36:39Z",
+ "pushed_at": "2025-12-03T22:20:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 30,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 30,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109574412,
+ "name": "exploit-CVE-2025-55182-poc",
+ "full_name": "Pa2sw0rd\/exploit-CVE-2025-55182-poc",
+ "owner": {
+ "login": "Pa2sw0rd",
+ "id": 50995900,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50995900?v=4",
+ "html_url": "https:\/\/github.com\/Pa2sw0rd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Pa2sw0rd\/exploit-CVE-2025-55182-poc",
+ "description": "This POC demonstrates CVE-2025-55182 using actual `react-server-dom-webpack@19.0.0` vulnerable code.",
+ "fork": false,
+ "created_at": "2025-12-04T01:54:22Z",
+ "updated_at": "2025-12-04T03:06:45Z",
+ "pushed_at": "2025-12-04T02:06:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109575088,
+ "name": "CVE-2025-55182",
+ "full_name": "kk12-30\/CVE-2025-55182",
+ "owner": {
+ "login": "kk12-30",
+ "id": 51871401,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51871401?v=4",
+ "html_url": "https:\/\/github.com\/kk12-30",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kk12-30\/CVE-2025-55182",
+ "description": "CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T01:56:11Z",
+ "updated_at": "2026-01-02T07:28:26Z",
+ "pushed_at": "2025-12-04T01:57:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109576518,
+ "name": "rsc_detect_CVE-2025-55182",
+ "full_name": "heiheishushu\/rsc_detect_CVE-2025-55182",
+ "owner": {
+ "login": "heiheishushu",
+ "id": 244636180,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244636180?v=4",
+ "html_url": "https:\/\/github.com\/heiheishushu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/heiheishushu\/rsc_detect_CVE-2025-55182",
+ "description": "For CVE-2025-55182 and CVE-2025-66478 Security Response",
+ "fork": false,
+ "created_at": "2025-12-04T02:00:00Z",
+ "updated_at": "2025-12-04T20:13:08Z",
+ "pushed_at": "2025-12-04T02:16:56Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109578659,
+ "name": "CVE-2025-55182",
+ "full_name": "songsanggggg\/CVE-2025-55182",
+ "owner": {
+ "login": "songsanggggg",
+ "id": 95994511,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95994511?v=4",
+ "html_url": "https:\/\/github.com\/songsanggggg",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/songsanggggg\/CVE-2025-55182",
+ "description": "CVE-2025-55182 漏洞利用GUI,PoC \/ Exploit for CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-04T02:05:24Z",
+ "updated_at": "2025-12-05T14:28:50Z",
+ "pushed_at": "2025-12-04T01:33:51Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109587217,
+ "name": "next.js-scanner",
+ "full_name": "M0onPu15e\/next.js-scanner",
+ "owner": {
+ "login": "M0onPu15e",
+ "id": 199017970,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199017970?v=4",
+ "html_url": "https:\/\/github.com\/M0onPu15e",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/M0onPu15e\/next.js-scanner",
+ "description": "检测针对 CVE-2025-55182（React 服务器组件远程代码执行漏洞）的扫描器",
+ "fork": false,
+ "created_at": "2025-12-04T02:28:10Z",
+ "updated_at": "2026-01-15T07:18:18Z",
+ "pushed_at": "2025-12-04T02:31:36Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109590040,
+ "name": "CVE-2025-55182-poc",
+ "full_name": "ducducuc111\/CVE-2025-55182-poc",
+ "owner": {
+ "login": "ducducuc111",
+ "id": 52061565,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52061565?v=4",
+ "html_url": "https:\/\/github.com\/ducducuc111",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ducducuc111\/CVE-2025-55182-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T02:35:50Z",
+ "updated_at": "2025-12-05T07:31:39Z",
+ "pushed_at": "2025-12-04T02:37:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1109594001,
"name": "CVE-2025-55182",
@@ -599,6 +1061,507 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109609433,
+ "name": "CVE-2025-55182-realistic-poc",
+ "full_name": "joshterrill\/CVE-2025-55182-realistic-poc",
+ "owner": {
+ "login": "joshterrill",
+ "id": 5368757,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5368757?v=4",
+ "html_url": "https:\/\/github.com\/joshterrill",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/joshterrill\/CVE-2025-55182-realistic-poc",
+ "description": "a realistic POC demonstrating the missing `hasOwnProperty` check in react-server-dom-webpack@19.0.0",
+ "fork": false,
+ "created_at": "2025-12-04T03:28:30Z",
+ "updated_at": "2025-12-04T03:31:13Z",
+ "pushed_at": "2025-12-04T03:31:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109640241,
+ "name": "CVE-2025-55182-TOOLS",
+ "full_name": "mingyisecurity-lab\/CVE-2025-55182-TOOLS",
+ "owner": {
+ "login": "mingyisecurity-lab",
+ "id": 247722131,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247722131?v=4",
+ "html_url": "https:\/\/github.com\/mingyisecurity-lab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mingyisecurity-lab\/CVE-2025-55182-TOOLS",
+ "description": "A Comprehensive CVE-2025-55182 Detection and Security Assessment Tool",
+ "fork": false,
+ "created_at": "2025-12-04T04:45:18Z",
+ "updated_at": "2025-12-05T05:07:25Z",
+ "pushed_at": "2025-12-05T05:07:22Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109670650,
+ "name": "react2shell-scanner",
+ "full_name": "gensecaihq\/react2shell-scanner",
+ "owner": {
+ "login": "gensecaihq",
+ "id": 216218562,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216218562?v=4",
+ "html_url": "https:\/\/github.com\/gensecaihq",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gensecaihq\/react2shell-scanner",
+ "description": "Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm\/pnpm\/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.",
+ "fork": false,
+ "created_at": "2025-12-04T05:54:18Z",
+ "updated_at": "2026-05-26T22:51:43Z",
+ "pushed_at": "2025-12-07T07:59:50Z",
+ "stargazers_count": 58,
+ "watchers_count": 58,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "nextjs",
+ "react2shell",
+ "reactjs",
+ "scanner"
+ ],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 58,
+ "score": 0,
+ "subscribers_count": 4
+ },
+ {
+ "id": 1109696160,
+ "name": "CVE-2025-55182POC",
+ "full_name": "sudo-Yangziran\/CVE-2025-55182POC",
+ "owner": {
+ "login": "sudo-Yangziran",
+ "id": 75308119,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75308119?v=4",
+ "html_url": "https:\/\/github.com\/sudo-Yangziran",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sudo-Yangziran\/CVE-2025-55182POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T06:46:45Z",
+ "updated_at": "2025-12-06T06:33:35Z",
+ "pushed_at": "2025-12-04T06:51:25Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109698083,
+ "name": "Next.js-Exploit-Tool",
+ "full_name": "Rsatan\/Next.js-Exploit-Tool",
+ "owner": {
+ "login": "Rsatan",
+ "id": 38817161,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38817161?v=4",
+ "html_url": "https:\/\/github.com\/Rsatan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rsatan\/Next.js-Exploit-Tool",
+ "description": "Next.js-Exploit-Tool 图形化综合利用工具，基于 Go 开发，一款针对 CVE-2025-55182 的独立安全评估工具。",
+ "fork": false,
+ "created_at": "2025-12-04T06:50:31Z",
+ "updated_at": "2026-05-27T08:51:56Z",
+ "pushed_at": "2025-12-11T07:59:45Z",
+ "stargazers_count": 118,
+ "watchers_count": 118,
+ "has_discussions": false,
+ "forks_count": 12,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 12,
+ "watchers": 118,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109700440,
+ "name": "react2shell-scanner",
+ "full_name": "assetnote\/react2shell-scanner",
+ "owner": {
+ "login": "assetnote",
+ "id": 35264812,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35264812?v=4",
+ "html_url": "https:\/\/github.com\/assetnote",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/assetnote\/react2shell-scanner",
+ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-04T06:55:04Z",
+ "updated_at": "2026-06-01T11:30:10Z",
+ "pushed_at": "2025-12-07T04:16:46Z",
+ "stargazers_count": 2449,
+ "watchers_count": 2449,
+ "has_discussions": false,
+ "forks_count": 269,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 269,
+ "watchers": 2449,
+ "score": 0,
+ "subscribers_count": 12
+ },
+ {
+ "id": 1109709529,
+ "name": "CVE-2025-55182-exploit",
+ "full_name": "jf0x3a\/CVE-2025-55182-exploit",
+ "owner": {
+ "login": "jf0x3a",
+ "id": 91169234,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91169234?v=4",
+ "html_url": "https:\/\/github.com\/jf0x3a",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jf0x3a\/CVE-2025-55182-exploit",
+ "description": "RCE Auto exploit for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T07:12:27Z",
+ "updated_at": "2025-12-04T11:59:13Z",
+ "pushed_at": "2025-12-04T07:19:49Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109726348,
+ "name": "CVE-2025-55182-checker",
+ "full_name": "aspen-labs\/CVE-2025-55182-checker",
+ "owner": {
+ "login": "aspen-labs",
+ "id": 208040413,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208040413?v=4",
+ "html_url": "https:\/\/github.com\/aspen-labs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aspen-labs\/CVE-2025-55182-checker",
+ "description": "React\/Next.js React4Shell RCE CVE-2025-55182 checker",
+ "fork": false,
+ "created_at": "2025-12-04T07:44:39Z",
+ "updated_at": "2026-04-28T09:54:12Z",
+ "pushed_at": "2025-12-10T18:09:25Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109770096,
+ "name": "cve-2025-55182",
+ "full_name": "dissy123\/cve-2025-55182",
+ "owner": {
+ "login": "dissy123",
+ "id": 5930734,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5930734?v=4",
+ "html_url": "https:\/\/github.com\/dissy123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dissy123\/cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T09:02:10Z",
+ "updated_at": "2025-12-04T09:05:43Z",
+ "pushed_at": "2025-12-04T09:05:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109785752,
+ "name": "CVE-2025-55182",
+ "full_name": "dwisiswant0\/CVE-2025-55182",
+ "owner": {
+ "login": "dwisiswant0",
+ "id": 25837540,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25837540?v=4",
+ "html_url": "https:\/\/github.com\/dwisiswant0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dwisiswant0\/CVE-2025-55182",
+ "description": "Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.",
+ "fork": false,
+ "created_at": "2025-12-04T09:27:55Z",
+ "updated_at": "2026-05-18T14:03:35Z",
+ "pushed_at": "2025-12-09T16:56:22Z",
+ "stargazers_count": 60,
+ "watchers_count": 60,
+ "has_discussions": true,
+ "forks_count": 15,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 15,
+ "watchers": 60,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1109806025,
+ "name": "CVE-2025-55182-test",
+ "full_name": "Chelsea486MHz\/CVE-2025-55182-test",
+ "owner": {
+ "login": "Chelsea486MHz",
+ "id": 12125422,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12125422?v=4",
+ "html_url": "https:\/\/github.com\/Chelsea486MHz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chelsea486MHz\/CVE-2025-55182-test",
+ "description": "See if your endpoint could be vulnerable.",
+ "fork": false,
+ "created_at": "2025-12-04T10:01:43Z",
+ "updated_at": "2025-12-04T10:18:00Z",
+ "pushed_at": "2025-12-04T10:17:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109842202,
+ "name": "React2shell-CVE-2025-55182-checker",
+ "full_name": "oways\/React2shell-CVE-2025-55182-checker",
+ "owner": {
+ "login": "oways",
+ "id": 11142952,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11142952?v=4",
+ "html_url": "https:\/\/github.com\/oways",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/oways\/React2shell-CVE-2025-55182-checker",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T11:04:37Z",
+ "updated_at": "2026-05-06T05:11:31Z",
+ "pushed_at": "2025-12-04T11:38:56Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109867793,
+ "name": "CVE-2025-55182",
+ "full_name": "msanft\/CVE-2025-55182",
+ "owner": {
+ "login": "msanft",
+ "id": 58110325,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58110325?v=4",
+ "html_url": "https:\/\/github.com\/msanft",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/msanft\/CVE-2025-55182",
+ "description": "Explanation and full RCE PoC for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T11:49:55Z",
+ "updated_at": "2026-06-02T14:33:16Z",
+ "pushed_at": "2025-12-08T13:51:04Z",
+ "stargazers_count": 1415,
+ "watchers_count": 1415,
+ "has_discussions": false,
+ "forks_count": 195,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 195,
+ "watchers": 1415,
+ "score": 0,
+ "subscribers_count": 10
+ },
+ {
+ "id": 1109868511,
+ "name": "React19-fix-vibecoders",
+ "full_name": "ivaavimusic\/React19-fix-vibecoders",
+ "owner": {
+ "login": "ivaavimusic",
+ "id": 99599836,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99599836?v=4",
+ "html_url": "https:\/\/github.com\/ivaavimusic",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ivaavimusic\/React19-fix-vibecoders",
+ "description": "CVE-2025-55182 Fix for Vibe Coders",
+ "fork": false,
+ "created_at": "2025-12-04T11:51:11Z",
+ "updated_at": "2025-12-04T11:52:37Z",
+ "pushed_at": "2025-12-04T11:51:49Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109875047,
+ "name": "CVE-2025-55182",
+ "full_name": "carlosaruy\/CVE-2025-55182",
+ "owner": {
+ "login": "carlosaruy",
+ "id": 57971561,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57971561?v=4",
+ "html_url": "https:\/\/github.com\/carlosaruy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/carlosaruy\/CVE-2025-55182",
+ "description": "a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic \"Lab Environment\" to safely test and understand the vulnerability.",
+ "fork": false,
+ "created_at": "2025-12-04T12:02:35Z",
+ "updated_at": "2025-12-04T12:04:22Z",
+ "pushed_at": "2025-12-04T02:57:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1109886570,
"name": "react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478",
@@ -632,6 +1595,483 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109912949,
+ "name": "CVE-2025-55182",
+ "full_name": "c0rydoras\/CVE-2025-55182",
+ "owner": {
+ "login": "c0rydoras",
+ "id": 110528300,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110528300?v=4",
+ "html_url": "https:\/\/github.com\/c0rydoras",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/c0rydoras\/CVE-2025-55182",
+ "description": "some notes && (somewhat?) poc-adjacent stuff for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T13:07:00Z",
+ "updated_at": "2025-12-08T07:34:36Z",
+ "pushed_at": "2025-12-05T19:57:34Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1109938914,
+ "name": "React2Shell-Scanner",
+ "full_name": "CymulateResearch\/React2Shell-Scanner",
+ "owner": {
+ "login": "CymulateResearch",
+ "id": 121092418,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121092418?v=4",
+ "html_url": "https:\/\/github.com\/CymulateResearch",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CymulateResearch\/React2Shell-Scanner",
+ "description": "React2Shell Scanner (CVE-2025-55182 & CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-04T13:47:52Z",
+ "updated_at": "2025-12-07T09:12:19Z",
+ "pushed_at": "2025-12-07T09:11:33Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109941407,
+ "name": "cve-2025-55182",
+ "full_name": "0xPThree\/cve-2025-55182",
+ "owner": {
+ "login": "0xPThree",
+ "id": 108757172,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108757172?v=4",
+ "html_url": "https:\/\/github.com\/0xPThree",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xPThree\/cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T13:51:39Z",
+ "updated_at": "2025-12-05T16:52:36Z",
+ "pushed_at": "2025-12-05T16:52:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109980602,
+ "name": "CVE-2025-55182-poc",
+ "full_name": "acheong08\/CVE-2025-55182-poc",
+ "owner": {
+ "login": "acheong08",
+ "id": 36258159,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36258159?v=4",
+ "html_url": "https:\/\/github.com\/acheong08",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/acheong08\/CVE-2025-55182-poc",
+ "description": "Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.",
+ "fork": false,
+ "created_at": "2025-12-04T14:49:43Z",
+ "updated_at": "2026-05-29T14:08:09Z",
+ "pushed_at": "2025-12-05T00:07:09Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110016297,
+ "name": "react2shellVulnApp",
+ "full_name": "jctommasi\/react2shellVulnApp",
+ "owner": {
+ "login": "jctommasi",
+ "id": 38330727,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38330727?v=4",
+ "html_url": "https:\/\/github.com\/jctommasi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jctommasi\/react2shellVulnApp",
+ "description": "Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.",
+ "fork": false,
+ "created_at": "2025-12-04T15:43:43Z",
+ "updated_at": "2026-05-27T22:02:33Z",
+ "pushed_at": "2025-12-04T15:45:38Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110052667,
+ "name": "react2shell-PoC",
+ "full_name": "shamo0\/react2shell-PoC",
+ "owner": {
+ "login": "shamo0",
+ "id": 48299520,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48299520?v=4",
+ "html_url": "https:\/\/github.com\/shamo0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shamo0\/react2shell-PoC",
+ "description": "Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-04T16:40:45Z",
+ "updated_at": "2026-02-21T23:34:32Z",
+ "pushed_at": "2025-12-04T16:54:02Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "nextjs",
+ "poc",
+ "rce",
+ "react2shell",
+ "rsc"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110061848,
+ "name": "CVE-2025-55182-POC",
+ "full_name": "EynaExp\/CVE-2025-55182-POC",
+ "owner": {
+ "login": "EynaExp",
+ "id": 59816538,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59816538?v=4",
+ "html_url": "https:\/\/github.com\/EynaExp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EynaExp\/CVE-2025-55182-POC",
+ "description": "Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)",
+ "fork": false,
+ "created_at": "2025-12-04T16:55:23Z",
+ "updated_at": "2026-04-23T21:23:05Z",
+ "pushed_at": "2025-12-05T10:04:29Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110069093,
+ "name": "CVE-2025-55182-POC-SCANNER",
+ "full_name": "im-hanzou\/CVE-2025-55182-POC-SCANNER",
+ "owner": {
+ "login": "im-hanzou",
+ "id": 61415393,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4",
+ "html_url": "https:\/\/github.com\/im-hanzou",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/im-hanzou\/CVE-2025-55182-POC-SCANNER",
+ "description": "Unified Security Research Tool",
+ "fork": false,
+ "created_at": "2025-12-04T17:07:02Z",
+ "updated_at": "2025-12-04T17:07:02Z",
+ "pushed_at": "2025-12-04T17:04:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110076136,
+ "name": "CVE-2025-55182",
+ "full_name": "klassiker\/CVE-2025-55182",
+ "owner": {
+ "login": "klassiker",
+ "id": 6598117,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6598117?v=4",
+ "html_url": "https:\/\/github.com\/klassiker",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/klassiker\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T17:18:42Z",
+ "updated_at": "2025-12-06T23:45:31Z",
+ "pushed_at": "2025-12-06T23:45:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110103630,
+ "name": "CVE-2025-55182-shellinteractive",
+ "full_name": "MrR0b0t19\/CVE-2025-55182-shellinteractive",
+ "owner": {
+ "login": "MrR0b0t19",
+ "id": 63489501,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63489501?v=4",
+ "html_url": "https:\/\/github.com\/MrR0b0t19",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MrR0b0t19\/CVE-2025-55182-shellinteractive",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-04T18:05:05Z",
+ "updated_at": "2026-04-15T05:23:36Z",
+ "pushed_at": "2025-12-04T18:11:32Z",
+ "stargazers_count": 21,
+ "watchers_count": 21,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 21,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110118222,
+ "name": "cve-2025-55182",
+ "full_name": "ps-interactive\/cve-2025-55182",
+ "owner": {
+ "login": "ps-interactive",
+ "id": 35313392,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35313392?v=4",
+ "html_url": "https:\/\/github.com\/ps-interactive",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ps-interactive\/cve-2025-55182",
+ "description": "Vulnerable REACT app in docker container and poc code - for demos",
+ "fork": false,
+ "created_at": "2025-12-04T18:30:53Z",
+ "updated_at": "2025-12-11T00:43:51Z",
+ "pushed_at": "2025-12-11T00:43:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110155760,
+ "name": "Next.js-RSC-RCE-Scanner-Burp-Suite-Extension",
+ "full_name": "tobiasGuta\/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension",
+ "owner": {
+ "login": "tobiasGuta",
+ "id": 156011774,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156011774?v=4",
+ "html_url": "https:\/\/github.com\/tobiasGuta",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tobiasGuta\/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension",
+ "description": "Burp Suite extension to detect the Next.js \/ React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).",
+ "fork": false,
+ "created_at": "2025-12-04T19:41:49Z",
+ "updated_at": "2026-02-11T07:19:45Z",
+ "pushed_at": "2025-12-06T01:23:44Z",
+ "stargazers_count": 24,
+ "watchers_count": 24,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 24,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110157628,
+ "name": "CVE-2025-55182-VulnCheckPOC",
+ "full_name": "aquinn-r7\/CVE-2025-55182-VulnCheckPOC",
+ "owner": {
+ "login": "aquinn-r7",
+ "id": 121982963,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121982963?v=4",
+ "html_url": "https:\/\/github.com\/aquinn-r7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aquinn-r7\/CVE-2025-55182-VulnCheckPOC",
+ "description": "Functional Python POC to test if servers are vulnerable to CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T19:45:24Z",
+ "updated_at": "2025-12-04T20:37:53Z",
+ "pushed_at": "2025-12-04T20:37:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110158141,
+ "name": "POC-CVE-2025-55182",
+ "full_name": "MedusaSH\/POC-CVE-2025-55182",
+ "owner": {
+ "login": "MedusaSH",
+ "id": 197983431,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197983431?v=4",
+ "html_url": "https:\/\/github.com\/MedusaSH",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MedusaSH\/POC-CVE-2025-55182",
+ "description": "PoC CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T19:46:21Z",
+ "updated_at": "2025-12-09T14:23:06Z",
+ "pushed_at": "2025-12-04T19:47:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "nextjs",
+ "poc",
+ "react"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1110164123,
"name": "react2shell-scanner",
@@ -707,6 +2147,656 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1110251699,
+ "name": "CVE-2025-55182",
+ "full_name": "Cillian-Collins\/CVE-2025-55182",
+ "owner": {
+ "login": "Cillian-Collins",
+ "id": 25750542,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25750542?v=4",
+ "html_url": "https:\/\/github.com\/Cillian-Collins",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cillian-Collins\/CVE-2025-55182",
+ "description": "A proof of concept exploit script for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-04T23:30:52Z",
+ "updated_at": "2026-01-16T11:52:23Z",
+ "pushed_at": "2025-12-05T11:26:32Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110264856,
+ "name": "check-react-rce-cve-2025-55182",
+ "full_name": "ZihxS\/check-react-rce-cve-2025-55182",
+ "owner": {
+ "login": "ZihxS",
+ "id": 20611989,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20611989?v=4",
+ "html_url": "https:\/\/github.com\/ZihxS",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ZihxS\/check-react-rce-cve-2025-55182",
+ "description": "Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects",
+ "fork": false,
+ "created_at": "2025-12-05T00:12:21Z",
+ "updated_at": "2025-12-13T10:04:33Z",
+ "pushed_at": "2025-12-05T00:13:07Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110287680,
+ "name": "CVE-2025-55182-Exploit-PoC-Scanner",
+ "full_name": "ZemarKhos\/CVE-2025-55182-Exploit-PoC-Scanner",
+ "owner": {
+ "login": "ZemarKhos",
+ "id": 25793969,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25793969?v=4",
+ "html_url": "https:\/\/github.com\/ZemarKhos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ZemarKhos\/CVE-2025-55182-Exploit-PoC-Scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T01:21:32Z",
+ "updated_at": "2026-03-25T17:00:08Z",
+ "pushed_at": "2025-12-05T01:30:54Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110289566,
+ "name": "CVE-2025-55182-Exploit-scanner",
+ "full_name": "sherlocksecurity\/CVE-2025-55182-Exploit-scanner",
+ "owner": {
+ "login": "sherlocksecurity",
+ "id": 52328067,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52328067?v=4",
+ "html_url": "https:\/\/github.com\/sherlocksecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sherlocksecurity\/CVE-2025-55182-Exploit-scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T01:26:56Z",
+ "updated_at": "2025-12-05T08:21:23Z",
+ "pushed_at": "2025-12-05T08:15:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110312056,
+ "name": "react-ssr-vulnerability",
+ "full_name": "Darker-Ink\/react-ssr-vulnerability",
+ "owner": {
+ "login": "Darker-Ink",
+ "id": 45852757,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45852757?v=4",
+ "html_url": "https:\/\/github.com\/Darker-Ink",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Darker-Ink\/react-ssr-vulnerability",
+ "description": "This is a POC script for CVE-2025-55182 (React SSR RCE)",
+ "fork": false,
+ "created_at": "2025-12-05T02:32:07Z",
+ "updated_at": "2025-12-05T02:47:13Z",
+ "pushed_at": "2025-12-05T02:45:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "react",
+ "react2shell",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110316340,
+ "name": "POC-for-CVE-2025-55182",
+ "full_name": "emadshanab\/POC-for-CVE-2025-55182",
+ "owner": {
+ "login": "emadshanab",
+ "id": 10281631,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10281631?v=4",
+ "html_url": "https:\/\/github.com\/emadshanab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/emadshanab\/POC-for-CVE-2025-55182",
+ "description": "POC for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-05T02:44:22Z",
+ "updated_at": "2025-12-15T12:06:29Z",
+ "pushed_at": "2025-12-05T02:50:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110322977,
+ "name": "CVE-2025-55182",
+ "full_name": "topstar88\/CVE-2025-55182",
+ "owner": {
+ "login": "topstar88",
+ "id": 218691396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218691396?v=4",
+ "html_url": "https:\/\/github.com\/topstar88",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/topstar88\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T03:02:24Z",
+ "updated_at": "2026-04-21T09:45:22Z",
+ "pushed_at": "2025-12-05T03:03:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110336334,
+ "name": "CVE-2025-55182-Exploit",
+ "full_name": "selectarget\/CVE-2025-55182-Exploit",
+ "owner": {
+ "login": "selectarget",
+ "id": 70615414,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70615414?v=4",
+ "html_url": "https:\/\/github.com\/selectarget",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/selectarget\/CVE-2025-55182-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T03:39:55Z",
+ "updated_at": "2025-12-05T03:55:55Z",
+ "pushed_at": "2025-12-05T03:55:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110371012,
+ "name": "Nextjs_RCE_Exploit_Tool",
+ "full_name": "pyroxenites\/Nextjs_RCE_Exploit_Tool",
+ "owner": {
+ "login": "pyroxenites",
+ "id": 75877299,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75877299?v=4",
+ "html_url": "https:\/\/github.com\/pyroxenites",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pyroxenites\/Nextjs_RCE_Exploit_Tool",
+ "description": "Exploit for CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-05T05:09:56Z",
+ "updated_at": "2026-05-29T09:17:15Z",
+ "pushed_at": "2025-12-10T11:48:44Z",
+ "stargazers_count": 138,
+ "watchers_count": 138,
+ "has_discussions": false,
+ "forks_count": 34,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 34,
+ "watchers": 138,
+ "score": 0,
+ "subscribers_count": 2
+ },
+ {
+ "id": 1110384306,
+ "name": "CVE-2025-55182",
+ "full_name": "Chocapikk\/CVE-2025-55182",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-55182",
+ "description": "Next.js React Server Components RCE exploit for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-05T05:41:24Z",
+ "updated_at": "2026-06-01T10:52:42Z",
+ "pushed_at": "2025-12-05T07:20:34Z",
+ "stargazers_count": 66,
+ "watchers_count": 66,
+ "has_discussions": false,
+ "forks_count": 14,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "nextjs",
+ "prototype-pollution",
+ "rce",
+ "react",
+ "security",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 14,
+ "watchers": 66,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1110389869,
+ "name": "RSC_Detector",
+ "full_name": "mrknow001\/RSC_Detector",
+ "owner": {
+ "login": "mrknow001",
+ "id": 46807619,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46807619?v=4",
+ "html_url": "https:\/\/github.com\/mrknow001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrknow001\/RSC_Detector",
+ "description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.",
+ "fork": false,
+ "created_at": "2025-12-05T05:53:25Z",
+ "updated_at": "2026-06-01T02:08:14Z",
+ "pushed_at": "2025-12-05T08:11:16Z",
+ "stargazers_count": 576,
+ "watchers_count": 576,
+ "has_discussions": false,
+ "forks_count": 88,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 88,
+ "watchers": 576,
+ "score": 0,
+ "subscribers_count": 3
+ },
+ {
+ "id": 1110396059,
+ "name": "CVE-2025-55182-exp",
+ "full_name": "Spritualkb\/CVE-2025-55182-exp",
+ "owner": {
+ "login": "Spritualkb",
+ "id": 88613094,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88613094?v=4",
+ "html_url": "https:\/\/github.com\/Spritualkb",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Spritualkb\/CVE-2025-55182-exp",
+ "description": "CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool",
+ "fork": false,
+ "created_at": "2025-12-05T06:07:15Z",
+ "updated_at": "2026-05-24T09:21:58Z",
+ "pushed_at": "2025-12-05T11:39:49Z",
+ "stargazers_count": 45,
+ "watchers_count": 45,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 45,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1110431628,
+ "name": "CVE-2025-55182",
+ "full_name": "younesZdDz\/CVE-2025-55182",
+ "owner": {
+ "login": "younesZdDz",
+ "id": 32100131,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32100131?v=4",
+ "html_url": "https:\/\/github.com\/younesZdDz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/younesZdDz\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T07:22:25Z",
+ "updated_at": "2025-12-05T10:41:32Z",
+ "pushed_at": "2025-12-05T10:41:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110450305,
+ "name": "React2Shell-CVE-2025-55182-original-poc",
+ "full_name": "lachlan2k\/React2Shell-CVE-2025-55182-original-poc",
+ "owner": {
+ "login": "lachlan2k",
+ "id": 4683714,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4683714?v=4",
+ "html_url": "https:\/\/github.com\/lachlan2k",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lachlan2k\/React2Shell-CVE-2025-55182-original-poc",
+ "description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-05T08:00:07Z",
+ "updated_at": "2026-06-02T10:33:49Z",
+ "pushed_at": "2025-12-05T08:56:15Z",
+ "stargazers_count": 1048,
+ "watchers_count": 1048,
+ "has_discussions": false,
+ "forks_count": 107,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 107,
+ "watchers": 1048,
+ "score": 0,
+ "subscribers_count": 25
+ },
+ {
+ "id": 1110456553,
+ "name": "CVE-2025-55182",
+ "full_name": "hualy13\/CVE-2025-55182",
+ "owner": {
+ "login": "hualy13",
+ "id": 121297202,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121297202?v=4",
+ "html_url": "https:\/\/github.com\/hualy13",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hualy13\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T08:12:27Z",
+ "updated_at": "2026-02-05T01:39:01Z",
+ "pushed_at": "2025-12-05T08:15:58Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110458055,
+ "name": "CVE-2025-55182-RCE-shell",
+ "full_name": "RuoJi6\/CVE-2025-55182-RCE-shell",
+ "owner": {
+ "login": "RuoJi6",
+ "id": 79234113,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79234113?v=4",
+ "html_url": "https:\/\/github.com\/RuoJi6",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RuoJi6\/CVE-2025-55182-RCE-shell",
+ "description": "Burp Suite\/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC\/BASE64)",
+ "fork": false,
+ "created_at": "2025-12-05T08:15:17Z",
+ "updated_at": "2026-05-15T02:58:11Z",
+ "pushed_at": "2025-12-08T03:54:23Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110470458,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "Saturate\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "Saturate",
+ "id": 453018,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/453018?v=4",
+ "html_url": "https:\/\/github.com\/Saturate",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Saturate\/CVE-2025-55182-Scanner",
+ "description": "A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications",
+ "fork": false,
+ "created_at": "2025-12-05T08:40:18Z",
+ "updated_at": "2025-12-08T08:03:49Z",
+ "pushed_at": "2025-12-08T08:03:45Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bash-script",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "nextjs",
+ "security-tools"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110472099,
+ "name": "CVE-2025-55182",
+ "full_name": "hoosin\/CVE-2025-55182",
+ "owner": {
+ "login": "hoosin",
+ "id": 3365399,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3365399?v=4",
+ "html_url": "https:\/\/github.com\/hoosin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hoosin\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T08:43:31Z",
+ "updated_at": "2026-01-26T03:48:26Z",
+ "pushed_at": "2025-12-08T01:41:41Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110495137,
+ "name": "CVE-2025-55182-burpscanner",
+ "full_name": "Pizz33\/CVE-2025-55182-burpscanner",
+ "owner": {
+ "login": "Pizz33",
+ "id": 88339946,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88339946?v=4",
+ "html_url": "https:\/\/github.com\/Pizz33",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Pizz33\/CVE-2025-55182-burpscanner",
+ "description": "基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件",
+ "fork": false,
+ "created_at": "2025-12-05T09:26:52Z",
+ "updated_at": "2026-01-04T09:27:15Z",
+ "pushed_at": "2025-12-05T11:09:00Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1110523412,
"name": "CVE-2025-55182-test",
@@ -740,6 +2830,83 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1110527960,
+ "name": "CVE-2025-55182-Attack-Analysis",
+ "full_name": "ngvcanh\/CVE-2025-55182-Attack-Analysis",
+ "owner": {
+ "login": "ngvcanh",
+ "id": 13740899,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13740899?v=4",
+ "html_url": "https:\/\/github.com\/ngvcanh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ngvcanh\/CVE-2025-55182-Attack-Analysis",
+ "description": "Real-world attack analysis of CVE-2025-55182 (React2Shell) - React Server Components RCE vulnerability",
+ "fork": false,
+ "created_at": "2025-12-05T10:26:17Z",
+ "updated_at": "2025-12-05T10:45:13Z",
+ "pushed_at": "2025-12-05T10:45:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "backdoor",
+ "cve",
+ "ioc",
+ "malware-analysis",
+ "nextjs",
+ "rce",
+ "react",
+ "security",
+ "threat-intelligence",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110541630,
+ "name": "CVE-2025-55182-POC-NEXTJS",
+ "full_name": "aliclub0x00\/CVE-2025-55182-POC-NEXTJS",
+ "owner": {
+ "login": "aliclub0x00",
+ "id": 247979114,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247979114?v=4",
+ "html_url": "https:\/\/github.com\/aliclub0x00",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aliclub0x00\/CVE-2025-55182-POC-NEXTJS",
+ "description": "Working proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]",
+ "fork": false,
+ "created_at": "2025-12-05T10:52:29Z",
+ "updated_at": "2025-12-24T11:44:51Z",
+ "pushed_at": "2025-12-05T11:15:07Z",
+ "stargazers_count": 29,
+ "watchers_count": 29,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 29,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1110549255,
"name": "CVE-2025-55182",
@@ -778,6 +2945,121 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1110560839,
+ "name": "react2shell",
+ "full_name": "freeqaz\/react2shell",
+ "owner": {
+ "login": "freeqaz",
+ "id": 4573221,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4573221?v=4",
+ "html_url": "https:\/\/github.com\/freeqaz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/freeqaz\/react2shell",
+ "description": "An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc",
+ "fork": false,
+ "created_at": "2025-12-05T11:29:44Z",
+ "updated_at": "2026-06-01T01:50:39Z",
+ "pushed_at": "2025-12-05T12:53:58Z",
+ "stargazers_count": 65,
+ "watchers_count": 65,
+ "has_discussions": false,
+ "forks_count": 18,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 18,
+ "watchers": 65,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1110569233,
+ "name": "React2Shell-CVE-2025-55182-Testing-Environment",
+ "full_name": "ABCFabian\/React2Shell-CVE-2025-55182-Testing-Environment",
+ "owner": {
+ "login": "ABCFabian",
+ "id": 162335524,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162335524?v=4",
+ "html_url": "https:\/\/github.com\/ABCFabian",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ABCFabian\/React2Shell-CVE-2025-55182-Testing-Environment",
+ "description": "A containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.",
+ "fork": false,
+ "created_at": "2025-12-05T11:46:25Z",
+ "updated_at": "2025-12-10T01:35:14Z",
+ "pushed_at": "2025-12-05T12:12:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110579378,
+ "name": "CVE-2025-55182",
+ "full_name": "l4rm4nd\/CVE-2025-55182",
+ "owner": {
+ "login": "l4rm4nd",
+ "id": 21357789,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21357789?v=4",
+ "html_url": "https:\/\/github.com\/l4rm4nd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/l4rm4nd\/CVE-2025-55182",
+ "description": "Docker poc lab for CVE-2025-55182 \/ CVE-2025-66478 (React2Shell) detection and exploitation",
+ "fork": false,
+ "created_at": "2025-12-05T12:06:00Z",
+ "updated_at": "2026-05-31T08:56:01Z",
+ "pushed_at": "2025-12-11T10:39:09Z",
+ "stargazers_count": 86,
+ "watchers_count": 86,
+ "has_discussions": false,
+ "forks_count": 28,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "app-router-nextjs",
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "docker",
+ "docker-image",
+ "lab",
+ "nextjs",
+ "poc",
+ "proof-of-concept",
+ "react",
+ "react-dom",
+ "react2shell",
+ "reactjs",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 28,
+ "watchers": 86,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1110584648,
"name": "CVE-2025-55182-analysis",
@@ -811,6 +3093,888 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1110590775,
+ "name": "React-Server-Components-RCE",
+ "full_name": "GelukCrab\/React-Server-Components-RCE",
+ "owner": {
+ "login": "GelukCrab",
+ "id": 42261760,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42261760?v=4",
+ "html_url": "https:\/\/github.com\/GelukCrab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GelukCrab\/React-Server-Components-RCE",
+ "description": "React Server Components 远程代码执行漏洞(CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-05T12:27:50Z",
+ "updated_at": "2026-04-09T12:29:23Z",
+ "pushed_at": "2025-12-05T12:33:25Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110618703,
+ "name": "CVE-2025-55182",
+ "full_name": "Golden-Secure\/CVE-2025-55182",
+ "owner": {
+ "login": "Golden-Secure",
+ "id": 182030975,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182030975?v=4",
+ "html_url": "https:\/\/github.com\/Golden-Secure",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Golden-Secure\/CVE-2025-55182",
+ "description": "Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security",
+ "fork": false,
+ "created_at": "2025-12-05T13:17:45Z",
+ "updated_at": "2025-12-05T13:18:20Z",
+ "pushed_at": "2025-12-05T13:18:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110626494,
+ "name": "react2shell",
+ "full_name": "grp-ops\/react2shell",
+ "owner": {
+ "login": "grp-ops",
+ "id": 131235184,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131235184?v=4",
+ "html_url": "https:\/\/github.com\/grp-ops",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/grp-ops\/react2shell",
+ "description": "Lightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 \/ CVE-2025-66478).",
+ "fork": false,
+ "created_at": "2025-12-05T13:31:14Z",
+ "updated_at": "2026-05-25T23:45:02Z",
+ "pushed_at": "2025-12-06T07:06:42Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110639877,
+ "name": "react-cve-2025-55182-lab",
+ "full_name": "alexandre-briongos-wavestone\/react-cve-2025-55182-lab",
+ "owner": {
+ "login": "alexandre-briongos-wavestone",
+ "id": 202813068,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202813068?v=4",
+ "html_url": "https:\/\/github.com\/alexandre-briongos-wavestone",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alexandre-briongos-wavestone\/react-cve-2025-55182-lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T13:54:27Z",
+ "updated_at": "2025-12-05T14:16:36Z",
+ "pushed_at": "2025-12-05T14:16:32Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110645795,
+ "name": "CVE-2025-55182-React2Shell-RCE-POC",
+ "full_name": "Rat5ak\/CVE-2025-55182-React2Shell-RCE-POC",
+ "owner": {
+ "login": "Rat5ak",
+ "id": 93318888,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93318888?v=4",
+ "html_url": "https:\/\/github.com\/Rat5ak",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rat5ak\/CVE-2025-55182-React2Shell-RCE-POC",
+ "description": "This repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses on how malformed multipart bodies combined with Server Action request handling can lead to prototype traversal and execution primitives on certain builds.",
+ "fork": false,
+ "created_at": "2025-12-05T14:04:25Z",
+ "updated_at": "2026-03-29T10:30:03Z",
+ "pushed_at": "2025-12-05T14:12:58Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110654318,
+ "name": "POC-CVE-2025-55182",
+ "full_name": "imbas007\/POC-CVE-2025-55182",
+ "owner": {
+ "login": "imbas007",
+ "id": 100182585,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4",
+ "html_url": "https:\/\/github.com\/imbas007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/imbas007\/POC-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T14:18:34Z",
+ "updated_at": "2026-01-07T10:12:17Z",
+ "pushed_at": "2025-12-09T04:34:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110656073,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "RajChowdhury240\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "RajChowdhury240",
+ "id": 30806882,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30806882?v=4",
+ "html_url": "https:\/\/github.com\/RajChowdhury240",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RajChowdhury240\/React2Shell-CVE-2025-55182",
+ "description": "React2Shell | CVE-2025-55182 - React Server Components RCE",
+ "fork": false,
+ "created_at": "2025-12-05T14:21:40Z",
+ "updated_at": "2025-12-05T14:23:29Z",
+ "pushed_at": "2025-12-05T14:22:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110658984,
+ "name": "CVE-2025-55182",
+ "full_name": "nehkark\/CVE-2025-55182",
+ "owner": {
+ "login": "nehkark",
+ "id": 88349393,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88349393?v=4",
+ "html_url": "https:\/\/github.com\/nehkark",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nehkark\/CVE-2025-55182",
+ "description": "PoC: CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)",
+ "fork": false,
+ "created_at": "2025-12-05T14:26:29Z",
+ "updated_at": "2026-05-20T11:01:06Z",
+ "pushed_at": "2025-12-05T22:07:40Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110665842,
+ "name": "cve-2025-55182",
+ "full_name": "prestonhashworth\/cve-2025-55182",
+ "owner": {
+ "login": "prestonhashworth",
+ "id": 49131887,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49131887?v=4",
+ "html_url": "https:\/\/github.com\/prestonhashworth",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/prestonhashworth\/cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T14:37:35Z",
+ "updated_at": "2025-12-05T22:21:06Z",
+ "pushed_at": "2025-12-05T22:21:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110674647,
+ "name": "POC-CVE-2025-55182",
+ "full_name": "nomorebreach\/POC-CVE-2025-55182",
+ "owner": {
+ "login": "nomorebreach",
+ "id": 244375971,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244375971?v=4",
+ "html_url": "https:\/\/github.com\/nomorebreach",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nomorebreach\/POC-CVE-2025-55182",
+ "description": "POC for CVE-2025-55182 React2Shell",
+ "fork": false,
+ "created_at": "2025-12-05T14:51:49Z",
+ "updated_at": "2025-12-05T16:00:57Z",
+ "pushed_at": "2025-12-05T16:00:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "poc-cve-2025-55182",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110686688,
+ "name": "CVE-2025-55182",
+ "full_name": "nerium-security\/CVE-2025-55182",
+ "owner": {
+ "login": "nerium-security",
+ "id": 131679272,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131679272?v=4",
+ "html_url": "https:\/\/github.com\/nerium-security",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nerium-security\/CVE-2025-55182",
+ "description": "Host-based detection rules for the RCE vulnerability in the React JavaScript framework.",
+ "fork": false,
+ "created_at": "2025-12-05T15:10:53Z",
+ "updated_at": "2025-12-08T15:37:38Z",
+ "pushed_at": "2025-12-08T15:37:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110694991,
+ "name": "CVE-2025-55182",
+ "full_name": "zzhorc\/CVE-2025-55182",
+ "owner": {
+ "login": "zzhorc",
+ "id": 65057462,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65057462?v=4",
+ "html_url": "https:\/\/github.com\/zzhorc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zzhorc\/CVE-2025-55182",
+ "description": "CVE-2025-55182复现环境及RCE回显poc",
+ "fork": false,
+ "created_at": "2025-12-05T15:24:03Z",
+ "updated_at": "2026-04-06T15:27:24Z",
+ "pushed_at": "2025-12-05T17:16:00Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110697376,
+ "name": "Vulnerability-assessment",
+ "full_name": "Atlantis02-sec\/Vulnerability-assessment",
+ "owner": {
+ "login": "Atlantis02-sec",
+ "id": 224593179,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224593179?v=4",
+ "html_url": "https:\/\/github.com\/Atlantis02-sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Atlantis02-sec\/Vulnerability-assessment",
+ "description": "nmap nse for detecting React2Shell (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-05T15:27:59Z",
+ "updated_at": "2025-12-11T03:03:51Z",
+ "pushed_at": "2025-12-05T15:35:30Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110705797,
+ "name": "CVE-2025-55182_PoC",
+ "full_name": "rl0x01\/CVE-2025-55182_PoC",
+ "owner": {
+ "login": "rl0x01",
+ "id": 37264718,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37264718?v=4",
+ "html_url": "https:\/\/github.com\/rl0x01",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rl0x01\/CVE-2025-55182_PoC",
+ "description": "Proof-of-Concept RCE pour CVE‑2025‑55182 exploitant le protocole React Flight sur Next.js App Router.",
+ "fork": false,
+ "created_at": "2025-12-05T15:41:48Z",
+ "updated_at": "2025-12-05T16:34:47Z",
+ "pushed_at": "2025-12-05T15:48:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110742735,
+ "name": "React2Shell",
+ "full_name": "subzer0x0\/React2Shell",
+ "owner": {
+ "login": "subzer0x0",
+ "id": 17097011,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17097011?v=4",
+ "html_url": "https:\/\/github.com\/subzer0x0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/subzer0x0\/React2Shell",
+ "description": "React2Shell (CVE-2025-55182) – An intentionally vulnerable Next.js application created for educational and research purposes.",
+ "fork": false,
+ "created_at": "2025-12-05T16:46:03Z",
+ "updated_at": "2025-12-13T17:55:51Z",
+ "pushed_at": "2025-12-05T19:28:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110744104,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "f0xyx\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "f0xyx",
+ "id": 248037718,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248037718?v=4",
+ "html_url": "https:\/\/github.com\/f0xyx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/f0xyx\/CVE-2025-55182-Scanner",
+ "description": "Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components",
+ "fork": false,
+ "created_at": "2025-12-05T16:48:22Z",
+ "updated_at": "2026-01-12T03:14:15Z",
+ "pushed_at": "2025-12-05T16:52:35Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110754555,
+ "name": "Next.js-RCE-Scanner-BurpSuite-Extension-",
+ "full_name": "Cr4at0r\/Next.js-RCE-Scanner-BurpSuite-Extension-",
+ "owner": {
+ "login": "Cr4at0r",
+ "id": 116705609,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116705609?v=4",
+ "html_url": "https:\/\/github.com\/Cr4at0r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cr4at0r\/Next.js-RCE-Scanner-BurpSuite-Extension-",
+ "description": "使用burp自动检测CVE-2025-55182 Next.js RCE 漏洞",
+ "fork": false,
+ "created_at": "2025-12-05T17:06:53Z",
+ "updated_at": "2026-04-09T07:48:56Z",
+ "pushed_at": "2025-12-08T04:45:05Z",
+ "stargazers_count": 26,
+ "watchers_count": 26,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 26,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110756688,
+ "name": "CVE-2025-55182",
+ "full_name": "ceortiz33\/CVE-2025-55182",
+ "owner": {
+ "login": "ceortiz33",
+ "id": 47367755,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47367755?v=4",
+ "html_url": "https:\/\/github.com\/ceortiz33",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ceortiz33\/CVE-2025-55182",
+ "description": "Proof of Concept for React2Shell vulnerability",
+ "fork": false,
+ "created_at": "2025-12-05T17:10:38Z",
+ "updated_at": "2025-12-06T05:17:44Z",
+ "pushed_at": "2025-12-05T19:00:54Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110776981,
+ "name": "react2shell",
+ "full_name": "xkey8\/react2shell",
+ "owner": {
+ "login": "xkey8",
+ "id": 243021953,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243021953?v=4",
+ "html_url": "https:\/\/github.com\/xkey8",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xkey8\/react2shell",
+ "description": "PoC for React2Shell (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-05T17:47:27Z",
+ "updated_at": "2025-12-07T13:48:24Z",
+ "pushed_at": "2025-12-07T13:48:21Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110798864,
+ "name": "CVE-2025-55182-Typescript",
+ "full_name": "zessu\/CVE-2025-55182-Typescript",
+ "owner": {
+ "login": "zessu",
+ "id": 18211121,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18211121?v=4",
+ "html_url": "https:\/\/github.com\/zessu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zessu\/CVE-2025-55182-Typescript",
+ "description": "Show case CVE-2025-55182 POC in Typrescript\/Javascript",
+ "fork": false,
+ "created_at": "2025-12-05T18:30:29Z",
+ "updated_at": "2025-12-09T05:22:05Z",
+ "pushed_at": "2025-12-05T18:37:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55182",
+ "nextjs",
+ "react2shell",
+ "typescript"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110810049,
+ "name": "r2s",
+ "full_name": "mxm0z\/r2s",
+ "owner": {
+ "login": "mxm0z",
+ "id": 7131029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7131029?v=4",
+ "html_url": "https:\/\/github.com\/mxm0z",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mxm0z\/r2s",
+ "description": "A web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.",
+ "fork": false,
+ "created_at": "2025-12-05T18:54:14Z",
+ "updated_at": "2025-12-05T21:51:39Z",
+ "pushed_at": "2025-12-05T21:47:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cloudflare",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110820705,
+ "name": "react2shell-interactive",
+ "full_name": "NathanJ60\/react2shell-interactive",
+ "owner": {
+ "login": "NathanJ60",
+ "id": 14951774,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14951774?v=4",
+ "html_url": "https:\/\/github.com\/NathanJ60",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NathanJ60\/react2shell-interactive",
+ "description": "CVE-2025-55182 Interactive PoC - React Server Components RCE - Educational Security Research",
+ "fork": false,
+ "created_at": "2025-12-05T19:17:16Z",
+ "updated_at": "2025-12-05T19:17:35Z",
+ "pushed_at": "2025-12-05T19:17:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110830069,
+ "name": "React2Shell-CVE-2025-55182-Detector",
+ "full_name": "GarethMSheldon\/React2Shell-CVE-2025-55182-Detector",
+ "owner": {
+ "login": "GarethMSheldon",
+ "id": 97782885,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97782885?v=4",
+ "html_url": "https:\/\/github.com\/GarethMSheldon",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GarethMSheldon\/React2Shell-CVE-2025-55182-Detector",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T19:37:26Z",
+ "updated_at": "2025-12-25T19:56:59Z",
+ "pushed_at": "2025-12-23T10:22:17Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110856080,
+ "name": "CVE-2025-55182",
+ "full_name": "kindone09\/CVE-2025-55182",
+ "owner": {
+ "login": "kindone09",
+ "id": 147832238,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147832238?v=4",
+ "html_url": "https:\/\/github.com\/kindone09",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kindone09\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T20:37:59Z",
+ "updated_at": "2026-05-30T06:03:31Z",
+ "pushed_at": "2025-12-05T20:52:54Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110869376,
+ "name": "react2shell-lab",
+ "full_name": "alsaut1\/react2shell-lab",
+ "owner": {
+ "login": "alsaut1",
+ "id": 47466391,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47466391?v=4",
+ "html_url": "https:\/\/github.com\/alsaut1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alsaut1\/react2shell-lab",
+ "description": "CVE-2025-55182 React2Shell PoC lab",
+ "fork": false,
+ "created_at": "2025-12-05T21:11:00Z",
+ "updated_at": "2026-01-25T12:01:47Z",
+ "pushed_at": "2025-12-05T21:25:01Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110890167,
+ "name": "react2shell-CVE-2025-55182-full-rce-script",
+ "full_name": "pax-k\/react2shell-CVE-2025-55182-full-rce-script",
+ "owner": {
+ "login": "pax-k",
+ "id": 23238077,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23238077?v=4",
+ "html_url": "https:\/\/github.com\/pax-k",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pax-k\/react2shell-CVE-2025-55182-full-rce-script",
+ "description": "React2Shell vulnerability (CVE-2025-55182 \/ CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-05T22:07:58Z",
+ "updated_at": "2026-03-16T21:17:22Z",
+ "pushed_at": "2025-12-05T22:15:32Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "exploit",
+ "nextjs",
+ "rce",
+ "security-tools",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1110898421,
"name": "poc-cve-2025-55182",
@@ -865,6 +4029,105 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1110912208,
+ "name": "CVE-2025-55182_full_exploit",
+ "full_name": "mohit121312\/CVE-2025-55182_full_exploit",
+ "owner": {
+ "login": "mohit121312",
+ "id": 31860988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31860988?v=4",
+ "html_url": "https:\/\/github.com\/mohit121312",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mohit121312\/CVE-2025-55182_full_exploit",
+ "description": "this repo have CVE-2025-55182 full exploit with RCE",
+ "fork": false,
+ "created_at": "2025-12-05T23:14:10Z",
+ "updated_at": "2026-01-05T16:05:26Z",
+ "pushed_at": "2025-12-08T18:36:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110915137,
+ "name": "CVE-2025-55182-bypass",
+ "full_name": "ejpir\/CVE-2025-55182-bypass",
+ "owner": {
+ "login": "ejpir",
+ "id": 16493171,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16493171?v=4",
+ "html_url": "https:\/\/github.com\/ejpir",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ejpir\/CVE-2025-55182-bypass",
+ "description": "Header bypass for CVE-2025-55182 (React Server Components RCE). ",
+ "fork": false,
+ "created_at": "2025-12-05T23:23:51Z",
+ "updated_at": "2026-04-01T14:22:23Z",
+ "pushed_at": "2025-12-10T22:44:33Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110916043,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "StealthMoud\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "StealthMoud",
+ "id": 152169815,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152169815?v=4",
+ "html_url": "https:\/\/github.com\/StealthMoud",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/StealthMoud\/CVE-2025-55182-Scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T23:26:50Z",
+ "updated_at": "2026-01-29T03:50:36Z",
+ "pushed_at": "2025-12-07T01:28:47Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1110916791,
"name": "React2Shell_CVE-2025-55182",
@@ -898,6 +4161,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1110935853,
+ "name": "CVE-2025-55182",
+ "full_name": "emredavut\/CVE-2025-55182",
+ "owner": {
+ "login": "emredavut",
+ "id": 14972838,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14972838?v=4",
+ "html_url": "https:\/\/github.com\/emredavut",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/emredavut\/CVE-2025-55182",
+ "description": "RSC\/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-06T00:36:16Z",
+ "updated_at": "2026-05-22T12:17:13Z",
+ "pushed_at": "2025-12-06T01:27:19Z",
+ "stargazers_count": 312,
+ "watchers_count": 312,
+ "has_discussions": false,
+ "forks_count": 56,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 56,
+ "watchers": 312,
+ "score": 0,
+ "subscribers_count": 5
+ },
{
"id": 1110969924,
"name": "ore_react2shell_scanner",
@@ -931,6 +4227,452 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1111038276,
+ "name": "cve-2025-55182-test-lab-windows",
+ "full_name": "fankh\/cve-2025-55182-test-lab-windows",
+ "owner": {
+ "login": "fankh",
+ "id": 5052378,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5052378?v=4",
+ "html_url": "https:\/\/github.com\/fankh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fankh\/cve-2025-55182-test-lab-windows",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T06:24:15Z",
+ "updated_at": "2025-12-08T02:27:01Z",
+ "pushed_at": "2025-12-08T02:26:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111062481,
+ "name": "evilact",
+ "full_name": "cypholab\/evilact",
+ "owner": {
+ "login": "cypholab",
+ "id": 164140410,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164140410?v=4",
+ "html_url": "https:\/\/github.com\/cypholab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cypholab\/evilact",
+ "description": "Fast scanner for detecting and confirming Next.js RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).",
+ "fork": false,
+ "created_at": "2025-12-06T07:32:46Z",
+ "updated_at": "2025-12-08T18:19:55Z",
+ "pushed_at": "2025-12-06T11:30:01Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111077117,
+ "name": "CVE-2025-55182",
+ "full_name": "greenheadHQ\/CVE-2025-55182",
+ "owner": {
+ "login": "greenheadHQ",
+ "id": 85833148,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85833148?v=4",
+ "html_url": "https:\/\/github.com\/greenheadHQ",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/greenheadHQ\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T08:12:41Z",
+ "updated_at": "2025-12-21T09:08:24Z",
+ "pushed_at": "2025-12-06T09:21:26Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111107917,
+ "name": "rschunter",
+ "full_name": "sumanrox\/rschunter",
+ "owner": {
+ "login": "sumanrox",
+ "id": 36808582,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36808582?v=4",
+ "html_url": "https:\/\/github.com\/sumanrox",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sumanrox\/rschunter",
+ "description": "Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-06T09:36:00Z",
+ "updated_at": "2026-01-29T13:46:17Z",
+ "pushed_at": "2025-12-07T15:27:14Z",
+ "stargazers_count": 38,
+ "watchers_count": 38,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 38,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111118297,
+ "name": "React2Shell",
+ "full_name": "I3r1h0n\/React2Shell",
+ "owner": {
+ "login": "I3r1h0n",
+ "id": 140952002,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140952002?v=4",
+ "html_url": "https:\/\/github.com\/I3r1h0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/I3r1h0n\/React2Shell",
+ "description": "My research on CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-06T10:02:32Z",
+ "updated_at": "2026-01-22T11:39:50Z",
+ "pushed_at": "2025-12-08T16:58:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111165995,
+ "name": "Rust_CVE-2025-55182",
+ "full_name": "zorejt\/Rust_CVE-2025-55182",
+ "owner": {
+ "login": "zorejt",
+ "id": 115768776,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115768776?v=4",
+ "html_url": "https:\/\/github.com\/zorejt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zorejt\/Rust_CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T12:02:28Z",
+ "updated_at": "2025-12-07T14:41:05Z",
+ "pushed_at": "2025-12-06T12:18:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111170023,
+ "name": "CVE-2025-55182",
+ "full_name": "Dread1ess\/CVE-2025-55182",
+ "owner": {
+ "login": "Dread1ess",
+ "id": 73165539,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73165539?v=4",
+ "html_url": "https:\/\/github.com\/Dread1ess",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Dread1ess\/CVE-2025-55182",
+ "description": "A critical-severity vulnerability in React Server Components (CVE-2025-55182) affects React 19 and frameworks that use it, including Next.js (CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-06T12:12:58Z",
+ "updated_at": "2026-03-19T17:40:16Z",
+ "pushed_at": "2025-12-06T12:15:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "nodejs",
+ "poc",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111177940,
+ "name": "CVE-2025-55182",
+ "full_name": "MaxK9999\/CVE-2025-55182",
+ "owner": {
+ "login": "MaxK9999",
+ "id": 129183382,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129183382?v=4",
+ "html_url": "https:\/\/github.com\/MaxK9999",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MaxK9999\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T12:32:16Z",
+ "updated_at": "2025-12-06T12:39:50Z",
+ "pushed_at": "2025-12-06T12:39:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111180741,
+ "name": "CVE-2025-55182",
+ "full_name": "Archerkong\/CVE-2025-55182",
+ "owner": {
+ "login": "Archerkong",
+ "id": 40537619,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40537619?v=4",
+ "html_url": "https:\/\/github.com\/Archerkong",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Archerkong\/CVE-2025-55182",
+ "description": "CVE-2025-55182 poc",
+ "fork": false,
+ "created_at": "2025-12-06T12:39:06Z",
+ "updated_at": "2026-03-12T14:11:38Z",
+ "pushed_at": "2025-12-08T10:45:12Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111189597,
+ "name": "nextjs-react2shell-detect",
+ "full_name": "philparzer\/nextjs-react2shell-detect",
+ "owner": {
+ "login": "philparzer",
+ "id": 74797907,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74797907?v=4",
+ "html_url": "https:\/\/github.com\/philparzer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/philparzer\/nextjs-react2shell-detect",
+ "description": "chrome extension to detect next.js sites vulnerable to CVE-2025-55182 (react2shell)",
+ "fork": false,
+ "created_at": "2025-12-06T13:00:49Z",
+ "updated_at": "2025-12-06T14:49:44Z",
+ "pushed_at": "2025-12-06T14:28:30Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chrome-extension",
+ "cve-scanning",
+ "react",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111207015,
+ "name": "CVE-2025-55182-NSE",
+ "full_name": "yunaranyancat\/CVE-2025-55182-NSE",
+ "owner": {
+ "login": "yunaranyancat",
+ "id": 22954096,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22954096?v=4",
+ "html_url": "https:\/\/github.com\/yunaranyancat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yunaranyancat\/CVE-2025-55182-NSE",
+ "description": "Meow",
+ "fork": false,
+ "created_at": "2025-12-06T13:41:36Z",
+ "updated_at": "2025-12-06T13:51:34Z",
+ "pushed_at": "2025-12-06T13:51:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111208103,
+ "name": "CVE-2025-55182-Terminal",
+ "full_name": "MrSol0\/CVE-2025-55182-Terminal",
+ "owner": {
+ "login": "MrSol0",
+ "id": 35892335,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35892335?v=4",
+ "html_url": "https:\/\/github.com\/MrSol0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MrSol0\/CVE-2025-55182-Terminal",
+ "description": "This is a POC for testing your projects that are vulnerable to CVE-2025-55182 with a terminal and ability to scan a list",
+ "fork": false,
+ "created_at": "2025-12-06T13:44:04Z",
+ "updated_at": "2025-12-06T13:58:21Z",
+ "pushed_at": "2025-12-06T13:58:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111211649,
+ "name": "react2shell-test-server",
+ "full_name": "fullhunt\/react2shell-test-server",
+ "owner": {
+ "login": "fullhunt",
+ "id": 34830403,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34830403?v=4",
+ "html_url": "https:\/\/github.com\/fullhunt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fullhunt\/react2shell-test-server",
+ "description": "A test server for demonstrating and testing React2Shell (CVE-2025-55182) vulnerability",
+ "fork": false,
+ "created_at": "2025-12-06T13:51:23Z",
+ "updated_at": "2025-12-20T21:15:12Z",
+ "pushed_at": "2025-12-06T13:51:45Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "react",
+ "react2shell",
+ "web-security"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1111228576,
"name": "vuln-app-CVE-2025-55182",
@@ -964,6 +4706,2183 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1111231786,
+ "name": "CVE-2025-55182-advanced-scanner-",
+ "full_name": "zack0x01\/CVE-2025-55182-advanced-scanner-",
+ "owner": {
+ "login": "zack0x01",
+ "id": 65457219,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65457219?v=4",
+ "html_url": "https:\/\/github.com\/zack0x01",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zack0x01\/CVE-2025-55182-advanced-scanner-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T14:36:55Z",
+ "updated_at": "2026-05-24T21:53:38Z",
+ "pushed_at": "2025-12-06T19:52:21Z",
+ "stargazers_count": 276,
+ "watchers_count": 276,
+ "has_discussions": false,
+ "forks_count": 48,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 48,
+ "watchers": 276,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111237011,
+ "name": "React2Shell_Hunter",
+ "full_name": "rocklambros\/React2Shell_Hunter",
+ "owner": {
+ "login": "rocklambros",
+ "id": 152409127,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152409127?v=4",
+ "html_url": "https:\/\/github.com\/rocklambros",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rocklambros\/React2Shell_Hunter",
+ "description": "AWS Organization-wide detection toolkit for CVE-2025-55182 & CVE-2025-66478 (React Server Components \/ Next.js RCE vulnerabilities)",
+ "fork": false,
+ "created_at": "2025-12-06T14:48:42Z",
+ "updated_at": "2025-12-11T08:01:15Z",
+ "pushed_at": "2025-12-07T15:43:14Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111251466,
+ "name": "react2shell-scanner",
+ "full_name": "alessiodos\/react2shell-scanner",
+ "owner": {
+ "login": "alessiodos",
+ "id": 3199720,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3199720?v=4",
+ "html_url": "https:\/\/github.com\/alessiodos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alessiodos\/react2shell-scanner",
+ "description": "CVE-2025-55182 & CVE-2025-66478 Detection Tool for Next.js RSC RCE",
+ "fork": false,
+ "created_at": "2025-12-06T15:20:59Z",
+ "updated_at": "2025-12-08T08:14:01Z",
+ "pushed_at": "2025-12-06T15:21:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "nextjs",
+ "penetration-testing",
+ "python",
+ "rce",
+ "security",
+ "vulnerability-scanner"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111254642,
+ "name": "react-CVE-2025-55182-fixer",
+ "full_name": "Bashamega\/react-CVE-2025-55182-fixer",
+ "owner": {
+ "login": "Bashamega",
+ "id": 110662505,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110662505?v=4",
+ "html_url": "https:\/\/github.com\/Bashamega",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bashamega\/react-CVE-2025-55182-fixer",
+ "description": "Patches CVE-2025-55182 in your repositories",
+ "fork": false,
+ "created_at": "2025-12-06T15:27:54Z",
+ "updated_at": "2025-12-06T15:38:10Z",
+ "pushed_at": "2025-12-06T15:38:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111258502,
+ "name": "CVE-2025-55182-RCE-Exploit",
+ "full_name": "orgito1015\/CVE-2025-55182-RCE-Exploit",
+ "owner": {
+ "login": "orgito1015",
+ "id": 86354243,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86354243?v=4",
+ "html_url": "https:\/\/github.com\/orgito1015",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/orgito1015\/CVE-2025-55182-RCE-Exploit",
+ "description": "More exploit-focused; great for security research repos.",
+ "fork": false,
+ "created_at": "2025-12-06T15:36:29Z",
+ "updated_at": "2025-12-06T15:38:56Z",
+ "pushed_at": "2025-12-06T15:38:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111264326,
+ "name": "CVE-2025-55182-golang-PoC",
+ "full_name": "keklick1337\/CVE-2025-55182-golang-PoC",
+ "owner": {
+ "login": "keklick1337",
+ "id": 86933883,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86933883?v=4",
+ "html_url": "https:\/\/github.com\/keklick1337",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/keklick1337\/CVE-2025-55182-golang-PoC",
+ "description": "CVE-2025-55182 React Server Components RCE - Go PoC",
+ "fork": false,
+ "created_at": "2025-12-06T15:49:06Z",
+ "updated_at": "2026-04-06T19:36:49Z",
+ "pushed_at": "2025-12-13T14:27:01Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111276958,
+ "name": "react2shell-exploit",
+ "full_name": "rubensuxo-eh\/react2shell-exploit",
+ "owner": {
+ "login": "rubensuxo-eh",
+ "id": 248184435,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248184435?v=4",
+ "html_url": "https:\/\/github.com\/rubensuxo-eh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rubensuxo-eh\/react2shell-exploit",
+ "description": "React2Shell-Exploit — Complete exploitation framework for CVE-2025-55182, including Python exploit, Docker vulnerable lab, Burp Suite manual and automated exploitation, Nuclei detection template, and validated testing workflow. Developed for penetration testing and educational research.",
+ "fork": false,
+ "created_at": "2025-12-06T16:16:19Z",
+ "updated_at": "2026-04-17T14:49:55Z",
+ "pushed_at": "2025-12-08T13:19:11Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111293915,
+ "name": "MassExploit-CVE-2025-55182",
+ "full_name": "CirqueiraDev\/MassExploit-CVE-2025-55182",
+ "owner": {
+ "login": "CirqueiraDev",
+ "id": 118860604,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118860604?v=4",
+ "html_url": "https:\/\/github.com\/CirqueiraDev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CirqueiraDev\/MassExploit-CVE-2025-55182",
+ "description": "CVE-2025-55182 RCE - Massive Scanner POC",
+ "fork": false,
+ "created_at": "2025-12-06T16:51:04Z",
+ "updated_at": "2026-01-13T21:54:00Z",
+ "pushed_at": "2025-12-06T18:34:45Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "massive",
+ "python",
+ "python3",
+ "rce",
+ "react",
+ "scanner",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111295386,
+ "name": "CVE-2025-55182-react2shell",
+ "full_name": "aastikgakhar\/CVE-2025-55182-react2shell",
+ "owner": {
+ "login": "aastikgakhar",
+ "id": 101105827,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101105827?v=4",
+ "html_url": "https:\/\/github.com\/aastikgakhar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aastikgakhar\/CVE-2025-55182-react2shell",
+ "description": "Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.",
+ "fork": false,
+ "created_at": "2025-12-06T16:54:18Z",
+ "updated_at": "2025-12-06T17:01:48Z",
+ "pushed_at": "2025-12-06T17:01:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111313296,
+ "name": "r2s",
+ "full_name": "zamdevio\/r2s",
+ "owner": {
+ "login": "zamdevio",
+ "id": 183602555,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183602555?v=4",
+ "html_url": "https:\/\/github.com\/zamdevio",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zamdevio\/r2s",
+ "description": "Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF bypass, and comprehensive reporting.",
+ "fork": false,
+ "created_at": "2025-12-06T17:32:55Z",
+ "updated_at": "2025-12-17T01:34:32Z",
+ "pushed_at": "2025-12-06T17:49:30Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "nextjs-vulnerability",
+ "react2shell",
+ "scanner",
+ "tool",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111331941,
+ "name": "React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web",
+ "full_name": "AdityaBhatt3010\/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web",
+ "description": "React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React\/Next.js setups.",
+ "fork": false,
+ "created_at": "2025-12-06T18:16:09Z",
+ "updated_at": "2026-05-04T07:52:09Z",
+ "pushed_at": "2025-12-18T09:31:24Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "exploit",
+ "exploitation",
+ "javascipt",
+ "js",
+ "poc",
+ "react",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111335374,
+ "name": "CVE-2025-55182",
+ "full_name": "ogpourya\/CVE-2025-55182",
+ "owner": {
+ "login": "ogpourya",
+ "id": 175160338,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175160338?v=4",
+ "html_url": "https:\/\/github.com\/ogpourya",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ogpourya\/CVE-2025-55182",
+ "description": "Interactive shell exploitation for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-06T18:24:49Z",
+ "updated_at": "2025-12-29T14:27:20Z",
+ "pushed_at": "2025-12-29T14:27:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111337524,
+ "name": "CVE-2025-55182",
+ "full_name": "0xN7y\/CVE-2025-55182",
+ "owner": {
+ "login": "0xN7y",
+ "id": 70061541,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70061541?v=4",
+ "html_url": "https:\/\/github.com\/0xN7y",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xN7y\/CVE-2025-55182",
+ "description": "Poc for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-06T18:29:58Z",
+ "updated_at": "2025-12-06T19:11:28Z",
+ "pushed_at": "2025-12-06T19:11:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111339758,
+ "name": "React2Shell_Rce-cve-2025-55182",
+ "full_name": "MuhammadWaseem29\/React2Shell_Rce-cve-2025-55182",
+ "owner": {
+ "login": "MuhammadWaseem29",
+ "id": 161931698,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161931698?v=4",
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29\/React2Shell_Rce-cve-2025-55182",
+ "description": "React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0, including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, contain a remote code execution vulnerability.",
+ "fork": false,
+ "created_at": "2025-12-06T18:35:34Z",
+ "updated_at": "2026-02-25T00:16:09Z",
+ "pushed_at": "2025-12-06T19:09:07Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "rce",
+ "react",
+ "react2shell",
+ "remote-code-execution"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111365438,
+ "name": "CVE-2025-55182-Waf",
+ "full_name": "l0n3m4n\/CVE-2025-55182-Waf",
+ "owner": {
+ "login": "l0n3m4n",
+ "id": 143868630,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143868630?v=4",
+ "html_url": "https:\/\/github.com\/l0n3m4n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/l0n3m4n\/CVE-2025-55182-Waf",
+ "description": "CVE-2025-55182 RCE vulnerability in Next.js\/React RSC servers (exploit and scanner) ",
+ "fork": false,
+ "created_at": "2025-12-06T19:44:10Z",
+ "updated_at": "2026-04-10T08:19:15Z",
+ "pushed_at": "2025-12-15T13:08:33Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ctf-challenges",
+ "cve-2025-55182",
+ "exploit-scanner",
+ "nextjs",
+ "pentesting",
+ "poc",
+ "react-router",
+ "reactjs",
+ "rsc",
+ "security-audit",
+ "tryhackme",
+ "webapplications"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111408040,
+ "name": "NextRce",
+ "full_name": "ynsmroztas\/NextRce",
+ "owner": {
+ "login": "ynsmroztas",
+ "id": 58443521,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58443521?v=4",
+ "html_url": "https:\/\/github.com\/ynsmroztas",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ynsmroztas\/NextRce",
+ "description": "React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-06T21:54:13Z",
+ "updated_at": "2026-05-29T22:31:30Z",
+ "pushed_at": "2025-12-12T11:11:17Z",
+ "stargazers_count": 246,
+ "watchers_count": 246,
+ "has_discussions": false,
+ "forks_count": 58,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 58,
+ "watchers": 246,
+ "score": 0,
+ "subscribers_count": 3
+ },
+ {
+ "id": 1111411919,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "shreyas-malhotra\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "shreyas-malhotra",
+ "id": 126407864,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126407864?v=4",
+ "html_url": "https:\/\/github.com\/shreyas-malhotra",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shreyas-malhotra\/React2Shell-CVE-2025-55182",
+ "description": "A minimal RCE PoC for CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-06T22:07:51Z",
+ "updated_at": "2025-12-06T22:13:04Z",
+ "pushed_at": "2025-12-06T22:13:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111418140,
+ "name": "CVE-2025-55182",
+ "full_name": "sohaibeb\/CVE-2025-55182",
+ "owner": {
+ "login": "sohaibeb",
+ "id": 25540162,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25540162?v=4",
+ "html_url": "https:\/\/github.com\/sohaibeb",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sohaibeb\/CVE-2025-55182",
+ "description": "CVE-2025-55182 PoC Exploit",
+ "fork": false,
+ "created_at": "2025-12-06T22:30:00Z",
+ "updated_at": "2025-12-15T12:05:42Z",
+ "pushed_at": "2025-12-06T22:57:20Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111435778,
+ "name": "RSC-Infra-Scanner",
+ "full_name": "vyvivekyadav04\/RSC-Infra-Scanner",
+ "owner": {
+ "login": "vyvivekyadav04",
+ "id": 15107907,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15107907?v=4",
+ "html_url": "https:\/\/github.com\/vyvivekyadav04",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vyvivekyadav04\/RSC-Infra-Scanner",
+ "description": "This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router \/ React Server Components (RSC) infrastructure. (I made it to find the applications possibly vulnerable to CVE-2025-55182 and CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-06T23:36:01Z",
+ "updated_at": "2025-12-07T19:58:19Z",
+ "pushed_at": "2025-12-07T19:58:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "nextjs",
+ "react",
+ "reactjs",
+ "vulenrability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111440382,
+ "name": "CVE-2025-55182",
+ "full_name": "MikeTheHash\/CVE-2025-55182",
+ "owner": {
+ "login": "MikeTheHash",
+ "id": 80423783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80423783?v=4",
+ "html_url": "https:\/\/github.com\/MikeTheHash",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MikeTheHash\/CVE-2025-55182",
+ "description": "A modified and a little boosted exploit for CVE-2025-55182, React2Shell: Pre-authentication Remote Code Execution in React Server Packages ",
+ "fork": false,
+ "created_at": "2025-12-06T23:54:46Z",
+ "updated_at": "2025-12-07T00:28:50Z",
+ "pushed_at": "2025-12-07T00:28:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111476454,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "Qixinlee\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "Qixinlee",
+ "id": 33517287,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33517287?v=4",
+ "html_url": "https:\/\/github.com\/Qixinlee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Qixinlee\/CVE-2025-55182-Scanner",
+ "description": "Automated scanner for CVE-2025-55182: a critical RCE vulnerability in React Server Components and Next.js.",
+ "fork": false,
+ "created_at": "2025-12-07T02:26:21Z",
+ "updated_at": "2025-12-07T06:49:15Z",
+ "pushed_at": "2025-12-07T02:29:13Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111479808,
+ "name": "react2shell-security-toolkit",
+ "full_name": "DelvyGonzalez\/react2shell-security-toolkit",
+ "owner": {
+ "login": "DelvyGonzalez",
+ "id": 203705783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/203705783?v=4",
+ "html_url": "https:\/\/github.com\/DelvyGonzalez",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DelvyGonzalez\/react2shell-security-toolkit",
+ "description": "Security toolkit to detect CVE-2025-55182 (React2Shell) vulnerability",
+ "fork": false,
+ "created_at": "2025-12-07T02:39:16Z",
+ "updated_at": "2026-01-10T22:52:58Z",
+ "pushed_at": "2025-12-07T03:56:58Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "next",
+ "nextjs",
+ "react",
+ "reactjs",
+ "security",
+ "security-tools"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111506801,
+ "name": "react-cve-2025-55182-demo",
+ "full_name": "jumodada\/react-cve-2025-55182-demo",
+ "owner": {
+ "login": "jumodada",
+ "id": 32758289,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32758289?v=4",
+ "html_url": "https:\/\/github.com\/jumodada",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jumodada\/react-cve-2025-55182-demo",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T04:25:29Z",
+ "updated_at": "2025-12-07T04:25:30Z",
+ "pushed_at": "2025-12-07T04:25:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111506952,
+ "name": "CVE-2025-55182",
+ "full_name": "ahmedshamsddin\/CVE-2025-55182",
+ "owner": {
+ "login": "ahmedshamsddin",
+ "id": 67114407,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67114407?v=4",
+ "html_url": "https:\/\/github.com\/ahmedshamsddin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ahmedshamsddin\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T04:26:00Z",
+ "updated_at": "2025-12-07T05:30:59Z",
+ "pushed_at": "2025-12-07T05:30:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111516525,
+ "name": "CVE-2025-55182-exploit",
+ "full_name": "LemonTeatw1\/CVE-2025-55182-exploit",
+ "owner": {
+ "login": "LemonTeatw1",
+ "id": 101975746,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101975746?v=4",
+ "html_url": "https:\/\/github.com\/LemonTeatw1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LemonTeatw1\/CVE-2025-55182-exploit",
+ "description": "This is CVE-2025-55182 exploit",
+ "fork": false,
+ "created_at": "2025-12-07T05:01:33Z",
+ "updated_at": "2026-01-02T03:57:59Z",
+ "pushed_at": "2025-12-07T08:25:21Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111579199,
+ "name": "React2Shell_cve-2025-55182",
+ "full_name": "ethicalrohitt\/React2Shell_cve-2025-55182",
+ "owner": {
+ "login": "ethicalrohitt",
+ "id": 185612138,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185612138?v=4",
+ "html_url": "https:\/\/github.com\/ethicalrohitt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ethicalrohitt\/React2Shell_cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T08:19:18Z",
+ "updated_at": "2025-12-07T08:55:51Z",
+ "pushed_at": "2025-12-07T08:55:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111593131,
+ "name": "React2Shell-CVE-2025-55182-PoC-Reverse-Shell",
+ "full_name": "ihhgimhana\/React2Shell-CVE-2025-55182-PoC-Reverse-Shell",
+ "owner": {
+ "login": "ihhgimhana",
+ "id": 56995817,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56995817?v=4",
+ "html_url": "https:\/\/github.com\/ihhgimhana",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ihhgimhana\/React2Shell-CVE-2025-55182-PoC-Reverse-Shell",
+ "description": "This is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.",
+ "fork": false,
+ "created_at": "2025-12-07T09:00:27Z",
+ "updated_at": "2026-04-07T08:51:21Z",
+ "pushed_at": "2025-12-07T09:28:57Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "nextjs",
+ "poc",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111604507,
+ "name": "scanner-for-CVE-2025-55182-vulnerability",
+ "full_name": "shakilkhatri\/scanner-for-CVE-2025-55182-vulnerability",
+ "owner": {
+ "login": "shakilkhatri",
+ "id": 43198367,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43198367?v=4",
+ "html_url": "https:\/\/github.com\/shakilkhatri",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shakilkhatri\/scanner-for-CVE-2025-55182-vulnerability",
+ "description": "CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React\/Next.js RCE vulnerability and generate a clean Markdown report.",
+ "fork": false,
+ "created_at": "2025-12-07T09:31:22Z",
+ "updated_at": "2025-12-07T09:41:22Z",
+ "pushed_at": "2025-12-07T09:31:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cli",
+ "cve-2025-55182",
+ "github-api",
+ "nextjs",
+ "python",
+ "rce",
+ "react",
+ "react-server-components",
+ "security",
+ "vulnerability-scanner"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111608526,
+ "name": "CVE-2025-55182-PoC",
+ "full_name": "UmmItKin\/CVE-2025-55182-PoC",
+ "owner": {
+ "login": "UmmItKin",
+ "id": 128139875,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128139875?v=4",
+ "html_url": "https:\/\/github.com\/UmmItKin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/UmmItKin\/CVE-2025-55182-PoC",
+ "description": "react2shell PoC with Go \/ CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-07T09:42:24Z",
+ "updated_at": "2025-12-07T10:01:24Z",
+ "pushed_at": "2025-12-07T09:57:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111633346,
+ "name": "CVE-2025-55182",
+ "full_name": "robbin0919\/CVE-2025-55182",
+ "owner": {
+ "login": "robbin0919",
+ "id": 66932401,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66932401?v=4",
+ "html_url": "https:\/\/github.com\/robbin0919",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/robbin0919\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T10:47:53Z",
+ "updated_at": "2025-12-09T14:41:08Z",
+ "pushed_at": "2025-12-09T14:41:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111639846,
+ "name": "CVE-2025-55182-POC",
+ "full_name": "zxz3650\/CVE-2025-55182-POC",
+ "owner": {
+ "login": "zxz3650",
+ "id": 20877534,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20877534?v=4",
+ "html_url": "https:\/\/github.com\/zxz3650",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zxz3650\/CVE-2025-55182-POC",
+ "description": "CVE-2025-55182-POC",
+ "fork": false,
+ "created_at": "2025-12-07T11:04:24Z",
+ "updated_at": "2025-12-07T12:40:42Z",
+ "pushed_at": "2025-12-07T12:40:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111648351,
+ "name": "CVE-2025-55182",
+ "full_name": "AliHzSec\/CVE-2025-55182",
+ "owner": {
+ "login": "AliHzSec",
+ "id": 154372910,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154372910?v=4",
+ "html_url": "https:\/\/github.com\/AliHzSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AliHzSec\/CVE-2025-55182",
+ "description": "Critical RCE vulnerability scanner for React Server Components (CVE-2025-55182). Automated exploitation framework with multi-payload support, proxy capabilities, and interactive command execution.",
+ "fork": false,
+ "created_at": "2025-12-07T11:25:22Z",
+ "updated_at": "2026-01-29T03:50:32Z",
+ "pushed_at": "2025-12-08T17:03:18Z",
+ "stargazers_count": 15,
+ "watchers_count": 15,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 15,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111650559,
+ "name": "react2shell",
+ "full_name": "zr0n\/react2shell",
+ "owner": {
+ "login": "zr0n",
+ "id": 1934730,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1934730?v=4",
+ "html_url": "https:\/\/github.com\/zr0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zr0n\/react2shell",
+ "description": "A complete framework for exploiting the vulnerability CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-07T11:30:44Z",
+ "updated_at": "2026-05-25T01:29:50Z",
+ "pushed_at": "2025-12-07T11:33:30Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111654023,
+ "name": "CVE-2025-55182-mass",
+ "full_name": "hunter24x24\/CVE-2025-55182-mass",
+ "owner": {
+ "login": "hunter24x24",
+ "id": 117602676,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117602676?v=4",
+ "html_url": "https:\/\/github.com\/hunter24x24",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hunter24x24\/CVE-2025-55182-mass",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T11:39:27Z",
+ "updated_at": "2025-12-08T06:14:07Z",
+ "pushed_at": "2025-12-07T11:48:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111723749,
+ "name": "CVE-2025-55182",
+ "full_name": "andressuarezmonk\/CVE-2025-55182",
+ "owner": {
+ "login": "andressuarezmonk",
+ "id": 90800246,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90800246?v=4",
+ "html_url": "https:\/\/github.com\/andressuarezmonk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/andressuarezmonk\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T14:15:35Z",
+ "updated_at": "2025-12-07T15:04:33Z",
+ "pushed_at": "2025-12-07T15:04:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111752774,
+ "name": "R2C-CVE-2025-55182-66478",
+ "full_name": "cybertechajju\/R2C-CVE-2025-55182-66478",
+ "owner": {
+ "login": "cybertechajju",
+ "id": 120666627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
+ "html_url": "https:\/\/github.com\/cybertechajju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybertechajju\/R2C-CVE-2025-55182-66478",
+ "description": "🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-07T15:16:29Z",
+ "updated_at": "2026-05-11T04:03:15Z",
+ "pushed_at": "2025-12-08T11:54:54Z",
+ "stargazers_count": 24,
+ "watchers_count": 24,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bugbounty",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "expolit",
+ "redteam-tools"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 24,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111755817,
+ "name": "CVE-2025-55182-poc-tool",
+ "full_name": "Dh4v4l8\/CVE-2025-55182-poc-tool",
+ "owner": {
+ "login": "Dh4v4l8",
+ "id": 110293131,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110293131?v=4",
+ "html_url": "https:\/\/github.com\/Dh4v4l8",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Dh4v4l8\/CVE-2025-55182-poc-tool",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T15:22:50Z",
+ "updated_at": "2026-02-27T20:07:35Z",
+ "pushed_at": "2025-12-08T06:51:02Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111759757,
+ "name": "CVE-2025-55182-React2Shell-RCE-Shell",
+ "full_name": "M4xSec\/CVE-2025-55182-React2Shell-RCE-Shell",
+ "owner": {
+ "login": "M4xSec",
+ "id": 57313495,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57313495?v=4",
+ "html_url": "https:\/\/github.com\/M4xSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/M4xSec\/CVE-2025-55182-React2Shell-RCE-Shell",
+ "description": "CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only. ",
+ "fork": false,
+ "created_at": "2025-12-07T15:30:49Z",
+ "updated_at": "2026-03-08T15:07:17Z",
+ "pushed_at": "2025-12-07T15:47:47Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bugbounty",
+ "cve2025-55182",
+ "exploit",
+ "nextjs",
+ "pentesting",
+ "rce",
+ "react",
+ "react2shell",
+ "redteaming",
+ "rsc",
+ "websecurity"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1111761743,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "SainiONHacks\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "SainiONHacks",
+ "id": 25581871,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25581871?v=4",
+ "html_url": "https:\/\/github.com\/SainiONHacks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SainiONHacks\/CVE-2025-55182-Scanner",
+ "description": "A standalone GUI tool to detect and demonstrate the **React Server Components Remote Code Execution (RCE)** vulnerability (CVE-2025-55182) in Next.js applications.",
+ "fork": false,
+ "created_at": "2025-12-07T15:35:01Z",
+ "updated_at": "2025-12-11T16:11:24Z",
+ "pushed_at": "2025-12-07T15:40:37Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": true,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111771866,
+ "name": "react-vuln-scanner",
+ "full_name": "umairahmadh\/react-vuln-scanner",
+ "owner": {
+ "login": "umairahmadh",
+ "id": 18067189,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18067189?v=4",
+ "html_url": "https:\/\/github.com\/umairahmadh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/umairahmadh\/react-vuln-scanner",
+ "description": "A bash script to scan your server for React applications vulnerable to **CVE-2025-55182** — a critical remote code execution vulnerability (CVSS 10.0) in React Server Components.",
+ "fork": false,
+ "created_at": "2025-12-07T15:55:59Z",
+ "updated_at": "2025-12-07T16:01:30Z",
+ "pushed_at": "2025-12-07T16:01:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111772822,
+ "name": "Torito-R2S",
+ "full_name": "ToritoIO\/Torito-R2S",
+ "owner": {
+ "login": "ToritoIO",
+ "id": 227834644,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/227834644?v=4",
+ "html_url": "https:\/\/github.com\/ToritoIO",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ToritoIO\/Torito-R2S",
+ "description": "Torito React2Shell Scanner & Exploit Tool (CVE-2025-55182 \/ 66478)",
+ "fork": false,
+ "created_at": "2025-12-07T15:57:58Z",
+ "updated_at": "2026-04-17T21:30:58Z",
+ "pushed_at": "2025-12-07T16:01:52Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "infosec",
+ "nextjs",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111785341,
+ "name": "react2shellpoc",
+ "full_name": "surajhacx\/react2shellpoc",
+ "owner": {
+ "login": "surajhacx",
+ "id": 158517938,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158517938?v=4",
+ "html_url": "https:\/\/github.com\/surajhacx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/surajhacx\/react2shellpoc",
+ "description": "react2shell CVE-2025-55182 PoC ",
+ "fork": false,
+ "created_at": "2025-12-07T16:24:21Z",
+ "updated_at": "2026-05-27T22:55:12Z",
+ "pushed_at": "2025-12-07T17:17:26Z",
+ "stargazers_count": 29,
+ "watchers_count": 29,
+ "has_discussions": false,
+ "forks_count": 9,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 9,
+ "watchers": 29,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111848847,
+ "name": "CVE-2025-55182",
+ "full_name": "kavienanj\/CVE-2025-55182",
+ "owner": {
+ "login": "kavienanj",
+ "id": 45987371,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45987371?v=4",
+ "html_url": "https:\/\/github.com\/kavienanj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kavienanj\/CVE-2025-55182",
+ "description": "Step-by-step walkthrough of CVE-2025-55182 (React2Shell) by tracing React's Flight protocol internals.",
+ "fork": false,
+ "created_at": "2025-12-07T18:41:50Z",
+ "updated_at": "2026-04-25T03:40:16Z",
+ "pushed_at": "2025-12-10T02:43:13Z",
+ "stargazers_count": 38,
+ "watchers_count": 38,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "nextjs",
+ "react2shell",
+ "reactjs"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 38,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1111859482,
+ "name": "React2Shell-Library",
+ "full_name": "websecuritylabs\/React2Shell-Library",
+ "owner": {
+ "login": "websecuritylabs",
+ "id": 248334773,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248334773?v=4",
+ "html_url": "https:\/\/github.com\/websecuritylabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/websecuritylabs\/React2Shell-Library",
+ "description": "A curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as \"React2Shell\".",
+ "fork": false,
+ "created_at": "2025-12-07T19:07:17Z",
+ "updated_at": "2026-05-18T14:03:36Z",
+ "pushed_at": "2025-12-29T21:32:09Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111868192,
+ "name": "CVE-2025-55182",
+ "full_name": "cyberleelawat\/CVE-2025-55182",
+ "owner": {
+ "login": "cyberleelawat",
+ "id": 202486122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202486122?v=4",
+ "html_url": "https:\/\/github.com\/cyberleelawat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberleelawat\/CVE-2025-55182",
+ "description": "A critical Remote Code Execution (RCE) vulnerability affecting the React Server Components (RSC) implementation within multiple packages including.",
+ "fork": false,
+ "created_at": "2025-12-07T19:29:43Z",
+ "updated_at": "2025-12-09T16:43:12Z",
+ "pushed_at": "2025-12-09T16:42:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111891259,
+ "name": "CVE-2025-55182-Simple-Scanner",
+ "full_name": "satriarizka\/CVE-2025-55182-Simple-Scanner",
+ "owner": {
+ "login": "satriarizka",
+ "id": 42266999,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42266999?v=4",
+ "html_url": "https:\/\/github.com\/satriarizka",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/satriarizka\/CVE-2025-55182-Simple-Scanner",
+ "description": "High-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built for pentesters, researchers, and bounty hunters.",
+ "fork": false,
+ "created_at": "2025-12-07T20:30:04Z",
+ "updated_at": "2025-12-07T20:41:41Z",
+ "pushed_at": "2025-12-07T20:41:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111918962,
+ "name": "CVE-2025-55182-React-RCE",
+ "full_name": "xcanwin\/CVE-2025-55182-React-RCE",
+ "owner": {
+ "login": "xcanwin",
+ "id": 14187349,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14187349?v=4",
+ "html_url": "https:\/\/github.com\/xcanwin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xcanwin\/CVE-2025-55182-React-RCE",
+ "description": "[漏洞复现] 全球首款基于RSC特性能绕过WAF检测的CVE-2025-55182 React Server RCE 漏洞 EXP。",
+ "fork": false,
+ "created_at": "2025-12-07T21:49:47Z",
+ "updated_at": "2026-03-31T11:55:27Z",
+ "pushed_at": "2025-12-08T06:40:59Z",
+ "stargazers_count": 14,
+ "watchers_count": 14,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "dify",
+ "exp",
+ "nextjs",
+ "react"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 14,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111956723,
+ "name": "CVE-2025-55182-Test-Server",
+ "full_name": "DoobTheGoober\/CVE-2025-55182-Test-Server",
+ "owner": {
+ "login": "DoobTheGoober",
+ "id": 27988707,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27988707?v=4",
+ "html_url": "https:\/\/github.com\/DoobTheGoober",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DoobTheGoober\/CVE-2025-55182-Test-Server",
+ "description": "Play with react2shell in a safe environment!",
+ "fork": false,
+ "created_at": "2025-12-07T23:57:45Z",
+ "updated_at": "2025-12-08T00:07:02Z",
+ "pushed_at": "2025-12-08T00:06:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111969840,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "timsonner\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "timsonner",
+ "id": 66705347,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66705347?v=4",
+ "html_url": "https:\/\/github.com\/timsonner",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/timsonner\/React2Shell-CVE-2025-55182",
+ "description": "POC and lab setup",
+ "fork": false,
+ "created_at": "2025-12-08T00:44:19Z",
+ "updated_at": "2026-02-17T16:23:23Z",
+ "pushed_at": "2025-12-08T01:34:35Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111975134,
+ "name": "CVE-2025-55182",
+ "full_name": "theman001\/CVE-2025-55182",
+ "owner": {
+ "login": "theman001",
+ "id": 100943215,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100943215?v=4",
+ "html_url": "https:\/\/github.com\/theman001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/theman001\/CVE-2025-55182",
+ "description": "CVE-2025-55182 React RCE Test Program",
+ "fork": false,
+ "created_at": "2025-12-08T01:01:55Z",
+ "updated_at": "2026-01-06T08:36:12Z",
+ "pushed_at": "2025-12-24T02:31:08Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112006891,
+ "name": "CVE-2025-55182-React2Shell-lab",
+ "full_name": "lalaterry\/CVE-2025-55182-React2Shell-lab",
+ "owner": {
+ "login": "lalaterry",
+ "id": 35865526,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35865526?v=4",
+ "html_url": "https:\/\/github.com\/lalaterry",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lalaterry\/CVE-2025-55182-React2Shell-lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T02:37:55Z",
+ "updated_at": "2025-12-08T02:44:24Z",
+ "pushed_at": "2025-12-08T02:44:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112034696,
+ "name": "CVE-2025-55182-CVE-2025-66478",
+ "full_name": "arashiyans\/CVE-2025-55182-CVE-2025-66478",
+ "owner": {
+ "login": "arashiyans",
+ "id": 83323269,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83323269?v=4",
+ "html_url": "https:\/\/github.com\/arashiyans",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/arashiyans\/CVE-2025-55182-CVE-2025-66478",
+ "description": "scanner testing",
+ "fork": false,
+ "created_at": "2025-12-08T03:58:28Z",
+ "updated_at": "2025-12-08T13:35:19Z",
+ "pushed_at": "2025-12-08T03:58:41Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112039364,
+ "name": "rust-cve-2025-55182",
+ "full_name": "faizdotid\/rust-cve-2025-55182",
+ "owner": {
+ "login": "faizdotid",
+ "id": 61777096,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61777096?v=4",
+ "html_url": "https:\/\/github.com\/faizdotid",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/faizdotid\/rust-cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T04:11:25Z",
+ "updated_at": "2025-12-22T09:12:13Z",
+ "pushed_at": "2025-12-22T09:12:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112040472,
+ "name": "react2shell-checker",
+ "full_name": "muthaiyanmani\/react2shell-checker",
+ "owner": {
+ "login": "muthaiyanmani",
+ "id": 56546428,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56546428?v=4",
+ "html_url": "https:\/\/github.com\/muthaiyanmani",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/muthaiyanmani\/react2shell-checker",
+ "description": "A security vulnerability scanner for detecting the React2Shell vulnerability (CVE-2025-55182) in Next.js and React applications.",
+ "fork": false,
+ "created_at": "2025-12-08T04:14:38Z",
+ "updated_at": "2026-05-03T06:58:48Z",
+ "pushed_at": "2025-12-08T04:28:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112063421,
+ "name": "CVE-2025-55182_CVE-2025-66478",
+ "full_name": "lincemorado97\/CVE-2025-55182_CVE-2025-66478",
+ "owner": {
+ "login": "lincemorado97",
+ "id": 243954988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243954988?v=4",
+ "html_url": "https:\/\/github.com\/lincemorado97",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lincemorado97\/CVE-2025-55182_CVE-2025-66478",
+ "description": "CVE-2025-55182 + CVE-2025-66478 - Next.js\/React Server Components Remote Code Execution",
+ "fork": false,
+ "created_at": "2025-12-08T05:15:05Z",
+ "updated_at": "2025-12-10T03:23:37Z",
+ "pushed_at": "2025-12-08T05:55:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112075616,
+ "name": "CVE-2025-55182",
+ "full_name": "LucasPDiniz\/CVE-2025-55182",
+ "owner": {
+ "login": "LucasPDiniz",
+ "id": 57265360,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57265360?v=4",
+ "html_url": "https:\/\/github.com\/LucasPDiniz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LucasPDiniz\/CVE-2025-55182",
+ "description": "React2Shell Vulnerability",
+ "fork": false,
+ "created_at": "2025-12-08T05:43:45Z",
+ "updated_at": "2026-03-29T07:36:17Z",
+ "pushed_at": "2025-12-14T17:26:45Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "nextjs",
+ "rce",
+ "react-native",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112081649,
+ "name": "CVE-2025-55182",
+ "full_name": "wangzhengquan\/CVE-2025-55182",
+ "owner": {
+ "login": "wangzhengquan",
+ "id": 5966037,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5966037?v=4",
+ "html_url": "https:\/\/github.com\/wangzhengquan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wangzhengquan\/CVE-2025-55182",
+ "description": "https:\/\/gist.github.com\/maple3142\/48bc9393f45e068cf8c90ab865c0f5f3",
+ "fork": false,
+ "created_at": "2025-12-08T05:57:25Z",
+ "updated_at": "2025-12-08T05:57:32Z",
+ "pushed_at": "2025-12-08T05:57:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112108822,
+ "name": "CVE-2025-55182",
+ "full_name": "TH-SecForge\/CVE-2025-55182",
+ "owner": {
+ "login": "TH-SecForge",
+ "id": 215460722,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215460722?v=4",
+ "html_url": "https:\/\/github.com\/TH-SecForge",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TH-SecForge\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T06:53:15Z",
+ "updated_at": "2025-12-08T06:55:06Z",
+ "pushed_at": "2025-12-08T06:55:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112137621,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "chitoz1300\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "chitoz1300",
+ "id": 87599806,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87599806?v=4",
+ "html_url": "https:\/\/github.com\/chitoz1300",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chitoz1300\/React2Shell-CVE-2025-55182",
+ "description": "* React2Shell-CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-08T07:48:47Z",
+ "updated_at": "2025-12-08T07:48:47Z",
+ "pushed_at": "2025-12-08T01:27:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112141890,
+ "name": "CVE-2025-55182-PoC",
+ "full_name": "Night-have-dreams\/CVE-2025-55182-PoC",
+ "owner": {
+ "login": "Night-have-dreams",
+ "id": 83467092,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83467092?v=4",
+ "html_url": "https:\/\/github.com\/Night-have-dreams",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Night-have-dreams\/CVE-2025-55182-PoC",
+ "description": "CVE-2025-55182 PoC",
+ "fork": false,
+ "created_at": "2025-12-08T07:57:10Z",
+ "updated_at": "2026-03-02T04:35:03Z",
+ "pushed_at": "2025-12-08T13:28:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112166218,
+ "name": "CVE-2025-55182-Proof-of-Concept",
+ "full_name": "thekamran\/CVE-2025-55182-Proof-of-Concept",
+ "owner": {
+ "login": "thekamran",
+ "id": 83330570,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83330570?v=4",
+ "html_url": "https:\/\/github.com\/thekamran",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thekamran\/CVE-2025-55182-Proof-of-Concept",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T08:42:39Z",
+ "updated_at": "2025-12-08T08:44:19Z",
+ "pushed_at": "2025-12-08T08:44:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112182966,
+ "name": "CVE-2025-55182-React2Shell-RCE",
+ "full_name": "Syrins\/CVE-2025-55182-React2Shell-RCE",
+ "owner": {
+ "login": "Syrins",
+ "id": 67106364,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67106364?v=4",
+ "html_url": "https:\/\/github.com\/Syrins",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Syrins\/CVE-2025-55182-React2Shell-RCE",
+ "description": "A modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python and Tkinter, featuring a sleek neon-themed interface for scanning targets, executing shell commands, and viewing live console output.",
+ "fork": false,
+ "created_at": "2025-12-08T09:12:22Z",
+ "updated_at": "2026-02-04T11:58:13Z",
+ "pushed_at": "2025-12-08T10:07:57Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1112189673,
"name": "CVE-2025-55182",
@@ -997,6 +6916,837 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1112217325,
+ "name": "react2shell-scanner-CVE-2025-55182",
+ "full_name": "Security-Phoenix-demo\/react2shell-scanner-CVE-2025-55182",
+ "owner": {
+ "login": "Security-Phoenix-demo",
+ "id": 79762943,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79762943?v=4",
+ "html_url": "https:\/\/github.com\/Security-Phoenix-demo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Security-Phoenix-demo\/react2shell-scanner-CVE-2025-55182",
+ "description": "React2shell-web-scanner",
+ "fork": false,
+ "created_at": "2025-12-08T10:12:16Z",
+ "updated_at": "2026-04-25T02:43:33Z",
+ "pushed_at": "2025-12-15T20:10:12Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112217750,
+ "name": "react2shell_analyzer",
+ "full_name": "Benrich127N\/react2shell_analyzer",
+ "owner": {
+ "login": "Benrich127N",
+ "id": 85730891,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85730891?v=4",
+ "html_url": "https:\/\/github.com\/Benrich127N",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Benrich127N\/react2shell_analyzer",
+ "description": "a dart package to analyze CVE-2025-55182 react2shell ",
+ "fork": false,
+ "created_at": "2025-12-08T10:13:03Z",
+ "updated_at": "2025-12-17T11:48:01Z",
+ "pushed_at": "2025-12-08T15:36:40Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112227260,
+ "name": "react-rce",
+ "full_name": "randarts\/react-rce",
+ "owner": {
+ "login": "randarts",
+ "id": 213288202,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213288202?v=4",
+ "html_url": "https:\/\/github.com\/randarts",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/randarts\/react-rce",
+ "description": "CVE-2025-55182 취약점에 대한 샘플을 AI와 함께 작성 및 테스트 했습니다.",
+ "fork": false,
+ "created_at": "2025-12-08T10:29:46Z",
+ "updated_at": "2025-12-08T12:14:15Z",
+ "pushed_at": "2025-12-08T12:14:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112232454,
+ "name": "react2shell-audit",
+ "full_name": "hamm0nz\/react2shell-audit",
+ "owner": {
+ "login": "hamm0nz",
+ "id": 16913167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16913167?v=4",
+ "html_url": "https:\/\/github.com\/hamm0nz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hamm0nz\/react2shell-audit",
+ "description": "A lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.",
+ "fork": false,
+ "created_at": "2025-12-08T10:38:57Z",
+ "updated_at": "2025-12-09T03:17:11Z",
+ "pushed_at": "2025-12-08T11:01:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112255751,
+ "name": "CVE-2025-55182",
+ "full_name": "0xSalm0n\/CVE-2025-55182",
+ "owner": {
+ "login": "0xSalm0n",
+ "id": 112184091,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112184091?v=4",
+ "html_url": "https:\/\/github.com\/0xSalm0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xSalm0n\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T11:20:33Z",
+ "updated_at": "2026-03-26T21:14:21Z",
+ "pushed_at": "2025-12-17T11:04:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112263562,
+ "name": "CVE-2025-55182-Lab",
+ "full_name": "Macaroniwdcheese\/CVE-2025-55182-Lab",
+ "owner": {
+ "login": "Macaroniwdcheese",
+ "id": 83376708,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83376708?v=4",
+ "html_url": "https:\/\/github.com\/Macaroniwdcheese",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Macaroniwdcheese\/CVE-2025-55182-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T11:34:50Z",
+ "updated_at": "2025-12-08T11:42:41Z",
+ "pushed_at": "2025-12-08T11:42:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112265889,
+ "name": "CVE-2025-55182",
+ "full_name": "LvMalware\/CVE-2025-55182",
+ "owner": {
+ "login": "LvMalware",
+ "id": 37661824,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37661824?v=4",
+ "html_url": "https:\/\/github.com\/LvMalware",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LvMalware\/CVE-2025-55182",
+ "description": "Exploit for CVE-2025-55182 (React4Shell)",
+ "fork": false,
+ "created_at": "2025-12-08T11:39:17Z",
+ "updated_at": "2025-12-08T11:40:25Z",
+ "pushed_at": "2025-12-08T11:40:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112270784,
+ "name": "CVE-2025-55182-POC",
+ "full_name": "HUAHUAI23\/CVE-2025-55182-POC",
+ "owner": {
+ "login": "HUAHUAI23",
+ "id": 43649186,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43649186?v=4",
+ "html_url": "https:\/\/github.com\/HUAHUAI23",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/HUAHUAI23\/CVE-2025-55182-POC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T11:48:19Z",
+ "updated_at": "2026-03-26T06:51:18Z",
+ "pushed_at": "2025-12-08T11:53:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112302625,
+ "name": "react2shell",
+ "full_name": "cahyod\/react2shell",
+ "owner": {
+ "login": "cahyod",
+ "id": 2032202,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2032202?v=4",
+ "html_url": "https:\/\/github.com\/cahyod",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cahyod\/react2shell",
+ "description": "Alat ini mendeteksi potensi kerentanan React2Shell (CVE-2025-55182) dalam proyek React dengan memeriksa: - File `package.json` dan file lock untuk paket rentan - Direktori `node_modules` untuk dependensi yang terpengaruh - URL secara pasif untuk deteksi jarak jauh",
+ "fork": false,
+ "created_at": "2025-12-08T12:42:19Z",
+ "updated_at": "2025-12-09T01:29:59Z",
+ "pushed_at": "2025-12-08T12:46:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112310183,
+ "name": "CVE-2025-55182-scanner",
+ "full_name": "yaupunal\/CVE-2025-55182-scanner",
+ "owner": {
+ "login": "yaupunal",
+ "id": 34207996,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34207996?v=4",
+ "html_url": "https:\/\/github.com\/yaupunal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yaupunal\/CVE-2025-55182-scanner",
+ "description": "CVE-2025-55182-scanner with 2 different method",
+ "fork": false,
+ "created_at": "2025-12-08T12:54:11Z",
+ "updated_at": "2025-12-08T13:15:26Z",
+ "pushed_at": "2025-12-08T13:06:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112312681,
+ "name": "cve-2025-55182-poc-test",
+ "full_name": "jandelima\/cve-2025-55182-poc-test",
+ "owner": {
+ "login": "jandelima",
+ "id": 73189240,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73189240?v=4",
+ "html_url": "https:\/\/github.com\/jandelima",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jandelima\/cve-2025-55182-poc-test",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T12:58:17Z",
+ "updated_at": "2025-12-16T20:25:03Z",
+ "pushed_at": "2025-12-16T20:24:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112329235,
+ "name": "CVE-2025-55182-zoomeye",
+ "full_name": "im-ezboy\/CVE-2025-55182-zoomeye",
+ "owner": {
+ "login": "im-ezboy",
+ "id": 89616330,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89616330?v=4",
+ "html_url": "https:\/\/github.com\/im-ezboy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/im-ezboy\/CVE-2025-55182-zoomeye",
+ "description": "🔍 Next.js RCE Scanner (CVE-2025-55182) - Automated vulnerability scanner using Zoomeye search engine. Discovers targets via dorks and tests for CVE-2025-55182 with parallel scanning capabilities.",
+ "fork": false,
+ "created_at": "2025-12-08T13:24:59Z",
+ "updated_at": "2026-04-06T02:53:14Z",
+ "pushed_at": "2025-12-08T13:32:23Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112372749,
+ "name": "React-Next-Scanner",
+ "full_name": "FurkanKAYAPINAR\/React-Next-Scanner",
+ "owner": {
+ "login": "FurkanKAYAPINAR",
+ "id": 5401590,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5401590?v=4",
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR\/React-Next-Scanner",
+ "description": "CVE-2025-55182 and CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-08T14:34:33Z",
+ "updated_at": "2025-12-31T18:32:13Z",
+ "pushed_at": "2025-12-08T14:51:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112390378,
+ "name": "CVE-2025-55182",
+ "full_name": "lowercasenumbers\/CVE-2025-55182",
+ "owner": {
+ "login": "lowercasenumbers",
+ "id": 95596630,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95596630?v=4",
+ "html_url": "https:\/\/github.com\/lowercasenumbers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lowercasenumbers\/CVE-2025-55182",
+ "description": " CVE-2025-55182 React2Shell PoC",
+ "fork": false,
+ "created_at": "2025-12-08T15:01:37Z",
+ "updated_at": "2025-12-09T00:06:11Z",
+ "pushed_at": "2025-12-09T00:06:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112395567,
+ "name": "React2Hell",
+ "full_name": "AggressiveUser\/React2Hell",
+ "owner": {
+ "login": "AggressiveUser",
+ "id": 53593839,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53593839?v=4",
+ "html_url": "https:\/\/github.com\/AggressiveUser",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AggressiveUser\/React2Hell",
+ "description": "[React2Hell] Next.js\/React Server RCE Exploit — CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-08T15:09:56Z",
+ "updated_at": "2025-12-16T18:45:09Z",
+ "pushed_at": "2025-12-08T15:23:24Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112405942,
+ "name": "cve-2025-55182-node",
+ "full_name": "racall\/cve-2025-55182-node",
+ "owner": {
+ "login": "racall",
+ "id": 12036286,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12036286?v=4",
+ "html_url": "https:\/\/github.com\/racall",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/racall\/cve-2025-55182-node",
+ "description": "CVE-2025-55182 Next.js RCE Exploit Tool",
+ "fork": false,
+ "created_at": "2025-12-08T15:25:42Z",
+ "updated_at": "2025-12-09T01:52:30Z",
+ "pushed_at": "2025-12-08T15:53:08Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112406626,
+ "name": "ReactNext2Shell",
+ "full_name": "FurkanKAYAPINAR\/ReactNext2Shell",
+ "owner": {
+ "login": "FurkanKAYAPINAR",
+ "id": 5401590,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5401590?v=4",
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/FurkanKAYAPINAR\/ReactNext2Shell",
+ "description": "CVE-2025-55182 and CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-08T15:26:43Z",
+ "updated_at": "2025-12-10T11:34:34Z",
+ "pushed_at": "2025-12-10T11:34:30Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112422942,
+ "name": "next-bug-CVE-2025-55182",
+ "full_name": "LQTjim\/next-bug-CVE-2025-55182",
+ "owner": {
+ "login": "LQTjim",
+ "id": 99523875,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99523875?v=4",
+ "html_url": "https:\/\/github.com\/LQTjim",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LQTjim\/next-bug-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T15:51:22Z",
+ "updated_at": "2025-12-08T16:10:59Z",
+ "pushed_at": "2025-12-08T16:10:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112423866,
+ "name": "react2shell_detector",
+ "full_name": "AliAbdollahiii\/react2shell_detector",
+ "owner": {
+ "login": "AliAbdollahiii",
+ "id": 63149242,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63149242?v=4",
+ "html_url": "https:\/\/github.com\/AliAbdollahiii",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AliAbdollahiii\/react2shell_detector",
+ "description": "Heuristic security scanner for detecting React Server Components (RSC) vulnerabilities, including React2Shell-style behavior (CVE-2025-55182). Safe, non-exploitative, multi-target capable.",
+ "fork": false,
+ "created_at": "2025-12-08T15:52:41Z",
+ "updated_at": "2025-12-08T15:58:08Z",
+ "pushed_at": "2025-12-08T15:58:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112515019,
+ "name": "CVE-2025-55182-Simple-Scanner-main",
+ "full_name": "jan0x190\/CVE-2025-55182-Simple-Scanner-main",
+ "owner": {
+ "login": "jan0x190",
+ "id": 111902722,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111902722?v=4",
+ "html_url": "https:\/\/github.com\/jan0x190",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jan0x190\/CVE-2025-55182-Simple-Scanner-main",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T18:22:53Z",
+ "updated_at": "2026-04-03T12:04:09Z",
+ "pushed_at": "2025-12-08T18:23:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112516492,
+ "name": "react2shell-detector",
+ "full_name": "xiaopeng-ye\/react2shell-detector",
+ "owner": {
+ "login": "xiaopeng-ye",
+ "id": 65860997,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65860997?v=4",
+ "html_url": "https:\/\/github.com\/xiaopeng-ye",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xiaopeng-ye\/react2shell-detector",
+ "description": "A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications",
+ "fork": false,
+ "created_at": "2025-12-08T18:25:26Z",
+ "updated_at": "2025-12-14T17:50:10Z",
+ "pushed_at": "2025-12-08T18:49:53Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "chrome-extension",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "poc",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112619711,
+ "name": "cve-2025-55182",
+ "full_name": "vulncheck-oss\/cve-2025-55182",
+ "owner": {
+ "login": "vulncheck-oss",
+ "id": 134310220,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134310220?v=4",
+ "html_url": "https:\/\/github.com\/vulncheck-oss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vulncheck-oss\/cve-2025-55182",
+ "description": "VulnCheck CVE-2025-55182 react2shell",
+ "fork": false,
+ "created_at": "2025-12-08T21:55:19Z",
+ "updated_at": "2026-02-26T19:58:21Z",
+ "pushed_at": "2025-12-08T22:43:05Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112620187,
+ "name": "react2shell-scanner",
+ "full_name": "Shield-Cyber\/react2shell-scanner",
+ "owner": {
+ "login": "Shield-Cyber",
+ "id": 137841613,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137841613?v=4",
+ "html_url": "https:\/\/github.com\/Shield-Cyber",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shield-Cyber\/react2shell-scanner",
+ "description": "Scanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.",
+ "fork": false,
+ "created_at": "2025-12-08T21:56:29Z",
+ "updated_at": "2026-01-28T04:54:50Z",
+ "pushed_at": "2025-12-08T22:02:10Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112719658,
+ "name": "test-cve-2025-55182",
+ "full_name": "foodmen2111\/test-cve-2025-55182",
+ "owner": {
+ "login": "foodmen2111",
+ "id": 177025186,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177025186?v=4",
+ "html_url": "https:\/\/github.com\/foodmen2111",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/foodmen2111\/test-cve-2025-55182",
+ "description": "Thực hiện để test CVE 2025 55182",
+ "fork": false,
+ "created_at": "2025-12-09T02:26:01Z",
+ "updated_at": "2025-12-09T02:26:02Z",
+ "pushed_at": "2025-12-09T02:26:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112752489,
+ "name": "CVE-2025-55182",
+ "full_name": "sun977\/CVE-2025-55182",
+ "owner": {
+ "login": "sun977",
+ "id": 56668149,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56668149?v=4",
+ "html_url": "https:\/\/github.com\/sun977",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sun977\/CVE-2025-55182",
+ "description": "CVE-2025-55182 检测方式和攻击利用",
+ "fork": false,
+ "created_at": "2025-12-09T03:48:16Z",
+ "updated_at": "2025-12-10T08:40:48Z",
+ "pushed_at": "2025-12-10T08:40:44Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1112754895,
"name": "PoC-react2shell-CVE-2025-55182",
@@ -1030,6 +7780,491 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1112766753,
+ "name": "react2shell-scanner-rust",
+ "full_name": "ancs21\/react2shell-scanner-rust",
+ "owner": {
+ "login": "ancs21",
+ "id": 9210835,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9210835?v=4",
+ "html_url": "https:\/\/github.com\/ancs21",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ancs21\/react2shell-scanner-rust",
+ "description": "Detect CVE-2025-55182 & CVE-2025-66478 in Next.js\/RSC applications (Rust)",
+ "fork": false,
+ "created_at": "2025-12-09T04:25:56Z",
+ "updated_at": "2025-12-09T05:23:29Z",
+ "pushed_at": "2025-12-09T04:31:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112782080,
+ "name": "http-react2shell",
+ "full_name": "MoisesTapia\/http-react2shell",
+ "owner": {
+ "login": "MoisesTapia",
+ "id": 28166400,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28166400?v=4",
+ "html_url": "https:\/\/github.com\/MoisesTapia",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MoisesTapia\/http-react2shell",
+ "description": "Detection of the React Server Actions Exploit vector – CVE-2025-55182 \/ CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-09T05:03:23Z",
+ "updated_at": "2025-12-09T18:46:56Z",
+ "pushed_at": "2025-12-09T06:00:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "devsecops",
+ "nmap",
+ "nmap-analyzer",
+ "nmap-scripts",
+ "react2shell",
+ "reactjs",
+ "scanner-web",
+ "security",
+ "security-tools"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112796859,
+ "name": "Suricata-Rule-for-Detecting-CVE-2025-55182",
+ "full_name": "solidevil14\/Suricata-Rule-for-Detecting-CVE-2025-55182",
+ "owner": {
+ "login": "solidevil14",
+ "id": 63005199,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63005199?v=4",
+ "html_url": "https:\/\/github.com\/solidevil14",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/solidevil14\/Suricata-Rule-for-Detecting-CVE-2025-55182",
+ "description": "CVE‑2025‑55182 Detection",
+ "fork": false,
+ "created_at": "2025-12-09T05:37:51Z",
+ "updated_at": "2026-02-25T07:38:52Z",
+ "pushed_at": "2025-12-09T05:41:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112829964,
+ "name": "cve-2025-55182-scanner",
+ "full_name": "techgaun\/cve-2025-55182-scanner",
+ "owner": {
+ "login": "techgaun",
+ "id": 1886670,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1886670?v=4",
+ "html_url": "https:\/\/github.com\/techgaun",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/techgaun\/cve-2025-55182-scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T06:46:31Z",
+ "updated_at": "2026-02-08T19:45:46Z",
+ "pushed_at": "2025-12-09T07:40:42Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112867275,
+ "name": "CVE-2025-55182-React2Shell",
+ "full_name": "rsch-io\/CVE-2025-55182-React2Shell",
+ "owner": {
+ "login": "rsch-io",
+ "id": 169486449,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169486449?v=4",
+ "html_url": "https:\/\/github.com\/rsch-io",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rsch-io\/CVE-2025-55182-React2Shell",
+ "description": "React2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web frameworks using React Server Components (RSC).",
+ "fork": false,
+ "created_at": "2025-12-09T07:55:31Z",
+ "updated_at": "2026-05-14T18:06:17Z",
+ "pushed_at": "2025-12-09T07:55:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "rce",
+ "react2shell",
+ "reactjs"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112914056,
+ "name": "PoC-RCE-CVE-2025-55182",
+ "full_name": "ilixm\/PoC-RCE-CVE-2025-55182",
+ "owner": {
+ "login": "ilixm",
+ "id": 181464411,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181464411?v=4",
+ "html_url": "https:\/\/github.com\/ilixm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ilixm\/PoC-RCE-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T09:17:43Z",
+ "updated_at": "2026-05-18T02:44:06Z",
+ "pushed_at": "2025-12-09T09:33:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112927206,
+ "name": "POC-CVE-2025-55182",
+ "full_name": "iamblacksolo2-BugBounty\/POC-CVE-2025-55182",
+ "owner": {
+ "login": "iamblacksolo2-BugBounty",
+ "id": 248648571,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248648571?v=4",
+ "html_url": "https:\/\/github.com\/iamblacksolo2-BugBounty",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iamblacksolo2-BugBounty\/POC-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T09:39:08Z",
+ "updated_at": "2025-12-09T09:40:42Z",
+ "pushed_at": "2025-12-09T09:40:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112936084,
+ "name": "react2shell-CVE-2025-55182-poc",
+ "full_name": "joelvaiju\/react2shell-CVE-2025-55182-poc",
+ "owner": {
+ "login": "joelvaiju",
+ "id": 50727630,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50727630?v=4",
+ "html_url": "https:\/\/github.com\/joelvaiju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/joelvaiju\/react2shell-CVE-2025-55182-poc",
+ "description": "a simple react2shell poc with basic waf bypass",
+ "fork": false,
+ "created_at": "2025-12-09T09:53:52Z",
+ "updated_at": "2026-05-28T06:20:21Z",
+ "pushed_at": "2025-12-09T10:18:28Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112964880,
+ "name": "POC-CVE-2025-55182",
+ "full_name": "DevVaibhav07\/POC-CVE-2025-55182",
+ "owner": {
+ "login": "DevVaibhav07",
+ "id": 94336202,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94336202?v=4",
+ "html_url": "https:\/\/github.com\/DevVaibhav07",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DevVaibhav07\/POC-CVE-2025-55182",
+ "description": "POC-CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-09T10:41:42Z",
+ "updated_at": "2025-12-09T10:44:51Z",
+ "pushed_at": "2025-12-09T10:44:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112969473,
+ "name": "cve-2025-55182",
+ "full_name": "liamromanis101\/cve-2025-55182",
+ "owner": {
+ "login": "liamromanis101",
+ "id": 67465405,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67465405?v=4",
+ "html_url": "https:\/\/github.com\/liamromanis101",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/liamromanis101\/cve-2025-55182",
+ "description": "Python3 script that can be used to demonstrate **CVE-2025-55182**. It exploits a server-side JavaScript injection vulnerability in Next.js\/React applications, allowing **remote code execution** via malformed multipart form data. ",
+ "fork": false,
+ "created_at": "2025-12-09T10:49:16Z",
+ "updated_at": "2026-02-15T17:53:59Z",
+ "pushed_at": "2025-12-09T17:07:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112980178,
+ "name": "React2Shell-CVE-2025-55182-Advanced-Scanner",
+ "full_name": "ysfcndgr\/React2Shell-CVE-2025-55182-Advanced-Scanner",
+ "owner": {
+ "login": "ysfcndgr",
+ "id": 32979760,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32979760?v=4",
+ "html_url": "https:\/\/github.com\/ysfcndgr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ysfcndgr\/React2Shell-CVE-2025-55182-Advanced-Scanner",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T11:07:02Z",
+ "updated_at": "2025-12-11T06:55:14Z",
+ "pushed_at": "2025-12-11T06:55:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112981603,
+ "name": "CVE-2025-55182-Exploiter",
+ "full_name": "alfazhossain\/CVE-2025-55182-Exploiter",
+ "owner": {
+ "login": "alfazhossain",
+ "id": 125147223,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125147223?v=4",
+ "html_url": "https:\/\/github.com\/alfazhossain",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/alfazhossain\/CVE-2025-55182-Exploiter",
+ "description": "CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve",
+ "fork": false,
+ "created_at": "2025-12-09T11:09:29Z",
+ "updated_at": "2026-04-24T17:47:53Z",
+ "pushed_at": "2025-12-09T12:13:19Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-55182-extension",
+ "nextjs",
+ "nextjscve"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1112981900,
+ "name": "cve-2025-55182",
+ "full_name": "keshavyaduvans\/cve-2025-55182",
+ "owner": {
+ "login": "keshavyaduvans",
+ "id": 148494727,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148494727?v=4",
+ "html_url": "https:\/\/github.com\/keshavyaduvans",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/keshavyaduvans\/cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T11:09:59Z",
+ "updated_at": "2025-12-09T11:24:19Z",
+ "pushed_at": "2025-12-09T11:17:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113000450,
+ "name": "CVE-2025-55182",
+ "full_name": "byte16384\/CVE-2025-55182",
+ "owner": {
+ "login": "byte16384",
+ "id": 236444891,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/236444891?v=4",
+ "html_url": "https:\/\/github.com\/byte16384",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byte16384\/CVE-2025-55182",
+ "description": "proof",
+ "fork": false,
+ "created_at": "2025-12-09T11:42:13Z",
+ "updated_at": "2025-12-12T11:52:33Z",
+ "pushed_at": "2025-12-12T11:52:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1113091128,
"name": "vulnerable-next-js-poc",
@@ -1063,6 +8298,636 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1113195855,
+ "name": "R2S_CVE-2025-55182",
+ "full_name": "eytannatye\/R2S_CVE-2025-55182",
+ "owner": {
+ "login": "eytannatye",
+ "id": 241380637,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/241380637?v=4",
+ "html_url": "https:\/\/github.com\/eytannatye",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/eytannatye\/R2S_CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T16:43:40Z",
+ "updated_at": "2025-12-09T16:49:39Z",
+ "pushed_at": "2025-12-09T16:49:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113208437,
+ "name": "CVE-2025-55182",
+ "full_name": "Jaycelation\/CVE-2025-55182",
+ "owner": {
+ "login": "Jaycelation",
+ "id": 128437438,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128437438?v=4",
+ "html_url": "https:\/\/github.com\/Jaycelation",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jaycelation\/CVE-2025-55182",
+ "description": "PoC, Hunting React2Shell about CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-09T17:03:25Z",
+ "updated_at": "2025-12-09T17:34:12Z",
+ "pushed_at": "2025-12-09T17:34:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113210770,
+ "name": "React2Shell",
+ "full_name": "shyambhanushali\/React2Shell",
+ "owner": {
+ "login": "shyambhanushali",
+ "id": 93955724,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93955724?v=4",
+ "html_url": "https:\/\/github.com\/shyambhanushali",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shyambhanushali\/React2Shell",
+ "description": "React2Shell is a Python-based proof-of-concept tool designed to exploit CVE-2025-55182 and CVE-2025-66478, both impacting Next.js applications using React Server Components (RSC).",
+ "fork": false,
+ "created_at": "2025-12-09T17:07:08Z",
+ "updated_at": "2026-05-23T20:45:44Z",
+ "pushed_at": "2025-12-09T18:53:53Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113218682,
+ "name": "react-cve-2025-55182",
+ "full_name": "amir-malek\/react-cve-2025-55182",
+ "owner": {
+ "login": "amir-malek",
+ "id": 72130316,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72130316?v=4",
+ "html_url": "https:\/\/github.com\/amir-malek",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amir-malek\/react-cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T17:19:30Z",
+ "updated_at": "2025-12-10T09:23:08Z",
+ "pushed_at": "2025-12-10T09:23:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113246427,
+ "name": "CVE-2025-55182",
+ "full_name": "Yyax13\/CVE-2025-55182",
+ "owner": {
+ "login": "Yyax13",
+ "id": 138953949,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138953949?v=4",
+ "html_url": "https:\/\/github.com\/Yyax13",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yyax13\/CVE-2025-55182",
+ "description": "RCE exploitation tool targeting CVE-2025-55182, a critical vulnerability in React Server Components (RSC) affecting React 19.0.0 - 19.2.0 and Next.js applications.",
+ "fork": false,
+ "created_at": "2025-12-09T18:04:59Z",
+ "updated_at": "2025-12-10T20:46:00Z",
+ "pushed_at": "2025-12-10T20:45:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113285492,
+ "name": "React2Shell",
+ "full_name": "Ankitspandey07\/React2Shell",
+ "owner": {
+ "login": "Ankitspandey07",
+ "id": 89829511,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89829511?v=4",
+ "html_url": "https:\/\/github.com\/Ankitspandey07",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ankitspandey07\/React2Shell",
+ "description": "CVE-2025-55182-advanced-scanner",
+ "fork": false,
+ "created_at": "2025-12-09T19:09:34Z",
+ "updated_at": "2025-12-13T15:01:10Z",
+ "pushed_at": "2025-12-13T15:01:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113306023,
+ "name": "react-cve-2025-55182",
+ "full_name": "Stonelinks\/react-cve-2025-55182",
+ "owner": {
+ "login": "Stonelinks",
+ "id": 556340,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/556340?v=4",
+ "html_url": "https:\/\/github.com\/Stonelinks",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Stonelinks\/react-cve-2025-55182",
+ "description": "malware I found on my server",
+ "fork": false,
+ "created_at": "2025-12-09T19:50:03Z",
+ "updated_at": "2025-12-09T22:08:55Z",
+ "pushed_at": "2025-12-09T22:08:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113309572,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "ihsansencan\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "ihsansencan",
+ "id": 16179275,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16179275?v=4",
+ "html_url": "https:\/\/github.com\/ihsansencan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ihsansencan\/React2Shell-CVE-2025-55182",
+ "description": "* React2Shell-CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-09T19:57:02Z",
+ "updated_at": "2026-01-12T23:09:27Z",
+ "pushed_at": "2025-12-09T19:58:27Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "cybersecurity",
+ "docker",
+ "hacking",
+ "nextjs",
+ "reach2shell",
+ "react",
+ "react2",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113390318,
+ "name": "react2shell",
+ "full_name": "dr4xp\/react2shell",
+ "owner": {
+ "login": "dr4xp",
+ "id": 231748105,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/231748105?v=4",
+ "html_url": "https:\/\/github.com\/dr4xp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dr4xp\/react2shell",
+ "description": "A critical vulnerability in React Server Components affecting React 19 (CVE-2025-55182) and frameworks that use it like Next.js (CVE-2025-66478). ",
+ "fork": false,
+ "created_at": "2025-12-09T23:06:31Z",
+ "updated_at": "2026-06-01T10:50:29Z",
+ "pushed_at": "2025-12-09T23:55:50Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ctf",
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "exploit",
+ "hack",
+ "kernel",
+ "nodejs",
+ "python",
+ "rce",
+ "react",
+ "react2shell",
+ "tryhackme",
+ "zeroday"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113398834,
+ "name": "cve-2025-55182-poc",
+ "full_name": "trax69\/cve-2025-55182-poc",
+ "owner": {
+ "login": "trax69",
+ "id": 25751007,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25751007?v=4",
+ "html_url": "https:\/\/github.com\/trax69",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/trax69\/cve-2025-55182-poc",
+ "description": "Proof of Concept for CVE-2025-55182 (\"React2Shell\"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure deserialization in React Server Components. Includes vulnerable targets for both Vanilla React (Express) and Next.js, along with a custom Python exploit script.",
+ "fork": false,
+ "created_at": "2025-12-09T23:30:48Z",
+ "updated_at": "2025-12-11T20:16:20Z",
+ "pushed_at": "2025-12-11T20:16:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113401629,
+ "name": "CVE-2025-55182-demo",
+ "full_name": "osman-butt\/CVE-2025-55182-demo",
+ "owner": {
+ "login": "osman-butt",
+ "id": 76908023,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76908023?v=4",
+ "html_url": "https:\/\/github.com\/osman-butt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/osman-butt\/CVE-2025-55182-demo",
+ "description": "Demo of CVE-2025-55182 — Next.js RCE (for educational purposes)",
+ "fork": false,
+ "created_at": "2025-12-09T23:39:23Z",
+ "updated_at": "2025-12-09T23:58:04Z",
+ "pushed_at": "2025-12-09T23:58:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113468066,
+ "name": "poc_react2shell",
+ "full_name": "notkittenn\/poc_react2shell",
+ "owner": {
+ "login": "notkittenn",
+ "id": 232047508,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232047508?v=4",
+ "html_url": "https:\/\/github.com\/notkittenn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/notkittenn\/poc_react2shell",
+ "description": "py script proof of concept new CVE-2025-55182 based in lachlan2k script",
+ "fork": false,
+ "created_at": "2025-12-10T02:47:53Z",
+ "updated_at": "2025-12-10T02:47:53Z",
+ "pushed_at": "2025-12-10T02:47:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113515043,
+ "name": "reactguard",
+ "full_name": "theori-io\/reactguard",
+ "owner": {
+ "login": "theori-io",
+ "id": 18063559,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18063559?v=4",
+ "html_url": "https:\/\/github.com\/theori-io",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/theori-io\/reactguard",
+ "description": "ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)",
+ "fork": false,
+ "created_at": "2025-12-10T04:49:38Z",
+ "updated_at": "2026-05-01T20:12:18Z",
+ "pushed_at": "2025-12-22T02:18:26Z",
+ "stargazers_count": 17,
+ "watchers_count": 17,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-55183",
+ "cve-2025-55184",
+ "cve-2025-67779",
+ "nextjs",
+ "react",
+ "react2shell",
+ "reactguard",
+ "waku"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 17,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113538088,
+ "name": "POC2-CVE-2025-55182",
+ "full_name": "iamblacksolo2-BugBounty\/POC2-CVE-2025-55182",
+ "owner": {
+ "login": "iamblacksolo2-BugBounty",
+ "id": 248648571,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248648571?v=4",
+ "html_url": "https:\/\/github.com\/iamblacksolo2-BugBounty",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iamblacksolo2-BugBounty\/POC2-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T05:43:04Z",
+ "updated_at": "2025-12-10T05:44:26Z",
+ "pushed_at": "2025-12-10T05:44:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113621703,
+ "name": "CVE-2025-55182",
+ "full_name": "bakhod1r\/CVE-2025-55182",
+ "owner": {
+ "login": "bakhod1r",
+ "id": 74229109,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74229109?v=4",
+ "html_url": "https:\/\/github.com\/bakhod1r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bakhod1r\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T08:27:47Z",
+ "updated_at": "2025-12-12T11:41:56Z",
+ "pushed_at": "2025-12-12T11:41:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113626222,
+ "name": "CVE-2025-55182_PoC-Test-Server",
+ "full_name": "theman001\/CVE-2025-55182_PoC-Test-Server",
+ "owner": {
+ "login": "theman001",
+ "id": 100943215,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100943215?v=4",
+ "html_url": "https:\/\/github.com\/theman001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/theman001\/CVE-2025-55182_PoC-Test-Server",
+ "description": "CVE-2025-55182 React RCE Test Server",
+ "fork": false,
+ "created_at": "2025-12-10T08:36:15Z",
+ "updated_at": "2025-12-24T07:51:20Z",
+ "pushed_at": "2025-12-10T09:24:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113628066,
+ "name": "CVE-2025-55182-PoC-exploit",
+ "full_name": "gunyakit\/CVE-2025-55182-PoC-exploit",
+ "owner": {
+ "login": "gunyakit",
+ "id": 90493325,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90493325?v=4",
+ "html_url": "https:\/\/github.com\/gunyakit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gunyakit\/CVE-2025-55182-PoC-exploit",
+ "description": "Next.js RCE via React Server Functions",
+ "fork": false,
+ "created_at": "2025-12-10T08:39:54Z",
+ "updated_at": "2025-12-10T08:43:33Z",
+ "pushed_at": "2025-12-10T08:43:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113710843,
+ "name": "CVE-2025-55182",
+ "full_name": "Sotatek-KhaiNguyen3\/CVE-2025-55182",
+ "owner": {
+ "login": "Sotatek-KhaiNguyen3",
+ "id": 237670929,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/237670929?v=4",
+ "html_url": "https:\/\/github.com\/Sotatek-KhaiNguyen3",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Sotatek-KhaiNguyen3\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T11:02:31Z",
+ "updated_at": "2025-12-10T11:05:31Z",
+ "pushed_at": "2025-12-10T11:05:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1113734628,
"name": "CVE-2025-55182",
@@ -1096,6 +8961,171 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1113738692,
+ "name": "cve-2025-55182-checker",
+ "full_name": "gonaumov\/cve-2025-55182-checker",
+ "owner": {
+ "login": "gonaumov",
+ "id": 4079371,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4079371?v=4",
+ "html_url": "https:\/\/github.com\/gonaumov",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gonaumov\/cve-2025-55182-checker",
+ "description": "A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by [CVE-2025-55182]",
+ "fork": false,
+ "created_at": "2025-12-10T11:53:05Z",
+ "updated_at": "2025-12-11T07:07:25Z",
+ "pushed_at": "2025-12-11T07:07:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113758984,
+ "name": "CVE-2025-55182-GodzillaMemoryShell",
+ "full_name": "BeichenDream\/CVE-2025-55182-GodzillaMemoryShell",
+ "owner": {
+ "login": "BeichenDream",
+ "id": 43266206,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43266206?v=4",
+ "html_url": "https:\/\/github.com\/BeichenDream",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BeichenDream\/CVE-2025-55182-GodzillaMemoryShell",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T12:28:22Z",
+ "updated_at": "2026-03-20T07:27:48Z",
+ "pushed_at": "2025-12-10T12:37:55Z",
+ "stargazers_count": 109,
+ "watchers_count": 109,
+ "has_discussions": false,
+ "forks_count": 10,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 10,
+ "watchers": 109,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113812574,
+ "name": "CVE-2025-55182-exploit",
+ "full_name": "Legus-Yeung\/CVE-2025-55182-exploit",
+ "owner": {
+ "login": "Legus-Yeung",
+ "id": 58530701,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58530701?v=4",
+ "html_url": "https:\/\/github.com\/Legus-Yeung",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Legus-Yeung\/CVE-2025-55182-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T13:53:50Z",
+ "updated_at": "2025-12-10T14:21:31Z",
+ "pushed_at": "2025-12-10T14:21:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113818054,
+ "name": "-CVE-2025-55182",
+ "full_name": "DanielXavierJob\/-CVE-2025-55182",
+ "owner": {
+ "login": "DanielXavierJob",
+ "id": 100311104,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100311104?v=4",
+ "html_url": "https:\/\/github.com\/DanielXavierJob",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DanielXavierJob\/-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T14:02:26Z",
+ "updated_at": "2025-12-10T14:22:45Z",
+ "pushed_at": "2025-12-10T14:22:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113855041,
+ "name": "nextjs-cve-version-confusion",
+ "full_name": "sponte\/nextjs-cve-version-confusion",
+ "owner": {
+ "login": "sponte",
+ "id": 47468,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47468?v=4",
+ "html_url": "https:\/\/github.com\/sponte",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sponte\/nextjs-cve-version-confusion",
+ "description": "Reproduction for Next.js CVE-2025-55182 version string confusion issue",
+ "fork": false,
+ "created_at": "2025-12-10T14:59:11Z",
+ "updated_at": "2025-12-10T14:59:18Z",
+ "pushed_at": "2025-12-10T14:59:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1113860182,
"name": "Golang-CVE-2025-55182-POC",
@@ -1129,6 +9159,209 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1113896011,
+ "name": "NSE_CVE-2025-55182",
+ "full_name": "JahazielLem\/NSE_CVE-2025-55182",
+ "owner": {
+ "login": "JahazielLem",
+ "id": 13388115,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13388115?v=4",
+ "html_url": "https:\/\/github.com\/JahazielLem",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/JahazielLem\/NSE_CVE-2025-55182",
+ "description": "Nmap NSE script for scanning React2Shell (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-10T16:02:49Z",
+ "updated_at": "2025-12-11T11:34:03Z",
+ "pushed_at": "2025-12-10T16:23:39Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113972670,
+ "name": "Cerberus-React2Shell-Scanner-Exploit",
+ "full_name": "CerberusMrX\/Cerberus-React2Shell-Scanner-Exploit",
+ "owner": {
+ "login": "CerberusMrX",
+ "id": 90186307,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90186307?v=4",
+ "html_url": "https:\/\/github.com\/CerberusMrX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CerberusMrX\/Cerberus-React2Shell-Scanner-Exploit",
+ "description": "Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF\/CDN bypass, proxy rotation, Shodan\/Censys mass scan, auto-pwn + reverse shells, Nuclei templates, K8s lab & C2 dashboard. Authored by Sudeepa Wanigarathna – strictly for authorized red team and penetration testing.",
+ "fork": false,
+ "created_at": "2025-12-10T18:09:08Z",
+ "updated_at": "2025-12-21T21:15:33Z",
+ "pushed_at": "2025-12-20T08:07:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113991214,
+ "name": "react2shellNSE",
+ "full_name": "Saad-Ayady\/react2shellNSE",
+ "owner": {
+ "login": "Saad-Ayady",
+ "id": 167708300,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167708300?v=4",
+ "html_url": "https:\/\/github.com\/Saad-Ayady",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Saad-Ayady\/react2shellNSE",
+ "description": "nmap script to scan react2shell (CVE-2025-55182 and CVE-2025-66478) Vulnerability",
+ "fork": false,
+ "created_at": "2025-12-10T18:38:12Z",
+ "updated_at": "2026-01-04T02:03:02Z",
+ "pushed_at": "2025-12-10T19:11:32Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113996223,
+ "name": "RscScan-cve-2025-55182",
+ "full_name": "VeilVulp\/RscScan-cve-2025-55182",
+ "owner": {
+ "login": "VeilVulp",
+ "id": 234256309,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234256309?v=4",
+ "html_url": "https:\/\/github.com\/VeilVulp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/VeilVulp\/RscScan-cve-2025-55182",
+ "description": "RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with multi-threaded scanning, real-time analytics, and multi-language support. Built with Electron & React.",
+ "fork": false,
+ "created_at": "2025-12-10T18:47:32Z",
+ "updated_at": "2025-12-12T10:20:17Z",
+ "pushed_at": "2025-12-10T18:50:58Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114014167,
+ "name": "React2Shell-CTF",
+ "full_name": "yz9yt\/React2Shell-CTF",
+ "owner": {
+ "login": "yz9yt",
+ "id": 225885881,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225885881?v=4",
+ "html_url": "https:\/\/github.com\/yz9yt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yz9yt\/React2Shell-CTF",
+ "description": "A CTF challenge based on CVE-2025-55182 Vulnerability",
+ "fork": false,
+ "created_at": "2025-12-10T19:21:53Z",
+ "updated_at": "2026-05-31T11:13:11Z",
+ "pushed_at": "2025-12-12T08:03:25Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ctf-challenges",
+ "cve-2025-55182",
+ "cve-2025-55182-ctf",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114034783,
+ "name": "CVE-2025-55182",
+ "full_name": "Gymnott1\/CVE-2025-55182",
+ "owner": {
+ "login": "Gymnott1",
+ "id": 114360713,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114360713?v=4",
+ "html_url": "https:\/\/github.com\/Gymnott1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Gymnott1\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T20:04:28Z",
+ "updated_at": "2025-12-19T13:23:56Z",
+ "pushed_at": "2025-12-10T20:06:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1114044589,
"name": "CVE-2025-55182",
@@ -1162,6 +9395,335 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1114045945,
+ "name": "CVE-2025-55182-NextJS-RCE-PoC",
+ "full_name": "pkrasulia\/CVE-2025-55182-NextJS-RCE-PoC",
+ "owner": {
+ "login": "pkrasulia",
+ "id": 56913843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56913843?v=4",
+ "html_url": "https:\/\/github.com\/pkrasulia",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pkrasulia\/CVE-2025-55182-NextJS-RCE-PoC",
+ "description": "Working Proof of Concept (PoC) for CVE-2025-55182 (React2Shell) - Unauthenticated Remote Code Execution in Next.js 15.0.0 via React Server Components",
+ "fork": false,
+ "created_at": "2025-12-10T20:28:42Z",
+ "updated_at": "2026-05-24T18:15:33Z",
+ "pushed_at": "2025-12-10T23:16:09Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114149370,
+ "name": "CVE-2025-55182",
+ "full_name": "min8282\/CVE-2025-55182",
+ "owner": {
+ "login": "min8282",
+ "id": 137873062,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137873062?v=4",
+ "html_url": "https:\/\/github.com\/min8282",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/min8282\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T01:08:50Z",
+ "updated_at": "2025-12-11T01:59:05Z",
+ "pushed_at": "2025-12-11T01:59:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114223611,
+ "name": "PunchingBag-for-React2Shell",
+ "full_name": "Machine-farmer\/PunchingBag-for-React2Shell",
+ "owner": {
+ "login": "Machine-farmer",
+ "id": 137618928,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137618928?v=4",
+ "html_url": "https:\/\/github.com\/Machine-farmer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Machine-farmer\/PunchingBag-for-React2Shell",
+ "description": "Intentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challenges",
+ "fork": false,
+ "created_at": "2025-12-11T04:30:33Z",
+ "updated_at": "2026-01-18T15:24:46Z",
+ "pushed_at": "2025-12-22T05:08:24Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114224952,
+ "name": "CVE-2025-55182-NextJS-Scanner-React2Shell-PoC",
+ "full_name": "exrienz\/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC",
+ "owner": {
+ "login": "exrienz",
+ "id": 14239668,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14239668?v=4",
+ "html_url": "https:\/\/github.com\/exrienz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/exrienz\/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T04:33:24Z",
+ "updated_at": "2025-12-11T04:36:50Z",
+ "pushed_at": "2025-12-11T04:36:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114240295,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "mrmtwoj\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "mrmtwoj",
+ "id": 22832463,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4",
+ "html_url": "https:\/\/github.com\/mrmtwoj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrmtwoj\/React2Shell-CVE-2025-55182",
+ "description": "Educational \/ research tool related to React \/ Next.js vulnerability CVE‑2025‑55182 (“React2Shell”).",
+ "fork": false,
+ "created_at": "2025-12-11T05:08:40Z",
+ "updated_at": "2026-05-26T18:10:56Z",
+ "pushed_at": "2025-12-11T05:21:48Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "deserialization",
+ "nextjs",
+ "rce",
+ "react",
+ "research",
+ "rsc",
+ "security",
+ "vulnerability",
+ "web-security"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114293013,
+ "name": "CVE-2025-55182-EXP",
+ "full_name": "LC-pro\/CVE-2025-55182-EXP",
+ "owner": {
+ "login": "LC-pro",
+ "id": 51855001,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51855001?v=4",
+ "html_url": "https:\/\/github.com\/LC-pro",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LC-pro\/CVE-2025-55182-EXP",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T07:01:15Z",
+ "updated_at": "2026-05-27T09:56:42Z",
+ "pushed_at": "2025-12-11T07:09:21Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114348950,
+ "name": "exploit-react-CVE-2025-55182",
+ "full_name": "Tiger-Foxx\/exploit-react-CVE-2025-55182",
+ "owner": {
+ "login": "Tiger-Foxx",
+ "id": 118616410,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118616410?v=4",
+ "html_url": "https:\/\/github.com\/Tiger-Foxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Tiger-Foxx\/exploit-react-CVE-2025-55182",
+ "description": "This tool is a Proof of Concept (PoC) intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author (Tiger-Foxx) assumes no responsibility for misuse.",
+ "fork": false,
+ "created_at": "2025-12-11T08:46:27Z",
+ "updated_at": "2026-05-07T18:24:47Z",
+ "pushed_at": "2025-12-11T09:12:56Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "poc",
+ "react-server-component",
+ "react2shell",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114565321,
+ "name": "react2shell-scan",
+ "full_name": "trilogy-group\/react2shell-scan",
+ "owner": {
+ "login": "trilogy-group",
+ "id": 22237814,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22237814?v=4",
+ "html_url": "https:\/\/github.com\/trilogy-group",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/trilogy-group\/react2shell-scan",
+ "description": "React2Shell (CVE-2025-55182) scanner",
+ "fork": false,
+ "created_at": "2025-12-11T14:57:52Z",
+ "updated_at": "2025-12-11T14:57:52Z",
+ "pushed_at": "2025-12-11T14:57:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114618462,
+ "name": "react2shellexploitvisualized",
+ "full_name": "VolksRat71\/react2shellexploitvisualized",
+ "owner": {
+ "login": "VolksRat71",
+ "id": 47840525,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47840525?v=4",
+ "html_url": "https:\/\/github.com\/VolksRat71",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/VolksRat71\/react2shellexploitvisualized",
+ "description": "Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner, and Stakeholder. Audio synced via ElevenLabs + Whisper.",
+ "fork": false,
+ "created_at": "2025-12-11T16:23:49Z",
+ "updated_at": "2026-05-30T12:18:02Z",
+ "pushed_at": "2025-12-14T00:18:02Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "educational",
+ "elevenlabs",
+ "flight-protocol",
+ "rce",
+ "react",
+ "security",
+ "server-components",
+ "svelte",
+ "visulization",
+ "vunerability",
+ "whisper"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1114622976,
"name": "CVE-2025-55182-Exploit-extension",
@@ -1195,6 +9757,303 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1114715610,
+ "name": "react2shell",
+ "full_name": "andrei2308\/react2shell",
+ "owner": {
+ "login": "andrei2308",
+ "id": 122682508,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122682508?v=4",
+ "html_url": "https:\/\/github.com\/andrei2308",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/andrei2308\/react2shell",
+ "description": "CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-11T19:26:14Z",
+ "updated_at": "2025-12-12T12:41:22Z",
+ "pushed_at": "2025-12-12T12:41:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114732179,
+ "name": "POC_react2shell_CVE-2025-55182",
+ "full_name": "Nkwenti-Severian-Ndongtsop\/POC_react2shell_CVE-2025-55182",
+ "owner": {
+ "login": "Nkwenti-Severian-Ndongtsop",
+ "id": 180976800,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180976800?v=4",
+ "html_url": "https:\/\/github.com\/Nkwenti-Severian-Ndongtsop",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nkwenti-Severian-Ndongtsop\/POC_react2shell_CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T20:01:26Z",
+ "updated_at": "2026-03-13T22:09:49Z",
+ "pushed_at": "2025-12-18T11:25:20Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114752086,
+ "name": "krle",
+ "full_name": "aseemyash\/krle",
+ "owner": {
+ "login": "aseemyash",
+ "id": 91648278,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91648278?v=4",
+ "html_url": "https:\/\/github.com\/aseemyash",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aseemyash\/krle",
+ "description": "CVE-2025-55182 & CVE-2025-66478 proof of concepts",
+ "fork": false,
+ "created_at": "2025-12-11T20:46:09Z",
+ "updated_at": "2025-12-11T20:46:09Z",
+ "pushed_at": "2025-12-06T21:04:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114783102,
+ "name": "React2Shell",
+ "full_name": "4nuxd\/React2Shell",
+ "owner": {
+ "login": "4nuxd",
+ "id": 180190091,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180190091?v=4",
+ "html_url": "https:\/\/github.com\/4nuxd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/4nuxd\/React2Shell",
+ "description": "R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It provides an interactive shell with advanced features for penetration testing, including file transfer, persistence, enumeration, privilege escalation checks, and more.",
+ "fork": false,
+ "created_at": "2025-12-11T22:01:37Z",
+ "updated_at": "2025-12-11T22:03:12Z",
+ "pushed_at": "2025-12-11T22:03:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114784521,
+ "name": "react2shell-burp",
+ "full_name": "j0lt-github\/react2shell-burp",
+ "owner": {
+ "login": "j0lt-github",
+ "id": 34833539,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34833539?v=4",
+ "html_url": "https:\/\/github.com\/j0lt-github",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/j0lt-github\/react2shell-burp",
+ "description": "Burp Suite extension for identifying the React Server Components unsafe deserialization vulnerability (React2Shell \/ CVE-2025-55182). It provides a focused UI tab, context-menu actions, active-scanner integration, and optional Burp Collaborator confirmation.",
+ "fork": false,
+ "created_at": "2025-12-11T22:05:27Z",
+ "updated_at": "2025-12-31T03:36:38Z",
+ "pushed_at": "2025-12-31T03:36:34Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114865333,
+ "name": "CVE-2025-55182-MassPayloadAttack",
+ "full_name": "IrsyadSEC\/CVE-2025-55182-MassPayloadAttack",
+ "owner": {
+ "login": "IrsyadSEC",
+ "id": 52644018,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52644018?v=4",
+ "html_url": "https:\/\/github.com\/IrsyadSEC",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/IrsyadSEC\/CVE-2025-55182-MassPayloadAttack",
+ "description": "CVE-2025-55182 payload",
+ "fork": false,
+ "created_at": "2025-12-12T02:13:20Z",
+ "updated_at": "2025-12-12T13:31:07Z",
+ "pushed_at": "2025-12-12T10:55:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114899677,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "Shadowroot97\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "Shadowroot97",
+ "id": 110871226,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110871226?v=4",
+ "html_url": "https:\/\/github.com\/Shadowroot97",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shadowroot97\/React2Shell-CVE-2025-55182",
+ "description": "POC React2Shell-CVE-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-12T03:47:44Z",
+ "updated_at": "2025-12-12T03:48:22Z",
+ "pushed_at": "2025-12-12T03:48:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114916631,
+ "name": "CVE-2025-55182",
+ "full_name": "yuta3003\/CVE-2025-55182",
+ "owner": {
+ "login": "yuta3003",
+ "id": 44400624,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44400624?v=4",
+ "html_url": "https:\/\/github.com\/yuta3003",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yuta3003\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T04:33:03Z",
+ "updated_at": "2025-12-12T04:33:47Z",
+ "pushed_at": "2025-12-12T04:33:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114940905,
+ "name": "React2Shell-CVE-2025-55182",
+ "full_name": "rahul-securify\/React2Shell-CVE-2025-55182",
+ "owner": {
+ "login": "rahul-securify",
+ "id": 201204058,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/201204058?v=4",
+ "html_url": "https:\/\/github.com\/rahul-securify",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rahul-securify\/React2Shell-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T05:35:38Z",
+ "updated_at": "2025-12-12T08:17:02Z",
+ "pushed_at": "2025-12-12T06:01:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1115060201,
"name": "WEB-CLI_RCE_React2Shell",
@@ -1235,6 +10094,146 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1115104567,
+ "name": "CVE-2025-55182",
+ "full_name": "oguri-souhei\/CVE-2025-55182",
+ "owner": {
+ "login": "oguri-souhei",
+ "id": 89327121,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89327121?v=4",
+ "html_url": "https:\/\/github.com\/oguri-souhei",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/oguri-souhei\/CVE-2025-55182",
+ "description": "CVE-2025-55182 の検証用",
+ "fork": false,
+ "created_at": "2025-12-12T10:49:09Z",
+ "updated_at": "2025-12-12T10:50:42Z",
+ "pushed_at": "2025-12-12T10:50:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115126720,
+ "name": "React2Shell",
+ "full_name": "xalgord\/React2Shell",
+ "owner": {
+ "login": "xalgord",
+ "id": 48483027,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48483027?v=4",
+ "html_url": "https:\/\/github.com\/xalgord",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xalgord\/React2Shell",
+ "description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-12T11:31:45Z",
+ "updated_at": "2026-05-30T09:28:24Z",
+ "pushed_at": "2025-12-12T11:52:59Z",
+ "stargazers_count": 41,
+ "watchers_count": 41,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "exploit",
+ "nextjs",
+ "penetration-testing",
+ "python",
+ "rce",
+ "security-tools"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 41,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115188034,
+ "name": "PoC_CVE-2025-55182",
+ "full_name": "ryanhafid\/PoC_CVE-2025-55182",
+ "owner": {
+ "login": "ryanhafid",
+ "id": 65152655,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65152655?v=4",
+ "html_url": "https:\/\/github.com\/ryanhafid",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ryanhafid\/PoC_CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T13:22:54Z",
+ "updated_at": "2025-12-12T13:23:44Z",
+ "pushed_at": "2025-12-12T13:23:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115189252,
+ "name": "Scan_CVE-2025-55182",
+ "full_name": "ryanhafid\/Scan_CVE-2025-55182",
+ "owner": {
+ "login": "ryanhafid",
+ "id": 65152655,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65152655?v=4",
+ "html_url": "https:\/\/github.com\/ryanhafid",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ryanhafid\/Scan_CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T13:24:51Z",
+ "updated_at": "2025-12-12T13:26:49Z",
+ "pushed_at": "2025-12-12T13:26:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1115279424,
"name": "tot-react-rce-CVE-2025-55182",
@@ -1272,6 +10271,192 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1115360197,
+ "name": "React2Shell",
+ "full_name": "sho-luv\/React2Shell",
+ "owner": {
+ "login": "sho-luv",
+ "id": 1679089,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1679089?v=4",
+ "html_url": "https:\/\/github.com\/sho-luv",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sho-luv\/React2Shell",
+ "description": "CVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.",
+ "fork": false,
+ "created_at": "2025-12-12T18:33:29Z",
+ "updated_at": "2026-01-22T11:35:58Z",
+ "pushed_at": "2025-12-13T06:07:25Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115537059,
+ "name": "next88",
+ "full_name": "h0tak88r\/next88",
+ "owner": {
+ "login": "h0tak88r",
+ "id": 108616378,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108616378?v=4",
+ "html_url": "https:\/\/github.com\/h0tak88r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/h0tak88r\/next88",
+ "description": "High-performance Go implementation for detecting React Server Components RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).",
+ "fork": false,
+ "created_at": "2025-12-13T03:42:45Z",
+ "updated_at": "2025-12-13T15:29:10Z",
+ "pushed_at": "2025-12-13T15:29:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "automation",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "rce",
+ "security"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115538664,
+ "name": "ReactOOPS-WriteUp",
+ "full_name": "TheStingR\/ReactOOPS-WriteUp",
+ "owner": {
+ "login": "TheStingR",
+ "id": 163915232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163915232?v=4",
+ "html_url": "https:\/\/github.com\/TheStingR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TheStingR\/ReactOOPS-WriteUp",
+ "description": "Hack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182\/CVE-2025-66478 (React2Shell RCE). Includes detailed vulnerability analysis, exploitation techniques, and team learning materials.",
+ "fork": false,
+ "created_at": "2025-12-13T03:48:28Z",
+ "updated_at": "2026-05-30T11:28:03Z",
+ "pushed_at": "2025-12-13T18:20:12Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ctf",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "exploit",
+ "hack-the-box",
+ "nextjs",
+ "rce",
+ "react",
+ "security",
+ "writeup"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115607868,
+ "name": "react2shell",
+ "full_name": "mantvmass\/react2shell",
+ "owner": {
+ "login": "mantvmass",
+ "id": 32133224,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32133224?v=4",
+ "html_url": "https:\/\/github.com\/mantvmass",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mantvmass\/react2shell",
+ "description": "A CLI tool that exploits vulnerabilities in React Server Components and Server Actions (CVE-2025-55182, CVE-2025-66478) to achieve remote code execution (RCE) on vulnerable servers.",
+ "fork": false,
+ "created_at": "2025-12-13T07:21:28Z",
+ "updated_at": "2026-05-20T20:38:32Z",
+ "pushed_at": "2025-12-17T14:24:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115641982,
+ "name": "React2Shell-Toolbox",
+ "full_name": "MoLeft\/React2Shell-Toolbox",
+ "owner": {
+ "login": "MoLeft",
+ "id": 41848811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41848811?v=4",
+ "html_url": "https:\/\/github.com\/MoLeft",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MoLeft\/React2Shell-Toolbox",
+ "description": "A CVE-2025-55182(React2Shell) Toolbox Application",
+ "fork": false,
+ "created_at": "2025-12-13T08:54:42Z",
+ "updated_at": "2026-03-10T14:14:34Z",
+ "pushed_at": "2025-12-22T03:26:50Z",
+ "stargazers_count": 35,
+ "watchers_count": 35,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 35,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1115665956,
"name": "CVE-2025-55182",
@@ -1305,6 +10490,451 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1115677326,
+ "name": "React2Shell-Analysis",
+ "full_name": "Kugelbyte\/React2Shell-Analysis",
+ "owner": {
+ "login": "Kugelbyte",
+ "id": 78225057,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78225057?v=4",
+ "html_url": "https:\/\/github.com\/Kugelbyte",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kugelbyte\/React2Shell-Analysis",
+ "description": "A research report on CVE-2025-55182 (React2Shell). ",
+ "fork": false,
+ "created_at": "2025-12-13T10:26:26Z",
+ "updated_at": "2025-12-13T11:30:32Z",
+ "pushed_at": "2025-12-13T11:30:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115776167,
+ "name": "CVE-2025-55182-Lab",
+ "full_name": "dhananjayakumarn\/CVE-2025-55182-Lab",
+ "owner": {
+ "login": "dhananjayakumarn",
+ "id": 74400182,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74400182?v=4",
+ "html_url": "https:\/\/github.com\/dhananjayakumarn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dhananjayakumarn\/CVE-2025-55182-Lab",
+ "description": "A hands-on lab for understanding and exploiting CVE-2025-55182 (React2Shell) - Remote Code Execution in React Server Components",
+ "fork": false,
+ "created_at": "2025-12-13T14:30:00Z",
+ "updated_at": "2025-12-13T14:37:48Z",
+ "pushed_at": "2025-12-13T14:37:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115799760,
+ "name": "CVE-2025-55182-exploit",
+ "full_name": "ZorvithonLeo-Null\/CVE-2025-55182-exploit",
+ "owner": {
+ "login": "ZorvithonLeo-Null",
+ "id": 249300808,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249300808?v=4",
+ "html_url": "https:\/\/github.com\/ZorvithonLeo-Null",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ZorvithonLeo-Null\/CVE-2025-55182-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-13T15:23:41Z",
+ "updated_at": "2025-12-13T15:23:41Z",
+ "pushed_at": "2025-12-13T15:23:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115826092,
+ "name": "React-Security-CVE-2025-55182-Exploit",
+ "full_name": "sangleshubham\/React-Security-CVE-2025-55182-Exploit",
+ "owner": {
+ "login": "sangleshubham",
+ "id": 37057102,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37057102?v=4",
+ "html_url": "https:\/\/github.com\/sangleshubham",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sangleshubham\/React-Security-CVE-2025-55182-Exploit",
+ "description": "NodeJS-based exploit script and scanner for the React Server Components \"React2Shell\" vulnerability (CVE-2025-55182).",
+ "fork": false,
+ "created_at": "2025-12-13T16:24:23Z",
+ "updated_at": "2026-02-21T07:40:32Z",
+ "pushed_at": "2025-12-13T19:13:28Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115839779,
+ "name": "CVE-2025-55182-Scanner",
+ "full_name": "TrixSec\/CVE-2025-55182-Scanner",
+ "owner": {
+ "login": "TrixSec",
+ "id": 157342883,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157342883?v=4",
+ "html_url": "https:\/\/github.com\/TrixSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TrixSec\/CVE-2025-55182-Scanner",
+ "description": "A hybrid security scanner for detecting CVE-2025-55182 in Next.js and Waku applications. Features combined static code analysis and safe dynamic verification for DevSecOps workflows.",
+ "fork": false,
+ "created_at": "2025-12-13T16:56:23Z",
+ "updated_at": "2026-04-23T09:05:56Z",
+ "pushed_at": "2025-12-13T16:58:45Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "appsec",
+ "cve-2025-55182",
+ "cybersecurity",
+ "devsecops",
+ "nextjs",
+ "python",
+ "react-server-components",
+ "security-tools",
+ "vulnerability-scanner",
+ "waku"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115877231,
+ "name": "CHECK-CVE-2025-55182-AND-CVE-2025-66478",
+ "full_name": "mounta11n\/CHECK-CVE-2025-55182-AND-CVE-2025-66478",
+ "owner": {
+ "login": "mounta11n",
+ "id": 123123600,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123123600?v=4",
+ "html_url": "https:\/\/github.com\/mounta11n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mounta11n\/CHECK-CVE-2025-55182-AND-CVE-2025-66478",
+ "description": "Check if your server is affected by CVE-2025-55182 & CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-13T18:28:21Z",
+ "updated_at": "2025-12-13T23:41:25Z",
+ "pushed_at": "2025-12-13T21:42:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115917419,
+ "name": "CVE-2025-55182",
+ "full_name": "grejh0t\/CVE-2025-55182",
+ "owner": {
+ "login": "grejh0t",
+ "id": 1172969,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1172969?v=4",
+ "html_url": "https:\/\/github.com\/grejh0t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/grejh0t\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-13T20:21:50Z",
+ "updated_at": "2025-12-15T12:29:39Z",
+ "pushed_at": "2025-12-14T08:41:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115946456,
+ "name": "react2shell-vulnlab",
+ "full_name": "hidden-investigations\/react2shell-vulnlab",
+ "owner": {
+ "login": "hidden-investigations",
+ "id": 207369456,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207369456?v=4",
+ "html_url": "https:\/\/github.com\/hidden-investigations",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hidden-investigations\/react2shell-vulnlab",
+ "description": "A modern Next.js vulnerable web app themed as a news \/ blog portal for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.",
+ "fork": false,
+ "created_at": "2025-12-13T21:54:59Z",
+ "updated_at": "2026-05-03T08:55:14Z",
+ "pushed_at": "2025-12-13T22:05:56Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ctf-labs",
+ "cve-2025-55182",
+ "react2shell",
+ "vulnerable-web-application"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116057572,
+ "name": "React2P4IM0Nshell",
+ "full_name": "MammaniNelsonD\/React2P4IM0Nshell",
+ "owner": {
+ "login": "MammaniNelsonD",
+ "id": 114308492,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114308492?v=4",
+ "html_url": "https:\/\/github.com\/MammaniNelsonD",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MammaniNelsonD\/React2P4IM0Nshell",
+ "description": "💥Extension Tool para Auditoría y Explotación avanzada RCE\/Source Leak\/Dos (CVE-2025-55182\/83\/84) para entornos Next.js y React Server Components (RSC) directamente desde tu navegador + Laboratorio Vulnerable❌",
+ "fork": false,
+ "created_at": "2025-12-14T05:24:21Z",
+ "updated_at": "2025-12-15T21:53:25Z",
+ "pushed_at": "2025-12-15T18:29:03Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116145683,
+ "name": "CVE-2025-55182",
+ "full_name": "tinashelorenzi\/CVE-2025-55182",
+ "owner": {
+ "login": "tinashelorenzi",
+ "id": 117823479,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117823479?v=4",
+ "html_url": "https:\/\/github.com\/tinashelorenzi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tinashelorenzi\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-14T09:42:43Z",
+ "updated_at": "2025-12-14T09:47:52Z",
+ "pushed_at": "2025-12-14T09:47:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116149498,
+ "name": "React2Shell",
+ "full_name": "ProwlSec\/React2Shell",
+ "owner": {
+ "login": "ProwlSec",
+ "id": 156422271,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156422271?v=4",
+ "html_url": "https:\/\/github.com\/ProwlSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ProwlSec\/React2Shell",
+ "description": "An advanced command-line framework for discovery, validation, and exploitation of CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications using React Server Components (RSC).",
+ "fork": false,
+ "created_at": "2025-12-14T09:52:41Z",
+ "updated_at": "2025-12-14T11:51:20Z",
+ "pushed_at": "2025-12-14T10:02:50Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116209194,
+ "name": "CVE-2025-55182",
+ "full_name": "VVVI5HNU\/CVE-2025-55182",
+ "owner": {
+ "login": "VVVI5HNU",
+ "id": 146716354,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146716354?v=4",
+ "html_url": "https:\/\/github.com\/VVVI5HNU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/VVVI5HNU\/CVE-2025-55182",
+ "description": "Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components.",
+ "fork": false,
+ "created_at": "2025-12-14T12:23:11Z",
+ "updated_at": "2026-01-06T06:24:06Z",
+ "pushed_at": "2025-12-14T13:12:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116224509,
+ "name": "React2shell-ultimate-scanner",
+ "full_name": "CyberPrince-hub\/React2shell-ultimate-scanner",
+ "owner": {
+ "login": "CyberPrince-hub",
+ "id": 211519156,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211519156?v=4",
+ "html_url": "https:\/\/github.com\/CyberPrince-hub",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CyberPrince-hub\/React2shell-ultimate-scanner",
+ "description": "CVE-2025-55182-Advanced-Scanner is an automated security tool designed to detect and validate the CVE-2025-55182 vulnerability efficiently. it helps security researchers and bug bounty hunters quickly identify affected targets with accurate results and minimal false positives.",
+ "fork": false,
+ "created_at": "2025-12-14T12:59:06Z",
+ "updated_at": "2025-12-14T16:07:43Z",
+ "pushed_at": "2025-12-14T16:07:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1116263901,
"name": "react2shell-scanner",
@@ -1343,6 +10973,237 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1116499042,
+ "name": "CVE-2025-55182",
+ "full_name": "mivmi\/CVE-2025-55182",
+ "owner": {
+ "login": "mivmi",
+ "id": 61160040,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61160040?v=4",
+ "html_url": "https:\/\/github.com\/mivmi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mivmi\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-15T00:50:26Z",
+ "updated_at": "2025-12-15T06:09:57Z",
+ "pushed_at": "2025-12-15T00:57:24Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116656228,
+ "name": "CVE-2025-55182",
+ "full_name": "subhdotsol\/CVE-2025-55182",
+ "owner": {
+ "login": "subhdotsol",
+ "id": 77573811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77573811?v=4",
+ "html_url": "https:\/\/github.com\/subhdotsol",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/subhdotsol\/CVE-2025-55182",
+ "description": "This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React Server Components and Next.js.",
+ "fork": false,
+ "created_at": "2025-12-15T07:35:35Z",
+ "updated_at": "2025-12-15T18:17:32Z",
+ "pushed_at": "2025-12-15T08:33:33Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1116698646,
+ "name": "-cve-2025-55182",
+ "full_name": "Call123X\/-cve-2025-55182",
+ "owner": {
+ "login": "Call123X",
+ "id": 219345384,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219345384?v=4",
+ "html_url": "https:\/\/github.com\/Call123X",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Call123X\/-cve-2025-55182",
+ "description": " cve-2025-55182",
+ "fork": false,
+ "created_at": "2025-12-15T08:56:05Z",
+ "updated_at": "2025-12-15T09:19:36Z",
+ "pushed_at": "2025-12-15T09:33:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116753899,
+ "name": "CVE-2025-55182",
+ "full_name": "hulh122\/CVE-2025-55182",
+ "owner": {
+ "login": "hulh122",
+ "id": 90601538,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90601538?v=4",
+ "html_url": "https:\/\/github.com\/hulh122",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hulh122\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-15T10:32:08Z",
+ "updated_at": "2025-12-15T10:33:24Z",
+ "pushed_at": "2025-12-15T10:33:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116870634,
+ "name": "CVE-2025-55182",
+ "full_name": "simantchaudhari\/CVE-2025-55182",
+ "owner": {
+ "login": "simantchaudhari",
+ "id": 100766705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100766705?v=4",
+ "html_url": "https:\/\/github.com\/simantchaudhari",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/simantchaudhari\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-15T13:54:24Z",
+ "updated_at": "2025-12-15T14:35:27Z",
+ "pushed_at": "2025-12-15T14:35:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117107987,
+ "name": "react2shelldemo",
+ "full_name": "premdanav\/react2shelldemo",
+ "owner": {
+ "login": "premdanav",
+ "id": 106393065,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106393065?v=4",
+ "html_url": "https:\/\/github.com\/premdanav",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/premdanav\/react2shelldemo",
+ "description": "This repo contains the scripts you can execute to simulate the (CVE-2025-55182) along with next.js server",
+ "fork": false,
+ "created_at": "2025-12-15T21:01:16Z",
+ "updated_at": "2025-12-15T21:11:43Z",
+ "pushed_at": "2025-12-15T21:11:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117194482,
+ "name": "NextJS-app-CVE-2025-55182",
+ "full_name": "S-Mughal\/NextJS-app-CVE-2025-55182",
+ "owner": {
+ "login": "S-Mughal",
+ "id": 76440097,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76440097?v=4",
+ "html_url": "https:\/\/github.com\/S-Mughal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/S-Mughal\/NextJS-app-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-16T01:03:21Z",
+ "updated_at": "2025-12-16T16:11:31Z",
+ "pushed_at": "2025-12-16T16:08:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1117279530,
"name": "study-CVE-2025-55182",
@@ -1376,6 +11237,680 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1117351921,
+ "name": "CVE-2025-55182",
+ "full_name": "EQSTLab\/CVE-2025-55182",
+ "owner": {
+ "login": "EQSTLab",
+ "id": 148991397,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
+ "html_url": "https:\/\/github.com\/EQSTLab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EQSTLab\/CVE-2025-55182",
+ "description": "React2Shell",
+ "fork": false,
+ "created_at": "2025-12-16T07:35:55Z",
+ "updated_at": "2026-04-14T04:41:41Z",
+ "pushed_at": "2025-12-16T07:50:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117412327,
+ "name": "FiberBreak",
+ "full_name": "scumfrog\/FiberBreak",
+ "owner": {
+ "login": "scumfrog",
+ "id": 2452537,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2452537?v=4",
+ "html_url": "https:\/\/github.com\/scumfrog",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/scumfrog\/FiberBreak",
+ "description": "React2Shell Exploitation Tool (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-16T09:25:32Z",
+ "updated_at": "2025-12-17T08:05:50Z",
+ "pushed_at": "2025-12-17T08:05:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117460843,
+ "name": "nextjs-CVE-2025-55182",
+ "full_name": "d0cnull\/nextjs-CVE-2025-55182",
+ "owner": {
+ "login": "d0cnull",
+ "id": 249832913,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249832913?v=4",
+ "html_url": "https:\/\/github.com\/d0cnull",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0cnull\/nextjs-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-16T10:47:27Z",
+ "updated_at": "2025-12-16T10:58:49Z",
+ "pushed_at": "2025-12-16T10:58:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117655742,
+ "name": "Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478",
+ "full_name": "Mustafa1p\/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478",
+ "owner": {
+ "login": "Mustafa1p",
+ "id": 16633480,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16633480?v=4",
+ "html_url": "https:\/\/github.com\/Mustafa1p",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mustafa1p\/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478",
+ "description": "An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).",
+ "fork": false,
+ "created_at": "2025-12-16T16:13:12Z",
+ "updated_at": "2025-12-16T16:13:40Z",
+ "pushed_at": "2025-12-16T16:13:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117701709,
+ "name": "CVE-2025-55182-React2Shell-Exploit",
+ "full_name": "M4rgs\/CVE-2025-55182-React2Shell-Exploit",
+ "owner": {
+ "login": "M4rgs",
+ "id": 186235835,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186235835?v=4",
+ "html_url": "https:\/\/github.com\/M4rgs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/M4rgs\/CVE-2025-55182-React2Shell-Exploit",
+ "description": "A proof-of-concept tool for demonstrating the critical React2Shell vulnerability",
+ "fork": false,
+ "created_at": "2025-12-16T17:32:27Z",
+ "updated_at": "2025-12-17T09:35:07Z",
+ "pushed_at": "2025-12-17T08:21:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117791691,
+ "name": "CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-",
+ "full_name": "nulltrace1336\/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-",
+ "owner": {
+ "login": "nulltrace1336",
+ "id": 230000135,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/230000135?v=4",
+ "html_url": "https:\/\/github.com\/nulltrace1336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nulltrace1336\/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-",
+ "description": "Quyida to‘liq LAB rejasi: demo-vulnerable app → Python PoC → Metasploit exploit skeleton",
+ "fork": false,
+ "created_at": "2025-12-16T20:25:04Z",
+ "updated_at": "2025-12-16T20:30:47Z",
+ "pushed_at": "2025-12-16T20:30:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118325939,
+ "name": "react2shell-lab",
+ "full_name": "pwnxpl0it\/react2shell-lab",
+ "owner": {
+ "login": "pwnxpl0it",
+ "id": 53410220,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53410220?v=4",
+ "html_url": "https:\/\/github.com\/pwnxpl0it",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pwnxpl0it\/react2shell-lab",
+ "description": "React2shell vulnerable lab (CVE-2025-55182) ",
+ "fork": false,
+ "created_at": "2025-12-17T15:32:33Z",
+ "updated_at": "2025-12-18T00:58:29Z",
+ "pushed_at": "2025-12-18T00:58:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118411585,
+ "name": "CVE-2025-55182",
+ "full_name": "ceh-aditya-raj\/CVE-2025-55182",
+ "owner": {
+ "login": "ceh-aditya-raj",
+ "id": 83500019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83500019?v=4",
+ "html_url": "https:\/\/github.com\/ceh-aditya-raj",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ceh-aditya-raj\/CVE-2025-55182",
+ "description": "Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.",
+ "fork": false,
+ "created_at": "2025-12-17T18:00:35Z",
+ "updated_at": "2025-12-23T07:07:01Z",
+ "pushed_at": "2025-12-17T18:36:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "nextjs",
+ "prototype-pollution",
+ "react",
+ "react-server-components",
+ "remote-code-execution-rce",
+ "server-actions",
+ "utf-16le",
+ "waf-bypass"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118751127,
+ "name": "CVE-2025-55182",
+ "full_name": "r4j3sh-com\/CVE-2025-55182",
+ "owner": {
+ "login": "r4j3sh-com",
+ "id": 136555809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136555809?v=4",
+ "html_url": "https:\/\/github.com\/r4j3sh-com",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r4j3sh-com\/CVE-2025-55182",
+ "description": "Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.",
+ "fork": false,
+ "created_at": "2025-12-18T08:19:37Z",
+ "updated_at": "2025-12-18T09:01:39Z",
+ "pushed_at": "2025-12-18T09:01:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119098023,
+ "name": "React2Shell-Vulnerability-Verification-Script",
+ "full_name": "degenwithheart\/React2Shell-Vulnerability-Verification-Script",
+ "owner": {
+ "login": "degenwithheart",
+ "id": 52383088,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52383088?v=4",
+ "html_url": "https:\/\/github.com\/degenwithheart",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/degenwithheart\/React2Shell-Vulnerability-Verification-Script",
+ "description": "React2Shell Vulnerability Verification Script (React2Shell also known as CVE-2025-55182).",
+ "fork": false,
+ "created_at": "2025-12-18T18:32:42Z",
+ "updated_at": "2025-12-18T18:57:46Z",
+ "pushed_at": "2025-12-18T19:00:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119109555,
+ "name": "cve-2025-55182-mitigator",
+ "full_name": "rashedhasan090\/cve-2025-55182-mitigator",
+ "owner": {
+ "login": "rashedhasan090",
+ "id": 18316142,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18316142?v=4",
+ "html_url": "https:\/\/github.com\/rashedhasan090",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rashedhasan090\/cve-2025-55182-mitigator",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T18:58:06Z",
+ "updated_at": "2025-12-18T18:58:51Z",
+ "pushed_at": "2025-12-18T18:58:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119125931,
+ "name": "CVE-2025-55182-PoC",
+ "full_name": "RavinduRathnayaka\/CVE-2025-55182-PoC",
+ "owner": {
+ "login": "RavinduRathnayaka",
+ "id": 92386656,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92386656?v=4",
+ "html_url": "https:\/\/github.com\/RavinduRathnayaka",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RavinduRathnayaka\/CVE-2025-55182-PoC",
+ "description": "React2Shell (CVE-2025-66478): A Python-based Proof of Concept for Critical Remote Code Execution (RCE) in Next.js Server Components. Features an interactive CLI, custom payload injection, and cleaner output formatting. For educational research only.",
+ "fork": false,
+ "created_at": "2025-12-18T19:35:02Z",
+ "updated_at": "2026-05-13T19:10:12Z",
+ "pushed_at": "2025-12-18T19:55:42Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119299403,
+ "name": "CVE-2025-55182",
+ "full_name": "open-flaw\/CVE-2025-55182",
+ "owner": {
+ "login": "open-flaw",
+ "id": 285214572,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285214572?v=4",
+ "html_url": "https:\/\/github.com\/open-flaw",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/open-flaw\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-19T04:07:53Z",
+ "updated_at": "2026-05-16T13:47:31Z",
+ "pushed_at": "2025-12-19T04:07:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119469884,
+ "name": "react2shell-CVE-2025-55182-full-rce-script",
+ "full_name": "chrahman\/react2shell-CVE-2025-55182-full-rce-script",
+ "owner": {
+ "login": "chrahman",
+ "id": 68278872,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68278872?v=4",
+ "html_url": "https:\/\/github.com\/chrahman",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chrahman\/react2shell-CVE-2025-55182-full-rce-script",
+ "description": "React2Shell vulnerability (CVE-2025-55182 \/ CVE-2025-66478) Full Script",
+ "fork": false,
+ "created_at": "2025-12-19T10:17:21Z",
+ "updated_at": "2026-01-02T06:15:00Z",
+ "pushed_at": "2025-12-19T10:21:32Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119511009,
+ "name": "CVE-2025-55182-Toolbox",
+ "full_name": "lamaper\/CVE-2025-55182-Toolbox",
+ "owner": {
+ "login": "lamaper",
+ "id": 108182318,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108182318?v=4",
+ "html_url": "https:\/\/github.com\/lamaper",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lamaper\/CVE-2025-55182-Toolbox",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-19T11:40:01Z",
+ "updated_at": "2025-12-28T07:52:44Z",
+ "pushed_at": "2025-12-19T11:42:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119682601,
+ "name": "CVE-2025-55182",
+ "full_name": "mahaveer-choudhary\/CVE-2025-55182",
+ "owner": {
+ "login": "mahaveer-choudhary",
+ "id": 147645993,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147645993?v=4",
+ "html_url": "https:\/\/github.com\/mahaveer-choudhary",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mahaveer-choudhary\/CVE-2025-55182",
+ "description": "A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing.",
+ "fork": false,
+ "created_at": "2025-12-19T17:06:49Z",
+ "updated_at": "2025-12-19T17:10:18Z",
+ "pushed_at": "2025-12-19T17:10:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119840122,
+ "name": "secure-by-default-rce-demo",
+ "full_name": "MeGaNeKoS\/secure-by-default-rce-demo",
+ "owner": {
+ "login": "MeGaNeKoS",
+ "id": 29650686,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29650686?v=4",
+ "html_url": "https:\/\/github.com\/MeGaNeKoS",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MeGaNeKoS\/secure-by-default-rce-demo",
+ "description": "Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can neutralize a critical Next.js\/React Server Actions RCE (CVE-2025-55182 “React2Shell”), with side-by-side safe vs unsafe deployments and exploit logs",
+ "fork": false,
+ "created_at": "2025-12-20T00:14:34Z",
+ "updated_at": "2025-12-29T13:42:13Z",
+ "pushed_at": "2025-12-29T13:42:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1119983607,
+ "name": "react2shell-poc-CVE-2025-55182",
+ "full_name": "tamagorengs\/react2shell-poc-CVE-2025-55182",
+ "owner": {
+ "login": "tamagorengs",
+ "id": 221602030,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221602030?v=4",
+ "html_url": "https:\/\/github.com\/tamagorengs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tamagorengs\/react2shell-poc-CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-20T08:33:40Z",
+ "updated_at": "2025-12-20T08:38:30Z",
+ "pushed_at": "2025-12-20T08:38:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1120138291,
+ "name": "React2Shell-CVE-Lab",
+ "full_name": "xxxTectationxxx\/React2Shell-CVE-Lab",
+ "owner": {
+ "login": "xxxTectationxxx",
+ "id": 138872996,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138872996?v=4",
+ "html_url": "https:\/\/github.com\/xxxTectationxxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xxxTectationxxx\/React2Shell-CVE-Lab",
+ "description": "A self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF practice.",
+ "fork": false,
+ "created_at": "2025-12-20T15:11:44Z",
+ "updated_at": "2025-12-21T00:11:37Z",
+ "pushed_at": "2025-12-20T18:08:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1120218144,
+ "name": "RSC-Detect-CVE-2025-55182",
+ "full_name": "vijay-shirhatti\/RSC-Detect-CVE-2025-55182",
+ "owner": {
+ "login": "vijay-shirhatti",
+ "id": 192396834,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192396834?v=4",
+ "html_url": "https:\/\/github.com\/vijay-shirhatti",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vijay-shirhatti\/RSC-Detect-CVE-2025-55182",
+ "description": "RSC Detect CVE 2025 55182",
+ "fork": false,
+ "created_at": "2025-12-20T18:24:28Z",
+ "updated_at": "2025-12-26T11:27:09Z",
+ "pushed_at": "2025-12-20T18:27:09Z",
+ "stargazers_count": 21,
+ "watchers_count": 21,
+ "has_discussions": false,
+ "forks_count": 9,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "app-sec",
+ "cve",
+ "cve-poc"
+ ],
+ "visibility": "public",
+ "forks": 9,
+ "watchers": 21,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1120251288,
"name": "react2shell-poc",
@@ -1456,6 +11991,185 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1120535223,
+ "name": "react-cve-2025-55182",
+ "full_name": "niokagi\/react-cve-2025-55182",
+ "owner": {
+ "login": "niokagi",
+ "id": 39802817,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39802817?v=4",
+ "html_url": "https:\/\/github.com\/niokagi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/niokagi\/react-cve-2025-55182",
+ "description": "Test & Analyze the CVE-2025-55182 vulnerability within Next.js Server Actions",
+ "fork": false,
+ "created_at": "2025-12-21T12:32:14Z",
+ "updated_at": "2025-12-24T17:05:52Z",
+ "pushed_at": "2025-12-21T12:36:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121093758,
+ "name": "React2Shell",
+ "full_name": "knightwolf01\/React2Shell",
+ "owner": {
+ "login": "knightwolf01",
+ "id": 172813596,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172813596?v=4",
+ "html_url": "https:\/\/github.com\/knightwolf01",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/knightwolf01\/React2Shell",
+ "description": "React2Shell Critical Vulnerability (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-22T12:30:34Z",
+ "updated_at": "2025-12-22T12:37:08Z",
+ "pushed_at": "2025-12-22T12:37:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121096986,
+ "name": "React2Shell",
+ "full_name": "BlackTechX011\/React2Shell",
+ "owner": {
+ "login": "BlackTechX011",
+ "id": 155609122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155609122?v=4",
+ "html_url": "https:\/\/github.com\/BlackTechX011",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BlackTechX011\/React2Shell",
+ "description": "React2Shell: An exploitation framework for CVE-2025-55182 (Next.js\/React RCE).",
+ "fork": false,
+ "created_at": "2025-12-22T12:36:45Z",
+ "updated_at": "2026-04-17T00:31:28Z",
+ "pushed_at": "2025-12-22T12:59:48Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55182",
+ "cve-2025-55182-ctf",
+ "nextjs",
+ "nextjs-vulnerability",
+ "rce",
+ "react",
+ "react-rce",
+ "react2shell",
+ "react2shell-exploitation",
+ "react2shell-exploitation-tool",
+ "react2shell-scanner",
+ "reactjs",
+ "reactjs-vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121373831,
+ "name": "React4Shell",
+ "full_name": "S3cr3t-SDN\/React4Shell",
+ "owner": {
+ "login": "S3cr3t-SDN",
+ "id": 13088694,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13088694?v=4",
+ "html_url": "https:\/\/github.com\/S3cr3t-SDN",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/S3cr3t-SDN\/React4Shell",
+ "description": "Exploit Code for React2Shell RCE vulnerability (CVE-2025-55182) affecting React Server Components 19.0.0-19.2.0. Exploits unsafe deserialization for unauthenticated remote code execution.",
+ "fork": false,
+ "created_at": "2025-12-22T22:18:02Z",
+ "updated_at": "2026-01-06T13:43:07Z",
+ "pushed_at": "2025-12-22T22:24:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1121504703,
+ "name": "test-vuln",
+ "full_name": "ckex\/test-vuln",
+ "owner": {
+ "login": "ckex",
+ "id": 101229068,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101229068?v=4",
+ "html_url": "https:\/\/github.com\/ckex",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ckex\/test-vuln",
+ "description": "a controlled environment to test CVE-2025-55182.",
+ "fork": false,
+ "created_at": "2025-12-23T05:21:46Z",
+ "updated_at": "2025-12-23T05:22:09Z",
+ "pushed_at": "2025-12-23T05:22:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1121637493,
"name": "React2Shell-PoC",
@@ -1504,8 +12218,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
- "updated_at": "2026-06-02T12:09:52Z",
- "pushed_at": "2026-06-02T12:09:47Z",
+ "updated_at": "2026-06-02T15:24:14Z",
+ "pushed_at": "2026-06-02T15:12:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1541,6 +12255,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1122382051,
+ "name": "CVE-2025-55182-LAB",
+ "full_name": "bigbluewhale111\/CVE-2025-55182-LAB",
+ "owner": {
+ "login": "bigbluewhale111",
+ "id": 145429841,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145429841?v=4",
+ "html_url": "https:\/\/github.com\/bigbluewhale111",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bigbluewhale111\/CVE-2025-55182-LAB",
+ "description": "This is a lab for reproducing CVE-2025-55182.",
+ "fork": false,
+ "created_at": "2025-12-24T15:57:13Z",
+ "updated_at": "2025-12-24T15:59:59Z",
+ "pushed_at": "2025-12-24T15:59:55Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1122448098,
"name": "Blackash-CVE-2025-55182",
@@ -1556,8 +12303,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
- "updated_at": "2026-06-02T12:09:10Z",
- "pushed_at": "2026-06-02T12:09:06Z",
+ "updated_at": "2026-06-02T15:23:51Z",
+ "pushed_at": "2026-06-02T15:11:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1605,8 +12352,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
- "updated_at": "2026-06-02T12:09:15Z",
- "pushed_at": "2026-06-02T12:09:10Z",
+ "updated_at": "2026-06-02T15:18:19Z",
+ "pushed_at": "2026-06-02T15:11:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1642,6 +12389,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1122489246,
+ "name": "react2shell-evolved",
+ "full_name": "guiimoraes\/react2shell-evolved",
+ "owner": {
+ "login": "guiimoraes",
+ "id": 251377213,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/251377213?v=4",
+ "html_url": "https:\/\/github.com\/guiimoraes",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/guiimoraes\/react2shell-evolved",
+ "description": "A evolved version of assetnote CVE-2025-55182 scanner",
+ "fork": false,
+ "created_at": "2025-12-24T21:06:38Z",
+ "updated_at": "2025-12-27T15:18:53Z",
+ "pushed_at": "2025-12-24T23:17:26Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1122904078,
"name": "Nextjs_RCE_Exploit_Tool",
@@ -1657,8 +12437,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
- "updated_at": "2026-06-02T12:10:51Z",
- "pushed_at": "2026-06-02T12:10:39Z",
+ "updated_at": "2026-06-02T15:21:39Z",
+ "pushed_at": "2026-06-02T15:13:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1675,6 +12455,175 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1122934190,
+ "name": "HACKVISER-CVE-2025-55182-LAB",
+ "full_name": "Jakelife\/HACKVISER-CVE-2025-55182-LAB",
+ "owner": {
+ "login": "Jakelife",
+ "id": 169054163,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169054163?v=4",
+ "html_url": "https:\/\/github.com\/Jakelife",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jakelife\/HACKVISER-CVE-2025-55182-LAB",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-25T21:20:22Z",
+ "updated_at": "2025-12-25T21:20:23Z",
+ "pushed_at": "2025-12-25T21:20:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123164580,
+ "name": "CVE-2025-55182",
+ "full_name": "thqxploit666\/CVE-2025-55182",
+ "owner": {
+ "login": "thqxploit666",
+ "id": 193191177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193191177?v=4",
+ "html_url": "https:\/\/github.com\/thqxploit666",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thqxploit666\/CVE-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-26T10:02:00Z",
+ "updated_at": "2025-12-26T10:02:00Z",
+ "pushed_at": "2025-12-26T10:02:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123268855,
+ "name": "Bot-exploit-CVE-2025-55182",
+ "full_name": "itsismarcos\/Bot-exploit-CVE-2025-55182",
+ "owner": {
+ "login": "itsismarcos",
+ "id": 187547550,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187547550?v=4",
+ "html_url": "https:\/\/github.com\/itsismarcos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/itsismarcos\/Bot-exploit-CVE-2025-55182",
+ "description": "Mass Bot Exploit",
+ "fork": false,
+ "created_at": "2025-12-26T14:19:35Z",
+ "updated_at": "2026-03-05T17:49:27Z",
+ "pushed_at": "2025-12-26T14:23:59Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123368189,
+ "name": "CVE-2025-55182",
+ "full_name": "0xROI\/CVE-2025-55182",
+ "owner": {
+ "login": "0xROI",
+ "id": 96995792,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96995792?v=4",
+ "html_url": "https:\/\/github.com\/0xROI",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xROI\/CVE-2025-55182",
+ "description": "Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself.",
+ "fork": false,
+ "created_at": "2025-12-26T18:14:00Z",
+ "updated_at": "2025-12-26T18:22:56Z",
+ "pushed_at": "2025-12-26T18:22:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123437627,
+ "name": "CVE-2025-55182",
+ "full_name": "Updatelap\/CVE-2025-55182",
+ "owner": {
+ "login": "Updatelap",
+ "id": 49656896,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49656896?v=4",
+ "html_url": "https:\/\/github.com\/Updatelap",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Updatelap\/CVE-2025-55182",
+ "description": "React2Shell Scanner",
+ "fork": false,
+ "created_at": "2025-12-26T21:50:42Z",
+ "updated_at": "2026-04-10T13:19:43Z",
+ "pushed_at": "2025-12-26T23:09:45Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bugbounty",
+ "react",
+ "security"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1123446873,
"name": "CVE-2025-55182-POC-NEXTJS",
@@ -1690,8 +12639,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
- "updated_at": "2026-06-02T12:10:38Z",
- "pushed_at": "2026-06-02T12:10:34Z",
+ "updated_at": "2026-06-02T15:19:27Z",
+ "pushed_at": "2026-06-02T15:13:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1714,6 +12663,204 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1123454788,
+ "name": "React-Server-Components-Remote-Code-Execution-CVE-2025-55182-",
+ "full_name": "kanyokoo\/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-",
+ "owner": {
+ "login": "kanyokoo",
+ "id": 125678302,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125678302?v=4",
+ "html_url": "https:\/\/github.com\/kanyokoo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kanyokoo\/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-",
+ "description": "script to help solve the lab on hackviser covering (CVE-2025-55182)",
+ "fork": false,
+ "created_at": "2025-12-26T22:58:53Z",
+ "updated_at": "2025-12-29T15:42:55Z",
+ "pushed_at": "2025-12-26T23:02:55Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123805765,
+ "name": "R2C-CVE-2025-55182-66478",
+ "full_name": "KingHacker353\/R2C-CVE-2025-55182-66478",
+ "owner": {
+ "login": "KingHacker353",
+ "id": 215260117,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215260117?v=4",
+ "html_url": "https:\/\/github.com\/KingHacker353",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KingHacker353\/R2C-CVE-2025-55182-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-27T16:58:59Z",
+ "updated_at": "2025-12-27T17:13:05Z",
+ "pushed_at": "2025-12-27T17:13:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124567918,
+ "name": "react2shell-CVE-2025-55182-",
+ "full_name": "amirali-ramezani\/react2shell-CVE-2025-55182-",
+ "owner": {
+ "login": "amirali-ramezani",
+ "id": 103065753,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103065753?v=4",
+ "html_url": "https:\/\/github.com\/amirali-ramezani",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amirali-ramezani\/react2shell-CVE-2025-55182-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-29T08:34:51Z",
+ "updated_at": "2025-12-29T09:14:19Z",
+ "pushed_at": "2025-12-29T09:14:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125247161,
+ "name": "React2ShellPoC",
+ "full_name": "git0xLai\/React2ShellPoC",
+ "owner": {
+ "login": "git0xLai",
+ "id": 248161131,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248161131?v=4",
+ "html_url": "https:\/\/github.com\/git0xLai",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/git0xLai\/React2ShellPoC",
+ "description": "This repository provides a proof-of-concept for CVE-2025-55182 (React2Shell), a remote code execution vulnerability in React Server Components. It demonstrates how the exploit works, including the payload and impact.",
+ "fork": false,
+ "created_at": "2025-12-30T11:44:21Z",
+ "updated_at": "2025-12-31T11:58:03Z",
+ "pushed_at": "2025-12-30T11:46:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125349298,
+ "name": "react2shell-rce-autobot",
+ "full_name": "hndko\/react2shell-rce-autobot",
+ "owner": {
+ "login": "hndko",
+ "id": 102887791,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102887791?v=4",
+ "html_url": "https:\/\/github.com\/hndko",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hndko\/react2shell-rce-autobot",
+ "description": "🎯 Automated vulnerability scanner for React2Shell RCE - Google dorking + safe detection for CVE-2025-55182\/CVE-2025-66478 (CVSS 10.0)",
+ "fork": false,
+ "created_at": "2025-12-30T15:12:39Z",
+ "updated_at": "2025-12-30T15:13:47Z",
+ "pushed_at": "2025-12-30T15:12:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125864331,
+ "name": "CVE-2025-55182-React2Shell-Lab",
+ "full_name": "Goultarde\/CVE-2025-55182-React2Shell-Lab",
+ "owner": {
+ "login": "Goultarde",
+ "id": 117078126,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117078126?v=4",
+ "html_url": "https:\/\/github.com\/Goultarde",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Goultarde\/CVE-2025-55182-React2Shell-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-31T14:20:34Z",
+ "updated_at": "2025-12-31T15:08:19Z",
+ "pushed_at": "2025-12-31T15:08:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126145132,
"name": "CVE-2025-55182",
@@ -1762,8 +12909,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
- "updated_at": "2026-06-02T12:15:44Z",
- "pushed_at": "2026-06-02T12:15:40Z",
+ "updated_at": "2026-06-02T15:24:12Z",
+ "pushed_at": "2026-06-02T15:18:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2283,8 +13430,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
- "updated_at": "2026-06-02T12:21:33Z",
- "pushed_at": "2026-06-02T12:21:28Z",
+ "updated_at": "2026-06-02T15:29:34Z",
+ "pushed_at": "2026-06-02T15:23:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -3221,39 +14368,6 @@
"score": 0,
"subscribers_count": 21
},
- {
- "id": 1166864386,
- "name": "CVE-2025-55182-React2Shell",
- "full_name": "unixskid\/CVE-2025-55182-React2Shell",
- "owner": {
- "login": "unixskid",
- "id": 263952147,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/263952147?v=4",
- "html_url": "https:\/\/github.com\/unixskid",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/unixskid\/CVE-2025-55182-React2Shell",
- "description": null,
- "fork": false,
- "created_at": "2026-02-25T17:34:23Z",
- "updated_at": "2026-05-02T23:38:35Z",
- "pushed_at": "2026-02-25T18:32:46Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1167767062,
"name": "MassScanning-CVE-2025-55182",
diff --git a/2025/CVE-2025-55183.json b/2025/CVE-2025-55183.json
new file mode 100644
index 0000000000..e1cf2c4533
--- /dev/null
+++ b/2025/CVE-2025-55183.json
@@ -0,0 +1,211 @@
+[
+ {
+ "id": 1114803119,
+ "name": "CVE-2025-55183",
+ "full_name": "Saturate\/CVE-2025-55183",
+ "owner": {
+ "login": "Saturate",
+ "id": 453018,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/453018?v=4",
+ "html_url": "https:\/\/github.com\/Saturate",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Saturate\/CVE-2025-55183",
+ "description": "A CVE-2025-55183 secret miner",
+ "fork": false,
+ "created_at": "2025-12-11T22:58:10Z",
+ "updated_at": "2025-12-13T21:15:07Z",
+ "pushed_at": "2025-12-12T19:47:27Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55183",
+ "exploit"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114860565,
+ "name": "CVE-2025-55183-poc",
+ "full_name": "kimtruth\/CVE-2025-55183-poc",
+ "owner": {
+ "login": "kimtruth",
+ "id": 9734518,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9734518?v=4",
+ "html_url": "https:\/\/github.com\/kimtruth",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kimtruth\/CVE-2025-55183-poc",
+ "description": "PoC for CVE-2025-55183",
+ "fork": false,
+ "created_at": "2025-12-12T02:00:01Z",
+ "updated_at": "2026-04-13T06:34:52Z",
+ "pushed_at": "2025-12-12T02:17:31Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114910841,
+ "name": "nextjs-security-update",
+ "full_name": "williavs\/nextjs-security-update",
+ "owner": {
+ "login": "williavs",
+ "id": 156122217,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156122217?v=4",
+ "html_url": "https:\/\/github.com\/williavs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/williavs\/nextjs-security-update",
+ "description": "Batch upgrade all your Next.js apps to patched versions - fight back against CVE-2025-55183\/55184\/67779",
+ "fork": false,
+ "created_at": "2025-12-12T04:17:08Z",
+ "updated_at": "2025-12-14T19:26:03Z",
+ "pushed_at": "2025-12-12T04:41:44Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115037245,
+ "name": "CVE-2025-55183_POC",
+ "full_name": "X-Cotang\/CVE-2025-55183_POC",
+ "owner": {
+ "login": "X-Cotang",
+ "id": 37010776,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37010776?v=4",
+ "html_url": "https:\/\/github.com\/X-Cotang",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/X-Cotang\/CVE-2025-55183_POC",
+ "description": "CVE-2025-55183 POC",
+ "fork": false,
+ "created_at": "2025-12-12T08:50:07Z",
+ "updated_at": "2025-12-15T07:49:32Z",
+ "pushed_at": "2025-12-12T09:17:39Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115364269,
+ "name": "RSC-Scanner-POC",
+ "full_name": "omaidnebari\/RSC-Scanner-POC",
+ "owner": {
+ "login": "omaidnebari",
+ "id": 238069188,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238069188?v=4",
+ "html_url": "https:\/\/github.com\/omaidnebari",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/omaidnebari\/RSC-Scanner-POC",
+ "description": "CVE-2025-55183 Scanner",
+ "fork": false,
+ "created_at": "2025-12-12T18:42:24Z",
+ "updated_at": "2026-01-06T22:57:20Z",
+ "pushed_at": "2025-12-12T18:42:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55183",
+ "poc",
+ "react"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115443057,
+ "name": "react-server-cve-lab",
+ "full_name": "StealthMoud\/react-server-cve-lab",
+ "owner": {
+ "login": "StealthMoud",
+ "id": 152169815,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152169815?v=4",
+ "html_url": "https:\/\/github.com\/StealthMoud",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/StealthMoud\/react-server-cve-lab",
+ "description": "Security research lab for CVE-2025-55183 and CVE-2025-55184 in React Server Components",
+ "fork": false,
+ "created_at": "2025-12-12T21:54:26Z",
+ "updated_at": "2026-02-27T12:32:39Z",
+ "pushed_at": "2025-12-13T01:53:35Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55183-cve-2025-55184",
+ "security-react-nextjs-cve"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json
index bb4b1f330e..c268659c01 100644
--- a/2025/CVE-2025-55184.json
+++ b/2025/CVE-2025-55184.json
@@ -1,4 +1,279 @@
[
+ {
+ "id": 1114845817,
+ "name": "CVE-2025-55184-poc",
+ "full_name": "hans362\/CVE-2025-55184-poc",
+ "owner": {
+ "login": "hans362",
+ "id": 32535810,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32535810?v=4",
+ "html_url": "https:\/\/github.com\/hans362",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hans362\/CVE-2025-55184-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T01:14:13Z",
+ "updated_at": "2026-02-27T12:58:32Z",
+ "pushed_at": "2025-12-12T01:17:17Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114847089,
+ "name": "CVE-2025-55184",
+ "full_name": "ejpir\/CVE-2025-55184",
+ "owner": {
+ "login": "ejpir",
+ "id": 16493171,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16493171?v=4",
+ "html_url": "https:\/\/github.com\/ejpir",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ejpir\/CVE-2025-55184",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T01:18:05Z",
+ "updated_at": "2025-12-15T03:49:04Z",
+ "pushed_at": "2025-12-12T12:29:02Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115129610,
+ "name": "CVE-2025-55184",
+ "full_name": "bakhod1r\/CVE-2025-55184",
+ "owner": {
+ "login": "bakhod1r",
+ "id": 74229109,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74229109?v=4",
+ "html_url": "https:\/\/github.com\/bakhod1r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bakhod1r\/CVE-2025-55184",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T11:37:17Z",
+ "updated_at": "2025-12-12T11:39:23Z",
+ "pushed_at": "2025-12-12T11:39:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115797021,
+ "name": "CVE-2025-55184-POC-Expolit",
+ "full_name": "cybertechajju\/CVE-2025-55184-POC-Expolit",
+ "owner": {
+ "login": "cybertechajju",
+ "id": 120666627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
+ "html_url": "https:\/\/github.com\/cybertechajju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybertechajju\/CVE-2025-55184-POC-Expolit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-13T15:17:19Z",
+ "updated_at": "2026-05-29T05:55:24Z",
+ "pushed_at": "2025-12-13T16:36:08Z",
+ "stargazers_count": 20,
+ "watchers_count": 20,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 20,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115839348,
+ "name": "CVE-2025-55184_Testing",
+ "full_name": "KkHackingLearning\/CVE-2025-55184_Testing",
+ "owner": {
+ "login": "KkHackingLearning",
+ "id": 71659286,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71659286?v=4",
+ "html_url": "https:\/\/github.com\/KkHackingLearning",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KkHackingLearning\/CVE-2025-55184_Testing",
+ "description": "Python script for Testing CVE-2025-55184 ",
+ "fork": false,
+ "created_at": "2025-12-13T16:55:22Z",
+ "updated_at": "2026-01-13T16:10:50Z",
+ "pushed_at": "2025-12-18T08:15:17Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-55184",
+ "cve-scanning",
+ "cybersecurity",
+ "cybersecurity-tools",
+ "dos-attack",
+ "python",
+ "python-script",
+ "react",
+ "scanner",
+ "testing"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116378047,
+ "name": "CVE-2025-55184",
+ "full_name": "KingHacker353\/CVE-2025-55184",
+ "owner": {
+ "login": "KingHacker353",
+ "id": 215260117,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215260117?v=4",
+ "html_url": "https:\/\/github.com\/KingHacker353",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KingHacker353\/CVE-2025-55184",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-14T18:35:01Z",
+ "updated_at": "2025-12-18T08:10:41Z",
+ "pushed_at": "2025-12-14T18:42:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1117885878,
+ "name": "CVE-2025-55184",
+ "full_name": "Tarekhshaikh13\/CVE-2025-55184",
+ "owner": {
+ "login": "Tarekhshaikh13",
+ "id": 96371678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96371678?v=4",
+ "html_url": "https:\/\/github.com\/Tarekhshaikh13",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Tarekhshaikh13\/CVE-2025-55184",
+ "description": "Target Code + Exploit",
+ "fork": false,
+ "created_at": "2025-12-17T00:45:57Z",
+ "updated_at": "2026-01-09T03:37:44Z",
+ "pushed_at": "2025-12-17T00:59:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119707043,
+ "name": "OpsGuard-simulation",
+ "full_name": "shubham-01-star\/OpsGuard-simulation",
+ "owner": {
+ "login": "shubham-01-star",
+ "id": 72158457,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72158457?v=4",
+ "html_url": "https:\/\/github.com\/shubham-01-star",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shubham-01-star\/OpsGuard-simulation",
+ "description": "OpsGuard eliminates the \"3 AM PagerDuty\" nightmare, specifically protecting against threats like the recent CVE-2025-55184 (Next.js DoS)",
+ "fork": false,
+ "created_at": "2025-12-19T17:55:09Z",
+ "updated_at": "2025-12-23T22:16:11Z",
+ "pushed_at": "2025-12-20T20:01:17Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126528604,
"name": "CVE-2025-55184_Testing",
@@ -14,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
- "updated_at": "2026-06-02T12:16:14Z",
- "pushed_at": "2026-06-02T12:16:10Z",
+ "updated_at": "2026-06-02T15:26:30Z",
+ "pushed_at": "2026-06-02T15:19:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-55188.json b/2025/CVE-2025-55188.json
index 4c0db5e6dd..502fc654fe 100644
--- a/2025/CVE-2025-55188.json
+++ b/2025/CVE-2025-55188.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1035891158,
+ "name": "CVE-2025-55188-7z-exploit",
+ "full_name": "hunters-sec\/CVE-2025-55188-7z-exploit",
+ "owner": {
+ "login": "hunters-sec",
+ "id": 223824247,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223824247?v=4",
+ "html_url": "https:\/\/github.com\/hunters-sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hunters-sec\/CVE-2025-55188-7z-exploit",
+ "description": "7z exploit POC versions prior to 25.01",
+ "fork": false,
+ "created_at": "2025-08-11T08:47:19Z",
+ "updated_at": "2026-04-24T05:22:54Z",
+ "pushed_at": "2025-08-11T08:49:24Z",
+ "stargazers_count": 32,
+ "watchers_count": 32,
+ "has_discussions": false,
+ "forks_count": 8,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 8,
+ "watchers": 32,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1046001981,
"name": "CVE-2025-55188",
diff --git a/2025/CVE-2025-55234.json b/2025/CVE-2025-55234.json
new file mode 100644
index 0000000000..7006e91036
--- /dev/null
+++ b/2025/CVE-2025-55234.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1055905487,
+ "name": "CVE-2025-55234",
+ "full_name": "mrk336\/CVE-2025-55234",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/CVE-2025-55234",
+ "description": "This vulnerability allows attackers to perform relay attacks against the SMB (Server Message Block) protocol. If successful, it can lead to Elevation of Privilege (EoP) essentially allowing unauthorized users to gain higher-level access on a system",
+ "fork": false,
+ "created_at": "2025-09-13T02:39:10Z",
+ "updated_at": "2025-11-17T13:01:30Z",
+ "pushed_at": "2025-09-13T02:47:12Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1056921660,
+ "name": "Patch-the-Path-CVE-2025-55234-Detection-Defense",
+ "full_name": "mrk336\/Patch-the-Path-CVE-2025-55234-Detection-Defense",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/Patch-the-Path-CVE-2025-55234-Detection-Defense",
+ "description": "This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw.",
+ "fork": false,
+ "created_at": "2025-09-15T03:21:12Z",
+ "updated_at": "2025-11-17T13:01:25Z",
+ "pushed_at": "2025-09-15T03:34:09Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55287.json b/2025/CVE-2025-55287.json
new file mode 100644
index 0000000000..f9ca931bca
--- /dev/null
+++ b/2025/CVE-2025-55287.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042251915,
+ "name": "CVE-2025-55287-POC",
+ "full_name": "Eternalvalhalla\/CVE-2025-55287-POC",
+ "owner": {
+ "login": "Eternalvalhalla",
+ "id": 108297989,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108297989?v=4",
+ "html_url": "https:\/\/github.com\/Eternalvalhalla",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Eternalvalhalla\/CVE-2025-55287-POC",
+ "description": "Authenticated stored XSS priv esc PoC. Affects Genealogy versions prior to 4.4.0",
+ "fork": false,
+ "created_at": "2025-08-21T18:06:09Z",
+ "updated_at": "2025-08-23T14:33:35Z",
+ "pushed_at": "2025-08-21T18:22:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55315.json b/2025/CVE-2025-55315.json
index eb2e4c62ad..7ef435acdf 100644
--- a/2025/CVE-2025-55315.json
+++ b/2025/CVE-2025-55315.json
@@ -36,6 +36,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1094048173,
+ "name": "CVE-2025-55315-PoC-Exploit",
+ "full_name": "ZemarKhos\/CVE-2025-55315-PoC-Exploit",
+ "owner": {
+ "login": "ZemarKhos",
+ "id": 25793969,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25793969?v=4",
+ "html_url": "https:\/\/github.com\/ZemarKhos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ZemarKhos\/CVE-2025-55315-PoC-Exploit",
+ "description": "CVE-2025-55315 PoC Exploit",
+ "fork": false,
+ "created_at": "2025-11-11T07:22:16Z",
+ "updated_at": "2026-03-19T00:40:00Z",
+ "pushed_at": "2025-11-11T07:35:42Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105192964,
+ "name": "CVE-2025-55315",
+ "full_name": "MartinFabianIonut\/CVE-2025-55315",
+ "owner": {
+ "login": "MartinFabianIonut",
+ "id": 118250277,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118250277?v=4",
+ "html_url": "https:\/\/github.com\/MartinFabianIonut",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MartinFabianIonut\/CVE-2025-55315",
+ "description": "Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle requests past proxies and load balancers in vulnerable ASP.NET Core\/Kestrel servers.",
+ "fork": false,
+ "created_at": "2025-11-27T09:09:28Z",
+ "updated_at": "2025-12-02T06:50:29Z",
+ "pushed_at": "2025-11-30T09:21:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1214857365,
"name": "CVE-2025-55315",
diff --git a/2025/CVE-2025-55349.json b/2025/CVE-2025-55349.json
new file mode 100644
index 0000000000..3ca2c0b020
--- /dev/null
+++ b/2025/CVE-2025-55349.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1047921989,
+ "name": "CVE-2025-55349",
+ "full_name": "GoldenTicketLabs\/CVE-2025-55349",
+ "owner": {
+ "login": "GoldenTicketLabs",
+ "id": 216616404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216616404?v=4",
+ "html_url": "https:\/\/github.com\/GoldenTicketLabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GoldenTicketLabs\/CVE-2025-55349",
+ "description": "repo for CVE-2025-55349",
+ "fork": false,
+ "created_at": "2025-08-31T14:34:08Z",
+ "updated_at": "2025-08-31T14:34:45Z",
+ "pushed_at": "2025-08-31T14:34:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55449.json b/2025/CVE-2025-55449.json
new file mode 100644
index 0000000000..ebef0ccc85
--- /dev/null
+++ b/2025/CVE-2025-55449.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1094250131,
+ "name": "CVE-2025-55449-AstrBot-RCE",
+ "full_name": "Marven11\/CVE-2025-55449-AstrBot-RCE",
+ "owner": {
+ "login": "Marven11",
+ "id": 110723864,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110723864?v=4",
+ "html_url": "https:\/\/github.com\/Marven11",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Marven11\/CVE-2025-55449-AstrBot-RCE",
+ "description": "AstrBot老版本RCE",
+ "fork": false,
+ "created_at": "2025-11-11T13:11:04Z",
+ "updated_at": "2026-05-15T05:47:01Z",
+ "pushed_at": "2025-11-11T13:18:43Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113532918,
+ "name": "CVE-2025-55449",
+ "full_name": "xhh1h\/CVE-2025-55449",
+ "owner": {
+ "login": "xhh1h",
+ "id": 94357509,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94357509?v=4",
+ "html_url": "https:\/\/github.com\/xhh1h",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xhh1h\/CVE-2025-55449",
+ "description": "CVE-2025-55449 EXP",
+ "fork": false,
+ "created_at": "2025-12-10T05:31:57Z",
+ "updated_at": "2026-01-08T02:00:13Z",
+ "pushed_at": "2025-12-10T05:32:32Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55575.json b/2025/CVE-2025-55575.json
new file mode 100644
index 0000000000..fd622cc37f
--- /dev/null
+++ b/2025/CVE-2025-55575.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1042898566,
+ "name": "CVE-2025-55575",
+ "full_name": "Aether-0\/CVE-2025-55575",
+ "owner": {
+ "login": "Aether-0",
+ "id": 143575444,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143575444?v=4",
+ "html_url": "https:\/\/github.com\/Aether-0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Aether-0\/CVE-2025-55575",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-22T19:04:24Z",
+ "updated_at": "2025-08-25T18:42:51Z",
+ "pushed_at": "2025-08-25T18:42:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55579.json b/2025/CVE-2025-55579.json
new file mode 100644
index 0000000000..bbc6ff6d6d
--- /dev/null
+++ b/2025/CVE-2025-55579.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046384513,
+ "name": "CVE-2025-55579",
+ "full_name": "ddobrev25\/CVE-2025-55579",
+ "owner": {
+ "login": "ddobrev25",
+ "id": 105744807,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105744807?v=4",
+ "html_url": "https:\/\/github.com\/ddobrev25",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ddobrev25\/CVE-2025-55579",
+ "description": "CVE-2025-55579",
+ "fork": false,
+ "created_at": "2025-08-28T15:54:57Z",
+ "updated_at": "2025-08-29T11:19:52Z",
+ "pushed_at": "2025-08-29T10:41:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55580.json b/2025/CVE-2025-55580.json
new file mode 100644
index 0000000000..e16b26ee78
--- /dev/null
+++ b/2025/CVE-2025-55580.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046471259,
+ "name": "CVE-2025-55580",
+ "full_name": "ddobrev25\/CVE-2025-55580",
+ "owner": {
+ "login": "ddobrev25",
+ "id": 105744807,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105744807?v=4",
+ "html_url": "https:\/\/github.com\/ddobrev25",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ddobrev25\/CVE-2025-55580",
+ "description": "CVE-2025-55580",
+ "fork": false,
+ "created_at": "2025-08-28T18:29:44Z",
+ "updated_at": "2025-08-29T11:35:54Z",
+ "pushed_at": "2025-08-28T18:30:06Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55668.json b/2025/CVE-2025-55668.json
new file mode 100644
index 0000000000..a67cf96eba
--- /dev/null
+++ b/2025/CVE-2025-55668.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1037435050,
+ "name": "CVE-2025-55668",
+ "full_name": "gregk4sec\/CVE-2025-55668",
+ "owner": {
+ "login": "gregk4sec",
+ "id": 203150744,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/203150744?v=4",
+ "html_url": "https:\/\/github.com\/gregk4sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gregk4sec\/CVE-2025-55668",
+ "description": "Apache Tomcat - Session fixation via rewrite valve",
+ "fork": false,
+ "created_at": "2025-08-13T15:08:59Z",
+ "updated_at": "2025-08-13T15:09:03Z",
+ "pushed_at": "2025-08-13T15:08:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55746.json b/2025/CVE-2025-55746.json
new file mode 100644
index 0000000000..320648f4f8
--- /dev/null
+++ b/2025/CVE-2025-55746.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1049329573,
+ "name": "directus-preso",
+ "full_name": "r4bbit-r4\/directus-preso",
+ "owner": {
+ "login": "r4bbit-r4",
+ "id": 51714341,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51714341?v=4",
+ "html_url": "https:\/\/github.com\/r4bbit-r4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r4bbit-r4\/directus-preso",
+ "description": "Presentation about CVE-2025-55746",
+ "fork": false,
+ "created_at": "2025-09-02T20:19:01Z",
+ "updated_at": "2026-01-24T03:42:02Z",
+ "pushed_at": "2025-09-11T03:12:41Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55780.json b/2025/CVE-2025-55780.json
new file mode 100644
index 0000000000..7ac3ba8e4a
--- /dev/null
+++ b/2025/CVE-2025-55780.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1063027808,
+ "name": "CVE-2025-55780",
+ "full_name": "ISH2YU\/CVE-2025-55780",
+ "owner": {
+ "login": "ISH2YU",
+ "id": 118013132,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118013132?v=4",
+ "html_url": "https:\/\/github.com\/ISH2YU",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ISH2YU\/CVE-2025-55780",
+ "description": "Null Pointer Dereference in MuPDF , First CVE discovered by me ",
+ "fork": false,
+ "created_at": "2025-09-24T04:24:06Z",
+ "updated_at": "2025-09-30T17:57:39Z",
+ "pushed_at": "2025-09-30T17:57:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55816.json b/2025/CVE-2025-55816.json
new file mode 100644
index 0000000000..a255950af1
--- /dev/null
+++ b/2025/CVE-2025-55816.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114563793,
+ "name": "CVE-2025-55816",
+ "full_name": "partywavesec\/CVE-2025-55816",
+ "owner": {
+ "login": "partywavesec",
+ "id": 98420665,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98420665?v=4",
+ "html_url": "https:\/\/github.com\/partywavesec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/partywavesec\/CVE-2025-55816",
+ "description": "CVE-2025-55816 HotelDruid 3.0.7",
+ "fork": false,
+ "created_at": "2025-12-11T14:55:20Z",
+ "updated_at": "2025-12-11T15:06:12Z",
+ "pushed_at": "2025-12-11T15:06:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55817.json b/2025/CVE-2025-55817.json
new file mode 100644
index 0000000000..567ba8ddd7
--- /dev/null
+++ b/2025/CVE-2025-55817.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064847808,
+ "name": "CVE-2025-55817",
+ "full_name": "5qu1n7\/CVE-2025-55817",
+ "owner": {
+ "login": "5qu1n7",
+ "id": 44474414,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44474414?v=4",
+ "html_url": "https:\/\/github.com\/5qu1n7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/5qu1n7\/CVE-2025-55817",
+ "description": "ChilliCream Nitro GraphQL version 28.0.13 is vulnerable to multiple Stored Cross Site Scripting (XSS) Vulnerabilities",
+ "fork": false,
+ "created_at": "2025-09-26T16:38:16Z",
+ "updated_at": "2025-09-26T16:47:45Z",
+ "pushed_at": "2025-09-26T16:47:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55885.json b/2025/CVE-2025-55885.json
new file mode 100644
index 0000000000..387a5d2bda
--- /dev/null
+++ b/2025/CVE-2025-55885.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1060692421,
+ "name": "CVE-2025-55885",
+ "full_name": "0xZeroSec\/CVE-2025-55885",
+ "owner": {
+ "login": "0xZeroSec",
+ "id": 221114258,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221114258?v=4",
+ "html_url": "https:\/\/github.com\/0xZeroSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xZeroSec\/CVE-2025-55885",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-20T11:56:24Z",
+ "updated_at": "2025-09-26T16:45:58Z",
+ "pushed_at": "2025-09-20T12:03:08Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55886.json b/2025/CVE-2025-55886.json
new file mode 100644
index 0000000000..61d7478912
--- /dev/null
+++ b/2025/CVE-2025-55886.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1059575408,
+ "name": "CVE-2025-55886",
+ "full_name": "0xZeroSec\/CVE-2025-55886",
+ "owner": {
+ "login": "0xZeroSec",
+ "id": 221114258,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221114258?v=4",
+ "html_url": "https:\/\/github.com\/0xZeroSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xZeroSec\/CVE-2025-55886",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-18T16:20:57Z",
+ "updated_at": "2025-09-26T16:46:05Z",
+ "pushed_at": "2025-09-20T11:49:02Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55887.json b/2025/CVE-2025-55887.json
new file mode 100644
index 0000000000..9ea187ee4e
--- /dev/null
+++ b/2025/CVE-2025-55887.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1059575666,
+ "name": "CVE-2025-55887",
+ "full_name": "0xZeroSec\/CVE-2025-55887",
+ "owner": {
+ "login": "0xZeroSec",
+ "id": 221114258,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221114258?v=4",
+ "html_url": "https:\/\/github.com\/0xZeroSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xZeroSec\/CVE-2025-55887",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-18T16:21:24Z",
+ "updated_at": "2025-09-26T16:46:09Z",
+ "pushed_at": "2025-09-20T11:48:43Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55888.json b/2025/CVE-2025-55888.json
new file mode 100644
index 0000000000..39ea9b24ee
--- /dev/null
+++ b/2025/CVE-2025-55888.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1059574281,
+ "name": "CVE-2025-55888",
+ "full_name": "0xZeroSec\/CVE-2025-55888",
+ "owner": {
+ "login": "0xZeroSec",
+ "id": 221114258,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221114258?v=4",
+ "html_url": "https:\/\/github.com\/0xZeroSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xZeroSec\/CVE-2025-55888",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-18T16:19:05Z",
+ "updated_at": "2025-09-26T16:46:02Z",
+ "pushed_at": "2025-09-20T11:55:55Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55996.json b/2025/CVE-2025-55996.json
new file mode 100644
index 0000000000..a4a8a19801
--- /dev/null
+++ b/2025/CVE-2025-55996.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1055297247,
+ "name": "viber-desktop-html-injection",
+ "full_name": "thawkhant\/viber-desktop-html-injection",
+ "owner": {
+ "login": "thawkhant",
+ "id": 91838782,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91838782?v=4",
+ "html_url": "https:\/\/github.com\/thawkhant",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thawkhant\/viber-desktop-html-injection",
+ "description": "Public writeup for CVE-2025-55996 (Viber Desktop HTML Injection)",
+ "fork": false,
+ "created_at": "2025-09-12T04:18:35Z",
+ "updated_at": "2026-01-13T11:21:01Z",
+ "pushed_at": "2025-09-12T04:22:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-55998.json b/2025/CVE-2025-55998.json
new file mode 100644
index 0000000000..6dedf33121
--- /dev/null
+++ b/2025/CVE-2025-55998.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1049927561,
+ "name": "CVE-2025-55998",
+ "full_name": "Ocmenog\/CVE-2025-55998",
+ "owner": {
+ "login": "Ocmenog",
+ "id": 127761594,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127761594?v=4",
+ "html_url": "https:\/\/github.com\/Ocmenog",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ocmenog\/CVE-2025-55998",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-03T17:41:30Z",
+ "updated_at": "2025-09-03T21:43:51Z",
+ "pushed_at": "2025-09-03T21:43:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56019.json b/2025/CVE-2025-56019.json
new file mode 100644
index 0000000000..3bec2b6677
--- /dev/null
+++ b/2025/CVE-2025-56019.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1055971449,
+ "name": "Agatsa-EasyTouch-Plus---CVE-2025-56019",
+ "full_name": "Yashodhanvivek\/Agatsa-EasyTouch-Plus---CVE-2025-56019",
+ "owner": {
+ "login": "Yashodhanvivek",
+ "id": 5335615,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5335615?v=4",
+ "html_url": "https:\/\/github.com\/Yashodhanvivek",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yashodhanvivek\/Agatsa-EasyTouch-Plus---CVE-2025-56019",
+ "description": "This report is for CVE-2025-56019 reserved for Easytouch+product for BLE authentication vulnerability assigned to Discoverer Yashodhan Vivek Mandke. Please download the report pdf in this repositoy",
+ "fork": false,
+ "created_at": "2025-09-13T06:14:13Z",
+ "updated_at": "2025-09-28T09:24:40Z",
+ "pushed_at": "2025-09-28T09:24:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56311.json b/2025/CVE-2025-56311.json
new file mode 100644
index 0000000000..e554992ed7
--- /dev/null
+++ b/2025/CVE-2025-56311.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1018207652,
+ "name": "CVE-2025-56311",
+ "full_name": "wrathfulDiety\/CVE-2025-56311",
+ "owner": {
+ "login": "wrathfulDiety",
+ "id": 36190613,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36190613?v=4",
+ "html_url": "https:\/\/github.com\/wrathfulDiety",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wrathfulDiety\/CVE-2025-56311",
+ "description": "CSRF vulnerability in FD602GW-DX-R410 router allows remote attackers to reboot the device via a crafted POST request to \/boaform\/admin\/formReboot when an admin is authenticated.",
+ "fork": false,
+ "created_at": "2025-07-11T19:52:02Z",
+ "updated_at": "2025-09-22T16:40:11Z",
+ "pushed_at": "2025-09-22T16:40:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56383.json b/2025/CVE-2025-56383.json
new file mode 100644
index 0000000000..e4554d24d7
--- /dev/null
+++ b/2025/CVE-2025-56383.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064536106,
+ "name": "CVE-2025-56383-Proof-of-Concept",
+ "full_name": "zer0t0\/CVE-2025-56383-Proof-of-Concept",
+ "owner": {
+ "login": "zer0t0",
+ "id": 137703924,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137703924?v=4",
+ "html_url": "https:\/\/github.com\/zer0t0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zer0t0\/CVE-2025-56383-Proof-of-Concept",
+ "description": "CVE-2025-56383-Proof-of-Concept",
+ "fork": false,
+ "created_at": "2025-09-26T07:15:50Z",
+ "updated_at": "2026-05-28T14:56:39Z",
+ "pushed_at": "2025-09-26T07:16:15Z",
+ "stargazers_count": 56,
+ "watchers_count": 56,
+ "has_discussions": false,
+ "forks_count": 11,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 11,
+ "watchers": 56,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56450.json b/2025/CVE-2025-56450.json
new file mode 100644
index 0000000000..e72475d6a1
--- /dev/null
+++ b/2025/CVE-2025-56450.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1077674702,
+ "name": "CVE-2025-56450",
+ "full_name": "apboss123\/CVE-2025-56450",
+ "owner": {
+ "login": "apboss123",
+ "id": 30875239,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30875239?v=4",
+ "html_url": "https:\/\/github.com\/apboss123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/apboss123\/CVE-2025-56450",
+ "description": "Unauthenticated SQL Injection in Log2Space Subscriber Management Software",
+ "fork": false,
+ "created_at": "2025-10-16T15:20:08Z",
+ "updated_at": "2025-12-15T13:04:23Z",
+ "pushed_at": "2025-12-15T13:03:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56499.json b/2025/CVE-2025-56499.json
new file mode 100644
index 0000000000..7e40fd368e
--- /dev/null
+++ b/2025/CVE-2025-56499.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094810613,
+ "name": "CVE-2025-56499",
+ "full_name": "Cherrling\/CVE-2025-56499",
+ "owner": {
+ "login": "Cherrling",
+ "id": 37233261,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37233261?v=4",
+ "html_url": "https:\/\/github.com\/Cherrling",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cherrling\/CVE-2025-56499",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-12T07:47:43Z",
+ "updated_at": "2026-01-13T11:21:16Z",
+ "pushed_at": "2025-11-16T10:31:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56503.json b/2025/CVE-2025-56503.json
new file mode 100644
index 0000000000..165dab8825
--- /dev/null
+++ b/2025/CVE-2025-56503.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1076706576,
+ "name": "CVE-2025-56503",
+ "full_name": "secxplorers\/CVE-2025-56503",
+ "owner": {
+ "login": "secxplorers",
+ "id": 175973413,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175973413?v=4",
+ "html_url": "https:\/\/github.com\/secxplorers",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/secxplorers\/CVE-2025-56503",
+ "description": "CVE-2025-56503 : Sublime Text 4 4200",
+ "fork": false,
+ "created_at": "2025-10-15T08:30:14Z",
+ "updated_at": "2025-11-12T05:46:52Z",
+ "pushed_at": "2025-11-12T05:46:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56513.json b/2025/CVE-2025-56513.json
new file mode 100644
index 0000000000..5e7574496f
--- /dev/null
+++ b/2025/CVE-2025-56513.json
@@ -0,0 +1,45 @@
+[
+ {
+ "id": 1123853334,
+ "name": "CVE-2025-56513-NiceHash-Update-Chain-Compromise",
+ "full_name": "psycho-prince\/CVE-2025-56513-NiceHash-Update-Chain-Compromise",
+ "owner": {
+ "login": "psycho-prince",
+ "id": 65974917,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65974917?v=4",
+ "html_url": "https:\/\/github.com\/psycho-prince",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/psycho-prince\/CVE-2025-56513-NiceHash-Update-Chain-Compromise",
+ "description": "Critical supply-chain vulnerability research on NiceHash QuickMiner update mechanism (CVE-2025-56513). Includes technical analysis, attack scenarios, impact assessment, and remediation guidance.",
+ "fork": false,
+ "created_at": "2025-12-27T19:11:03Z",
+ "updated_at": "2025-12-27T19:20:33Z",
+ "pushed_at": "2025-12-27T19:13:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": true,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "infosec",
+ "mitm",
+ "nicehash",
+ "offensive-security",
+ "reverse-engineering",
+ "supply-chain-security",
+ "vulnerability-research"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56514.json b/2025/CVE-2025-56514.json
new file mode 100644
index 0000000000..8602e26754
--- /dev/null
+++ b/2025/CVE-2025-56514.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1067319627,
+ "name": "CVE-2025-56514",
+ "full_name": "Kov404\/CVE-2025-56514",
+ "owner": {
+ "login": "Kov404",
+ "id": 177751667,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177751667?v=4",
+ "html_url": "https:\/\/github.com\/Kov404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kov404\/CVE-2025-56514",
+ "description": "Cross Site Scripting (XSS) Vulnerability in Fiora Chat Application",
+ "fork": false,
+ "created_at": "2025-09-30T17:29:15Z",
+ "updated_at": "2025-09-30T17:31:03Z",
+ "pushed_at": "2025-09-30T17:31:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56515.json b/2025/CVE-2025-56515.json
new file mode 100644
index 0000000000..2fba0ab58b
--- /dev/null
+++ b/2025/CVE-2025-56515.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1067333715,
+ "name": "CVE-2025-56515",
+ "full_name": "Kov404\/CVE-2025-56515",
+ "owner": {
+ "login": "Kov404",
+ "id": 177751667,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177751667?v=4",
+ "html_url": "https:\/\/github.com\/Kov404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kov404\/CVE-2025-56515",
+ "description": "Cross-Site Scripting (XSS) Vulnerability in Fiora Chat Application",
+ "fork": false,
+ "created_at": "2025-09-30T17:54:59Z",
+ "updated_at": "2025-09-30T18:02:55Z",
+ "pushed_at": "2025-09-30T18:02:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56526.json b/2025/CVE-2025-56526.json
new file mode 100644
index 0000000000..351ecd53aa
--- /dev/null
+++ b/2025/CVE-2025-56526.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096267259,
+ "name": "Kotaemon-CVE-2025-56526-56527-disclosure",
+ "full_name": "HanTul\/Kotaemon-CVE-2025-56526-56527-disclosure",
+ "owner": {
+ "login": "HanTul",
+ "id": 150041766,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150041766?v=4",
+ "html_url": "https:\/\/github.com\/HanTul",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/HanTul\/Kotaemon-CVE-2025-56526-56527-disclosure",
+ "description": "Public disclosure for CVE-2025-56526 and CVE-2025-56527 — Stored XSS via unsanitized PDF content rendering and plaintext credential exposure in Kotaemon 0.11.0. Includes full technical analysis, PoC, impact assessment, and responsible disclosure timeline.",
+ "fork": false,
+ "created_at": "2025-11-14T07:11:51Z",
+ "updated_at": "2025-11-19T08:53:36Z",
+ "pushed_at": "2025-11-16T11:21:46Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56605.json b/2025/CVE-2025-56605.json
new file mode 100644
index 0000000000..404d62e0cd
--- /dev/null
+++ b/2025/CVE-2025-56605.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053845443,
+ "name": "CVE-2025-56605",
+ "full_name": "Userr404\/CVE-2025-56605",
+ "owner": {
+ "login": "Userr404",
+ "id": 183587236,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183587236?v=4",
+ "html_url": "https:\/\/github.com\/Userr404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Userr404\/CVE-2025-56605",
+ "description": "XSS (Cross-Site Scripting Vulnerability)",
+ "fork": false,
+ "created_at": "2025-09-10T02:43:16Z",
+ "updated_at": "2025-09-10T02:44:42Z",
+ "pushed_at": "2025-09-10T02:44:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56608.json b/2025/CVE-2025-56608.json
new file mode 100644
index 0000000000..d664b9c2dc
--- /dev/null
+++ b/2025/CVE-2025-56608.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1049314749,
+ "name": "Aninda-security-advisories",
+ "full_name": "anonaninda\/Aninda-security-advisories",
+ "owner": {
+ "login": "anonaninda",
+ "id": 160830945,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160830945?v=4",
+ "html_url": "https:\/\/github.com\/anonaninda",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/anonaninda\/Aninda-security-advisories",
+ "description": "Security advisories published by Aninda , including CVE-2025-56608 and future findings.",
+ "fork": false,
+ "created_at": "2025-09-02T19:46:39Z",
+ "updated_at": "2025-09-02T19:52:09Z",
+ "pushed_at": "2025-09-02T19:52:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56643.json b/2025/CVE-2025-56643.json
new file mode 100644
index 0000000000..742fa8176e
--- /dev/null
+++ b/2025/CVE-2025-56643.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091243860,
+ "name": "CVE-2025-56643",
+ "full_name": "0xBS0D27\/CVE-2025-56643",
+ "owner": {
+ "login": "0xBS0D27",
+ "id": 242480451,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242480451?v=4",
+ "html_url": "https:\/\/github.com\/0xBS0D27",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xBS0D27\/CVE-2025-56643",
+ "description": "Public reference for CVE-2025-56643 – Wiki.js 2.5.307 JWT Session Vulnerability",
+ "fork": false,
+ "created_at": "2025-11-06T18:48:07Z",
+ "updated_at": "2025-11-18T19:25:45Z",
+ "pushed_at": "2025-11-06T18:51:46Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56708.json b/2025/CVE-2025-56708.json
new file mode 100644
index 0000000000..2b7cad418f
--- /dev/null
+++ b/2025/CVE-2025-56708.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1065774344,
+ "name": "rtty_CVE-2025-56708-CVE-2025-56709",
+ "full_name": "xkaneiki\/rtty_CVE-2025-56708-CVE-2025-56709",
+ "owner": {
+ "login": "xkaneiki",
+ "id": 26479696,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26479696?v=4",
+ "html_url": "https:\/\/github.com\/xkaneiki",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xkaneiki\/rtty_CVE-2025-56708-CVE-2025-56709",
+ "description": "CVE-2025-56708&CVE-2025-56709漏洞详解",
+ "fork": false,
+ "created_at": "2025-09-28T12:02:27Z",
+ "updated_at": "2025-12-25T03:22:27Z",
+ "pushed_at": "2025-09-28T12:15:02Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56762.json b/2025/CVE-2025-56762.json
new file mode 100644
index 0000000000..1fbdb2593b
--- /dev/null
+++ b/2025/CVE-2025-56762.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1060253788,
+ "name": "CVE-2025-56762",
+ "full_name": "Shaunak-Chatterjee\/CVE-2025-56762",
+ "owner": {
+ "login": "Shaunak-Chatterjee",
+ "id": 36357552,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36357552?v=4",
+ "html_url": "https:\/\/github.com\/Shaunak-Chatterjee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shaunak-Chatterjee\/CVE-2025-56762",
+ "description": "Proof of Concept for CVE-2025-56762",
+ "fork": false,
+ "created_at": "2025-09-19T16:00:12Z",
+ "updated_at": "2025-09-19T16:15:25Z",
+ "pushed_at": "2025-09-19T16:15:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56764.json b/2025/CVE-2025-56764.json
new file mode 100644
index 0000000000..2b5351414f
--- /dev/null
+++ b/2025/CVE-2025-56764.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1065392649,
+ "name": "CVE-2025-56764",
+ "full_name": "Remenis\/CVE-2025-56764",
+ "owner": {
+ "login": "Remenis",
+ "id": 97015958,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
+ "html_url": "https:\/\/github.com\/Remenis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Remenis\/CVE-2025-56764",
+ "description": "Username Enumeration in Trivision NC-227WF",
+ "fork": false,
+ "created_at": "2025-09-27T16:26:07Z",
+ "updated_at": "2025-11-11T15:17:52Z",
+ "pushed_at": "2025-09-30T14:42:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56771.json b/2025/CVE-2025-56771.json
new file mode 100644
index 0000000000..052fdd4b09
--- /dev/null
+++ b/2025/CVE-2025-56771.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023238815,
+ "name": "CVE-2025-56771",
+ "full_name": "RRespxwnss\/CVE-2025-56771",
+ "owner": {
+ "login": "RRespxwnss",
+ "id": 100174458,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100174458?v=4",
+ "html_url": "https:\/\/github.com\/RRespxwnss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RRespxwnss\/CVE-2025-56771",
+ "description": "During analysis of the ecodotempo.com.br website, a Stored Cross-Site Scripting (XSS) vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are subsequently rendered to other users without proper sanitization, specifically on the home page of the unauthenticated (disconnected) area.",
+ "fork": false,
+ "created_at": "2025-07-20T20:17:52Z",
+ "updated_at": "2025-09-17T23:08:37Z",
+ "pushed_at": "2025-07-20T21:07:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56772.json b/2025/CVE-2025-56772.json
new file mode 100644
index 0000000000..62446d5f3a
--- /dev/null
+++ b/2025/CVE-2025-56772.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023210175,
+ "name": "CVE-2025-56772",
+ "full_name": "RRespxwnss\/CVE-2025-56772",
+ "owner": {
+ "login": "RRespxwnss",
+ "id": 100174458,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100174458?v=4",
+ "html_url": "https:\/\/github.com\/RRespxwnss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RRespxwnss\/CVE-2025-56772",
+ "description": "During the analysis of the website ecodotempo.com.br, a Stored Cross-Site Scripting (XSS) vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are later rendered to other users without proper sanitization, specifically on the main page of the unauthenticated (logged-out) area.",
+ "fork": false,
+ "created_at": "2025-07-20T18:53:12Z",
+ "updated_at": "2025-09-17T23:06:07Z",
+ "pushed_at": "2025-07-20T20:50:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56795.json b/2025/CVE-2025-56795.json
new file mode 100644
index 0000000000..dfb6aa4092
--- /dev/null
+++ b/2025/CVE-2025-56795.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064862541,
+ "name": "CVE-2025-56795",
+ "full_name": "B1tBreaker\/CVE-2025-56795",
+ "owner": {
+ "login": "B1tBreaker",
+ "id": 48139390,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48139390?v=4",
+ "html_url": "https:\/\/github.com\/B1tBreaker",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/B1tBreaker\/CVE-2025-56795",
+ "description": "Stored Cross-Site Scripting (XSS) vulnerability affecting the recipe creation functionality in Mealie versions up to 3.0.1.",
+ "fork": false,
+ "created_at": "2025-09-26T17:06:37Z",
+ "updated_at": "2025-12-14T05:51:59Z",
+ "pushed_at": "2025-09-30T22:12:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56803.json b/2025/CVE-2025-56803.json
new file mode 100644
index 0000000000..9e774bc357
--- /dev/null
+++ b/2025/CVE-2025-56803.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053233651,
+ "name": "CVE-2025-56803",
+ "full_name": "yosasasutsut\/CVE-2025-56803",
+ "owner": {
+ "login": "yosasasutsut",
+ "id": 17229719,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17229719?v=4",
+ "html_url": "https:\/\/github.com\/yosasasutsut",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yosasasutsut\/CVE-2025-56803",
+ "description": "OS Command Injection Vulnerability via Plugin Execution in Figma Desktop Application",
+ "fork": false,
+ "created_at": "2025-09-09T07:03:58Z",
+ "updated_at": "2025-09-09T07:03:58Z",
+ "pushed_at": "2025-09-07T12:33:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56815.json b/2025/CVE-2025-56815.json
new file mode 100644
index 0000000000..2805f28662
--- /dev/null
+++ b/2025/CVE-2025-56815.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1063294282,
+ "name": "CVE-2025-56815",
+ "full_name": "xiaoxiaoranxxx\/CVE-2025-56815",
+ "owner": {
+ "login": "xiaoxiaoranxxx",
+ "id": 78064939,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78064939?v=4",
+ "html_url": "https:\/\/github.com\/xiaoxiaoranxxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xiaoxiaoranxxx\/CVE-2025-56815",
+ "description": "Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST \/viz\/image interface, since the server directly uses MultipartFile.transferTo() to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename.",
+ "fork": false,
+ "created_at": "2025-09-24T12:34:31Z",
+ "updated_at": "2026-03-25T13:35:00Z",
+ "pushed_at": "2025-09-24T12:54:52Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-56819.json b/2025/CVE-2025-56819.json
new file mode 100644
index 0000000000..1ce82f2411
--- /dev/null
+++ b/2025/CVE-2025-56819.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1063308279,
+ "name": "CVE-2025-56819",
+ "full_name": "xyyzxc\/CVE-2025-56819",
+ "owner": {
+ "login": "xyyzxc",
+ "id": 180262404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180262404?v=4",
+ "html_url": "https:\/\/github.com\/xyyzxc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xyyzxc\/CVE-2025-56819",
+ "description": "An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.",
+ "fork": false,
+ "created_at": "2025-09-24T12:56:53Z",
+ "updated_at": "2025-10-23T18:09:48Z",
+ "pushed_at": "2025-09-24T12:58:45Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57055.json b/2025/CVE-2025-57055.json
new file mode 100644
index 0000000000..646e104eab
--- /dev/null
+++ b/2025/CVE-2025-57055.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1030940826,
+ "name": "CVE-2025-57055",
+ "full_name": "thawphone\/CVE-2025-57055",
+ "owner": {
+ "login": "thawphone",
+ "id": 96245024,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96245024?v=4",
+ "html_url": "https:\/\/github.com\/thawphone",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thawphone\/CVE-2025-57055",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-02T16:56:40Z",
+ "updated_at": "2025-09-13T05:58:17Z",
+ "pushed_at": "2025-09-13T05:58:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57174.json b/2025/CVE-2025-57174.json
new file mode 100644
index 0000000000..a105e0f155
--- /dev/null
+++ b/2025/CVE-2025-57174.json
@@ -0,0 +1,42 @@
+[
+ {
+ "id": 1063620484,
+ "name": "CVE-2025-57174",
+ "full_name": "semaja22\/CVE-2025-57174",
+ "owner": {
+ "login": "semaja22",
+ "id": 234286355,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234286355?v=4",
+ "html_url": "https:\/\/github.com\/semaja22",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/semaja22\/CVE-2025-57174",
+ "description": "CVE-2025-57174 Unauthenticated Remote Command Execution",
+ "fork": false,
+ "created_at": "2025-09-24T22:10:29Z",
+ "updated_at": "2025-09-24T22:20:57Z",
+ "pushed_at": "2025-09-24T22:14:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ceragon",
+ "cve-2025-57174",
+ "eh-8010",
+ "etherhaul",
+ "remote-code-execution",
+ "siklu"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57176.json b/2025/CVE-2025-57176.json
new file mode 100644
index 0000000000..4189f33755
--- /dev/null
+++ b/2025/CVE-2025-57176.json
@@ -0,0 +1,41 @@
+[
+ {
+ "id": 1063622742,
+ "name": "CVE-2025-57176",
+ "full_name": "semaja22\/CVE-2025-57176",
+ "owner": {
+ "login": "semaja22",
+ "id": 234286355,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234286355?v=4",
+ "html_url": "https:\/\/github.com\/semaja22",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/semaja22\/CVE-2025-57176",
+ "description": "CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-09-24T22:16:34Z",
+ "updated_at": "2025-09-24T22:21:27Z",
+ "pushed_at": "2025-09-24T22:18:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "ceragon",
+ "cve-2025-57176",
+ "eh-8010",
+ "etherhaul",
+ "siklu"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57199.json b/2025/CVE-2025-57199.json
new file mode 100644
index 0000000000..9c7808f938
--- /dev/null
+++ b/2025/CVE-2025-57199.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1075406955,
+ "name": "AvTech-PoCs",
+ "full_name": "xchg-rax-rax\/AvTech-PoCs",
+ "owner": {
+ "login": "xchg-rax-rax",
+ "id": 95374341,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95374341?v=4",
+ "html_url": "https:\/\/github.com\/xchg-rax-rax",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xchg-rax-rax\/AvTech-PoCs",
+ "description": "PoCs for CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202, and CVE-2025-57203",
+ "fork": false,
+ "created_at": "2025-10-13T13:09:17Z",
+ "updated_at": "2025-11-30T17:23:09Z",
+ "pushed_at": "2025-11-30T17:23:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57310.json b/2025/CVE-2025-57310.json
new file mode 100644
index 0000000000..3c989cf44b
--- /dev/null
+++ b/2025/CVE-2025-57310.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1092264049,
+ "name": "CVE-2025-57310",
+ "full_name": "MMAKINGDOM\/CVE-2025-57310",
+ "owner": {
+ "login": "MMAKINGDOM",
+ "id": 112818014,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112818014?v=4",
+ "html_url": "https:\/\/github.com\/MMAKINGDOM",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MMAKINGDOM\/CVE-2025-57310",
+ "description": "A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2\/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code.",
+ "fork": false,
+ "created_at": "2025-11-08T10:03:20Z",
+ "updated_at": "2025-11-08T10:18:38Z",
+ "pushed_at": "2025-11-08T10:18:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": true,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105121010,
+ "name": "CVE-2025-57310",
+ "full_name": "hossainshadat\/CVE-2025-57310",
+ "owner": {
+ "login": "hossainshadat",
+ "id": 28984804,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28984804?v=4",
+ "html_url": "https:\/\/github.com\/hossainshadat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hossainshadat\/CVE-2025-57310",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-27T06:58:31Z",
+ "updated_at": "2025-11-27T07:01:16Z",
+ "pushed_at": "2025-11-27T07:01:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57389.json b/2025/CVE-2025-57389.json
new file mode 100644
index 0000000000..987674a8c8
--- /dev/null
+++ b/2025/CVE-2025-57389.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1067202060,
+ "name": "CVE-2025-57389",
+ "full_name": "amalcew\/CVE-2025-57389",
+ "owner": {
+ "login": "amalcew",
+ "id": 73908014,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73908014?v=4",
+ "html_url": "https:\/\/github.com\/amalcew",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amalcew\/CVE-2025-57389",
+ "description": "A reflected cross-site scripting vulnerability in OpenWRT v18.06.2 ",
+ "fork": false,
+ "created_at": "2025-09-30T14:15:33Z",
+ "updated_at": "2025-09-30T15:04:03Z",
+ "pushed_at": "2025-09-30T15:04:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57392.json b/2025/CVE-2025-57392.json
new file mode 100644
index 0000000000..c957e7eed6
--- /dev/null
+++ b/2025/CVE-2025-57392.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1033844648,
+ "name": "CVE-2025-57392",
+ "full_name": "meisterlos\/CVE-2025-57392",
+ "owner": {
+ "login": "meisterlos",
+ "id": 81145753,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81145753?v=4",
+ "html_url": "https:\/\/github.com\/meisterlos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/meisterlos\/CVE-2025-57392",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-07T12:39:33Z",
+ "updated_at": "2025-09-09T20:24:44Z",
+ "pushed_at": "2025-09-09T20:24:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57460.json b/2025/CVE-2025-57460.json
new file mode 100644
index 0000000000..f1b3c6ca5c
--- /dev/null
+++ b/2025/CVE-2025-57460.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113973411,
+ "name": "CVE-2025-57460",
+ "full_name": "aljoharasubaie\/CVE-2025-57460",
+ "owner": {
+ "login": "aljoharasubaie",
+ "id": 90615766,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90615766?v=4",
+ "html_url": "https:\/\/github.com\/aljoharasubaie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aljoharasubaie\/CVE-2025-57460",
+ "description": "File upload vulnerability in machsol machpanel 8 allows attacker gain a webshell.",
+ "fork": false,
+ "created_at": "2025-12-10T18:10:20Z",
+ "updated_at": "2025-12-27T11:02:56Z",
+ "pushed_at": "2025-12-27T11:02:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57462.json b/2025/CVE-2025-57462.json
new file mode 100644
index 0000000000..506628000d
--- /dev/null
+++ b/2025/CVE-2025-57462.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113978652,
+ "name": "CVE-2025-57462",
+ "full_name": "aljoharasubaie\/CVE-2025-57462",
+ "owner": {
+ "login": "aljoharasubaie",
+ "id": 90615766,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90615766?v=4",
+ "html_url": "https:\/\/github.com\/aljoharasubaie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aljoharasubaie\/CVE-2025-57462",
+ "description": "Unauthenticated Access to Uploaded Files ",
+ "fork": false,
+ "created_at": "2025-12-10T18:18:50Z",
+ "updated_at": "2025-12-27T11:03:49Z",
+ "pushed_at": "2025-12-27T11:03:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57483.json b/2025/CVE-2025-57483.json
new file mode 100644
index 0000000000..b897c12d8f
--- /dev/null
+++ b/2025/CVE-2025-57483.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064774771,
+ "name": "CVE",
+ "full_name": "Jainil-89\/CVE",
+ "owner": {
+ "login": "Jainil-89",
+ "id": 157509729,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157509729?v=4",
+ "html_url": "https:\/\/github.com\/Jainil-89",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jainil-89\/CVE",
+ "description": "Xss In Tawk.to Live Chat Support (CVE-2025-57483)",
+ "fork": false,
+ "created_at": "2025-09-26T14:29:56Z",
+ "updated_at": "2025-09-30T05:35:16Z",
+ "pushed_at": "2025-09-26T15:02:38Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57489.json b/2025/CVE-2025-57489.json
new file mode 100644
index 0000000000..a0e14917cb
--- /dev/null
+++ b/2025/CVE-2025-57489.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1106747332,
+ "name": "CVE-2025-57489",
+ "full_name": "graypixel2121\/CVE-2025-57489",
+ "owner": {
+ "login": "graypixel2121",
+ "id": 242236793,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242236793?v=4",
+ "html_url": "https:\/\/github.com\/graypixel2121",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/graypixel2121\/CVE-2025-57489",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-29T21:27:08Z",
+ "updated_at": "2025-12-06T17:36:02Z",
+ "pushed_at": "2025-12-06T17:35:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57515.json b/2025/CVE-2025-57515.json
new file mode 100644
index 0000000000..bfce3096d5
--- /dev/null
+++ b/2025/CVE-2025-57515.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1060572399,
+ "name": "CVE-2025-57515",
+ "full_name": "sanchitsahni\/CVE-2025-57515",
+ "owner": {
+ "login": "sanchitsahni",
+ "id": 110830740,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110830740?v=4",
+ "html_url": "https:\/\/github.com\/sanchitsahni",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sanchitsahni\/CVE-2025-57515",
+ "description": "Uniclare Student Portal is an online platform providing students access to academic resources and administrative functions, including grades, course materials, assignment submission, instructor communication, class registration, and personal information management. It streamlines processes and enhances the student experience.",
+ "fork": false,
+ "created_at": "2025-09-20T06:49:17Z",
+ "updated_at": "2025-09-20T07:01:01Z",
+ "pushed_at": "2025-09-20T07:00:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5755.json b/2025/CVE-2025-5755.json
new file mode 100644
index 0000000000..a248ad3dc7
--- /dev/null
+++ b/2025/CVE-2025-5755.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016557964,
+ "name": "cve-2025-5755",
+ "full_name": "cybertechajju\/cve-2025-5755",
+ "owner": {
+ "login": "cybertechajju",
+ "id": 120666627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
+ "html_url": "https:\/\/github.com\/cybertechajju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybertechajju\/cve-2025-5755",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T07:30:36Z",
+ "updated_at": "2026-06-01T09:17:24Z",
+ "pushed_at": "2025-07-25T03:13:15Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-57576.json b/2025/CVE-2025-57576.json
new file mode 100644
index 0000000000..bcf4aefa55
--- /dev/null
+++ b/2025/CVE-2025-57576.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1034259572,
+ "name": "DWrwq",
+ "full_name": "p0et08\/DWrwq",
+ "owner": {
+ "login": "p0et08",
+ "id": 173439951,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173439951?v=4",
+ "html_url": "https:\/\/github.com\/p0et08",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/p0et08\/DWrwq",
+ "description": "This is a EXP For CVE-2025-57576. PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site > Scripting (XSS) in \/admin\/updateorder.php",
+ "fork": false,
+ "created_at": "2025-08-08T05:33:39Z",
+ "updated_at": "2025-09-05T03:31:51Z",
+ "pushed_at": "2025-09-05T03:30:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5777.json b/2025/CVE-2025-5777.json
index 4097c688e2..4b2e0cfbfc 100644
--- a/2025/CVE-2025-5777.json
+++ b/2025/CVE-2025-5777.json
@@ -32,6 +32,249 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1014001342,
+ "name": "CVE-2025-5777-CitrixBleed",
+ "full_name": "RickGeex\/CVE-2025-5777-CitrixBleed",
+ "owner": {
+ "login": "RickGeex",
+ "id": 7975904,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7975904?v=4",
+ "html_url": "https:\/\/github.com\/RickGeex",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RickGeex\/CVE-2025-5777-CitrixBleed",
+ "description": "CitrixBleed-2 (CVE-2025-5777) – proof-of-concept exploit for NetScaler ADC\/Gateway “memory bleed”",
+ "fork": false,
+ "created_at": "2025-07-04T21:13:37Z",
+ "updated_at": "2025-10-29T09:57:13Z",
+ "pushed_at": "2025-07-10T13:36:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1014275899,
+ "name": "CVE-2025-5777",
+ "full_name": "idobarel\/CVE-2025-5777",
+ "owner": {
+ "login": "idobarel",
+ "id": 55856610,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55856610?v=4",
+ "html_url": "https:\/\/github.com\/idobarel",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/idobarel\/CVE-2025-5777",
+ "description": "CitrixBleed2 poc",
+ "fork": false,
+ "created_at": "2025-07-05T11:49:53Z",
+ "updated_at": "2025-07-06T19:41:31Z",
+ "pushed_at": "2025-07-06T19:41:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014545734,
+ "name": "cve-2025-5777",
+ "full_name": "nocerainfosec\/cve-2025-5777",
+ "owner": {
+ "login": "nocerainfosec",
+ "id": 105872185,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105872185?v=4",
+ "html_url": "https:\/\/github.com\/nocerainfosec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nocerainfosec\/cve-2025-5777",
+ "description": "Memory disclosure vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway (VPN virtual server, ICA proxy, CVPN, RDP Proxy).",
+ "fork": false,
+ "created_at": "2025-07-05T23:56:36Z",
+ "updated_at": "2025-11-17T13:09:59Z",
+ "pushed_at": "2025-07-06T20:22:49Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "citrix",
+ "citrix-netscaler",
+ "cve-2025-5777"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014754118,
+ "name": "citrix_bleed_2",
+ "full_name": "RaR1991\/citrix_bleed_2",
+ "owner": {
+ "login": "RaR1991",
+ "id": 36803838,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36803838?v=4",
+ "html_url": "https:\/\/github.com\/RaR1991",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RaR1991\/citrix_bleed_2",
+ "description": "Citrix Bleed 2 PoC Scanner (CVE-2025-5777)",
+ "fork": false,
+ "created_at": "2025-07-06T10:55:22Z",
+ "updated_at": "2025-07-06T10:56:05Z",
+ "pushed_at": "2025-07-06T10:56:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014858887,
+ "name": "CitrixBleed-2-CVE-2025-5777",
+ "full_name": "orange0Mint\/CitrixBleed-2-CVE-2025-5777",
+ "owner": {
+ "login": "orange0Mint",
+ "id": 218682194,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218682194?v=4",
+ "html_url": "https:\/\/github.com\/orange0Mint",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/orange0Mint\/CitrixBleed-2-CVE-2025-5777",
+ "description": "CitrixBleed-2 Checker & Poc automatic exploit and check token.",
+ "fork": false,
+ "created_at": "2025-07-06T14:50:49Z",
+ "updated_at": "2025-10-16T03:03:23Z",
+ "pushed_at": "2025-07-06T16:59:17Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "citrixbleed-2",
+ "cve-2025-5777"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015991729,
+ "name": "CVE-2025-5777",
+ "full_name": "Chocapikk\/CVE-2025-5777",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-5777",
+ "description": "CitrixBleed 2 (CVE-2025-5777)",
+ "fork": false,
+ "created_at": "2025-07-08T10:27:16Z",
+ "updated_at": "2025-11-07T12:42:35Z",
+ "pushed_at": "2025-07-08T13:46:29Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016119103,
+ "name": "CVE-2025-5777",
+ "full_name": "win3zz\/CVE-2025-5777",
+ "owner": {
+ "login": "win3zz",
+ "id": 12781459,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12781459?v=4",
+ "html_url": "https:\/\/github.com\/win3zz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/win3zz\/CVE-2025-5777",
+ "description": "CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices",
+ "fork": false,
+ "created_at": "2025-07-08T14:12:45Z",
+ "updated_at": "2026-03-16T08:43:10Z",
+ "pushed_at": "2025-07-08T17:58:44Z",
+ "stargazers_count": 46,
+ "watchers_count": 46,
+ "has_discussions": false,
+ "forks_count": 14,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "citrix",
+ "citrixbleed2",
+ "cve-2025-5777",
+ "netscaler"
+ ],
+ "visibility": "public",
+ "forks": 14,
+ "watchers": 46,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1016546748,
"name": "CVE-2025-5777",
@@ -65,6 +308,313 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1017200534,
+ "name": "CVE-2025-5777",
+ "full_name": "bughuntar\/CVE-2025-5777",
+ "owner": {
+ "login": "bughuntar",
+ "id": 99727538,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99727538?v=4",
+ "html_url": "https:\/\/github.com\/bughuntar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bughuntar\/CVE-2025-5777",
+ "description": "CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)",
+ "fork": false,
+ "created_at": "2025-07-10T07:15:07Z",
+ "updated_at": "2026-05-18T02:44:03Z",
+ "pushed_at": "2025-07-11T11:19:59Z",
+ "stargazers_count": 30,
+ "watchers_count": 30,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 30,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017577129,
+ "name": "CVE-2025-5777",
+ "full_name": "0xgh057r3c0n\/CVE-2025-5777",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-5777",
+ "description": "Citrix NetScaler Memory Leak PoC",
+ "fork": false,
+ "created_at": "2025-07-10T18:48:21Z",
+ "updated_at": "2025-07-10T19:56:47Z",
+ "pushed_at": "2025-07-10T19:56:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1019926123,
+ "name": "CVE-2025-5777",
+ "full_name": "SleepNotF0und\/CVE-2025-5777",
+ "owner": {
+ "login": "SleepNotF0und",
+ "id": 51271019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51271019?v=4",
+ "html_url": "https:\/\/github.com\/SleepNotF0und",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SleepNotF0und\/CVE-2025-5777",
+ "description": "CVE-2025-5777 (CitrixBleed 2) - [Citrix NetScaler ADC] [Citrix Gateway]",
+ "fork": false,
+ "created_at": "2025-07-15T05:02:11Z",
+ "updated_at": "2025-07-15T08:21:47Z",
+ "pushed_at": "2025-07-15T08:21:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1020335165,
+ "name": "ExploitVeer",
+ "full_name": "cyberleelawat\/ExploitVeer",
+ "owner": {
+ "login": "cyberleelawat",
+ "id": 202486122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202486122?v=4",
+ "html_url": "https:\/\/github.com\/cyberleelawat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberleelawat\/ExploitVeer",
+ "description": "An advanced, powerful, and easy-to-use tool designed to detect and exploit CVE-2025-5777 (CitrixBleed 2). This script not only identifies the vulnerability but also helps in demonstrating its impact by parsing human-readable information from the memory leak.",
+ "fork": false,
+ "created_at": "2025-07-15T17:49:38Z",
+ "updated_at": "2026-01-13T11:20:49Z",
+ "pushed_at": "2025-07-17T16:50:39Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024892954,
+ "name": "CVE-2025-5777-TrendMicro-ApexCentral-RCE",
+ "full_name": "Shivshantp\/CVE-2025-5777-TrendMicro-ApexCentral-RCE",
+ "owner": {
+ "login": "Shivshantp",
+ "id": 138895783,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138895783?v=4",
+ "html_url": "https:\/\/github.com\/Shivshantp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shivshantp\/CVE-2025-5777-TrendMicro-ApexCentral-RCE",
+ "description": "PoC for CVE-2025-5777 – Auth Bypass and RCE in Trend Micro Apex Central",
+ "fork": false,
+ "created_at": "2025-07-23T12:05:05Z",
+ "updated_at": "2026-04-16T11:12:36Z",
+ "pushed_at": "2025-07-23T16:04:48Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "authentication-bypass",
+ "cve-2025-5777",
+ "exploit",
+ "infosec",
+ "kali-linux",
+ "python",
+ "rce",
+ "redteam",
+ "trendmicro"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025539873,
+ "name": "POC-CVE-2025-5777",
+ "full_name": "rob0tstxt\/POC-CVE-2025-5777",
+ "owner": {
+ "login": "rob0tstxt",
+ "id": 175628593,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175628593?v=4",
+ "html_url": "https:\/\/github.com\/rob0tstxt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rob0tstxt\/POC-CVE-2025-5777",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-24T12:09:37Z",
+ "updated_at": "2025-08-18T23:46:26Z",
+ "pushed_at": "2025-08-18T23:46:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1029077926,
+ "name": "Honeypot-Logs-CVE-2025-5777",
+ "full_name": "below0day\/Honeypot-Logs-CVE-2025-5777",
+ "owner": {
+ "login": "below0day",
+ "id": 27905156,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27905156?v=4",
+ "html_url": "https:\/\/github.com\/below0day",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/below0day\/Honeypot-Logs-CVE-2025-5777",
+ "description": "CitrixBleed 2 NetScaler honeypot logs",
+ "fork": false,
+ "created_at": "2025-07-30T13:43:27Z",
+ "updated_at": "2026-04-09T01:34:16Z",
+ "pushed_at": "2025-07-30T16:11:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": false,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1034095592,
+ "name": "CVE-2025-5777-Exploit",
+ "full_name": "soltanali0\/CVE-2025-5777-Exploit",
+ "owner": {
+ "login": "soltanali0",
+ "id": 87374678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4",
+ "html_url": "https:\/\/github.com\/soltanali0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/soltanali0\/CVE-2025-5777-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-07T20:47:54Z",
+ "updated_at": "2025-10-11T10:24:59Z",
+ "pushed_at": "2025-08-08T09:31:22Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1036130166,
+ "name": "Citrix-NetScaler-Memory-Leak-CVE-2025-5777",
+ "full_name": "rootxsushant\/Citrix-NetScaler-Memory-Leak-CVE-2025-5777",
+ "owner": {
+ "login": "rootxsushant",
+ "id": 83302457,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83302457?v=4",
+ "html_url": "https:\/\/github.com\/rootxsushant",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rootxsushant\/Citrix-NetScaler-Memory-Leak-CVE-2025-5777",
+ "description": "Update the old POC of CVE-2025-5777 Citrix NetScaler Memory leak",
+ "fork": false,
+ "created_at": "2025-08-11T15:47:12Z",
+ "updated_at": "2025-08-11T15:53:05Z",
+ "pushed_at": "2025-08-11T15:53:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1041342676,
"name": "CVE-2025-5777",
@@ -102,6 +652,105 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1097483772,
+ "name": "CVE-2025-5777",
+ "full_name": "mr-r3b00t\/CVE-2025-5777",
+ "owner": {
+ "login": "mr-r3b00t",
+ "id": 14963690,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14963690?v=4",
+ "html_url": "https:\/\/github.com\/mr-r3b00t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mr-r3b00t\/CVE-2025-5777",
+ "description": "placeholder for CitrixBleed 2.0 CVE-2025-5777",
+ "fork": false,
+ "created_at": "2025-11-16T09:14:23Z",
+ "updated_at": "2025-11-16T09:15:25Z",
+ "pushed_at": "2025-11-16T09:15:22Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1102022932,
+ "name": "Citrixbleed2-CVE-2025-5777",
+ "full_name": "Anshika2709\/Citrixbleed2-CVE-2025-5777",
+ "owner": {
+ "login": "Anshika2709",
+ "id": 63872402,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63872402?v=4",
+ "html_url": "https:\/\/github.com\/Anshika2709",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Anshika2709\/Citrixbleed2-CVE-2025-5777",
+ "description": "POC",
+ "fork": false,
+ "created_at": "2025-11-22T17:15:17Z",
+ "updated_at": "2026-03-15T10:02:57Z",
+ "pushed_at": "2025-11-22T17:16:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1102668078,
+ "name": "CVE-2025-5777",
+ "full_name": "rashedhasan090\/CVE-2025-5777",
+ "owner": {
+ "login": "rashedhasan090",
+ "id": 18316142,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18316142?v=4",
+ "html_url": "https:\/\/github.com\/rashedhasan090",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rashedhasan090\/CVE-2025-5777",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-23T21:34:32Z",
+ "updated_at": "2025-11-23T21:34:50Z",
+ "pushed_at": "2025-11-23T21:34:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1170665046,
"name": "CVE-2025-5777",
diff --git a/2025/CVE-2025-57819.json b/2025/CVE-2025-57819.json
index f2d70efc92..c4a4f97581 100644
--- a/2025/CVE-2025-57819.json
+++ b/2025/CVE-2025-57819.json
@@ -34,5 +34,295 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1046895567,
+ "name": "CVE-2025-57819-ioc-check",
+ "full_name": "Sucuri-Labs\/CVE-2025-57819-ioc-check",
+ "owner": {
+ "login": "Sucuri-Labs",
+ "id": 137128576,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137128576?v=4",
+ "html_url": "https:\/\/github.com\/Sucuri-Labs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Sucuri-Labs\/CVE-2025-57819-ioc-check",
+ "description": "This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819",
+ "fork": false,
+ "created_at": "2025-08-29T11:59:48Z",
+ "updated_at": "2026-05-18T15:14:19Z",
+ "pushed_at": "2025-08-29T13:33:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047571967,
+ "name": "cve-2025-57819",
+ "full_name": "cybertechajju\/cve-2025-57819",
+ "owner": {
+ "login": "cybertechajju",
+ "id": 120666627,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
+ "html_url": "https:\/\/github.com\/cybertechajju",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybertechajju\/cve-2025-57819",
+ "description": "Detects vulnerable FreePBX versions affected by CVE-2025-57819.",
+ "fork": false,
+ "created_at": "2025-08-30T18:04:59Z",
+ "updated_at": "2026-01-12T17:38:31Z",
+ "pushed_at": "2025-08-30T18:22:50Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1048559571,
+ "name": "CVE-2025-57819",
+ "full_name": "blueisbeautiful\/CVE-2025-57819",
+ "owner": {
+ "login": "blueisbeautiful",
+ "id": 95446029,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95446029?v=4",
+ "html_url": "https:\/\/github.com\/blueisbeautiful",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/blueisbeautiful\/CVE-2025-57819",
+ "description": "FreePBX SQL Injection Exploit",
+ "fork": false,
+ "created_at": "2025-09-01T16:29:24Z",
+ "updated_at": "2026-05-26T14:51:19Z",
+ "pushed_at": "2025-09-01T16:32:45Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1050160230,
+ "name": "lab-cve-2025-57819",
+ "full_name": "ImBIOS\/lab-cve-2025-57819",
+ "owner": {
+ "login": "ImBIOS",
+ "id": 41441643,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41441643?v=4",
+ "html_url": "https:\/\/github.com\/ImBIOS",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ImBIOS\/lab-cve-2025-57819",
+ "description": "FreePBX CVE-2025-57819 lab (Docker) + Nuclei POC for unauth SQLi (time-based).",
+ "fork": false,
+ "created_at": "2025-09-04T03:21:34Z",
+ "updated_at": "2025-09-04T04:01:05Z",
+ "pushed_at": "2025-09-04T04:01:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-57819",
+ "freepbx",
+ "lab",
+ "nuclei",
+ "pentest",
+ "rce",
+ "security",
+ "sql-injection"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1052814008,
+ "name": "watchTowr-vs-FreePBX-CVE-2025-57819",
+ "full_name": "watchtowrlabs\/watchTowr-vs-FreePBX-CVE-2025-57819",
+ "owner": {
+ "login": "watchtowrlabs",
+ "id": 99977116,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
+ "html_url": "https:\/\/github.com\/watchtowrlabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-FreePBX-CVE-2025-57819",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-08T15:28:14Z",
+ "updated_at": "2026-01-13T11:21:00Z",
+ "pushed_at": "2025-09-08T15:31:22Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1055728627,
+ "name": "SQL-Injection-and-RCE_CVE-2025-57819",
+ "full_name": "MuhammadWaseem29\/SQL-Injection-and-RCE_CVE-2025-57819",
+ "owner": {
+ "login": "MuhammadWaseem29",
+ "id": 161931698,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161931698?v=4",
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MuhammadWaseem29\/SQL-Injection-and-RCE_CVE-2025-57819",
+ "description": "FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.",
+ "fork": false,
+ "created_at": "2025-09-12T17:53:32Z",
+ "updated_at": "2025-09-12T17:58:40Z",
+ "pushed_at": "2025-09-12T17:56:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bug-bounty",
+ "cve-2025-57819",
+ "hacking",
+ "remote-code-execution-rce",
+ "sqlinjection"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1056648106,
+ "name": "CVE-2025-57819_FreePBX-PoC",
+ "full_name": "xV4nd3Rx\/CVE-2025-57819_FreePBX-PoC",
+ "owner": {
+ "login": "xV4nd3Rx",
+ "id": 73218643,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73218643?v=4",
+ "html_url": "https:\/\/github.com\/xV4nd3Rx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xV4nd3Rx\/CVE-2025-57819_FreePBX-PoC",
+ "description": "Safe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error\/boolean\/time-based techniques with per-parameter verdicts and JSON reporting.",
+ "fork": false,
+ "created_at": "2025-09-14T14:26:33Z",
+ "updated_at": "2025-09-24T21:04:09Z",
+ "pushed_at": "2025-09-24T21:04:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": true,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "asterisk",
+ "checker",
+ "cve-2025-57819",
+ "detector",
+ "freepbx",
+ "pentest",
+ "poc",
+ "security",
+ "sql-injection",
+ "voip"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1059710664,
+ "name": "CVE-2025-57819_FreePBX",
+ "full_name": "orange0Mint\/CVE-2025-57819_FreePBX",
+ "owner": {
+ "login": "orange0Mint",
+ "id": 218682194,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218682194?v=4",
+ "html_url": "https:\/\/github.com\/orange0Mint",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/orange0Mint\/CVE-2025-57819_FreePBX",
+ "description": "This repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using sqlmap (poc_auto_get_username_pass.py). For educational and authorized use only.",
+ "fork": false,
+ "created_at": "2025-09-18T20:38:36Z",
+ "updated_at": "2025-09-18T20:54:25Z",
+ "pushed_at": "2025-09-18T20:49:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-57833.json b/2025/CVE-2025-57833.json
new file mode 100644
index 0000000000..2e37a2cfe7
--- /dev/null
+++ b/2025/CVE-2025-57833.json
@@ -0,0 +1,134 @@
+[
+ {
+ "id": 1050880140,
+ "name": "CVE-2025-57833",
+ "full_name": "Mkway\/CVE-2025-57833",
+ "owner": {
+ "login": "Mkway",
+ "id": 34364080,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34364080?v=4",
+ "html_url": "https:\/\/github.com\/Mkway",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mkway\/CVE-2025-57833",
+ "description": "We've set up an environment to test CVE-2025-57833. This environment was built using AI, so it's subject to ongoing modification.",
+ "fork": false,
+ "created_at": "2025-09-05T05:03:29Z",
+ "updated_at": "2026-05-17T00:04:04Z",
+ "pushed_at": "2025-09-08T01:13:42Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1053407556,
+ "name": "Django-faille-CVE-2025-57833_test",
+ "full_name": "loic-houchi\/Django-faille-CVE-2025-57833_test",
+ "owner": {
+ "login": "loic-houchi",
+ "id": 194474185,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194474185?v=4",
+ "html_url": "https:\/\/github.com\/loic-houchi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/loic-houchi\/Django-faille-CVE-2025-57833_test",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-09T12:08:05Z",
+ "updated_at": "2025-09-10T06:47:44Z",
+ "pushed_at": "2025-09-09T12:09:29Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1088079359,
+ "name": "CVE-2025-57833",
+ "full_name": "sw0rd1ight\/CVE-2025-57833",
+ "owner": {
+ "login": "sw0rd1ight",
+ "id": 44807635,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44807635?v=4",
+ "html_url": "https:\/\/github.com\/sw0rd1ight",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sw0rd1ight\/CVE-2025-57833",
+ "description": "Analysis and reproduction of CVE-2025-57833",
+ "fork": false,
+ "created_at": "2025-11-02T09:08:46Z",
+ "updated_at": "2026-05-17T00:04:03Z",
+ "pushed_at": "2025-11-30T16:11:58Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105231001,
+ "name": "CVE-2025-57833",
+ "full_name": "Gayang2902\/CVE-2025-57833",
+ "owner": {
+ "login": "Gayang2902",
+ "id": 70860524,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70860524?v=4",
+ "html_url": "https:\/\/github.com\/Gayang2902",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Gayang2902\/CVE-2025-57833",
+ "description": "CVE-2025-57833 PoC (취약한 도서 검색 서비스)",
+ "fork": false,
+ "created_at": "2025-11-27T10:12:57Z",
+ "updated_at": "2026-05-17T00:04:02Z",
+ "pushed_at": "2025-11-27T10:50:47Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-58179.json b/2025/CVE-2025-58179.json
new file mode 100644
index 0000000000..97320391bd
--- /dev/null
+++ b/2025/CVE-2025-58179.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094071264,
+ "name": "CVE-2025-58179-Check",
+ "full_name": "shitodcy\/CVE-2025-58179-Check",
+ "owner": {
+ "login": "shitodcy",
+ "id": 63136479,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63136479?v=4",
+ "html_url": "https:\/\/github.com\/shitodcy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shitodcy\/CVE-2025-58179-Check",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-11T08:05:36Z",
+ "updated_at": "2025-11-11T08:22:52Z",
+ "pushed_at": "2025-11-11T08:15:17Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-58180.json b/2025/CVE-2025-58180.json
new file mode 100644
index 0000000000..320897a65b
--- /dev/null
+++ b/2025/CVE-2025-58180.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1053283088,
+ "name": "CVE-2025-58180",
+ "full_name": "prabhatverma47\/CVE-2025-58180",
+ "owner": {
+ "login": "prabhatverma47",
+ "id": 34772349,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34772349?v=4",
+ "html_url": "https:\/\/github.com\/prabhatverma47",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/prabhatverma47\/CVE-2025-58180",
+ "description": "In OctoPrint version <=1.11.2, an attacker with file upload access (e.g., valid API key or session) can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote code execution (RCE) on the host",
+ "fork": false,
+ "created_at": "2025-09-09T08:32:49Z",
+ "updated_at": "2025-09-09T12:29:28Z",
+ "pushed_at": "2025-09-09T08:42:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-58360.json b/2025/CVE-2025-58360.json
index 3e15c6774a..9ee6e6add7 100644
--- a/2025/CVE-2025-58360.json
+++ b/2025/CVE-2025-58360.json
@@ -1,4 +1,169 @@
[
+ {
+ "id": 1104975747,
+ "name": "Blackash-CVE-2025-58360",
+ "full_name": "carlzhang123\/Blackash-CVE-2025-58360",
+ "owner": {
+ "login": "carlzhang123",
+ "id": 18506146,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18506146?v=4",
+ "html_url": "https:\/\/github.com\/carlzhang123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/carlzhang123\/Blackash-CVE-2025-58360",
+ "description": "CVE-2025-58360",
+ "fork": false,
+ "created_at": "2025-11-27T00:47:37Z",
+ "updated_at": "2025-11-27T00:47:42Z",
+ "pushed_at": "2025-11-26T17:59:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105132165,
+ "name": "CVE-2025-58360",
+ "full_name": "quyenheu\/CVE-2025-58360",
+ "owner": {
+ "login": "quyenheu",
+ "id": 132737260,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132737260?v=4",
+ "html_url": "https:\/\/github.com\/quyenheu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/quyenheu\/CVE-2025-58360",
+ "description": "XXE through a specific endpoint \/geoserver\/wms operation GetMap - Geoserver",
+ "fork": false,
+ "created_at": "2025-11-27T07:20:45Z",
+ "updated_at": "2026-05-22T04:25:03Z",
+ "pushed_at": "2025-12-08T11:13:50Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114966413,
+ "name": "CVE-2025-58360",
+ "full_name": "rxerium\/CVE-2025-58360",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-58360",
+ "description": "Passive detection for CVE-2025-58360",
+ "fork": false,
+ "created_at": "2025-12-12T06:33:28Z",
+ "updated_at": "2025-12-12T06:35:48Z",
+ "pushed_at": "2025-12-12T06:35:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115368535,
+ "name": "CVE-2025-58360-GeoServer-XXE",
+ "full_name": "Joker-Wiggin\/CVE-2025-58360-GeoServer-XXE",
+ "owner": {
+ "login": "Joker-Wiggin",
+ "id": 55937404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55937404?v=4",
+ "html_url": "https:\/\/github.com\/Joker-Wiggin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Joker-Wiggin\/CVE-2025-58360-GeoServer-XXE",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-12T18:51:38Z",
+ "updated_at": "2025-12-12T20:28:45Z",
+ "pushed_at": "2025-12-12T20:28:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125619355,
+ "name": "Bypass-CVE-2025-58360",
+ "full_name": "quyenheu\/Bypass-CVE-2025-58360",
+ "owner": {
+ "login": "quyenheu",
+ "id": 132737260,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132737260?v=4",
+ "html_url": "https:\/\/github.com\/quyenheu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/quyenheu\/Bypass-CVE-2025-58360",
+ "description": "A new way to exploit CVE-2025-58360 bypass WAF",
+ "fork": false,
+ "created_at": "2025-12-31T03:49:53Z",
+ "updated_at": "2026-02-18T03:42:31Z",
+ "pushed_at": "2025-12-31T03:55:12Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1147660772,
"name": "cve-2025-58360",
diff --git a/2025/CVE-2025-58440.json b/2025/CVE-2025-58440.json
new file mode 100644
index 0000000000..cfb300b0fa
--- /dev/null
+++ b/2025/CVE-2025-58440.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050780024,
+ "name": "CVE-2025-58440",
+ "full_name": "ph-hitachi\/CVE-2025-58440",
+ "owner": {
+ "login": "ph-hitachi",
+ "id": 91930988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91930988?v=4",
+ "html_url": "https:\/\/github.com\/ph-hitachi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ph-hitachi\/CVE-2025-58440",
+ "description": "Remote Code Execution (RCE) via Polyglot File Attack and Null Byte Injection on Laravel FileManager",
+ "fork": false,
+ "created_at": "2025-09-04T23:42:23Z",
+ "updated_at": "2026-05-10T06:56:51Z",
+ "pushed_at": "2025-09-05T00:41:43Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-58443.json b/2025/CVE-2025-58443.json
new file mode 100644
index 0000000000..6e73bcb2b9
--- /dev/null
+++ b/2025/CVE-2025-58443.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1051445548,
+ "name": "CVE-2025-58443",
+ "full_name": "casp3r0x0\/CVE-2025-58443",
+ "owner": {
+ "login": "casp3r0x0",
+ "id": 40432380,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40432380?v=4",
+ "html_url": "https:\/\/github.com\/casp3r0x0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/casp3r0x0\/CVE-2025-58443",
+ "description": "FOGProject Authentication bypass CVE-2025-58443 Exploit",
+ "fork": false,
+ "created_at": "2025-09-06T02:36:56Z",
+ "updated_at": "2025-10-02T12:26:17Z",
+ "pushed_at": "2025-09-06T02:43:26Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-58780.json b/2025/CVE-2025-58780.json
new file mode 100644
index 0000000000..ce76392fae
--- /dev/null
+++ b/2025/CVE-2025-58780.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1051042001,
+ "name": "CVE-2025-58780",
+ "full_name": "SexyShoelessGodofWar\/CVE-2025-58780",
+ "owner": {
+ "login": "SexyShoelessGodofWar",
+ "id": 15686483,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15686483?v=4",
+ "html_url": "https:\/\/github.com\/SexyShoelessGodofWar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SexyShoelessGodofWar\/CVE-2025-58780",
+ "description": "SQLi in ScienceLogic",
+ "fork": false,
+ "created_at": "2025-09-05T10:55:20Z",
+ "updated_at": "2025-09-05T11:01:57Z",
+ "pushed_at": "2025-09-05T11:01:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json
index 0af62bacb7..bd6a259f7f 100644
--- a/2025/CVE-2025-59287.json
+++ b/2025/CVE-2025-59287.json
@@ -1,4 +1,157 @@
[
+ {
+ "id": 1096787066,
+ "name": "CVE-2025-59287",
+ "full_name": "Twodimensionalitylevelcrossing817\/CVE-2025-59287",
+ "owner": {
+ "login": "Twodimensionalitylevelcrossing817",
+ "id": 228990292,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228990292?v=4",
+ "html_url": "https:\/\/github.com\/Twodimensionalitylevelcrossing817",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Twodimensionalitylevelcrossing817\/CVE-2025-59287",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-15T00:21:16Z",
+ "updated_at": "2025-11-19T11:39:12Z",
+ "pushed_at": "2025-11-15T00:21:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-59287",
+ "cybersecurity",
+ "exploit",
+ "rce",
+ "vulnerability",
+ "windows",
+ "windows-update",
+ "wsus-vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097460393,
+ "name": "CVE-2025-59287-PoC",
+ "full_name": "M507\/CVE-2025-59287-PoC",
+ "owner": {
+ "login": "M507",
+ "id": 38591075,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38591075?v=4",
+ "html_url": "https:\/\/github.com\/M507",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/M507\/CVE-2025-59287-PoC",
+ "description": "Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317",
+ "fork": false,
+ "created_at": "2025-11-16T08:10:33Z",
+ "updated_at": "2026-05-21T02:50:57Z",
+ "pushed_at": "2025-12-10T21:33:18Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2023-35317",
+ "cve-2025-59287",
+ "cve-poc",
+ "exploit",
+ "infosec",
+ "poc",
+ "rce",
+ "remote-code-execution",
+ "security"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1100950705,
+ "name": "cve-2025-59287",
+ "full_name": "Adel-kaka-dz\/cve-2025-59287",
+ "owner": {
+ "login": "Adel-kaka-dz",
+ "id": 65834056,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65834056?v=4",
+ "html_url": "https:\/\/github.com\/Adel-kaka-dz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Adel-kaka-dz\/cve-2025-59287",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-21T01:36:23Z",
+ "updated_at": "2025-11-21T12:54:01Z",
+ "pushed_at": "2025-11-21T02:05:25Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123100383,
+ "name": "gud425.github.io",
+ "full_name": "gud425\/gud425.github.io",
+ "owner": {
+ "login": "gud425",
+ "id": 14137134,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14137134?v=4",
+ "html_url": "https:\/\/github.com\/gud425",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gud425\/gud425.github.io",
+ "description": "CVE-2025-59287",
+ "fork": false,
+ "created_at": "2025-12-26T07:22:27Z",
+ "updated_at": "2025-12-26T07:52:47Z",
+ "pushed_at": "2025-12-26T07:43:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1135597356,
"name": "CVE-2025-59287---WSUS-SCCM-RCE",
@@ -47,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
- "updated_at": "2026-06-02T12:37:22Z",
- "pushed_at": "2026-06-02T12:37:18Z",
+ "updated_at": "2026-06-02T15:40:52Z",
+ "pushed_at": "2026-06-02T15:38:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-59342.json b/2025/CVE-2025-59342.json
new file mode 100644
index 0000000000..0a49c79378
--- /dev/null
+++ b/2025/CVE-2025-59342.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1059753656,
+ "name": "CVE-2025-59342",
+ "full_name": "byteReaper77\/CVE-2025-59342",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-59342",
+ "description": "Exploit Path Traversal in esm-dev ",
+ "fork": false,
+ "created_at": "2025-09-18T22:34:59Z",
+ "updated_at": "2026-02-07T04:56:23Z",
+ "pushed_at": "2025-09-18T22:46:44Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59359.json b/2025/CVE-2025-59359.json
new file mode 100644
index 0000000000..af163b51b8
--- /dev/null
+++ b/2025/CVE-2025-59359.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1059121145,
+ "name": "Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover",
+ "full_name": "mrk336\/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover",
+ "description": "A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK.",
+ "fork": false,
+ "created_at": "2025-09-18T03:03:58Z",
+ "updated_at": "2025-11-17T13:01:20Z",
+ "pushed_at": "2025-09-18T03:41:55Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59376.json b/2025/CVE-2025-59376.json
new file mode 100644
index 0000000000..24b509b147
--- /dev/null
+++ b/2025/CVE-2025-59376.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1057227849,
+ "name": "CVE-Requests-1896609",
+ "full_name": "william31212\/CVE-Requests-1896609",
+ "owner": {
+ "login": "william31212",
+ "id": 40447900,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40447900?v=4",
+ "html_url": "https:\/\/github.com\/william31212",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/william31212\/CVE-Requests-1896609",
+ "description": "CVE-2025-59376, CVE-2025-59377",
+ "fork": false,
+ "created_at": "2025-09-15T12:52:30Z",
+ "updated_at": "2025-09-16T05:44:55Z",
+ "pushed_at": "2025-09-15T12:56:27Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59390.json b/2025/CVE-2025-59390.json
new file mode 100644
index 0000000000..f0f85f893e
--- /dev/null
+++ b/2025/CVE-2025-59390.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1106040809,
+ "name": "CVE-2025-59390-",
+ "full_name": "Daeda1usUK\/CVE-2025-59390-",
+ "owner": {
+ "login": "Daeda1usUK",
+ "id": 165874469,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/165874469?v=4",
+ "html_url": "https:\/\/github.com\/Daeda1usUK",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Daeda1usUK\/CVE-2025-59390-",
+ "description": "CVE-2025-59390 and ThreadLocalRandom Inverse",
+ "fork": false,
+ "created_at": "2025-11-28T14:33:08Z",
+ "updated_at": "2025-12-01T23:46:48Z",
+ "pushed_at": "2025-11-28T14:38:47Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59396.json b/2025/CVE-2025-59396.json
new file mode 100644
index 0000000000..7451c0071b
--- /dev/null
+++ b/2025/CVE-2025-59396.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1088719518,
+ "name": "CVE-2025-59396",
+ "full_name": "cyberbyte000\/CVE-2025-59396",
+ "owner": {
+ "login": "cyberbyte000",
+ "id": 34418121,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34418121?v=4",
+ "html_url": "https:\/\/github.com\/cyberbyte000",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberbyte000\/CVE-2025-59396",
+ "description": "WatchGuard Firebox Default Configuration Allows Unauthorized SSH Access via Port 4118",
+ "fork": false,
+ "created_at": "2025-11-03T11:12:23Z",
+ "updated_at": "2025-11-09T16:10:20Z",
+ "pushed_at": "2025-11-07T09:50:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59424.json b/2025/CVE-2025-59424.json
new file mode 100644
index 0000000000..9d303daed8
--- /dev/null
+++ b/2025/CVE-2025-59424.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1061871960,
+ "name": "CVE-2025-59424",
+ "full_name": "JOOJIII\/CVE-2025-59424",
+ "owner": {
+ "login": "JOOJIII",
+ "id": 155279918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155279918?v=4",
+ "html_url": "https:\/\/github.com\/JOOJIII",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/JOOJIII\/CVE-2025-59424",
+ "description": "LinkAce Stored Cross-Site Scripting (XSS) on the \/system\/audit page",
+ "fork": false,
+ "created_at": "2025-09-22T13:53:14Z",
+ "updated_at": "2025-09-22T13:54:55Z",
+ "pushed_at": "2025-09-22T13:54:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59501.json b/2025/CVE-2025-59501.json
new file mode 100644
index 0000000000..f1d29e7ec9
--- /dev/null
+++ b/2025/CVE-2025-59501.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094775073,
+ "name": "CVE-2025-59501",
+ "full_name": "garrettfoster13\/CVE-2025-59501",
+ "owner": {
+ "login": "garrettfoster13",
+ "id": 82191679,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82191679?v=4",
+ "html_url": "https:\/\/github.com\/garrettfoster13",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/garrettfoster13\/CVE-2025-59501",
+ "description": "CVE-2025-59501 POC code",
+ "fork": false,
+ "created_at": "2025-11-12T06:40:36Z",
+ "updated_at": "2026-03-26T16:26:37Z",
+ "pushed_at": "2025-11-20T21:20:17Z",
+ "stargazers_count": 26,
+ "watchers_count": 26,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 26,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59532.json b/2025/CVE-2025-59532.json
new file mode 100644
index 0000000000..55e6c3d63b
--- /dev/null
+++ b/2025/CVE-2025-59532.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1122660469,
+ "name": "cve-2025-59532-poc",
+ "full_name": "baktistr\/cve-2025-59532-poc",
+ "owner": {
+ "login": "baktistr",
+ "id": 9071066,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9071066?v=4",
+ "html_url": "https:\/\/github.com\/baktistr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/baktistr\/cve-2025-59532-poc",
+ "description": "A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025",
+ "fork": false,
+ "created_at": "2025-12-25T08:21:36Z",
+ "updated_at": "2025-12-25T08:25:39Z",
+ "pushed_at": "2025-12-25T08:25:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-5961.json b/2025/CVE-2025-5961.json
index f92f437fad..cf43e4e989 100644
--- a/2025/CVE-2025-5961.json
+++ b/2025/CVE-2025-5961.json
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1013719170,
+ "name": "CVE-2025-5961",
+ "full_name": "Nxploited\/CVE-2025-5961",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-5961",
+ "description": "Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-07-04T10:57:59Z",
+ "updated_at": "2025-07-04T11:03:27Z",
+ "pushed_at": "2025-07-04T11:03:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-59718.json b/2025/CVE-2025-59718.json
new file mode 100644
index 0000000000..d397251605
--- /dev/null
+++ b/2025/CVE-2025-59718.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1118183490,
+ "name": "CVE-2025-59718-PoC",
+ "full_name": "exfil0\/CVE-2025-59718-PoC",
+ "owner": {
+ "login": "exfil0",
+ "id": 84948741,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84948741?v=4",
+ "html_url": "https:\/\/github.com\/exfil0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/exfil0\/CVE-2025-59718-PoC",
+ "description": "Fortinet announced two closely related authentication‑bypass vulnerabilities on 9 December 2025. Both flaws involve improper verification of cryptographic signatures (CWE‑347) in the handling of SAML responses for the FortiCloud SSO login feature.",
+ "fork": false,
+ "created_at": "2025-12-17T11:33:22Z",
+ "updated_at": "2026-02-18T07:25:36Z",
+ "pushed_at": "2025-12-22T17:28:07Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123530600,
+ "name": "CVE-2025-59718-Fortinet-Poc",
+ "full_name": "moften\/CVE-2025-59718-Fortinet-Poc",
+ "owner": {
+ "login": "moften",
+ "id": 4262359,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4262359?v=4",
+ "html_url": "https:\/\/github.com\/moften",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/moften\/CVE-2025-59718-Fortinet-Poc",
+ "description": "PoC para determinar si Fortinet es vulnerable a CVE-2025-59718 \/ CVE-2025-59719",
+ "fork": false,
+ "created_at": "2025-12-27T04:24:16Z",
+ "updated_at": "2026-03-19T19:28:42Z",
+ "pushed_at": "2025-12-27T04:34:24Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-59843.json b/2025/CVE-2025-59843.json
new file mode 100644
index 0000000000..390c0527ea
--- /dev/null
+++ b/2025/CVE-2025-59843.json
@@ -0,0 +1,38 @@
+[
+ {
+ "id": 1065077280,
+ "name": "CVE-2025-59843-CVE-2025-59932",
+ "full_name": "At0mXploit\/CVE-2025-59843-CVE-2025-59932",
+ "owner": {
+ "login": "At0mXploit",
+ "id": 177024865,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177024865?v=4",
+ "html_url": "https:\/\/github.com\/At0mXploit",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/At0mXploit\/CVE-2025-59843-CVE-2025-59932",
+ "description": "CVE on FlagForge on versions 2.0.0 to 2.3.0. Upgrade to version 2.3.1 to fix the issue.",
+ "fork": false,
+ "created_at": "2025-09-27T02:55:20Z",
+ "updated_at": "2025-09-27T07:28:28Z",
+ "pushed_at": "2025-09-27T07:28:26Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-59843",
+ "cve-2025-59932"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-60013.json b/2025/CVE-2025-60013.json
new file mode 100644
index 0000000000..b20ff5f211
--- /dev/null
+++ b/2025/CVE-2025-60013.json
@@ -0,0 +1,102 @@
+[
+ {
+ "id": 1097903977,
+ "name": "Scalar-Venom-Attack",
+ "full_name": "demining\/Scalar-Venom-Attack",
+ "owner": {
+ "login": "demining",
+ "id": 87700947,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87700947?v=4",
+ "html_url": "https:\/\/github.com\/demining",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/demining\/Scalar-Venom-Attack",
+ "description": "Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow exploitation and shell metacharacters in the F5OS-A FIPS security module",
+ "fork": false,
+ "created_at": "2025-11-17T02:12:59Z",
+ "updated_at": "2026-01-12T13:21:32Z",
+ "pushed_at": "2025-11-17T02:38:53Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bitcoin",
+ "bitcoin-private-key",
+ "bitcoin-wallet",
+ "bitcoin-wallet-recovery",
+ "cryptanalysis",
+ "cryptography",
+ "cve-2025-60013",
+ "ecdsa",
+ "elliptic-curve-cryptography",
+ "entropy-analysis",
+ "exploit",
+ "hardware-security-module",
+ "hsm-vulnerability",
+ "memory-forensics",
+ "private-key-recovery",
+ "secp256k1",
+ "vulnerability",
+ "wallet-recovery"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114148150,
+ "name": "Scalar-Venom-Attack",
+ "full_name": "Mwete404\/Scalar-Venom-Attack",
+ "owner": {
+ "login": "Mwete404",
+ "id": 198747507,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/198747507?v=4",
+ "html_url": "https:\/\/github.com\/Mwete404",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Mwete404\/Scalar-Venom-Attack",
+ "description": "🛡️ Exploit the Scalar Venom Attack (CVE-2025-60013) to expose vulnerabilities in hardware security modules, enhancing Bitcoin wallet security against private key theft.",
+ "fork": false,
+ "created_at": "2025-12-11T01:05:00Z",
+ "updated_at": "2025-12-18T06:51:04Z",
+ "pushed_at": "2025-12-11T01:05:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bitcoin",
+ "bitcoin-private-key",
+ "cryptanalysis",
+ "cryptography",
+ "cve-2025-60013",
+ "ecdsa",
+ "elliptic-curve-cryptography",
+ "entropy-analysis",
+ "exploit",
+ "hardware-security-module",
+ "hsm-vulnerability",
+ "memory-forensics",
+ "secp256k1",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6018.json b/2025/CVE-2025-6018.json
index a778fddb75..20245a826a 100644
--- a/2025/CVE-2025-6018.json
+++ b/2025/CVE-2025-6018.json
@@ -1,4 +1,136 @@
[
+ {
+ "id": 1013069150,
+ "name": "CVE-2025-6018-19-exploit",
+ "full_name": "iamgithubber\/CVE-2025-6018-19-exploit",
+ "owner": {
+ "login": "iamgithubber",
+ "id": 56626075,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56626075?v=4",
+ "html_url": "https:\/\/github.com\/iamgithubber",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/iamgithubber\/CVE-2025-6018-19-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-03T10:03:54Z",
+ "updated_at": "2025-07-11T02:08:02Z",
+ "pushed_at": "2025-07-03T10:05:50Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1013152646,
+ "name": "CVE-2025-6018_Poc",
+ "full_name": "dreysanox\/CVE-2025-6018_Poc",
+ "owner": {
+ "login": "dreysanox",
+ "id": 161020903,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161020903?v=4",
+ "html_url": "https:\/\/github.com\/dreysanox",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dreysanox\/CVE-2025-6018_Poc",
+ "description": "Exploit for CVE-2025-6019",
+ "fork": false,
+ "created_at": "2025-07-03T12:45:55Z",
+ "updated_at": "2026-02-12T13:13:08Z",
+ "pushed_at": "2025-07-21T15:43:36Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025813514,
+ "name": "CVE-2025-6018",
+ "full_name": "ibrahmsql\/CVE-2025-6018",
+ "owner": {
+ "login": "ibrahmsql",
+ "id": 216335158,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216335158?v=4",
+ "html_url": "https:\/\/github.com\/ibrahmsql",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ibrahmsql\/CVE-2025-6018",
+ "description": "CVE-2025-6018 Poc and Exploit ",
+ "fork": false,
+ "created_at": "2025-07-24T21:01:28Z",
+ "updated_at": "2026-02-21T23:28:59Z",
+ "pushed_at": "2025-07-24T21:13:07Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1107070063,
+ "name": "Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019",
+ "full_name": "euxem\/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019",
+ "owner": {
+ "login": "euxem",
+ "id": 94827108,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94827108?v=4",
+ "html_url": "https:\/\/github.com\/euxem",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/euxem\/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-30T14:21:22Z",
+ "updated_at": "2025-11-30T14:58:21Z",
+ "pushed_at": "2025-11-30T14:58:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1153248966,
"name": "CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation",
diff --git a/2025/CVE-2025-6019.json b/2025/CVE-2025-6019.json
index 3a8fc7ebc2..f9419d4f5d 100644
--- a/2025/CVE-2025-6019.json
+++ b/2025/CVE-2025-6019.json
@@ -98,6 +98,105 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1049718072,
+ "name": "CVE-2025-6019",
+ "full_name": "harshitvarma05\/CVE-2025-6019",
+ "owner": {
+ "login": "harshitvarma05",
+ "id": 90782285,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90782285?v=4",
+ "html_url": "https:\/\/github.com\/harshitvarma05",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/harshitvarma05\/CVE-2025-6019",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-03T11:52:20Z",
+ "updated_at": "2025-09-23T07:37:03Z",
+ "pushed_at": "2025-09-23T07:36:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114532051,
+ "name": "CVE-2025-6019",
+ "full_name": "robbin0919\/CVE-2025-6019",
+ "owner": {
+ "login": "robbin0919",
+ "id": 66932401,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66932401?v=4",
+ "html_url": "https:\/\/github.com\/robbin0919",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/robbin0919\/CVE-2025-6019",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T14:04:03Z",
+ "updated_at": "2025-12-13T04:01:47Z",
+ "pushed_at": "2025-12-13T04:01:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116322655,
+ "name": "CVE-2025-6019-Exploitation",
+ "full_name": "phamdinhquy2512\/CVE-2025-6019-Exploitation",
+ "owner": {
+ "login": "phamdinhquy2512",
+ "id": 78547539,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78547539?v=4",
+ "html_url": "https:\/\/github.com\/phamdinhquy2512",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/phamdinhquy2512\/CVE-2025-6019-Exploitation",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-14T16:28:40Z",
+ "updated_at": "2025-12-14T17:38:01Z",
+ "pushed_at": "2025-12-14T17:37:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1153331643,
"name": "CVE-2025-6019",
diff --git a/2025/CVE-2025-60458.json b/2025/CVE-2025-60458.json
new file mode 100644
index 0000000000..afffb8bdfc
--- /dev/null
+++ b/2025/CVE-2025-60458.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1124498956,
+ "name": "CVE-2025-60458",
+ "full_name": "0pepsi\/CVE-2025-60458",
+ "owner": {
+ "login": "0pepsi",
+ "id": 126031099,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126031099?v=4",
+ "html_url": "https:\/\/github.com\/0pepsi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0pepsi\/CVE-2025-60458",
+ "description": "UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic.",
+ "fork": false,
+ "created_at": "2025-12-29T05:59:06Z",
+ "updated_at": "2025-12-30T22:19:53Z",
+ "pushed_at": "2025-12-30T22:19:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-60574.json b/2025/CVE-2025-60574.json
new file mode 100644
index 0000000000..a1f08f438b
--- /dev/null
+++ b/2025/CVE-2025-60574.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091821016,
+ "name": "CVE-2025-60574",
+ "full_name": "jacopoaugelli\/CVE-2025-60574",
+ "owner": {
+ "login": "jacopoaugelli",
+ "id": 106108757,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106108757?v=4",
+ "html_url": "https:\/\/github.com\/jacopoaugelli",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jacopoaugelli\/CVE-2025-60574",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-07T15:11:43Z",
+ "updated_at": "2025-11-07T15:34:46Z",
+ "pushed_at": "2025-11-07T15:34:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6058.json b/2025/CVE-2025-6058.json
new file mode 100644
index 0000000000..219b2d13e1
--- /dev/null
+++ b/2025/CVE-2025-6058.json
@@ -0,0 +1,101 @@
+[
+ {
+ "id": 1018609552,
+ "name": "CVE-2025-6058",
+ "full_name": "Nxploited\/CVE-2025-6058",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-6058",
+ "description": "WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-07-12T16:25:47Z",
+ "updated_at": "2026-05-07T15:43:21Z",
+ "pushed_at": "2025-07-12T16:30:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1018810560,
+ "name": "Scan-CVE-2025-6058",
+ "full_name": "JayVillain\/Scan-CVE-2025-6058",
+ "owner": {
+ "login": "JayVillain",
+ "id": 172080206,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172080206?v=4",
+ "html_url": "https:\/\/github.com\/JayVillain",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/JayVillain\/Scan-CVE-2025-6058",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-13T05:05:41Z",
+ "updated_at": "2025-07-13T06:46:47Z",
+ "pushed_at": "2025-07-13T06:46:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1024555467,
+ "name": "CVE-2025-6058",
+ "full_name": "0xgh057r3c0n\/CVE-2025-6058",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-6058",
+ "description": "WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit",
+ "fork": false,
+ "created_at": "2025-07-22T22:26:08Z",
+ "updated_at": "2026-02-01T20:15:16Z",
+ "pushed_at": "2025-07-22T22:32:25Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-60710.json b/2025/CVE-2025-60710.json
new file mode 100644
index 0000000000..cc15234484
--- /dev/null
+++ b/2025/CVE-2025-60710.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1094449166,
+ "name": "CVE-2025-60710",
+ "full_name": "Wh04m1001\/CVE-2025-60710",
+ "owner": {
+ "login": "Wh04m1001",
+ "id": 44291883,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44291883?v=4",
+ "html_url": "https:\/\/github.com\/Wh04m1001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Wh04m1001\/CVE-2025-60710",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-11T18:08:48Z",
+ "updated_at": "2026-04-20T09:10:49Z",
+ "pushed_at": "2025-11-11T18:23:46Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1094893696,
+ "name": "CVE-2025-60710",
+ "full_name": "redpack-kr\/CVE-2025-60710",
+ "owner": {
+ "login": "redpack-kr",
+ "id": 49622995,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49622995?v=4",
+ "html_url": "https:\/\/github.com\/redpack-kr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/redpack-kr\/CVE-2025-60710",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-12T10:10:46Z",
+ "updated_at": "2026-04-15T20:19:41Z",
+ "pushed_at": "2025-11-11T18:23:46Z",
+ "stargazers_count": 24,
+ "watchers_count": 24,
+ "has_discussions": false,
+ "forks_count": 45,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 45,
+ "watchers": 24,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-60719.json b/2025/CVE-2025-60719.json
new file mode 100644
index 0000000000..edac7f07f5
--- /dev/null
+++ b/2025/CVE-2025-60719.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1108490294,
+ "name": "CVE-2025-60719-AFD.SYS",
+ "full_name": "akamai\/CVE-2025-60719-AFD.SYS",
+ "owner": {
+ "login": "akamai",
+ "id": 5497190,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5497190?v=4",
+ "html_url": "https:\/\/github.com\/akamai",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/akamai\/CVE-2025-60719-AFD.SYS",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-02T14:16:53Z",
+ "updated_at": "2025-12-28T20:49:30Z",
+ "pushed_at": "2025-12-15T10:29:59Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6082.json b/2025/CVE-2025-6082.json
new file mode 100644
index 0000000000..bb14450429
--- /dev/null
+++ b/2025/CVE-2025-6082.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1024371327,
+ "name": "CVE-2025-6082",
+ "full_name": "byteReaper77\/CVE-2025-6082",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-6082",
+ "description": "Proof‑of‑Concept exploits the Full Path Disclosure bug in the “Birth Chart Compatibility” WordPress plugin (<=v2.0)",
+ "fork": false,
+ "created_at": "2025-07-22T15:38:22Z",
+ "updated_at": "2026-02-07T05:14:44Z",
+ "pushed_at": "2025-07-22T16:04:43Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-60854.json b/2025/CVE-2025-60854.json
new file mode 100644
index 0000000000..9524e26f76
--- /dev/null
+++ b/2025/CVE-2025-60854.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097421294,
+ "name": "CVE-2025-60854",
+ "full_name": "K0n9-log\/CVE-2025-60854",
+ "owner": {
+ "login": "K0n9-log",
+ "id": 102219883,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102219883?v=4",
+ "html_url": "https:\/\/github.com\/K0n9-log",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/K0n9-log\/CVE-2025-60854",
+ "description": "D-link AX1500 Vulnerability",
+ "fork": false,
+ "created_at": "2025-11-16T06:18:08Z",
+ "updated_at": "2025-12-09T15:04:17Z",
+ "pushed_at": "2025-12-09T15:04:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61148.json b/2025/CVE-2025-61148.json
new file mode 100644
index 0000000000..6cd9e1e172
--- /dev/null
+++ b/2025/CVE-2025-61148.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1108915612,
+ "name": "CVE-2025-61148",
+ "full_name": "sharma19d\/CVE-2025-61148",
+ "owner": {
+ "login": "sharma19d",
+ "id": 78952199,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78952199?v=4",
+ "html_url": "https:\/\/github.com\/sharma19d",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sharma19d\/CVE-2025-61148",
+ "description": "The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized to view it. By modifying the rec_no parameter in the API request, an attacker can access the receipts of other users.",
+ "fork": false,
+ "created_at": "2025-12-03T04:55:19Z",
+ "updated_at": "2025-12-03T06:22:50Z",
+ "pushed_at": "2025-12-03T06:22:46Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61228.json b/2025/CVE-2025-61228.json
new file mode 100644
index 0000000000..97772d7802
--- /dev/null
+++ b/2025/CVE-2025-61228.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1109469913,
+ "name": "CVE-2025-61228",
+ "full_name": "graypixel2121\/CVE-2025-61228",
+ "owner": {
+ "login": "graypixel2121",
+ "id": 242236793,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242236793?v=4",
+ "html_url": "https:\/\/github.com\/graypixel2121",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/graypixel2121\/CVE-2025-61228",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-03T21:10:41Z",
+ "updated_at": "2025-12-06T17:45:00Z",
+ "pushed_at": "2025-12-06T17:44:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61229.json b/2025/CVE-2025-61229.json
new file mode 100644
index 0000000000..ba08753fc0
--- /dev/null
+++ b/2025/CVE-2025-61229.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113816672,
+ "name": "CVE-2025-61229",
+ "full_name": "graypixel2121\/CVE-2025-61229",
+ "owner": {
+ "login": "graypixel2121",
+ "id": 242236793,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242236793?v=4",
+ "html_url": "https:\/\/github.com\/graypixel2121",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/graypixel2121\/CVE-2025-61229",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T14:00:15Z",
+ "updated_at": "2025-12-10T14:08:59Z",
+ "pushed_at": "2025-12-10T14:08:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61299.json b/2025/CVE-2025-61299.json
new file mode 100644
index 0000000000..e8a080ddc9
--- /dev/null
+++ b/2025/CVE-2025-61299.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091509944,
+ "name": "CVE-2025-61299_POC",
+ "full_name": "GovindPalakkal\/CVE-2025-61299_POC",
+ "owner": {
+ "login": "GovindPalakkal",
+ "id": 62349500,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62349500?v=4",
+ "html_url": "https:\/\/github.com\/GovindPalakkal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GovindPalakkal\/CVE-2025-61299_POC",
+ "description": "Authenticated Command Injection in Nagios XI 2024R1 (CVE-2025-61299)",
+ "fork": false,
+ "created_at": "2025-11-07T05:40:52Z",
+ "updated_at": "2025-11-07T05:40:56Z",
+ "pushed_at": "2025-11-07T05:40:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61301.json b/2025/CVE-2025-61301.json
new file mode 100644
index 0000000000..17362aa40e
--- /dev/null
+++ b/2025/CVE-2025-61301.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1073667370,
+ "name": "CVE-2025-61301",
+ "full_name": "eGkritsis\/CVE-2025-61301",
+ "owner": {
+ "login": "eGkritsis",
+ "id": 62649167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62649167?v=4",
+ "html_url": "https:\/\/github.com\/eGkritsis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/eGkritsis\/CVE-2025-61301",
+ "description": "High Vulnerability (7.5) - CAPEv2 reporting\/mongodb.py and reporting\/jsondump.py allow denial-of-analysis when deeply nested or oversized behavior documents trigger orjson serialization errors or MongoDB BSON size\/nesting limits, causing truncated or missing analysis reports.",
+ "fork": false,
+ "created_at": "2025-10-10T12:52:18Z",
+ "updated_at": "2025-12-07T17:11:30Z",
+ "pushed_at": "2025-12-01T15:35:08Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61303.json b/2025/CVE-2025-61303.json
new file mode 100644
index 0000000000..a7eb8fd412
--- /dev/null
+++ b/2025/CVE-2025-61303.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1073744194,
+ "name": "CVE-2025-61303",
+ "full_name": "eGkritsis\/CVE-2025-61303",
+ "owner": {
+ "login": "eGkritsis",
+ "id": 62649167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62649167?v=4",
+ "html_url": "https:\/\/github.com\/eGkritsis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/eGkritsis\/CVE-2025-61303",
+ "description": "Critical Vulnerability (9.8) - RecordedFuture Triage dynamic analysis engine can fail to record malicious behavior when samples produce very high-volume recursive process forking, causing inconsistent or missing behavioral reports.",
+ "fork": false,
+ "created_at": "2025-10-10T14:54:26Z",
+ "updated_at": "2025-12-07T17:10:59Z",
+ "pushed_at": "2025-12-01T15:36:50Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61675.json b/2025/CVE-2025-61675.json
new file mode 100644
index 0000000000..aa2bba2ff4
--- /dev/null
+++ b/2025/CVE-2025-61675.json
@@ -0,0 +1,37 @@
+[
+ {
+ "id": 1117103776,
+ "name": "FreePBX-Vulns-December-25",
+ "full_name": "rxerium\/FreePBX-Vulns-December-25",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/FreePBX-Vulns-December-25",
+ "description": "Detection for CVE-2025-61675, CVE-2025-61678 & CVE-2025-66039",
+ "fork": false,
+ "created_at": "2025-12-15T20:51:34Z",
+ "updated_at": "2026-01-10T14:57:04Z",
+ "pushed_at": "2025-12-15T20:52:11Z",
+ "stargazers_count": 47,
+ "watchers_count": 47,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "freepbx"
+ ],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 47,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61757.json b/2025/CVE-2025-61757.json
new file mode 100644
index 0000000000..7df942f960
--- /dev/null
+++ b/2025/CVE-2025-61757.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1101125657,
+ "name": "Oracle-Identity-Manager-CVE-2025-61757",
+ "full_name": "Jinxia62\/Oracle-Identity-Manager-CVE-2025-61757",
+ "owner": {
+ "login": "Jinxia62",
+ "id": 245294348,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245294348?v=4",
+ "html_url": "https:\/\/github.com\/Jinxia62",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jinxia62\/Oracle-Identity-Manager-CVE-2025-61757",
+ "description": "Oracle Identity Manager 远程代码执行漏洞CVE-2025-61757",
+ "fork": false,
+ "created_at": "2025-11-21T08:25:10Z",
+ "updated_at": "2025-11-24T09:58:03Z",
+ "pushed_at": "2025-11-21T09:12:03Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1103688393,
+ "name": "Blackash-CVE-2025-61757",
+ "full_name": "ngominhquocngu\/Blackash-CVE-2025-61757",
+ "owner": {
+ "login": "ngominhquocngu",
+ "id": 163999968,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163999968?v=4",
+ "html_url": "https:\/\/github.com\/ngominhquocngu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ngominhquocngu\/Blackash-CVE-2025-61757",
+ "description": "CVE-2025-61757",
+ "fork": false,
+ "created_at": "2025-11-25T07:49:21Z",
+ "updated_at": "2025-11-25T07:49:21Z",
+ "pushed_at": "2025-11-20T13:32:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61765.json b/2025/CVE-2025-61765.json
new file mode 100644
index 0000000000..5c196e69d0
--- /dev/null
+++ b/2025/CVE-2025-61765.json
@@ -0,0 +1,40 @@
+[
+ {
+ "id": 1078102975,
+ "name": "CVE-2025-61765_PoC",
+ "full_name": "locus-x64\/CVE-2025-61765_PoC",
+ "owner": {
+ "login": "locus-x64",
+ "id": 70605579,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70605579?v=4",
+ "html_url": "https:\/\/github.com\/locus-x64",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/locus-x64\/CVE-2025-61765_PoC",
+ "description": "Proof of Concept of an unsafe pickle deserialization vulnerability in Socket.IO",
+ "fork": false,
+ "created_at": "2025-10-17T08:02:32Z",
+ "updated_at": "2025-11-23T09:23:52Z",
+ "pushed_at": "2025-11-20T09:39:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "deserialization-vulnerability",
+ "exploits",
+ "pickle",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json
index 0dbf487c22..aa11bf8067 100644
--- a/2025/CVE-2025-61882.json
+++ b/2025/CVE-2025-61882.json
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
- "updated_at": "2026-06-02T11:38:54Z",
- "pushed_at": "2026-06-02T11:38:50Z",
+ "updated_at": "2026-06-02T14:45:11Z",
+ "pushed_at": "2026-06-02T14:36:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -36,6 +36,39 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1101529458,
+ "name": "CVE-2025-61882-CVE-2025-61884",
+ "full_name": "Zhert-lab\/CVE-2025-61882-CVE-2025-61884",
+ "owner": {
+ "login": "Zhert-lab",
+ "id": 214282200,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214282200?v=4",
+ "html_url": "https:\/\/github.com\/Zhert-lab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Zhert-lab\/CVE-2025-61882-CVE-2025-61884",
+ "description": "Sorumluluk Reddi Kendi sorumluluğunuzda kullanın, size ait olmayan veya tarama izninizin olmadığı altyapılarda gerçekleştireceğiniz yasa dışı faaliyetlerden sorumlu olmayacağım.",
+ "fork": false,
+ "created_at": "2025-11-21T20:05:27Z",
+ "updated_at": "2025-11-21T20:10:01Z",
+ "pushed_at": "2025-11-21T20:09:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1154045637,
"name": "CVE-2025-61882-Oracle-BI-Publisher-RCE",
diff --git a/2025/CVE-2025-61922.json b/2025/CVE-2025-61922.json
index 87d34a3a45..10db22cc84 100644
--- a/2025/CVE-2025-61922.json
+++ b/2025/CVE-2025-61922.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1092408377,
+ "name": "Vulnerability-Playground-CVE-2025-61922",
+ "full_name": "captaincookie34\/Vulnerability-Playground-CVE-2025-61922",
+ "owner": {
+ "login": "captaincookie34",
+ "id": 137562974,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137562974?v=4",
+ "html_url": "https:\/\/github.com\/captaincookie34",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/captaincookie34\/Vulnerability-Playground-CVE-2025-61922",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-08T15:19:51Z",
+ "updated_at": "2025-11-08T15:21:46Z",
+ "pushed_at": "2025-11-08T15:21:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126848779,
"name": "CVE-2025-61922-PoC",
diff --git a/2025/CVE-2025-62168.json b/2025/CVE-2025-62168.json
new file mode 100644
index 0000000000..49eb305315
--- /dev/null
+++ b/2025/CVE-2025-62168.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103868492,
+ "name": "CVE-2025-62168",
+ "full_name": "nehkark\/CVE-2025-62168",
+ "owner": {
+ "login": "nehkark",
+ "id": 88349393,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88349393?v=4",
+ "html_url": "https:\/\/github.com\/nehkark",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nehkark\/CVE-2025-62168",
+ "description": "Proof-of-Concept (PoC) for CVE-2025-62168 👾 ",
+ "fork": false,
+ "created_at": "2025-11-25T12:50:21Z",
+ "updated_at": "2025-11-25T14:57:03Z",
+ "pushed_at": "2025-11-25T14:56:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6218.json b/2025/CVE-2025-6218.json
index 9edec3709b..f27c0f79b7 100644
--- a/2025/CVE-2025-6218.json
+++ b/2025/CVE-2025-6218.json
@@ -64,5 +64,137 @@
"watchers": 12,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1011625963,
+ "name": "CVE-2025-6218-POC",
+ "full_name": "skimask1690\/CVE-2025-6218-POC",
+ "owner": {
+ "login": "skimask1690",
+ "id": 123434315,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123434315?v=4",
+ "html_url": "https:\/\/github.com\/skimask1690",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/skimask1690\/CVE-2025-6218-POC",
+ "description": "Proof of Concept for CVE-2025-6218, demonstrating the exploitation of a vulnerability in WinRAR versions 7.11 and under, involving improper handling of archive extraction paths.",
+ "fork": false,
+ "created_at": "2025-07-01T05:34:57Z",
+ "updated_at": "2026-03-25T13:22:42Z",
+ "pushed_at": "2025-07-01T15:10:12Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012914311,
+ "name": "CVE-2025-6218-POC",
+ "full_name": "mulwareX\/CVE-2025-6218-POC",
+ "owner": {
+ "login": "mulwareX",
+ "id": 179304663,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179304663?v=4",
+ "html_url": "https:\/\/github.com\/mulwareX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mulwareX\/CVE-2025-6218-POC",
+ "description": "RARLAB WinRAR Directory Traversal Remote Code Execution",
+ "fork": false,
+ "created_at": "2025-07-03T04:52:14Z",
+ "updated_at": "2026-03-22T20:12:39Z",
+ "pushed_at": "2025-07-03T05:11:42Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017070282,
+ "name": "CVE-2025-6218-WinRAR-Directory-Traversal-RCE",
+ "full_name": "absholi7ly\/CVE-2025-6218-WinRAR-Directory-Traversal-RCE",
+ "owner": {
+ "login": "absholi7ly",
+ "id": 72062217,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72062217?v=4",
+ "html_url": "https:\/\/github.com\/absholi7ly",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/absholi7ly\/CVE-2025-6218-WinRAR-Directory-Traversal-RCE",
+ "description": "CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted",
+ "fork": false,
+ "created_at": "2025-07-10T01:37:39Z",
+ "updated_at": "2026-05-23T18:25:57Z",
+ "pushed_at": "2025-07-10T02:31:38Z",
+ "stargazers_count": 18,
+ "watchers_count": 18,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 18,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116740760,
+ "name": "CVE-2025-6218-WinRAR-RCE-POC",
+ "full_name": "Chrxstxqn\/CVE-2025-6218-WinRAR-RCE-POC",
+ "owner": {
+ "login": "Chrxstxqn",
+ "id": 137430908,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137430908?v=4",
+ "html_url": "https:\/\/github.com\/Chrxstxqn",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chrxstxqn\/CVE-2025-6218-WinRAR-RCE-POC",
+ "description": "Comprehensive analysis and proof-of-concept for CVE-2025-6218 - WinRAR path traversal RCE vulnerability affecting versions 7.11 and earlier",
+ "fork": false,
+ "created_at": "2025-12-15T10:08:35Z",
+ "updated_at": "2026-05-11T07:47:26Z",
+ "pushed_at": "2025-12-15T11:30:35Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-62215.json b/2025/CVE-2025-62215.json
index 8dfa9c922c..091a8771d1 100644
--- a/2025/CVE-2025-62215.json
+++ b/2025/CVE-2025-62215.json
@@ -1,4 +1,136 @@
[
+ {
+ "id": 1096236382,
+ "name": "CVE-2025-62215-exploit-poc",
+ "full_name": "dexterm300\/CVE-2025-62215-exploit-poc",
+ "owner": {
+ "login": "dexterm300",
+ "id": 218176535,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218176535?v=4",
+ "html_url": "https:\/\/github.com\/dexterm300",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dexterm300\/CVE-2025-62215-exploit-poc",
+ "description": "CVE-2025-62215 is an Elevation of Privilege (EoP) vulnerability in the Windows Kernel, disclosed in November 2025 and confirmed to be actively exploited as a zero-day.",
+ "fork": false,
+ "created_at": "2025-11-14T06:04:02Z",
+ "updated_at": "2026-05-06T12:55:44Z",
+ "pushed_at": "2025-11-14T06:07:19Z",
+ "stargazers_count": 32,
+ "watchers_count": 32,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 32,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098752716,
+ "name": "Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation",
+ "full_name": "mrk336\/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation",
+ "owner": {
+ "login": "mrk336",
+ "id": 225503019,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4",
+ "html_url": "https:\/\/github.com\/mrk336",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mrk336\/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation",
+ "description": "Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red teamers.",
+ "fork": false,
+ "created_at": "2025-11-18T05:13:34Z",
+ "updated_at": "2026-03-30T23:10:19Z",
+ "pushed_at": "2025-11-18T05:29:32Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1099143510,
+ "name": "CVE-2025-62215_Windows_Kernel_PE",
+ "full_name": "abrewer251\/CVE-2025-62215_Windows_Kernel_PE",
+ "owner": {
+ "login": "abrewer251",
+ "id": 150287770,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4",
+ "html_url": "https:\/\/github.com\/abrewer251",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abrewer251\/CVE-2025-62215_Windows_Kernel_PE",
+ "description": "This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. The exploit uses multithreaded handle manipulation and heap spraying to trigger the flaw under controlled conditions.",
+ "fork": false,
+ "created_at": "2025-11-18T16:12:44Z",
+ "updated_at": "2026-04-16T17:52:43Z",
+ "pushed_at": "2025-11-18T16:34:05Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121551817,
+ "name": "CVE-2025-62215",
+ "full_name": "theman001\/CVE-2025-62215",
+ "owner": {
+ "login": "theman001",
+ "id": 100943215,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100943215?v=4",
+ "html_url": "https:\/\/github.com\/theman001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/theman001\/CVE-2025-62215",
+ "description": "CVE-2025-62215: Windows Kernel Race Condition + Double-Free EoP",
+ "fork": false,
+ "created_at": "2025-12-23T07:05:55Z",
+ "updated_at": "2026-04-24T02:51:47Z",
+ "pushed_at": "2025-12-23T14:50:04Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1155236142,
"name": "CVE-2025-62215_analysis",
diff --git a/2025/CVE-2025-62454.json b/2025/CVE-2025-62454.json
new file mode 100644
index 0000000000..0a8eeaf138
--- /dev/null
+++ b/2025/CVE-2025-62454.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118739418,
+ "name": "CVE-2025-62454",
+ "full_name": "96613686\/CVE-2025-62454",
+ "owner": {
+ "login": "96613686",
+ "id": 67725335,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67725335?v=4",
+ "html_url": "https:\/\/github.com\/96613686",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/96613686\/CVE-2025-62454",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T07:56:32Z",
+ "updated_at": "2026-02-26T13:13:39Z",
+ "pushed_at": "2025-12-18T08:00:54Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-62470.json b/2025/CVE-2025-62470.json
new file mode 100644
index 0000000000..9542152625
--- /dev/null
+++ b/2025/CVE-2025-62470.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118741877,
+ "name": "CVE-2025-62470",
+ "full_name": "96613686\/CVE-2025-62470",
+ "owner": {
+ "login": "96613686",
+ "id": 67725335,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67725335?v=4",
+ "html_url": "https:\/\/github.com\/96613686",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/96613686\/CVE-2025-62470",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T08:01:46Z",
+ "updated_at": "2026-02-27T05:56:23Z",
+ "pushed_at": "2025-12-18T08:02:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-62641.json b/2025/CVE-2025-62641.json
new file mode 100644
index 0000000000..8a9635e941
--- /dev/null
+++ b/2025/CVE-2025-62641.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1107966458,
+ "name": "CVE-2025-62641",
+ "full_name": "Al-Lord0x\/CVE-2025-62641",
+ "owner": {
+ "login": "Al-Lord0x",
+ "id": 218481309,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218481309?v=4",
+ "html_url": "https:\/\/github.com\/Al-Lord0x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Al-Lord0x\/CVE-2025-62641",
+ "description": "CVE-2025-62641 advnced exploit code by LordWare team",
+ "fork": false,
+ "created_at": "2025-12-01T21:05:52Z",
+ "updated_at": "2025-12-01T21:06:26Z",
+ "pushed_at": "2025-12-01T21:06:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-62726.json b/2025/CVE-2025-62726.json
new file mode 100644
index 0000000000..6da41042ee
--- /dev/null
+++ b/2025/CVE-2025-62726.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1103406296,
+ "name": "cve-2025-62726-poc",
+ "full_name": "baktistr\/cve-2025-62726-poc",
+ "owner": {
+ "login": "baktistr",
+ "id": 9071066,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9071066?v=4",
+ "html_url": "https:\/\/github.com\/baktistr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/baktistr\/cve-2025-62726-poc",
+ "description": "This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025",
+ "fork": false,
+ "created_at": "2025-11-24T20:39:50Z",
+ "updated_at": "2025-12-25T08:14:15Z",
+ "pushed_at": "2025-12-25T08:14:06Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112900908,
+ "name": "cve-2025-62726-malicious-repo",
+ "full_name": "Muzyli\/cve-2025-62726-malicious-repo",
+ "owner": {
+ "login": "Muzyli",
+ "id": 53171902,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53171902?v=4",
+ "html_url": "https:\/\/github.com\/Muzyli",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Muzyli\/cve-2025-62726-malicious-repo",
+ "description": "cve-2025-62726-malicious-repo",
+ "fork": false,
+ "created_at": "2025-12-09T08:55:54Z",
+ "updated_at": "2025-12-09T08:56:46Z",
+ "pushed_at": "2025-12-09T08:56:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63296.json b/2025/CVE-2025-63296.json
new file mode 100644
index 0000000000..ea4537db45
--- /dev/null
+++ b/2025/CVE-2025-63296.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1093138036,
+ "name": "CVE-2025-63296",
+ "full_name": "t4e-3\/CVE-2025-63296",
+ "owner": {
+ "login": "t4e-3",
+ "id": 196280015,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196280015?v=4",
+ "html_url": "https:\/\/github.com\/t4e-3",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/t4e-3\/CVE-2025-63296",
+ "description": "KERUI K259 5MP Wi-Fi (Tuya Smart Security Camera) contains a code execution vulnerability",
+ "fork": false,
+ "created_at": "2025-11-10T00:39:46Z",
+ "updated_at": "2026-01-13T11:17:33Z",
+ "pushed_at": "2025-11-10T00:42:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63307.json b/2025/CVE-2025-63307.json
new file mode 100644
index 0000000000..c11185ac0b
--- /dev/null
+++ b/2025/CVE-2025-63307.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1083223147,
+ "name": "CVE-2025-63307",
+ "full_name": "Theethat-Thamwasin\/CVE-2025-63307",
+ "owner": {
+ "login": "Theethat-Thamwasin",
+ "id": 175581567,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175581567?v=4",
+ "html_url": "https:\/\/github.com\/Theethat-Thamwasin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Theethat-Thamwasin\/CVE-2025-63307",
+ "description": "An authenticated Stored Cross-site Scripting (XSS) vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to inject and persist arbitrary JavaScript code in uploaded or created files. ",
+ "fork": false,
+ "created_at": "2025-10-25T15:34:17Z",
+ "updated_at": "2025-11-05T14:39:42Z",
+ "pushed_at": "2025-11-05T14:39:38Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63353.json b/2025/CVE-2025-63353.json
index a7316b8527..457242676f 100644
--- a/2025/CVE-2025-63353.json
+++ b/2025/CVE-2025-63353.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1089746384,
+ "name": "CVE-2025-63353",
+ "full_name": "hanianis\/CVE-2025-63353",
+ "owner": {
+ "login": "hanianis",
+ "id": 59705743,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59705743?v=4",
+ "html_url": "https:\/\/github.com\/hanianis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hanianis\/CVE-2025-63353",
+ "description": "A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA\/WPA2 pre-shared key) to be predicted from the SSID",
+ "fork": false,
+ "created_at": "2025-11-04T18:54:13Z",
+ "updated_at": "2026-05-31T08:57:34Z",
+ "pushed_at": "2025-11-06T10:50:49Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119106233,
+ "name": "CVE-2025-63353",
+ "full_name": "0xA1M\/CVE-2025-63353",
+ "owner": {
+ "login": "0xA1M",
+ "id": 45073092,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45073092?v=4",
+ "html_url": "https:\/\/github.com\/0xA1M",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xA1M\/CVE-2025-63353",
+ "description": "This is a Proof-Of-Concept of CVE-2025-63353",
+ "fork": false,
+ "created_at": "2025-12-18T18:50:40Z",
+ "updated_at": "2026-06-01T02:31:20Z",
+ "pushed_at": "2025-12-18T19:56:58Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1206342981,
"name": "CVE-2025-63353",
diff --git a/2025/CVE-2025-63406.json b/2025/CVE-2025-63406.json
new file mode 100644
index 0000000000..5765301330
--- /dev/null
+++ b/2025/CVE-2025-63406.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1099279019,
+ "name": "CVE-2025-63406-PoC",
+ "full_name": "Nxvh1337\/CVE-2025-63406-PoC",
+ "owner": {
+ "login": "Nxvh1337",
+ "id": 40216866,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40216866?v=4",
+ "html_url": "https:\/\/github.com\/Nxvh1337",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxvh1337\/CVE-2025-63406-PoC",
+ "description": "Small PoC to automate exploitation of CVE-2025-63406.",
+ "fork": false,
+ "created_at": "2025-11-18T19:54:25Z",
+ "updated_at": "2026-01-10T00:31:44Z",
+ "pushed_at": "2025-11-19T00:29:19Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1101523825,
+ "name": "PoC-CVE-2025-63406",
+ "full_name": "richard-natan\/PoC-CVE-2025-63406",
+ "owner": {
+ "login": "richard-natan",
+ "id": 57724021,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57724021?v=4",
+ "html_url": "https:\/\/github.com\/richard-natan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/richard-natan\/PoC-CVE-2025-63406",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-21T19:53:01Z",
+ "updated_at": "2025-12-22T12:02:36Z",
+ "pushed_at": "2025-11-21T19:58:13Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63419.json b/2025/CVE-2025-63419.json
new file mode 100644
index 0000000000..e7bb5ad65d
--- /dev/null
+++ b/2025/CVE-2025-63419.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1093759074,
+ "name": "CVE-2025-63419",
+ "full_name": "MMAKINGDOM\/CVE-2025-63419",
+ "owner": {
+ "login": "MMAKINGDOM",
+ "id": 112818014,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112818014?v=4",
+ "html_url": "https:\/\/github.com\/MMAKINGDOM",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MMAKINGDOM\/CVE-2025-63419",
+ "description": "CrushFTP before 11.3.7_60 is vulnerable to HTML Injection. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitzations leading to HTML Injection.",
+ "fork": false,
+ "created_at": "2025-11-10T19:57:37Z",
+ "updated_at": "2026-01-13T11:21:14Z",
+ "pushed_at": "2025-11-29T11:29:30Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105130024,
+ "name": "CVE-2025-63419",
+ "full_name": "hossainshadat\/CVE-2025-63419",
+ "owner": {
+ "login": "hossainshadat",
+ "id": 28984804,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28984804?v=4",
+ "html_url": "https:\/\/github.com\/hossainshadat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hossainshadat\/CVE-2025-63419",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-27T07:16:32Z",
+ "updated_at": "2025-11-27T07:17:27Z",
+ "pushed_at": "2025-11-27T07:17:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63420.json b/2025/CVE-2025-63420.json
new file mode 100644
index 0000000000..06a5b4107e
--- /dev/null
+++ b/2025/CVE-2025-63420.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1091829599,
+ "name": "CVE-2025-63420",
+ "full_name": "MMAKINGDOM\/CVE-2025-63420",
+ "owner": {
+ "login": "MMAKINGDOM",
+ "id": 112818014,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112818014?v=4",
+ "html_url": "https:\/\/github.com\/MMAKINGDOM",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MMAKINGDOM\/CVE-2025-63420",
+ "description": "CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports \/ \"Who Created Folder\"), enabling persistent HTML execution in admin sessions.",
+ "fork": false,
+ "created_at": "2025-11-07T15:26:10Z",
+ "updated_at": "2026-05-15T08:43:48Z",
+ "pushed_at": "2025-11-10T19:53:58Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1105126897,
+ "name": "CVE-2025-63420",
+ "full_name": "hossainshadat\/CVE-2025-63420",
+ "owner": {
+ "login": "hossainshadat",
+ "id": 28984804,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28984804?v=4",
+ "html_url": "https:\/\/github.com\/hossainshadat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hossainshadat\/CVE-2025-63420",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-27T07:10:28Z",
+ "updated_at": "2025-11-27T07:13:05Z",
+ "pushed_at": "2025-11-27T07:13:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63441.json b/2025/CVE-2025-63441.json
new file mode 100644
index 0000000000..04b019a9a7
--- /dev/null
+++ b/2025/CVE-2025-63441.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091456812,
+ "name": "CVE-2025-63441",
+ "full_name": "Kgan0509\/CVE-2025-63441",
+ "owner": {
+ "login": "Kgan0509",
+ "id": 82393611,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82393611?v=4",
+ "html_url": "https:\/\/github.com\/Kgan0509",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kgan0509\/CVE-2025-63441",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-07T03:27:20Z",
+ "updated_at": "2025-11-07T03:35:08Z",
+ "pushed_at": "2025-11-07T03:35:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63498.json b/2025/CVE-2025-63498.json
new file mode 100644
index 0000000000..9ed333cf92
--- /dev/null
+++ b/2025/CVE-2025-63498.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1068500116,
+ "name": "CVE-2025-63498",
+ "full_name": "xryptoh\/CVE-2025-63498",
+ "owner": {
+ "login": "xryptoh",
+ "id": 206072524,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206072524?v=4",
+ "html_url": "https:\/\/github.com\/xryptoh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xryptoh\/CVE-2025-63498",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-10-02T13:31:50Z",
+ "updated_at": "2025-12-02T08:54:13Z",
+ "pushed_at": "2025-11-25T11:52:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63499.json b/2025/CVE-2025-63499.json
new file mode 100644
index 0000000000..8643a0efaf
--- /dev/null
+++ b/2025/CVE-2025-63499.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1108263489,
+ "name": "CVE-2025-63499",
+ "full_name": "poblaguev-tot\/CVE-2025-63499",
+ "owner": {
+ "login": "poblaguev-tot",
+ "id": 130176935,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130176935?v=4",
+ "html_url": "https:\/\/github.com\/poblaguev-tot",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/poblaguev-tot\/CVE-2025-63499",
+ "description": " POC for CVE-2025-63499",
+ "fork": false,
+ "created_at": "2025-12-02T08:38:46Z",
+ "updated_at": "2025-12-02T08:54:24Z",
+ "pushed_at": "2025-12-02T08:51:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63572.json b/2025/CVE-2025-63572.json
new file mode 100644
index 0000000000..c7c2a7b232
--- /dev/null
+++ b/2025/CVE-2025-63572.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1073376672,
+ "name": "CVE-2025-63572",
+ "full_name": "RRespxwnss\/CVE-2025-63572",
+ "owner": {
+ "login": "RRespxwnss",
+ "id": 100174458,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100174458?v=4",
+ "html_url": "https:\/\/github.com\/RRespxwnss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RRespxwnss\/CVE-2025-63572",
+ "description": "A SQL injection vulnerability was discovered in the endpoint responsible for searching for platform clients. User input sent to the search parameter is concatenated directly into a SQL query without proper sanitization\/parameterization, allowing the attacker to manipulate the query.",
+ "fork": false,
+ "created_at": "2025-10-10T02:58:29Z",
+ "updated_at": "2025-11-19T22:25:55Z",
+ "pushed_at": "2025-11-19T22:25:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63585.json b/2025/CVE-2025-63585.json
new file mode 100644
index 0000000000..3c77648a5f
--- /dev/null
+++ b/2025/CVE-2025-63585.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091454948,
+ "name": "CVE-2025-63585",
+ "full_name": "Kgan0509\/CVE-2025-63585",
+ "owner": {
+ "login": "Kgan0509",
+ "id": 82393611,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82393611?v=4",
+ "html_url": "https:\/\/github.com\/Kgan0509",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kgan0509\/CVE-2025-63585",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-07T03:22:55Z",
+ "updated_at": "2025-11-07T03:31:02Z",
+ "pushed_at": "2025-11-07T03:30:58Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63588.json b/2025/CVE-2025-63588.json
new file mode 100644
index 0000000000..668c6714f4
--- /dev/null
+++ b/2025/CVE-2025-63588.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090319605,
+ "name": "CVE-2025-63588",
+ "full_name": "cybercrewinc\/CVE-2025-63588",
+ "owner": {
+ "login": "cybercrewinc",
+ "id": 176697229,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176697229?v=4",
+ "html_url": "https:\/\/github.com\/cybercrewinc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybercrewinc\/CVE-2025-63588",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-05T14:07:18Z",
+ "updated_at": "2026-05-09T11:09:47Z",
+ "pushed_at": "2025-11-09T09:08:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63589.json b/2025/CVE-2025-63589.json
new file mode 100644
index 0000000000..97391f099b
--- /dev/null
+++ b/2025/CVE-2025-63589.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090318985,
+ "name": "CVE-2025-63589",
+ "full_name": "cybercrewinc\/CVE-2025-63589",
+ "owner": {
+ "login": "cybercrewinc",
+ "id": 176697229,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176697229?v=4",
+ "html_url": "https:\/\/github.com\/cybercrewinc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybercrewinc\/CVE-2025-63589",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-05T14:06:23Z",
+ "updated_at": "2026-05-09T11:09:48Z",
+ "pushed_at": "2025-11-07T13:20:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63602.json b/2025/CVE-2025-63602.json
new file mode 100644
index 0000000000..81fcac904a
--- /dev/null
+++ b/2025/CVE-2025-63602.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096150402,
+ "name": "CVE-2025-63602",
+ "full_name": "D7EAD\/CVE-2025-63602",
+ "owner": {
+ "login": "D7EAD",
+ "id": 42398281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42398281?v=4",
+ "html_url": "https:\/\/github.com\/D7EAD",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D7EAD\/CVE-2025-63602",
+ "description": "Disclosure for CVE-2025-63602, including a PoC for use of an insecure driver in Awesome Miner 11.2.4 leading to arbitrary kernel read\/write to MSRs, resulting in kernel code execution.",
+ "fork": false,
+ "created_at": "2025-11-14T02:22:25Z",
+ "updated_at": "2025-12-26T10:36:52Z",
+ "pushed_at": "2025-11-14T02:23:23Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63666.json b/2025/CVE-2025-63666.json
new file mode 100644
index 0000000000..c273ed82e0
--- /dev/null
+++ b/2025/CVE-2025-63666.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094287038,
+ "name": "CVE-2025-63666",
+ "full_name": "Remenis\/CVE-2025-63666",
+ "owner": {
+ "login": "Remenis",
+ "id": 97015958,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
+ "html_url": "https:\/\/github.com\/Remenis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Remenis\/CVE-2025-63666",
+ "description": "Tenda AC15 cookie exposure",
+ "fork": false,
+ "created_at": "2025-11-11T14:07:18Z",
+ "updated_at": "2026-01-13T11:21:15Z",
+ "pushed_at": "2025-12-19T01:43:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63667.json b/2025/CVE-2025-63667.json
new file mode 100644
index 0000000000..f4a663cb38
--- /dev/null
+++ b/2025/CVE-2025-63667.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094307074,
+ "name": "CVE-2025-63667",
+ "full_name": "Remenis\/CVE-2025-63667",
+ "owner": {
+ "login": "Remenis",
+ "id": 97015958,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
+ "html_url": "https:\/\/github.com\/Remenis",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Remenis\/CVE-2025-63667",
+ "description": "Vatilon-based IP camera firmwares issue Session-Id tokens without verifying credentials, allowing attackers to obtain sessions and retrieve plaintext account credentials via API endpoints.",
+ "fork": false,
+ "created_at": "2025-11-11T14:37:04Z",
+ "updated_at": "2026-03-18T05:20:03Z",
+ "pushed_at": "2025-11-13T15:40:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63700.json b/2025/CVE-2025-63700.json
new file mode 100644
index 0000000000..e67c74bf5b
--- /dev/null
+++ b/2025/CVE-2025-63700.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1098766741,
+ "name": "CVE-2025-63700",
+ "full_name": "itsnishat08\/CVE-2025-63700",
+ "owner": {
+ "login": "itsnishat08",
+ "id": 139704715,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139704715?v=4",
+ "html_url": "https:\/\/github.com\/itsnishat08",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/itsnishat08\/CVE-2025-63700",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-18T05:43:48Z",
+ "updated_at": "2026-04-13T09:05:25Z",
+ "pushed_at": "2025-11-21T08:23:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63708.json b/2025/CVE-2025-63708.json
new file mode 100644
index 0000000000..0e1a0719fd
--- /dev/null
+++ b/2025/CVE-2025-63708.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1095463132,
+ "name": "CVE-2025-63708",
+ "full_name": "DylanDavis1\/CVE-2025-63708",
+ "owner": {
+ "login": "DylanDavis1",
+ "id": 92195281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92195281?v=4",
+ "html_url": "https:\/\/github.com\/DylanDavis1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DylanDavis1\/CVE-2025-63708",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-13T04:47:19Z",
+ "updated_at": "2025-12-01T18:59:34Z",
+ "pushed_at": "2025-12-01T18:59:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63729.json b/2025/CVE-2025-63729.json
new file mode 100644
index 0000000000..c2149c9164
--- /dev/null
+++ b/2025/CVE-2025-63729.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1101045321,
+ "name": "CVE-2025-63729-Syrotech-SY-GPON-1110-",
+ "full_name": "Yashodhanvivek\/CVE-2025-63729-Syrotech-SY-GPON-1110-",
+ "owner": {
+ "login": "Yashodhanvivek",
+ "id": 5335615,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5335615?v=4",
+ "html_url": "https:\/\/github.com\/Yashodhanvivek",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Yashodhanvivek\/CVE-2025-63729-Syrotech-SY-GPON-1110-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-21T05:43:17Z",
+ "updated_at": "2025-11-23T11:04:24Z",
+ "pushed_at": "2025-11-23T11:04:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": true,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63735.json b/2025/CVE-2025-63735.json
new file mode 100644
index 0000000000..edf2e16d6b
--- /dev/null
+++ b/2025/CVE-2025-63735.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1102783844,
+ "name": "CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS",
+ "full_name": "huthx\/CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS",
+ "owner": {
+ "login": "huthx",
+ "id": 95190449,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95190449?v=4",
+ "html_url": "https:\/\/github.com\/huthx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/huthx\/CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS",
+ "description": "Reflected XSS in Ruckus Unleashed 200.13.6.1.319 via the name parameter.",
+ "fork": false,
+ "created_at": "2025-11-24T03:21:17Z",
+ "updated_at": "2025-11-26T10:12:17Z",
+ "pushed_at": "2025-11-24T03:28:43Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63820.json b/2025/CVE-2025-63820.json
new file mode 100644
index 0000000000..186319420f
--- /dev/null
+++ b/2025/CVE-2025-63820.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1076215998,
+ "name": "CVE-2025-63820",
+ "full_name": "Xernary\/CVE-2025-63820",
+ "owner": {
+ "login": "Xernary",
+ "id": 75204222,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75204222?v=4",
+ "html_url": "https:\/\/github.com\/Xernary",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Xernary\/CVE-2025-63820",
+ "description": "Proof-of-concept of vulnerability found in Totolink A720R router",
+ "fork": false,
+ "created_at": "2025-10-14T14:56:56Z",
+ "updated_at": "2025-11-17T14:40:41Z",
+ "pushed_at": "2025-11-14T12:37:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63821.json b/2025/CVE-2025-63821.json
new file mode 100644
index 0000000000..027672247c
--- /dev/null
+++ b/2025/CVE-2025-63821.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1079249537,
+ "name": "CVE-2025-63821",
+ "full_name": "Xernary\/CVE-2025-63821",
+ "owner": {
+ "login": "Xernary",
+ "id": 75204222,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75204222?v=4",
+ "html_url": "https:\/\/github.com\/Xernary",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Xernary\/CVE-2025-63821",
+ "description": "Proof-of-concept of vulnerability found in Totolink A720R router",
+ "fork": false,
+ "created_at": "2025-10-19T12:34:55Z",
+ "updated_at": "2025-11-17T14:37:42Z",
+ "pushed_at": "2025-11-14T15:26:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63830.json b/2025/CVE-2025-63830.json
new file mode 100644
index 0000000000..0347fa8af5
--- /dev/null
+++ b/2025/CVE-2025-63830.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094900103,
+ "name": "CVE-2025-63830",
+ "full_name": "Shubham03007\/CVE-2025-63830",
+ "owner": {
+ "login": "Shubham03007",
+ "id": 56829263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56829263?v=4",
+ "html_url": "https:\/\/github.com\/Shubham03007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shubham03007\/CVE-2025-63830",
+ "description": "Identified a Stored Cross-Site Scripting (XSS) vulnerability in CKFinder v1.4.3 via malicious SVG file upload leading to script execution upon file preview.",
+ "fork": false,
+ "created_at": "2025-11-12T10:20:42Z",
+ "updated_at": "2026-01-13T11:21:16Z",
+ "pushed_at": "2025-11-12T10:41:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6384.json b/2025/CVE-2025-6384.json
index 20f7c5a979..95d6b577b8 100644
--- a/2025/CVE-2025-6384.json
+++ b/2025/CVE-2025-6384.json
@@ -1,4 +1,46 @@
[
+ {
+ "id": 1034694828,
+ "name": "CVE-2025-6384",
+ "full_name": "mbadanoiu\/CVE-2025-6384",
+ "owner": {
+ "login": "mbadanoiu",
+ "id": 18383407,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4",
+ "html_url": "https:\/\/github.com\/mbadanoiu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2025-6384",
+ "description": "CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS",
+ "fork": false,
+ "created_at": "2025-08-08T20:25:47Z",
+ "updated_at": "2025-08-08T20:39:27Z",
+ "pushed_at": "2025-08-08T20:38:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "0-day",
+ "authenticated",
+ "bypass",
+ "cve",
+ "cve-2025-6384",
+ "cves",
+ "groovy",
+ "remote-code-execution"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1064413307,
"name": "CrafterCMS-CVE-2025-6384",
diff --git a/2025/CVE-2025-63848.json b/2025/CVE-2025-63848.json
new file mode 100644
index 0000000000..f85066be2a
--- /dev/null
+++ b/2025/CVE-2025-63848.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1098709449,
+ "name": "CVE-2025-63848",
+ "full_name": "coderMohammed1\/CVE-2025-63848",
+ "owner": {
+ "login": "coderMohammed1",
+ "id": 136458027,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136458027?v=4",
+ "html_url": "https:\/\/github.com\/coderMohammed1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/coderMohammed1\/CVE-2025-63848",
+ "description": "swish-prolog cve",
+ "fork": false,
+ "created_at": "2025-11-18T03:30:16Z",
+ "updated_at": "2025-11-21T01:24:13Z",
+ "pushed_at": "2025-11-21T01:24:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63888.json b/2025/CVE-2025-63888.json
new file mode 100644
index 0000000000..4971a1269e
--- /dev/null
+++ b/2025/CVE-2025-63888.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100926168,
+ "name": "cve-2025-63888-exploit",
+ "full_name": "AN5I\/cve-2025-63888-exploit",
+ "owner": {
+ "login": "AN5I",
+ "id": 243373094,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243373094?v=4",
+ "html_url": "https:\/\/github.com\/AN5I",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AN5I\/cve-2025-63888-exploit",
+ "description": "Security research tool for detecting and testing CVE-2025-63888 (ThinkPHP 5.0.24 File Inclusion RCE vulnerability)",
+ "fork": false,
+ "created_at": "2025-11-21T00:25:31Z",
+ "updated_at": "2026-05-09T00:59:32Z",
+ "pushed_at": "2025-11-21T00:25:40Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6389.json b/2025/CVE-2025-6389.json
index 88efdb941c..561268ab65 100644
--- a/2025/CVE-2025-6389.json
+++ b/2025/CVE-2025-6389.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1104526634,
+ "name": "blackash-cve-2025-6389",
+ "full_name": "AivarSaar\/blackash-cve-2025-6389",
+ "owner": {
+ "login": "AivarSaar",
+ "id": 191652683,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191652683?v=4",
+ "html_url": "https:\/\/github.com\/AivarSaar",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AivarSaar\/blackash-cve-2025-6389",
+ "description": "CVE-2025-6389",
+ "fork": false,
+ "created_at": "2025-11-26T10:32:09Z",
+ "updated_at": "2025-11-26T10:32:09Z",
+ "pushed_at": "2025-11-25T08:43:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 10,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 10,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113977064,
+ "name": "SneeitScanner-CVE-2025-6389",
+ "full_name": "itsismarcos\/SneeitScanner-CVE-2025-6389",
+ "owner": {
+ "login": "itsismarcos",
+ "id": 187547550,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187547550?v=4",
+ "html_url": "https:\/\/github.com\/itsismarcos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/itsismarcos\/SneeitScanner-CVE-2025-6389",
+ "description": "SneeitScanner - PoC & Scanner para RCE não autenticada no Sneeit Framework (CVE-2025-6389)",
+ "fork": false,
+ "created_at": "2025-12-10T18:16:23Z",
+ "updated_at": "2026-02-02T20:55:37Z",
+ "pushed_at": "2025-12-10T18:18:48Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1214594632,
"name": "CVE-2025-6389",
diff --git a/2025/CVE-2025-63892.json b/2025/CVE-2025-63892.json
new file mode 100644
index 0000000000..e1361803a3
--- /dev/null
+++ b/2025/CVE-2025-63892.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1095576035,
+ "name": "security-advisories",
+ "full_name": "minhajultaivin\/security-advisories",
+ "owner": {
+ "login": "minhajultaivin",
+ "id": 182295659,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182295659?v=4",
+ "html_url": "https:\/\/github.com\/minhajultaivin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/minhajultaivin\/security-advisories",
+ "description": "XSS vulnerability in SourceCodester Student Grades Management System (CVE-2025-63892)",
+ "fork": false,
+ "created_at": "2025-11-13T08:32:01Z",
+ "updated_at": "2025-11-13T10:08:14Z",
+ "pushed_at": "2025-11-13T10:08:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63895.json b/2025/CVE-2025-63895.json
new file mode 100644
index 0000000000..f7ea464478
--- /dev/null
+++ b/2025/CVE-2025-63895.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1112357827,
+ "name": "JXL_Infotainment_CVE-2025-63895",
+ "full_name": "thorat-shubham\/JXL_Infotainment_CVE-2025-63895",
+ "owner": {
+ "login": "thorat-shubham",
+ "id": 175013425,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175013425?v=4",
+ "html_url": "https:\/\/github.com\/thorat-shubham",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thorat-shubham\/JXL_Infotainment_CVE-2025-63895",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T14:10:51Z",
+ "updated_at": "2025-12-09T06:59:04Z",
+ "pushed_at": "2025-12-09T06:59:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63914.json b/2025/CVE-2025-63914.json
new file mode 100644
index 0000000000..37c8508651
--- /dev/null
+++ b/2025/CVE-2025-63914.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100215145,
+ "name": "CVE-2025-63914",
+ "full_name": "WxDou\/CVE-2025-63914",
+ "owner": {
+ "login": "WxDou",
+ "id": 175824869,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175824869?v=4",
+ "html_url": "https:\/\/github.com\/WxDou",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/WxDou\/CVE-2025-63914",
+ "description": "Public disclosure and patch for CVE-2025-63914: Zip bomb vulnerability in Cinnamon\/kotaemon.",
+ "fork": false,
+ "created_at": "2025-11-20T01:49:30Z",
+ "updated_at": "2025-12-02T07:17:40Z",
+ "pushed_at": "2025-12-02T07:17:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63915.json b/2025/CVE-2025-63915.json
new file mode 100644
index 0000000000..fb73a284ea
--- /dev/null
+++ b/2025/CVE-2025-63915.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1078286238,
+ "name": "CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS",
+ "full_name": "zero-day348\/CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS",
+ "owner": {
+ "login": "zero-day348",
+ "id": 181541428,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181541428?v=4",
+ "html_url": "https:\/\/github.com\/zero-day348",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zero-day348\/CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS",
+ "description": "There is a Reflected xss vulnerability exists in DoraCMS",
+ "fork": false,
+ "created_at": "2025-10-17T13:48:31Z",
+ "updated_at": "2025-11-24T12:46:51Z",
+ "pushed_at": "2025-11-21T15:31:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-63943.json b/2025/CVE-2025-63943.json
new file mode 100644
index 0000000000..76cc384310
--- /dev/null
+++ b/2025/CVE-2025-63943.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096563307,
+ "name": "CVE-2025-63943",
+ "full_name": "RedOpsX\/CVE-2025-63943",
+ "owner": {
+ "login": "RedOpsX",
+ "id": 53915034,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53915034?v=4",
+ "html_url": "https:\/\/github.com\/RedOpsX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RedOpsX\/CVE-2025-63943",
+ "description": "SQL Injection vulnerability discovered in Grocery Store Management System 1.0",
+ "fork": false,
+ "created_at": "2025-11-14T15:57:03Z",
+ "updated_at": "2025-11-14T16:01:15Z",
+ "pushed_at": "2025-11-14T16:01:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-64027.json b/2025/CVE-2025-64027.json
new file mode 100644
index 0000000000..2fd232a699
--- /dev/null
+++ b/2025/CVE-2025-64027.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1098213319,
+ "name": "CVE-2025-64027",
+ "full_name": "cybercrewinc\/CVE-2025-64027",
+ "owner": {
+ "login": "cybercrewinc",
+ "id": 176697229,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176697229?v=4",
+ "html_url": "https:\/\/github.com\/cybercrewinc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cybercrewinc\/CVE-2025-64027",
+ "description": "Reflected Cross-Site Scripting in Snipe-IT CSV Import Workflow",
+ "fork": false,
+ "created_at": "2025-11-17T12:01:53Z",
+ "updated_at": "2026-05-09T11:09:47Z",
+ "pushed_at": "2025-11-17T12:04:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-64328.json b/2025/CVE-2025-64328.json
new file mode 100644
index 0000000000..5a7f013866
--- /dev/null
+++ b/2025/CVE-2025-64328.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1097134378,
+ "name": "CVE-2025-64328_FreePBX-framework-Command-Injection",
+ "full_name": "mcorybillington\/CVE-2025-64328_FreePBX-framework-Command-Injection",
+ "owner": {
+ "login": "mcorybillington",
+ "id": 24510213,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24510213?v=4",
+ "html_url": "https:\/\/github.com\/mcorybillington",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mcorybillington\/CVE-2025-64328_FreePBX-framework-Command-Injection",
+ "description": "CVE-2025-64328 FreePBX Authenticated Command Injection in the framework module.",
+ "fork": false,
+ "created_at": "2025-11-15T15:49:39Z",
+ "updated_at": "2026-03-17T15:26:39Z",
+ "pushed_at": "2025-11-15T15:56:15Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6440.json b/2025/CVE-2025-6440.json
index e69eb15cf7..5f73df3467 100644
--- a/2025/CVE-2025-6440.json
+++ b/2025/CVE-2025-6440.json
@@ -1,4 +1,103 @@
[
+ {
+ "id": 1086347775,
+ "name": "CVE-2025-6440",
+ "full_name": "AnotherSec\/CVE-2025-6440",
+ "owner": {
+ "login": "AnotherSec",
+ "id": 178832315,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178832315?v=4",
+ "html_url": "https:\/\/github.com\/AnotherSec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AnotherSec\/CVE-2025-6440",
+ "description": "WooCommerce Designer Pro 1.9.26 - Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-10-30T09:46:17Z",
+ "updated_at": "2025-12-01T13:59:59Z",
+ "pushed_at": "2025-12-01T13:59:56Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1093848435,
+ "name": "CVE-2025-6440",
+ "full_name": "Nxploited\/CVE-2025-6440",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-6440",
+ "description": "WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-11-10T23:28:34Z",
+ "updated_at": "2026-03-13T08:56:36Z",
+ "pushed_at": "2025-11-10T23:34:36Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1106693960,
+ "name": "CVE-2025-6440-Poc-Exploit",
+ "full_name": "m2hcz\/CVE-2025-6440-Poc-Exploit",
+ "owner": {
+ "login": "m2hcz",
+ "id": 202376560,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202376560?v=4",
+ "html_url": "https:\/\/github.com\/m2hcz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/m2hcz\/CVE-2025-6440-Poc-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-29T18:52:50Z",
+ "updated_at": "2025-12-13T18:28:49Z",
+ "pushed_at": "2025-11-29T19:03:29Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1127117975,
"name": "CVE-2025-6440",
diff --git a/2025/CVE-2025-64446.json b/2025/CVE-2025-64446.json
index 4e6668865c..dbf66278be 100644
--- a/2025/CVE-2025-64446.json
+++ b/2025/CVE-2025-64446.json
@@ -1,4 +1,341 @@
[
+ {
+ "id": 1096638586,
+ "name": "CVE-2025-64446-PoC---FortiWeb-Path-Traversal",
+ "full_name": "fevar54\/CVE-2025-64446-PoC---FortiWeb-Path-Traversal",
+ "owner": {
+ "login": "fevar54",
+ "id": 80516843,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
+ "html_url": "https:\/\/github.com\/fevar54",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fevar54\/CVE-2025-64446-PoC---FortiWeb-Path-Traversal",
+ "description": "# CVE-2025-64446 PoC - FortiWeb Path Traversal Proof of Concept para la vulnerabilidad de path traversal en Fortinet FortiWeb que permite ejecución remota de comandos. Incluye herramienta de detección para fines educativos. **⚠️ SOLO USO EDUCATIVO - NO PARA EXPLOTACIÓN ⚠️**",
+ "fork": false,
+ "created_at": "2025-11-14T18:10:24Z",
+ "updated_at": "2026-04-06T02:56:17Z",
+ "pushed_at": "2025-11-14T18:13:33Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1096686833,
+ "name": "CVE-2025-64446-FortiWeb-CGI-Bypass-PoC",
+ "full_name": "sxyrxyy\/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC",
+ "owner": {
+ "login": "sxyrxyy",
+ "id": 125439203,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125439203?v=4",
+ "html_url": "https:\/\/github.com\/sxyrxyy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sxyrxyy\/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-14T19:49:47Z",
+ "updated_at": "2026-04-06T02:56:16Z",
+ "pushed_at": "2025-11-14T19:49:55Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1097196574,
+ "name": "CVE-2025-64446-Exploit",
+ "full_name": "soltanali0\/CVE-2025-64446-Exploit",
+ "owner": {
+ "login": "soltanali0",
+ "id": 87374678,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4",
+ "html_url": "https:\/\/github.com\/soltanali0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/soltanali0\/CVE-2025-64446-Exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-15T18:01:08Z",
+ "updated_at": "2026-05-18T02:44:06Z",
+ "pushed_at": "2025-11-15T18:08:40Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098211029,
+ "name": "CVE-2025-64446",
+ "full_name": "sensepost\/CVE-2025-64446",
+ "owner": {
+ "login": "sensepost",
+ "id": 1193973,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1193973?v=4",
+ "html_url": "https:\/\/github.com\/sensepost",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sensepost\/CVE-2025-64446",
+ "description": "A scanner for the FortiNet vulnerability CVE-2025-64446",
+ "fork": false,
+ "created_at": "2025-11-17T11:58:18Z",
+ "updated_at": "2026-05-02T21:18:16Z",
+ "pushed_at": "2025-11-18T16:27:06Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 6,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-64446"
+ ],
+ "visibility": "public",
+ "forks": 6,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098349475,
+ "name": "CVE-2025-64446",
+ "full_name": "D3crypT0r\/CVE-2025-64446",
+ "owner": {
+ "login": "D3crypT0r",
+ "id": 66831571,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66831571?v=4",
+ "html_url": "https:\/\/github.com\/D3crypT0r",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D3crypT0r\/CVE-2025-64446",
+ "description": "FortiWeb Unauthenticated RCE via Path Traversal & CGI Auth Bypass",
+ "fork": false,
+ "created_at": "2025-11-17T15:20:22Z",
+ "updated_at": "2025-11-17T15:21:29Z",
+ "pushed_at": "2025-11-17T15:21:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098473529,
+ "name": "CVE-2025-64446",
+ "full_name": "verylazytech\/CVE-2025-64446",
+ "owner": {
+ "login": "verylazytech",
+ "id": 172168670,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172168670?v=4",
+ "html_url": "https:\/\/github.com\/verylazytech",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/verylazytech\/CVE-2025-64446",
+ "description": "CVE-2025-64446 - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.",
+ "fork": false,
+ "created_at": "2025-11-17T18:28:46Z",
+ "updated_at": "2025-11-25T16:19:25Z",
+ "pushed_at": "2025-11-19T09:25:12Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1098927955,
+ "name": "CVE-2025-64446_CVE-2025-58034",
+ "full_name": "lincemorado97\/CVE-2025-64446_CVE-2025-58034",
+ "owner": {
+ "login": "lincemorado97",
+ "id": 243954988,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243954988?v=4",
+ "html_url": "https:\/\/github.com\/lincemorado97",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lincemorado97\/CVE-2025-64446_CVE-2025-58034",
+ "description": "FortiWeb Remote Code Execution (RCE) Exploit via CVE-2025-64446 + CVE-2025-58034 Chain",
+ "fork": false,
+ "created_at": "2025-11-18T10:25:18Z",
+ "updated_at": "2026-05-18T02:44:06Z",
+ "pushed_at": "2025-11-20T03:54:32Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-58034",
+ "cve-2025-64446",
+ "fortinet-vul",
+ "fortiweb-authbypass"
+ ],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1099999369,
+ "name": "CVE-2025-64446-",
+ "full_name": "Death112233\/CVE-2025-64446-",
+ "owner": {
+ "login": "Death112233",
+ "id": 142390595,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142390595?v=4",
+ "html_url": "https:\/\/github.com\/Death112233",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Death112233\/CVE-2025-64446-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-19T17:54:34Z",
+ "updated_at": "2025-11-19T17:54:38Z",
+ "pushed_at": "2025-11-19T17:54:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1100930271,
+ "name": "cve-2025-64446-fortiweb-exploit",
+ "full_name": "AN5I\/cve-2025-64446-fortiweb-exploit",
+ "owner": {
+ "login": "AN5I",
+ "id": 243373094,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243373094?v=4",
+ "html_url": "https:\/\/github.com\/AN5I",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AN5I\/cve-2025-64446-fortiweb-exploit",
+ "description": "Security research tool for detecting and testing CVE-2025-64446 (FortiWeb Path Traversal RCE vulnerability)",
+ "fork": false,
+ "created_at": "2025-11-21T00:37:37Z",
+ "updated_at": "2025-11-21T01:35:24Z",
+ "pushed_at": "2025-11-21T00:37:45Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1120664288,
+ "name": "fortinet-fortiweb-cve-2025-64446-58034",
+ "full_name": "lequoca\/fortinet-fortiweb-cve-2025-64446-58034",
+ "owner": {
+ "login": "lequoca",
+ "id": 92279844,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92279844?v=4",
+ "html_url": "https:\/\/github.com\/lequoca",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lequoca\/fortinet-fortiweb-cve-2025-64446-58034",
+ "description": "Security research on Fortinet FortiWeb vulnerabilities (CVE-2025-64446, CVE-2025-58034)",
+ "fork": false,
+ "created_at": "2025-12-21T17:31:34Z",
+ "updated_at": "2025-12-21T18:36:10Z",
+ "pushed_at": "2025-12-21T18:36:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1188551648,
"name": "FORTIWEB_CVE-2025-64446-58034",
diff --git a/2025/CVE-2025-64458.json b/2025/CVE-2025-64458.json
new file mode 100644
index 0000000000..3e0e7a1350
--- /dev/null
+++ b/2025/CVE-2025-64458.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090671238,
+ "name": "CVE-2025-64458-Demo",
+ "full_name": "ch4n3-yoon\/CVE-2025-64458-Demo",
+ "owner": {
+ "login": "ch4n3-yoon",
+ "id": 13852925,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13852925?v=4",
+ "html_url": "https:\/\/github.com\/ch4n3-yoon",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ch4n3-yoon\/CVE-2025-64458-Demo",
+ "description": "A PoC script for demonstrating CVE 2025-64458, found in Django, potential DoS in `HttpResponseRedirect`\/`HttpResponsePermanentRedirect` on Windows.",
+ "fork": false,
+ "created_at": "2025-11-06T01:30:25Z",
+ "updated_at": "2025-11-06T01:56:27Z",
+ "pushed_at": "2025-11-06T01:55:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-64459.json b/2025/CVE-2025-64459.json
index 7fc9047b5c..2cf805a520 100644
--- a/2025/CVE-2025-64459.json
+++ b/2025/CVE-2025-64459.json
@@ -1,4 +1,176 @@
[
+ {
+ "id": 1090854801,
+ "name": "django_sqli_target_CVE-2025-64459",
+ "full_name": "rockmelodies\/django_sqli_target_CVE-2025-64459",
+ "owner": {
+ "login": "rockmelodies",
+ "id": 24653177,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24653177?v=4",
+ "html_url": "https:\/\/github.com\/rockmelodies",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rockmelodies\/django_sqli_target_CVE-2025-64459",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-06T08:21:39Z",
+ "updated_at": "2025-11-06T08:21:44Z",
+ "pushed_at": "2025-11-06T08:21:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1093500335,
+ "name": "CVE-2025-64459",
+ "full_name": "nunpa\/CVE-2025-64459",
+ "owner": {
+ "login": "nunpa",
+ "id": 8311404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8311404?v=4",
+ "html_url": "https:\/\/github.com\/nunpa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nunpa\/CVE-2025-64459",
+ "description": "check if vulnerable python-django version to CVE-2025-64459 bug",
+ "fork": false,
+ "created_at": "2025-11-10T13:08:57Z",
+ "updated_at": "2025-11-28T05:17:53Z",
+ "pushed_at": "2025-11-13T11:00:40Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1101581775,
+ "name": "django-connector-CVE-2025-64459-testbed",
+ "full_name": "omarkurt\/django-connector-CVE-2025-64459-testbed",
+ "owner": {
+ "login": "omarkurt",
+ "id": 1712468,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1712468?v=4",
+ "html_url": "https:\/\/github.com\/omarkurt",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/omarkurt\/django-connector-CVE-2025-64459-testbed",
+ "description": "A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter() parameter injection via dictionary expansion using Docker.",
+ "fork": false,
+ "created_at": "2025-11-21T22:13:56Z",
+ "updated_at": "2025-11-22T12:25:04Z",
+ "pushed_at": "2025-11-21T22:25:19Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-64459",
+ "django",
+ "security",
+ "security-testbed",
+ "security-testing",
+ "vt-2025-64459"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1107372077,
+ "name": "CVE-2025-64459-Poc",
+ "full_name": "0xCyberstan\/CVE-2025-64459-Poc",
+ "owner": {
+ "login": "0xCyberstan",
+ "id": 156473872,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156473872?v=4",
+ "html_url": "https:\/\/github.com\/0xCyberstan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xCyberstan\/CVE-2025-64459-Poc",
+ "description": "Vulnerability: SQL Injection via QuerySet and Q() keyword argument unpacking. CVE ID: CVE-2025-64459 Severity: Critical (CVSS 9.1) Affected Versions: Django 5.1 < 5.1.14, 4.2 < 4.2.26, and 5.2 < 5.2.8. Researcher: Cyberstan (University of Warwick)",
+ "fork": false,
+ "created_at": "2025-12-01T03:34:47Z",
+ "updated_at": "2025-12-17T11:52:04Z",
+ "pushed_at": "2025-12-01T03:40:20Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110335731,
+ "name": "CVE-2025-64459",
+ "full_name": "Z3YR0xX\/CVE-2025-64459",
+ "owner": {
+ "login": "Z3YR0xX",
+ "id": 53027906,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53027906?v=4",
+ "html_url": "https:\/\/github.com\/Z3YR0xX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Z3YR0xX\/CVE-2025-64459",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-05T03:38:19Z",
+ "updated_at": "2025-12-05T03:39:17Z",
+ "pushed_at": "2025-12-05T03:39:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1130430436,
"name": "Helpdesk-Telecom-CVE-2025-64459",
diff --git a/2025/CVE-2025-64495.json b/2025/CVE-2025-64495.json
new file mode 100644
index 0000000000..9f67c17be4
--- /dev/null
+++ b/2025/CVE-2025-64495.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1093368771,
+ "name": "CVE-2025-64495-POC",
+ "full_name": "AlphabugX\/CVE-2025-64495-POC",
+ "owner": {
+ "login": "AlphabugX",
+ "id": 27001865,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27001865?v=4",
+ "html_url": "https:\/\/github.com\/AlphabugX",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AlphabugX\/CVE-2025-64495-POC",
+ "description": "Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO\/RCE",
+ "fork": false,
+ "created_at": "2025-11-10T09:26:30Z",
+ "updated_at": "2025-11-11T09:18:57Z",
+ "pushed_at": "2025-11-10T09:33:20Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-64513.json b/2025/CVE-2025-64513.json
new file mode 100644
index 0000000000..36b73c7913
--- /dev/null
+++ b/2025/CVE-2025-64513.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096297669,
+ "name": "CVE-2025-64513",
+ "full_name": "shinyseam\/CVE-2025-64513",
+ "owner": {
+ "login": "shinyseam",
+ "id": 49446840,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49446840?v=4",
+ "html_url": "https:\/\/github.com\/shinyseam",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/shinyseam\/CVE-2025-64513",
+ "description": "PoC for CVE-2025-64513 — Milvus Proxy Authentication Bypass Vulnerability Batch scanner to verify unauthorized access and gather Milvus version, health, and database info. For security research and defensive validation only.",
+ "fork": false,
+ "created_at": "2025-11-14T08:12:51Z",
+ "updated_at": "2026-02-25T20:26:07Z",
+ "pushed_at": "2025-11-14T08:17:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-64720.json b/2025/CVE-2025-64720.json
new file mode 100644
index 0000000000..c98b818488
--- /dev/null
+++ b/2025/CVE-2025-64720.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1116380610,
+ "name": "CVE-2025-64720-PoC",
+ "full_name": "dantsco\/CVE-2025-64720-PoC",
+ "owner": {
+ "login": "dantsco",
+ "id": 247152057,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247152057?v=4",
+ "html_url": "https:\/\/github.com\/dantsco",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/dantsco\/CVE-2025-64720-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-14T18:41:21Z",
+ "updated_at": "2025-12-14T18:42:19Z",
+ "pushed_at": "2025-12-14T18:42:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65018.json b/2025/CVE-2025-65018.json
new file mode 100644
index 0000000000..8a4281a050
--- /dev/null
+++ b/2025/CVE-2025-65018.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1102595770,
+ "name": "CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-",
+ "full_name": "Neo-Neo6\/CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-",
+ "owner": {
+ "login": "Neo-Neo6",
+ "id": 245737804,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245737804?v=4",
+ "html_url": "https:\/\/github.com\/Neo-Neo6",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Neo-Neo6\/CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-23T18:34:22Z",
+ "updated_at": "2025-11-29T18:52:47Z",
+ "pushed_at": "2025-11-23T19:14:37Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1112718085,
+ "name": "CVE-2025-65018_Exploit_Challenge",
+ "full_name": "bohemian-miser\/CVE-2025-65018_Exploit_Challenge",
+ "owner": {
+ "login": "bohemian-miser",
+ "id": 158785140,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158785140?v=4",
+ "html_url": "https:\/\/github.com\/bohemian-miser",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bohemian-miser\/CVE-2025-65018_Exploit_Challenge",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-09T02:22:18Z",
+ "updated_at": "2025-12-09T04:45:44Z",
+ "pushed_at": "2025-12-09T04:45:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6514.json b/2025/CVE-2025-6514.json
new file mode 100644
index 0000000000..c3e23349ca
--- /dev/null
+++ b/2025/CVE-2025-6514.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1018096874,
+ "name": "CVE-2025-6514",
+ "full_name": "ChaseHCS\/CVE-2025-6514",
+ "owner": {
+ "login": "ChaseHCS",
+ "id": 150468279,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150468279?v=4",
+ "html_url": "https:\/\/github.com\/ChaseHCS",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ChaseHCS\/CVE-2025-6514",
+ "description": "Documentation for CVE-2025-6514. MCP-Remote RCE.",
+ "fork": false,
+ "created_at": "2025-07-11T15:46:24Z",
+ "updated_at": "2025-07-11T16:16:44Z",
+ "pushed_at": "2025-07-11T16:16:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1083550744,
+ "name": "CVE-2025-6514",
+ "full_name": "Cyberency\/CVE-2025-6514",
+ "owner": {
+ "login": "Cyberency",
+ "id": 199310980,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199310980?v=4",
+ "html_url": "https:\/\/github.com\/Cyberency",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Cyberency\/CVE-2025-6514",
+ "description": "mcp-remote exposed to OS command injection",
+ "fork": false,
+ "created_at": "2025-10-26T08:57:42Z",
+ "updated_at": "2025-11-06T05:22:35Z",
+ "pushed_at": "2025-11-18T13:24:24Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65270.json b/2025/CVE-2025-65270.json
new file mode 100644
index 0000000000..2fb9bc5b26
--- /dev/null
+++ b/2025/CVE-2025-65270.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117265401,
+ "name": "CVE-2025-65270",
+ "full_name": "xh4vm\/CVE-2025-65270",
+ "owner": {
+ "login": "xh4vm",
+ "id": 87658711,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87658711?v=4",
+ "html_url": "https:\/\/github.com\/xh4vm",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xh4vm\/CVE-2025-65270",
+ "description": "Reflected XSS in ClinCapture EDC",
+ "fork": false,
+ "created_at": "2025-12-16T04:22:30Z",
+ "updated_at": "2025-12-23T06:15:23Z",
+ "pushed_at": "2025-12-23T06:15:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65271.json b/2025/CVE-2025-65271.json
new file mode 100644
index 0000000000..b4ced9d5e8
--- /dev/null
+++ b/2025/CVE-2025-65271.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1111658699,
+ "name": "CVE-2025-65271",
+ "full_name": "1337Skid\/CVE-2025-65271",
+ "owner": {
+ "login": "1337Skid",
+ "id": 59775826,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59775826?v=4",
+ "html_url": "https:\/\/github.com\/1337Skid",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/1337Skid\/CVE-2025-65271",
+ "description": "PoC for CVE-2025-65271 | Found by me",
+ "fork": false,
+ "created_at": "2025-12-07T11:50:55Z",
+ "updated_at": "2026-01-09T03:37:43Z",
+ "pushed_at": "2025-12-09T18:46:40Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65300.json b/2025/CVE-2025-65300.json
new file mode 100644
index 0000000000..c5c6d082e6
--- /dev/null
+++ b/2025/CVE-2025-65300.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1111069262,
+ "name": "CVE-2025-65300",
+ "full_name": "garux-sec\/CVE-2025-65300",
+ "owner": {
+ "login": "garux-sec",
+ "id": 185332300,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185332300?v=4",
+ "html_url": "https:\/\/github.com\/garux-sec",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/garux-sec\/CVE-2025-65300",
+ "description": "Security Advisory – CVE-2025-65300",
+ "fork": false,
+ "created_at": "2025-12-06T07:51:31Z",
+ "updated_at": "2025-12-08T02:49:57Z",
+ "pushed_at": "2025-12-08T02:49:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65318.json b/2025/CVE-2025-65318.json
new file mode 100644
index 0000000000..c3bf88bbb4
--- /dev/null
+++ b/2025/CVE-2025-65318.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117089082,
+ "name": "CVE-2025-65318-and-CVE-2025-65319",
+ "full_name": "bbaboha\/CVE-2025-65318-and-CVE-2025-65319",
+ "owner": {
+ "login": "bbaboha",
+ "id": 249810858,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249810858?v=4",
+ "html_url": "https:\/\/github.com\/bbaboha",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bbaboha\/CVE-2025-65318-and-CVE-2025-65319",
+ "description": "Insecure attachment handling when using Canary Mail or Blue mail",
+ "fork": false,
+ "created_at": "2025-12-15T20:18:51Z",
+ "updated_at": "2026-01-17T15:59:10Z",
+ "pushed_at": "2025-12-15T22:41:35Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65320.json b/2025/CVE-2025-65320.json
index 90f751a75e..f360d69e5d 100644
--- a/2025/CVE-2025-65320.json
+++ b/2025/CVE-2025-65320.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1082975228,
+ "name": "CVE-2025-65320",
+ "full_name": "Smarttfoxx\/CVE-2025-65320",
+ "owner": {
+ "login": "Smarttfoxx",
+ "id": 140526026,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140526026?v=4",
+ "html_url": "https:\/\/github.com\/Smarttfoxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Smarttfoxx\/CVE-2025-65320",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-10-25T05:04:42Z",
+ "updated_at": "2025-11-27T06:23:01Z",
+ "pushed_at": "2025-11-27T06:22:49Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1173493049,
"name": "CVE-2025-65320",
diff --git a/2025/CVE-2025-65321.json b/2025/CVE-2025-65321.json
new file mode 100644
index 0000000000..743dc3a8ba
--- /dev/null
+++ b/2025/CVE-2025-65321.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1108120583,
+ "name": "CVE-2025-65321",
+ "full_name": "Smarttfoxx\/CVE-2025-65321",
+ "owner": {
+ "login": "Smarttfoxx",
+ "id": 140526026,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140526026?v=4",
+ "html_url": "https:\/\/github.com\/Smarttfoxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Smarttfoxx\/CVE-2025-65321",
+ "description": "Language Sloth Sloth Bot 1.0 is vulnerable to Directory Traversal in the gif() and png() functions. The functions build file paths using unsanitized user input for the 'name' parameter, allowing attackers to reference files outside the intended resource directories.",
+ "fork": false,
+ "created_at": "2025-12-02T03:43:21Z",
+ "updated_at": "2026-01-29T14:40:09Z",
+ "pushed_at": "2025-12-02T03:55:36Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65345.json b/2025/CVE-2025-65345.json
new file mode 100644
index 0000000000..f250ce2540
--- /dev/null
+++ b/2025/CVE-2025-65345.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1107559101,
+ "name": "CVE-2025-65345",
+ "full_name": "tlekrean\/CVE-2025-65345",
+ "owner": {
+ "login": "tlekrean",
+ "id": 75418458,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75418458?v=4",
+ "html_url": "https:\/\/github.com\/tlekrean",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tlekrean\/CVE-2025-65345",
+ "description": "An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use zip\/archiving function to create archives containing files and directories outside the intended scope due to improper path validation.",
+ "fork": false,
+ "created_at": "2025-12-01T09:58:26Z",
+ "updated_at": "2025-12-04T11:22:15Z",
+ "pushed_at": "2025-12-04T11:22:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65346.json b/2025/CVE-2025-65346.json
new file mode 100644
index 0000000000..a2ec9ed534
--- /dev/null
+++ b/2025/CVE-2025-65346.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1083223921,
+ "name": "CVE-2025-65346",
+ "full_name": "Theethat-Thamwasin\/CVE-2025-65346",
+ "owner": {
+ "login": "Theethat-Thamwasin",
+ "id": 175581567,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175581567?v=4",
+ "html_url": "https:\/\/github.com\/Theethat-Thamwasin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Theethat-Thamwasin\/CVE-2025-65346",
+ "description": "A Path Traversal vulnerability in the unzip\/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem locations during archive extraction. Because the extraction routine fails to sanitize destination paths inside ZIP entries, an attacker can craft ZIP archives containing traversal sequences (e.g., .",
+ "fork": false,
+ "created_at": "2025-10-25T15:36:05Z",
+ "updated_at": "2025-12-04T17:28:01Z",
+ "pushed_at": "2025-12-04T17:27:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65354.json b/2025/CVE-2025-65354.json
index b7fc7b2a90..238dc892d8 100644
--- a/2025/CVE-2025-65354.json
+++ b/2025/CVE-2025-65354.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1121844756,
+ "name": "CVE-2025-65354",
+ "full_name": "amaansiddd787\/CVE-2025-65354",
+ "owner": {
+ "login": "amaansiddd787",
+ "id": 147942218,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147942218?v=4",
+ "html_url": "https:\/\/github.com\/amaansiddd787",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amaansiddd787\/CVE-2025-65354",
+ "description": "Public disclosure and technical details for CVE-2025-65354 (SQL Injection)",
+ "fork": false,
+ "created_at": "2025-12-23T16:42:47Z",
+ "updated_at": "2026-01-06T17:50:38Z",
+ "pushed_at": "2025-12-23T20:46:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1129383882,
"name": "CVE-2025-65354",
diff --git a/2025/CVE-2025-65427.json b/2025/CVE-2025-65427.json
new file mode 100644
index 0000000000..f9efefc655
--- /dev/null
+++ b/2025/CVE-2025-65427.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117268274,
+ "name": "CVE-2025-65427",
+ "full_name": "kirubel-cve\/CVE-2025-65427",
+ "owner": {
+ "login": "kirubel-cve",
+ "id": 249870970,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249870970?v=4",
+ "html_url": "https:\/\/github.com\/kirubel-cve",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kirubel-cve\/CVE-2025-65427",
+ "description": "CVE-2025-65427: Missing rate limiting in Dbit N300 T1 Pro router login API allows brute-force attacks",
+ "fork": false,
+ "created_at": "2025-12-16T04:29:58Z",
+ "updated_at": "2025-12-16T04:54:30Z",
+ "pushed_at": "2025-12-16T04:54:27Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6543.json b/2025/CVE-2025-6543.json
index 2c7cc25cdf..25cc926bce 100644
--- a/2025/CVE-2025-6543.json
+++ b/2025/CVE-2025-6543.json
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1013381456,
+ "name": "CVE-2025-6543_CitrixNetScaler_PoC",
+ "full_name": "abrewer251\/CVE-2025-6543_CitrixNetScaler_PoC",
+ "owner": {
+ "login": "abrewer251",
+ "id": 150287770,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4",
+ "html_url": "https:\/\/github.com\/abrewer251",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abrewer251\/CVE-2025-6543_CitrixNetScaler_PoC",
+ "description": "Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs.",
+ "fork": false,
+ "created_at": "2025-07-03T20:02:39Z",
+ "updated_at": "2025-11-09T16:10:18Z",
+ "pushed_at": "2025-07-03T20:07:01Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-65442.json b/2025/CVE-2025-65442.json
new file mode 100644
index 0000000000..03ffcf114f
--- /dev/null
+++ b/2025/CVE-2025-65442.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1087967561,
+ "name": "CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-",
+ "full_name": "zero-day348\/CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-",
+ "owner": {
+ "login": "zero-day348",
+ "id": 181541428,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181541428?v=4",
+ "html_url": "https:\/\/github.com\/zero-day348",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zero-day348\/CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-",
+ "description": "DOM-based Cross-Site Scripting (XSS) Vulnerability in novel V3.5.0 (CWE-79)",
+ "fork": false,
+ "created_at": "2025-11-02T02:36:35Z",
+ "updated_at": "2025-12-28T06:53:43Z",
+ "pushed_at": "2025-12-28T06:53:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65482.json b/2025/CVE-2025-65482.json
new file mode 100644
index 0000000000..7f15926294
--- /dev/null
+++ b/2025/CVE-2025-65482.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1102215883,
+ "name": "CVE-2025-65482-XXE-",
+ "full_name": "AT190510-Cuong\/CVE-2025-65482-XXE-",
+ "owner": {
+ "login": "AT190510-Cuong",
+ "id": 134201481,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134201481?v=4",
+ "html_url": "https:\/\/github.com\/AT190510-Cuong",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AT190510-Cuong\/CVE-2025-65482-XXE-",
+ "description": "CVE-2025-65482 (XXE)",
+ "fork": false,
+ "created_at": "2025-11-23T03:08:15Z",
+ "updated_at": "2026-03-31T15:21:54Z",
+ "pushed_at": "2025-11-24T08:25:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65518.json b/2025/CVE-2025-65518.json
new file mode 100644
index 0000000000..7377655a51
--- /dev/null
+++ b/2025/CVE-2025-65518.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117524538,
+ "name": "CVE-2025-65518",
+ "full_name": "Jainil-89\/CVE-2025-65518",
+ "owner": {
+ "login": "Jainil-89",
+ "id": 157509729,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157509729?v=4",
+ "html_url": "https:\/\/github.com\/Jainil-89",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jainil-89\/CVE-2025-65518",
+ "description": "Denial of Service Vulnerability in Plesk Obsidian via `get_password.php`",
+ "fork": false,
+ "created_at": "2025-12-16T12:40:35Z",
+ "updated_at": "2025-12-16T12:41:24Z",
+ "pushed_at": "2025-12-16T12:41:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json
index a255cda79e..6ec2123c5f 100644
--- a/2025/CVE-2025-6554.json
+++ b/2025/CVE-2025-6554.json
@@ -1,4 +1,169 @@
[
+ {
+ "id": 1014102090,
+ "name": "CVE-2025-6554",
+ "full_name": "gmh5225\/CVE-2025-6554",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-6554",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-05T04:06:51Z",
+ "updated_at": "2025-07-05T04:06:51Z",
+ "pushed_at": "2025-07-04T13:26:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1014103061,
+ "name": "CVE-2025-6554-2",
+ "full_name": "gmh5225\/CVE-2025-6554-2",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-6554-2",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-05T04:10:06Z",
+ "updated_at": "2025-07-22T05:02:27Z",
+ "pushed_at": "2025-07-04T18:33:55Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1015278662,
+ "name": "CVE-2025-6554",
+ "full_name": "PwnToday\/CVE-2025-6554",
+ "owner": {
+ "login": "PwnToday",
+ "id": 190947704,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190947704?v=4",
+ "html_url": "https:\/\/github.com\/PwnToday",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/PwnToday\/CVE-2025-6554",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-07T09:10:31Z",
+ "updated_at": "2025-11-25T17:11:12Z",
+ "pushed_at": "2025-08-28T09:27:00Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1016470881,
+ "name": "POC-CVE-2025-6554",
+ "full_name": "ghostn4444\/POC-CVE-2025-6554",
+ "owner": {
+ "login": "ghostn4444",
+ "id": 114788746,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114788746?v=4",
+ "html_url": "https:\/\/github.com\/ghostn4444",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ghostn4444\/POC-CVE-2025-6554",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-09T04:20:12Z",
+ "updated_at": "2025-07-25T12:48:53Z",
+ "pushed_at": "2025-07-09T04:36:02Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1017261199,
+ "name": "CVE-2025-6554",
+ "full_name": "LordBheem\/CVE-2025-6554",
+ "owner": {
+ "login": "LordBheem",
+ "id": 123387668,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123387668?v=4",
+ "html_url": "https:\/\/github.com\/LordBheem",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LordBheem\/CVE-2025-6554",
+ "description": "CVE-2025-6554 PoC",
+ "fork": false,
+ "created_at": "2025-07-10T09:09:09Z",
+ "updated_at": "2025-07-10T09:09:09Z",
+ "pushed_at": "2025-07-10T05:17:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1035650265,
"name": "CVE-2025-6554",
@@ -14,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
- "updated_at": "2026-06-02T12:05:08Z",
- "pushed_at": "2026-06-02T12:05:04Z",
+ "updated_at": "2026-06-02T15:20:33Z",
+ "pushed_at": "2026-06-02T15:06:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -47,5 +212,71 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1092853064,
+ "name": "Google-chrome-zero-day",
+ "full_name": "Muhammednihalmp\/Google-chrome-zero-day",
+ "owner": {
+ "login": "Muhammednihalmp",
+ "id": 136679469,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136679469?v=4",
+ "html_url": "https:\/\/github.com\/Muhammednihalmp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Muhammednihalmp\/Google-chrome-zero-day",
+ "description": "CVE-2025-6554",
+ "fork": false,
+ "created_at": "2025-11-09T12:53:36Z",
+ "updated_at": "2026-04-28T10:57:43Z",
+ "pushed_at": "2025-11-09T13:04:21Z",
+ "stargazers_count": 12,
+ "watchers_count": 12,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 12,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1103662940,
+ "name": "CVE-2025-6554",
+ "full_name": "aklnjakln\/CVE-2025-6554",
+ "owner": {
+ "login": "aklnjakln",
+ "id": 170500961,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170500961?v=4",
+ "html_url": "https:\/\/github.com\/aklnjakln",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aklnjakln\/CVE-2025-6554",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-25T07:03:00Z",
+ "updated_at": "2026-05-19T10:06:27Z",
+ "pushed_at": "2025-11-25T08:31:35Z",
+ "stargazers_count": 31,
+ "watchers_count": 31,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 31,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-6558.json b/2025/CVE-2025-6558.json
new file mode 100644
index 0000000000..e10aa59ab5
--- /dev/null
+++ b/2025/CVE-2025-6558.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1024206810,
+ "name": "CVE-2025-6558-exp",
+ "full_name": "gmh5225\/CVE-2025-6558-exp",
+ "owner": {
+ "login": "gmh5225",
+ "id": 13917777,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4",
+ "html_url": "https:\/\/github.com\/gmh5225",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gmh5225\/CVE-2025-6558-exp",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-22T10:43:25Z",
+ "updated_at": "2025-10-08T07:28:33Z",
+ "pushed_at": "2025-07-17T22:46:11Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1025253193,
+ "name": "CVE-2025-6558-Proof-Of-Concept",
+ "full_name": "DevBuiHieu\/CVE-2025-6558-Proof-Of-Concept",
+ "owner": {
+ "login": "DevBuiHieu",
+ "id": 176993167,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176993167?v=4",
+ "html_url": "https:\/\/github.com\/DevBuiHieu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DevBuiHieu\/CVE-2025-6558-Proof-Of-Concept",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-24T01:32:45Z",
+ "updated_at": "2025-09-23T10:31:26Z",
+ "pushed_at": "2025-07-24T02:18:36Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65637.json b/2025/CVE-2025-65637.json
new file mode 100644
index 0000000000..be1953ce9b
--- /dev/null
+++ b/2025/CVE-2025-65637.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091728377,
+ "name": "logrus-dos-poc",
+ "full_name": "mjuanxd\/logrus-dos-poc",
+ "owner": {
+ "login": "mjuanxd",
+ "id": 112360573,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112360573?v=4",
+ "html_url": "https:\/\/github.com\/mjuanxd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mjuanxd\/logrus-dos-poc",
+ "description": "CVE-2025-65637: Logrus Denial of Service Vulnerability",
+ "fork": false,
+ "created_at": "2025-11-07T12:37:53Z",
+ "updated_at": "2026-04-01T00:01:26Z",
+ "pushed_at": "2025-12-02T15:38:27Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65669.json b/2025/CVE-2025-65669.json
new file mode 100644
index 0000000000..821cbffb18
--- /dev/null
+++ b/2025/CVE-2025-65669.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103290355,
+ "name": "CVE-2025-65669",
+ "full_name": "Rivek619\/CVE-2025-65669",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65669",
+ "description": "An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T17:14:16Z",
+ "updated_at": "2025-11-24T17:21:19Z",
+ "pushed_at": "2025-11-24T17:21:16Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65670.json b/2025/CVE-2025-65670.json
new file mode 100644
index 0000000000..bab3719478
--- /dev/null
+++ b/2025/CVE-2025-65670.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103297275,
+ "name": "CVE-2025-65670",
+ "full_name": "Rivek619\/CVE-2025-65670",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65670",
+ "description": "An (IDOR) in classroomio 0.1.13 allows students to access sensitive admin\/teacher endpoints. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T17:24:50Z",
+ "updated_at": "2025-11-24T17:33:24Z",
+ "pushed_at": "2025-11-24T17:33:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65672.json b/2025/CVE-2025-65672.json
new file mode 100644
index 0000000000..f7cb73cab4
--- /dev/null
+++ b/2025/CVE-2025-65672.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103227171,
+ "name": "CVE-2025-65672",
+ "full_name": "Rivek619\/CVE-2025-65672",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65672",
+ "description": "Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T15:40:33Z",
+ "updated_at": "2025-11-24T16:29:14Z",
+ "pushed_at": "2025-11-24T16:29:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65675.json b/2025/CVE-2025-65675.json
new file mode 100644
index 0000000000..8a9379bda2
--- /dev/null
+++ b/2025/CVE-2025-65675.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103262442,
+ "name": "CVE-2025-65675",
+ "full_name": "Rivek619\/CVE-2025-65675",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65675",
+ "description": "Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T16:31:58Z",
+ "updated_at": "2025-11-24T16:37:38Z",
+ "pushed_at": "2025-11-24T16:37:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65676.json b/2025/CVE-2025-65676.json
new file mode 100644
index 0000000000..248f8abc33
--- /dev/null
+++ b/2025/CVE-2025-65676.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103267660,
+ "name": "CVE-2025-65676",
+ "full_name": "Rivek619\/CVE-2025-65676",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65676",
+ "description": " Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T16:39:43Z",
+ "updated_at": "2025-11-24T16:42:43Z",
+ "pushed_at": "2025-11-24T16:42:39Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65681.json b/2025/CVE-2025-65681.json
new file mode 100644
index 0000000000..7736f112cc
--- /dev/null
+++ b/2025/CVE-2025-65681.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1103284119,
+ "name": "CVE-2025-65681",
+ "full_name": "Rivek619\/CVE-2025-65681",
+ "owner": {
+ "login": "Rivek619",
+ "id": 42813263,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42813263?v=4",
+ "html_url": "https:\/\/github.com\/Rivek619",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rivek619\/CVE-2025-65681",
+ "description": "An issue was discoverd in Overhang.IO (tutor-open-edx) (overhangio\/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks. Discovered by - Rivek Raj Tamang (RivuDon), Sikkim, India.",
+ "fork": false,
+ "created_at": "2025-11-24T17:04:52Z",
+ "updated_at": "2025-11-24T17:07:51Z",
+ "pushed_at": "2025-11-24T17:07:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65754.json b/2025/CVE-2025-65754.json
new file mode 100644
index 0000000000..d88214bfec
--- /dev/null
+++ b/2025/CVE-2025-65754.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113190907,
+ "name": "CVE-2025-65754",
+ "full_name": "Bnyt7\/CVE-2025-65754",
+ "owner": {
+ "login": "Bnyt7",
+ "id": 102225266,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102225266?v=4",
+ "html_url": "https:\/\/github.com\/Bnyt7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bnyt7\/CVE-2025-65754",
+ "description": "Algernon v1.17.4 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into a filename.",
+ "fork": false,
+ "created_at": "2025-12-09T16:36:00Z",
+ "updated_at": "2025-12-10T12:59:38Z",
+ "pushed_at": "2025-12-10T12:59:34Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65790.json b/2025/CVE-2025-65790.json
new file mode 100644
index 0000000000..3b3cdcd96e
--- /dev/null
+++ b/2025/CVE-2025-65790.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1120688373,
+ "name": "FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790",
+ "full_name": "hunterxxx\/FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790",
+ "owner": {
+ "login": "hunterxxx",
+ "id": 7548302,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7548302?v=4",
+ "html_url": "https:\/\/github.com\/hunterxxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hunterxxx\/FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790",
+ "description": "Reflected Cross-Site Scripting (XSS) via SVG Rendering in FuguHub",
+ "fork": false,
+ "created_at": "2025-12-21T18:31:59Z",
+ "updated_at": "2025-12-28T02:36:07Z",
+ "pushed_at": "2025-12-28T02:36:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65817.json b/2025/CVE-2025-65817.json
new file mode 100644
index 0000000000..67caea369e
--- /dev/null
+++ b/2025/CVE-2025-65817.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1119734749,
+ "name": "CVE-2025-65817",
+ "full_name": "Istaarkk\/CVE-2025-65817",
+ "owner": {
+ "login": "Istaarkk",
+ "id": 154691996,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154691996?v=4",
+ "html_url": "https:\/\/github.com\/Istaarkk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Istaarkk\/CVE-2025-65817",
+ "description": "Here is the CVE-2025-65817",
+ "fork": false,
+ "created_at": "2025-12-19T18:54:42Z",
+ "updated_at": "2026-02-05T14:43:51Z",
+ "pushed_at": "2025-12-19T19:11:06Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65855.json b/2025/CVE-2025-65855.json
new file mode 100644
index 0000000000..dd965a7547
--- /dev/null
+++ b/2025/CVE-2025-65855.json
@@ -0,0 +1,46 @@
+[
+ {
+ "id": 1117165887,
+ "name": "CVE-2025-65855",
+ "full_name": "LuisMirandaAcebedo\/CVE-2025-65855",
+ "owner": {
+ "login": "LuisMirandaAcebedo",
+ "id": 16269504,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16269504?v=4",
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo\/CVE-2025-65855",
+ "description": "Security advisory for CVE-2025-65855 - Multiple vulnerabilities in HelpFlash IoT OTA update mechanism",
+ "fork": false,
+ "created_at": "2025-12-15T23:33:48Z",
+ "updated_at": "2025-12-16T14:54:08Z",
+ "pushed_at": "2025-12-16T14:54:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-65855",
+ "cybersecurity",
+ "esp32",
+ "firmware",
+ "iot",
+ "ota",
+ "responsible-disclosure",
+ "security",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65856.json b/2025/CVE-2025-65856.json
index 7adf941f44..72741d3cda 100644
--- a/2025/CVE-2025-65856.json
+++ b/2025/CVE-2025-65856.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1118331300,
+ "name": "CVE-2025-65856",
+ "full_name": "LuisMirandaAcebedo\/CVE-2025-65856",
+ "owner": {
+ "login": "LuisMirandaAcebedo",
+ "id": 16269504,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16269504?v=4",
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo\/CVE-2025-65856",
+ "description": "Xiongmai XM530 IP Camera ONVIF Complete Authentication Bypass",
+ "fork": false,
+ "created_at": "2025-12-17T15:41:32Z",
+ "updated_at": "2026-02-09T09:52:48Z",
+ "pushed_at": "2025-12-20T10:59:37Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1153448424,
"name": "XM_ONVIF_auth_bypass",
diff --git a/2025/CVE-2025-65857.json b/2025/CVE-2025-65857.json
new file mode 100644
index 0000000000..0c5662da12
--- /dev/null
+++ b/2025/CVE-2025-65857.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118330672,
+ "name": "CVE-2025-65857",
+ "full_name": "LuisMirandaAcebedo\/CVE-2025-65857",
+ "owner": {
+ "login": "LuisMirandaAcebedo",
+ "id": 16269504,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16269504?v=4",
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LuisMirandaAcebedo\/CVE-2025-65857",
+ "description": "Xiongmai XM530 IP Camera Hardcoded RTSP Credentials Exposure",
+ "fork": false,
+ "created_at": "2025-12-17T15:40:32Z",
+ "updated_at": "2026-05-05T18:14:27Z",
+ "pushed_at": "2025-12-20T11:03:03Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65858.json b/2025/CVE-2025-65858.json
new file mode 100644
index 0000000000..0c85de8c4e
--- /dev/null
+++ b/2025/CVE-2025-65858.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1096343757,
+ "name": "calibre-web-CVE-2025-65858",
+ "full_name": "KhanhDuy155\/calibre-web-CVE-2025-65858",
+ "owner": {
+ "login": "KhanhDuy155",
+ "id": 140649431,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140649431?v=4",
+ "html_url": "https:\/\/github.com\/KhanhDuy155",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/KhanhDuy155\/calibre-web-CVE-2025-65858",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-14T09:36:45Z",
+ "updated_at": "2025-12-02T07:01:51Z",
+ "pushed_at": "2025-12-02T06:58:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65862.json b/2025/CVE-2025-65862.json
new file mode 100644
index 0000000000..7eb1ebe59c
--- /dev/null
+++ b/2025/CVE-2025-65862.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1105001012,
+ "name": "opac-fast-automation",
+ "full_name": "rimbadirgantara\/opac-fast-automation",
+ "owner": {
+ "login": "rimbadirgantara",
+ "id": 97583410,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97583410?v=4",
+ "html_url": "https:\/\/github.com\/rimbadirgantara",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rimbadirgantara\/opac-fast-automation",
+ "description": "automation untuk CVE-2025-65862",
+ "fork": false,
+ "created_at": "2025-11-27T02:01:37Z",
+ "updated_at": "2025-11-27T09:20:58Z",
+ "pushed_at": "2025-11-27T09:20:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65881.json b/2025/CVE-2025-65881.json
new file mode 100644
index 0000000000..c28c0a56e9
--- /dev/null
+++ b/2025/CVE-2025-65881.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1105917904,
+ "name": "CVE-2025-65881",
+ "full_name": "MMAKINGDOM\/CVE-2025-65881",
+ "owner": {
+ "login": "MMAKINGDOM",
+ "id": 112818014,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112818014?v=4",
+ "html_url": "https:\/\/github.com\/MMAKINGDOM",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MMAKINGDOM\/CVE-2025-65881",
+ "description": "Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in \/classes\/Login.php Due to invalid Content-Type ",
+ "fork": false,
+ "created_at": "2025-11-28T10:50:46Z",
+ "updated_at": "2025-11-28T11:07:12Z",
+ "pushed_at": "2025-11-28T11:07:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65899.json b/2025/CVE-2025-65899.json
new file mode 100644
index 0000000000..a50542d09b
--- /dev/null
+++ b/2025/CVE-2025-65899.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1106751114,
+ "name": "CVE-2025-65899",
+ "full_name": "Noxurge\/CVE-2025-65899",
+ "owner": {
+ "login": "Noxurge",
+ "id": 89923975,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89923975?v=4",
+ "html_url": "https:\/\/github.com\/Noxurge",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Noxurge\/CVE-2025-65899",
+ "description": "DifuseHQ Kalmia CMS version 0.2.0 is vulnerable to user enumeration through distinguishable error responses in the \/kal-api\/auth\/jwt\/create authentication endpoint.",
+ "fork": false,
+ "created_at": "2025-11-29T21:40:17Z",
+ "updated_at": "2025-12-21T08:04:16Z",
+ "pushed_at": "2025-12-04T00:18:16Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65900.json b/2025/CVE-2025-65900.json
new file mode 100644
index 0000000000..f8d7d047de
--- /dev/null
+++ b/2025/CVE-2025-65900.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1106818650,
+ "name": "CVE-2025-65900",
+ "full_name": "Noxurge\/CVE-2025-65900",
+ "owner": {
+ "login": "Noxurge",
+ "id": 89923975,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89923975?v=4",
+ "html_url": "https:\/\/github.com\/Noxurge",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Noxurge\/CVE-2025-65900",
+ "description": "DifuseHQ Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the \/kal-api\/auth\/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all platform user.",
+ "fork": false,
+ "created_at": "2025-11-30T02:07:06Z",
+ "updated_at": "2025-12-04T00:21:15Z",
+ "pushed_at": "2025-12-04T00:21:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65945.json b/2025/CVE-2025-65945.json
new file mode 100644
index 0000000000..3caf64c5db
--- /dev/null
+++ b/2025/CVE-2025-65945.json
@@ -0,0 +1,43 @@
+[
+ {
+ "id": 1118337554,
+ "name": "CVE-2025-65945-poc",
+ "full_name": "jedisct1\/CVE-2025-65945-poc",
+ "owner": {
+ "login": "jedisct1",
+ "id": 124872,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124872?v=4",
+ "html_url": "https:\/\/github.com\/jedisct1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jedisct1\/CVE-2025-65945-poc",
+ "description": "PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)",
+ "fork": false,
+ "created_at": "2025-12-17T15:52:03Z",
+ "updated_at": "2025-12-21T21:32:47Z",
+ "pushed_at": "2025-12-17T19:48:11Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "auth0",
+ "bypass",
+ "cve-2025-65945",
+ "exploit",
+ "jws",
+ "jwt",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-65964.json b/2025/CVE-2025-65964.json
index a9cc656798..c3a2fc97f8 100644
--- a/2025/CVE-2025-65964.json
+++ b/2025/CVE-2025-65964.json
@@ -1,4 +1,169 @@
[
+ {
+ "id": 1112983681,
+ "name": "CVE-2025-65964-poc",
+ "full_name": "Anthony558238\/CVE-2025-65964-poc",
+ "owner": {
+ "login": "Anthony558238",
+ "id": 82699811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82699811?v=4",
+ "html_url": "https:\/\/github.com\/Anthony558238",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Anthony558238\/CVE-2025-65964-poc",
+ "description": "CVE-2025-65964-poc",
+ "fork": false,
+ "created_at": "2025-12-09T11:13:04Z",
+ "updated_at": "2025-12-10T02:55:03Z",
+ "pushed_at": "2025-12-10T02:54:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113406634,
+ "name": "CVE-2025-65964-Exploit",
+ "full_name": "Syzygy-K\/CVE-2025-65964-Exploit",
+ "owner": {
+ "login": "Syzygy-K",
+ "id": 159122190,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159122190?v=4",
+ "html_url": "https:\/\/github.com\/Syzygy-K",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Syzygy-K\/CVE-2025-65964-Exploit",
+ "description": "CVE-2025-65964复现",
+ "fork": false,
+ "created_at": "2025-12-09T23:54:00Z",
+ "updated_at": "2026-01-22T09:10:59Z",
+ "pushed_at": "2025-12-10T01:21:34Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113453822,
+ "name": "n8n-CVE-2025-65964",
+ "full_name": "Geekby\/n8n-CVE-2025-65964",
+ "owner": {
+ "login": "Geekby",
+ "id": 20152479,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20152479?v=4",
+ "html_url": "https:\/\/github.com\/Geekby",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Geekby\/n8n-CVE-2025-65964",
+ "description": "CVE-2025-65964",
+ "fork": false,
+ "created_at": "2025-12-10T02:09:21Z",
+ "updated_at": "2025-12-10T02:13:15Z",
+ "pushed_at": "2025-12-10T02:13:11Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115581004,
+ "name": "CVE-2025-65964",
+ "full_name": "Saboor-Hakimi-23\/CVE-2025-65964",
+ "owner": {
+ "login": "Saboor-Hakimi-23",
+ "id": 122254602,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122254602?v=4",
+ "html_url": "https:\/\/github.com\/Saboor-Hakimi-23",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Saboor-Hakimi-23\/CVE-2025-65964",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-13T06:04:59Z",
+ "updated_at": "2025-12-13T06:28:07Z",
+ "pushed_at": "2025-12-13T06:28:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121547568,
+ "name": "CVE-2025-65964-POC",
+ "full_name": "Pinus97\/CVE-2025-65964-POC",
+ "owner": {
+ "login": "Pinus97",
+ "id": 103227912,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103227912?v=4",
+ "html_url": "https:\/\/github.com\/Pinus97",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Pinus97\/CVE-2025-65964-POC",
+ "description": "CVE-2025-65964-POC",
+ "fork": false,
+ "created_at": "2025-12-23T06:57:34Z",
+ "updated_at": "2025-12-23T07:06:43Z",
+ "pushed_at": "2025-12-23T07:06:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1131074338,
"name": "repo",
diff --git a/2025/CVE-2025-66022.json b/2025/CVE-2025-66022.json
new file mode 100644
index 0000000000..d26a3a38ef
--- /dev/null
+++ b/2025/CVE-2025-66022.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1105958870,
+ "name": "CVE-2025-66022",
+ "full_name": "wasfyelbaz\/CVE-2025-66022",
+ "owner": {
+ "login": "wasfyelbaz",
+ "id": 73747245,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73747245?v=4",
+ "html_url": "https:\/\/github.com\/wasfyelbaz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wasfyelbaz\/CVE-2025-66022",
+ "description": "FACTION versions before 1.7.1 allowed unauthenticated RCE. A missing auth check on \/portal\/AppStoreDashboard let attackers upload malicious extensions, which executed system commands through lifecycle hooks.",
+ "fork": false,
+ "created_at": "2025-11-28T12:07:38Z",
+ "updated_at": "2025-11-28T12:07:38Z",
+ "pushed_at": "2025-11-28T12:07:38Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66039.json b/2025/CVE-2025-66039.json
new file mode 100644
index 0000000000..1128124606
--- /dev/null
+++ b/2025/CVE-2025-66039.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1116107099,
+ "name": "CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX",
+ "full_name": "BimBoxH4\/CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX",
+ "owner": {
+ "login": "BimBoxH4",
+ "id": 249537150,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249537150?v=4",
+ "html_url": "https:\/\/github.com\/BimBoxH4",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BimBoxH4\/CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX",
+ "description": "This vulnerability allows both authenticated and unauthenticated remote attackers to execute remote code on vulnerable FreePBX instances. These issues have been fixed in FreePBX versions 16.0.42, 16.0.92, 17.0.6, and 17.0.22. It's important to note that this authentication bypass vulnerability is not present in the default FreePBX configuration.",
+ "fork": false,
+ "created_at": "2025-12-14T07:57:17Z",
+ "updated_at": "2025-12-25T10:56:34Z",
+ "pushed_at": "2025-12-14T08:22:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1117306415,
+ "name": "FreePBX-Multiple-CVEs-2025",
+ "full_name": "cyberleelawat\/FreePBX-Multiple-CVEs-2025",
+ "owner": {
+ "login": "cyberleelawat",
+ "id": 202486122,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202486122?v=4",
+ "html_url": "https:\/\/github.com\/cyberleelawat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberleelawat\/FreePBX-Multiple-CVEs-2025",
+ "description": "This repository documents three security vulnerabilities discovered in FreePBX (CVE-2025-66039, CVE-2025-61678, CVE-2025-61675), including analysis, impact, and proof-of-concept details for security research and awareness purposes.",
+ "fork": false,
+ "created_at": "2025-12-16T06:03:49Z",
+ "updated_at": "2026-01-14T16:57:32Z",
+ "pushed_at": "2025-12-16T06:41:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66209.json b/2025/CVE-2025-66209.json
new file mode 100644
index 0000000000..34cb628354
--- /dev/null
+++ b/2025/CVE-2025-66209.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1121437809,
+ "name": "coolify-cve-2025-66209-66213",
+ "full_name": "0xrakan\/coolify-cve-2025-66209-66213",
+ "owner": {
+ "login": "0xrakan",
+ "id": 59227669,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59227669?v=4",
+ "html_url": "https:\/\/github.com\/0xrakan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xrakan\/coolify-cve-2025-66209-66213",
+ "description": "Public security advisory for CVE-2025-66209, CVE-2025-66210, CVE-2025-66211, CVE-2025-66212, and CVE-2025-66213",
+ "fork": false,
+ "created_at": "2025-12-23T02:04:48Z",
+ "updated_at": "2026-02-12T07:09:17Z",
+ "pushed_at": "2025-12-24T02:23:35Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66224.json b/2025/CVE-2025-66224.json
new file mode 100644
index 0000000000..2195d1f4f3
--- /dev/null
+++ b/2025/CVE-2025-66224.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117970784,
+ "name": "PoC-CVE-2025-66224",
+ "full_name": "richard-natan\/PoC-CVE-2025-66224",
+ "owner": {
+ "login": "richard-natan",
+ "id": 57724021,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57724021?v=4",
+ "html_url": "https:\/\/github.com\/richard-natan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/richard-natan\/PoC-CVE-2025-66224",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-17T04:40:34Z",
+ "updated_at": "2025-12-22T17:40:48Z",
+ "pushed_at": "2025-12-17T04:45:08Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json
index cc9cb16682..0bab98ffb9 100644
--- a/2025/CVE-2025-66398.json
+++ b/2025/CVE-2025-66398.json
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
- "updated_at": "2026-06-02T09:06:42Z",
- "pushed_at": "2026-06-02T09:06:13Z",
+ "updated_at": "2026-06-02T16:17:23Z",
+ "pushed_at": "2026-06-02T16:15:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66470.json b/2025/CVE-2025-66470.json
new file mode 100644
index 0000000000..63b4695096
--- /dev/null
+++ b/2025/CVE-2025-66470.json
@@ -0,0 +1,41 @@
+[
+ {
+ "id": 1114549858,
+ "name": "CVE-2025-66470",
+ "full_name": "Jmehta10\/CVE-2025-66470",
+ "owner": {
+ "login": "Jmehta10",
+ "id": 108071887,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108071887?v=4",
+ "html_url": "https:\/\/github.com\/Jmehta10",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jmehta10\/CVE-2025-66470",
+ "description": "A fast, simple scanner for detecting CVE-2025-66470 - XSS vulnerability in NiceGUI's ui.interactive_image component.",
+ "fork": false,
+ "created_at": "2025-12-11T14:33:09Z",
+ "updated_at": "2025-12-12T13:13:11Z",
+ "pushed_at": "2025-12-11T15:05:12Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bugbounty",
+ "bugbounty-tool",
+ "xss-detection",
+ "xss-exploitation",
+ "xss-vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json
index 5d4f9fca4b..987570a2dc 100644
--- a/2025/CVE-2025-66478.json
+++ b/2025/CVE-2025-66478.json
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
- "updated_at": "2026-06-02T12:11:31Z",
- "pushed_at": "2026-06-02T12:11:27Z",
+ "updated_at": "2026-06-02T15:22:31Z",
+ "pushed_at": "2026-06-02T15:14:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -48,6 +48,418 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1109394752,
+ "name": "next-cve-2025-66478",
+ "full_name": "abtonc\/next-cve-2025-66478",
+ "owner": {
+ "login": "abtonc",
+ "id": 62848063,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62848063?v=4",
+ "html_url": "https:\/\/github.com\/abtonc",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abtonc\/next-cve-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-03T18:38:53Z",
+ "updated_at": "2026-01-19T08:01:08Z",
+ "pushed_at": "2025-12-08T15:58:59Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109726413,
+ "name": "CVE-2025-66478-POC",
+ "full_name": "wangxso\/CVE-2025-66478-POC",
+ "owner": {
+ "login": "wangxso",
+ "id": 35062162,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35062162?v=4",
+ "html_url": "https:\/\/github.com\/wangxso",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wangxso\/CVE-2025-66478-POC",
+ "description": "CVE-2025-66478 Proof of Concept",
+ "fork": false,
+ "created_at": "2025-12-04T07:44:47Z",
+ "updated_at": "2026-05-13T18:12:19Z",
+ "pushed_at": "2025-12-17T06:51:47Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1109917013,
+ "name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "full_name": "Malayke\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "owner": {
+ "login": "Malayke",
+ "id": 4935500,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4935500?v=4",
+ "html_url": "https:\/\/github.com\/Malayke",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Malayke\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
+ "fork": false,
+ "created_at": "2025-12-04T13:13:33Z",
+ "updated_at": "2026-05-31T08:55:47Z",
+ "pushed_at": "2025-12-16T03:18:16Z",
+ "stargazers_count": 426,
+ "watchers_count": 426,
+ "has_discussions": false,
+ "forks_count": 87,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-66478",
+ "cve-scanning",
+ "nextjs"
+ ],
+ "visibility": "public",
+ "forks": 87,
+ "watchers": 426,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1110188862,
+ "name": "check-cve-2025-66478",
+ "full_name": "mattcbarrett\/check-cve-2025-66478",
+ "owner": {
+ "login": "mattcbarrett",
+ "id": 20583142,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20583142?v=4",
+ "html_url": "https:\/\/github.com\/mattcbarrett",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mattcbarrett\/check-cve-2025-66478",
+ "description": "Checks if your NextJS server is vulnerable to CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-04T20:50:51Z",
+ "updated_at": "2025-12-05T16:11:47Z",
+ "pushed_at": "2025-12-05T16:11:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1110894422,
+ "name": "react2shell-ultimate",
+ "full_name": "hackersatyamrastogi\/react2shell-ultimate",
+ "owner": {
+ "login": "hackersatyamrastogi",
+ "id": 47441267,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47441267?v=4",
+ "html_url": "https:\/\/github.com\/hackersatyamrastogi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hackersatyamrastogi\/react2shell-ultimate",
+ "description": "React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.",
+ "fork": false,
+ "created_at": "2025-12-05T22:20:14Z",
+ "updated_at": "2026-05-28T02:53:08Z",
+ "pushed_at": "2025-12-10T09:35:17Z",
+ "stargazers_count": 150,
+ "watchers_count": 150,
+ "has_discussions": false,
+ "forks_count": 32,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bug-bounty",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "cybersecurity",
+ "nextjs",
+ "penetration-testing",
+ "rce",
+ "react-server-components",
+ "security-scanner",
+ "vulnerability-scanner"
+ ],
+ "visibility": "public",
+ "forks": 32,
+ "watchers": 150,
+ "score": 0,
+ "subscribers_count": 2
+ },
+ {
+ "id": 1110970432,
+ "name": "fix-react2shell-next",
+ "full_name": "vercel-labs\/fix-react2shell-next",
+ "owner": {
+ "login": "vercel-labs",
+ "id": 108547162,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108547162?v=4",
+ "html_url": "https:\/\/github.com\/vercel-labs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/vercel-labs\/fix-react2shell-next",
+ "description": "One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js \/ React RSC app.",
+ "fork": false,
+ "created_at": "2025-12-06T02:41:12Z",
+ "updated_at": "2026-05-15T23:15:01Z",
+ "pushed_at": "2025-12-12T03:03:50Z",
+ "stargazers_count": 404,
+ "watchers_count": 404,
+ "has_discussions": false,
+ "forks_count": 64,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 64,
+ "watchers": 404,
+ "score": 0,
+ "subscribers_count": 2
+ },
+ {
+ "id": 1111055409,
+ "name": "CVE-2025-66478-Exploit-Poc",
+ "full_name": "namest504\/CVE-2025-66478-Exploit-Poc",
+ "owner": {
+ "login": "namest504",
+ "id": 61047602,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61047602?v=4",
+ "html_url": "https:\/\/github.com\/namest504",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/namest504\/CVE-2025-66478-Exploit-Poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-06T07:12:45Z",
+ "updated_at": "2026-05-08T05:19:22Z",
+ "pushed_at": "2025-12-06T08:25:51Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111439739,
+ "name": "CVE-2025-66478-kinda-waf",
+ "full_name": "aiexz\/CVE-2025-66478-kinda-waf",
+ "owner": {
+ "login": "aiexz",
+ "id": 42418433,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42418433?v=4",
+ "html_url": "https:\/\/github.com\/aiexz",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/aiexz\/CVE-2025-66478-kinda-waf",
+ "description": "Let's help websites stay safe until they are properly patched!",
+ "fork": false,
+ "created_at": "2025-12-06T23:52:07Z",
+ "updated_at": "2025-12-07T00:06:55Z",
+ "pushed_at": "2025-12-07T00:06:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111449339,
+ "name": "CVE-2025-66478",
+ "full_name": "Rhyru9\/CVE-2025-66478",
+ "owner": {
+ "login": "Rhyru9",
+ "id": 164749781,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164749781?v=4",
+ "html_url": "https:\/\/github.com\/Rhyru9",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Rhyru9\/CVE-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T00:32:06Z",
+ "updated_at": "2025-12-07T02:42:12Z",
+ "pushed_at": "2025-12-07T02:42:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111479834,
+ "name": "CVE-2025-66478-github-patcher",
+ "full_name": "Jibaru\/CVE-2025-66478-github-patcher",
+ "owner": {
+ "login": "Jibaru",
+ "id": 54339832,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54339832?v=4",
+ "html_url": "https:\/\/github.com\/Jibaru",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Jibaru\/CVE-2025-66478-github-patcher",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-07T02:39:22Z",
+ "updated_at": "2025-12-07T02:40:05Z",
+ "pushed_at": "2025-12-07T02:40:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112024960,
+ "name": "CVE-2025-66478",
+ "full_name": "ExpTechTW\/CVE-2025-66478",
+ "owner": {
+ "login": "ExpTechTW",
+ "id": 91672109,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91672109?v=4",
+ "html_url": "https:\/\/github.com\/ExpTechTW",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ExpTechTW\/CVE-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T03:30:20Z",
+ "updated_at": "2026-03-06T02:36:20Z",
+ "pushed_at": "2025-12-08T03:45:33Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1112082516,
+ "name": "cve-2025-66478",
+ "full_name": "abhirajranjan\/cve-2025-66478",
+ "owner": {
+ "login": "abhirajranjan",
+ "id": 61920199,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61920199?v=4",
+ "html_url": "https:\/\/github.com\/abhirajranjan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abhirajranjan\/cve-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T05:59:27Z",
+ "updated_at": "2025-12-08T08:54:03Z",
+ "pushed_at": "2025-12-08T08:53:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1112335315,
"name": "cve-2025-66478_rce_vulnerable",
@@ -81,6 +493,332 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1112600385,
+ "name": "react2shell-honeypot",
+ "full_name": "strainxx\/react2shell-honeypot",
+ "owner": {
+ "login": "strainxx",
+ "id": 100953533,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100953533?v=4",
+ "html_url": "https:\/\/github.com\/strainxx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/strainxx\/react2shell-honeypot",
+ "description": "My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)",
+ "fork": false,
+ "created_at": "2025-12-08T21:11:00Z",
+ "updated_at": "2025-12-22T10:53:42Z",
+ "pushed_at": "2025-12-08T21:12:04Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-66478",
+ "honeypot",
+ "nextjs",
+ "react",
+ "react2shell"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1114163525,
+ "name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "full_name": "changgun-lee\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "owner": {
+ "login": "changgun-lee",
+ "id": 155412589,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155412589?v=4",
+ "html_url": "https:\/\/github.com\/changgun-lee",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/changgun-lee\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T01:49:52Z",
+ "updated_at": "2025-12-11T02:00:58Z",
+ "pushed_at": "2025-12-11T02:00:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114638183,
+ "name": "nexts-cve-2025-66478-exploit",
+ "full_name": "Code42Cate\/nexts-cve-2025-66478-exploit",
+ "owner": {
+ "login": "Code42Cate",
+ "id": 26679776,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26679776?v=4",
+ "html_url": "https:\/\/github.com\/Code42Cate",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Code42Cate\/nexts-cve-2025-66478-exploit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T16:57:40Z",
+ "updated_at": "2025-12-11T17:09:29Z",
+ "pushed_at": "2025-12-11T17:09:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115242689,
+ "name": "poc-cve-next",
+ "full_name": "viperh\/poc-cve-next",
+ "owner": {
+ "login": "viperh",
+ "id": 65122445,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65122445?v=4",
+ "html_url": "https:\/\/github.com\/viperh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/viperh\/poc-cve-next",
+ "description": "PoC for Next.js RCE Vulnerability CVE-2025-66478",
+ "fork": false,
+ "created_at": "2025-12-12T14:54:11Z",
+ "updated_at": "2025-12-12T14:57:39Z",
+ "pushed_at": "2025-12-12T14:57:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115456948,
+ "name": "rsc-security-auditor",
+ "full_name": "abdozkaya\/rsc-security-auditor",
+ "owner": {
+ "login": "abdozkaya",
+ "id": 74666618,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74666618?v=4",
+ "html_url": "https:\/\/github.com\/abdozkaya",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abdozkaya\/rsc-security-auditor",
+ "description": "🛡️ Audit your Next.js & React Server Components stack for critical vulnerabilities (CVE-2025-66478, CVE-2025-55184). Detects risks & generates fix commands. 100% Client-side.",
+ "fork": false,
+ "created_at": "2025-12-12T22:37:06Z",
+ "updated_at": "2025-12-20T20:16:50Z",
+ "pushed_at": "2025-12-13T12:04:58Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-scanning",
+ "nextjs",
+ "react",
+ "rsc",
+ "vulnerability-scanners"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116374163,
+ "name": "-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.",
+ "full_name": "DavionGowie\/-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.",
+ "owner": {
+ "login": "DavionGowie",
+ "id": 202416665,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202416665?v=4",
+ "html_url": "https:\/\/github.com\/DavionGowie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DavionGowie\/-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.",
+ "description": "bug bounty",
+ "fork": false,
+ "created_at": "2025-12-14T18:25:36Z",
+ "updated_at": "2025-12-14T18:25:40Z",
+ "pushed_at": "2025-12-14T18:25:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116377116,
+ "name": "-vercel-application-is-vulnerable-to-CVE-2025-66478.",
+ "full_name": "DavionGowie\/-vercel-application-is-vulnerable-to-CVE-2025-66478.",
+ "owner": {
+ "login": "DavionGowie",
+ "id": 202416665,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202416665?v=4",
+ "html_url": "https:\/\/github.com\/DavionGowie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DavionGowie\/-vercel-application-is-vulnerable-to-CVE-2025-66478.",
+ "description": "bug bounty",
+ "fork": false,
+ "created_at": "2025-12-14T18:32:44Z",
+ "updated_at": "2025-12-14T18:32:47Z",
+ "pushed_at": "2025-12-14T18:32:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116529032,
+ "name": "CVE-2025-66478-Exploit-PoC",
+ "full_name": "zhixiangyao\/CVE-2025-66478-Exploit-PoC",
+ "owner": {
+ "login": "zhixiangyao",
+ "id": 49728521,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49728521?v=4",
+ "html_url": "https:\/\/github.com\/zhixiangyao",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zhixiangyao\/CVE-2025-66478-Exploit-PoC",
+ "description": "Proof-of-concept exploit demo for CVE-2025-66478 using Node.js",
+ "fork": false,
+ "created_at": "2025-12-15T02:27:02Z",
+ "updated_at": "2026-05-24T15:43:48Z",
+ "pushed_at": "2025-12-16T08:40:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-66478",
+ "nextjs",
+ "nodejs"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122896132,
+ "name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "full_name": "thedarckpassenger\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "owner": {
+ "login": "thedarckpassenger",
+ "id": 197378316,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197378316?v=4",
+ "html_url": "https:\/\/github.com\/thedarckpassenger",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/thedarckpassenger\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
+ "description": "🔍 Scan Next.js apps for CVE-2025-66478 vulnerability detection with this command-line tool, ensuring your applications remain secure and unaffected.",
+ "fork": false,
+ "created_at": "2025-12-25T19:01:50Z",
+ "updated_at": "2025-12-25T19:05:03Z",
+ "pushed_at": "2025-12-25T19:01:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-55182",
+ "cve-2025-66478",
+ "cve-scanning",
+ "cybersecurity",
+ "nextjs",
+ "penetration-testing",
+ "rce",
+ "react-server-components",
+ "security-scanner",
+ "vulnerability-scanner"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125169618,
"name": "React2Shell",
@@ -120,6 +858,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1125677116,
+ "name": "CVE-2025-66478",
+ "full_name": "Z3ROROOT3R\/CVE-2025-66478",
+ "owner": {
+ "login": "Z3ROROOT3R",
+ "id": 118030813,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118030813?v=4",
+ "html_url": "https:\/\/github.com\/Z3ROROOT3R",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Z3ROROOT3R\/CVE-2025-66478",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-31T06:32:36Z",
+ "updated_at": "2025-12-31T06:33:52Z",
+ "pushed_at": "2025-12-31T06:33:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1128376027,
"name": "NextJS-RCE-Root-Takeover",
diff --git a/2025/CVE-2025-66516.json b/2025/CVE-2025-66516.json
new file mode 100644
index 0000000000..79f10bde04
--- /dev/null
+++ b/2025/CVE-2025-66516.json
@@ -0,0 +1,139 @@
+[
+ {
+ "id": 1112650280,
+ "name": "Blackash-CVE-2025-66516",
+ "full_name": "yunatamos\/Blackash-CVE-2025-66516",
+ "owner": {
+ "login": "yunatamos",
+ "id": 57252898,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57252898?v=4",
+ "html_url": "https:\/\/github.com\/yunatamos",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yunatamos\/Blackash-CVE-2025-66516",
+ "description": "CVE-2025-66516 ",
+ "fork": false,
+ "created_at": "2025-12-08T23:14:15Z",
+ "updated_at": "2025-12-08T23:14:15Z",
+ "pushed_at": "2025-12-08T11:13:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1114914901,
+ "name": "CVE-2025-66516-Writeup-POC",
+ "full_name": "chasingimpact\/CVE-2025-66516-Writeup-POC",
+ "owner": {
+ "login": "chasingimpact",
+ "id": 235425434,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235425434?v=4",
+ "html_url": "https:\/\/github.com\/chasingimpact",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chasingimpact\/CVE-2025-66516-Writeup-POC",
+ "description": "CVE-2025-66516 working exploit, scanner, explanation.",
+ "fork": false,
+ "created_at": "2025-12-12T04:28:19Z",
+ "updated_at": "2026-04-08T16:41:11Z",
+ "pushed_at": "2025-12-26T04:44:07Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "apache",
+ "cve-2025-66516",
+ "exploit",
+ "tika"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118051585,
+ "name": "CVE-2025-66516-POC",
+ "full_name": "sid6224\/CVE-2025-66516-POC",
+ "owner": {
+ "login": "sid6224",
+ "id": 36757392,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36757392?v=4",
+ "html_url": "https:\/\/github.com\/sid6224",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sid6224\/CVE-2025-66516-POC",
+ "description": "A POC for the CVE-2025-66516 Apache Tika Vulnerability for educational purposes only",
+ "fork": false,
+ "created_at": "2025-12-17T07:35:58Z",
+ "updated_at": "2026-06-01T10:03:57Z",
+ "pushed_at": "2025-12-17T08:53:11Z",
+ "stargazers_count": 6,
+ "watchers_count": 6,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 6,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1119382792,
+ "name": "Tika-CVE-2025-66516-Lab",
+ "full_name": "intSheep\/Tika-CVE-2025-66516-Lab",
+ "owner": {
+ "login": "intSheep",
+ "id": 98884431,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98884431?v=4",
+ "html_url": "https:\/\/github.com\/intSheep",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/intSheep\/Tika-CVE-2025-66516-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-19T07:26:42Z",
+ "updated_at": "2025-12-19T07:27:40Z",
+ "pushed_at": "2025-12-19T07:27:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66628.json b/2025/CVE-2025-66628.json
new file mode 100644
index 0000000000..e8b8b56bd3
--- /dev/null
+++ b/2025/CVE-2025-66628.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1114255791,
+ "name": "CVE-2025-66628",
+ "full_name": "Sumitshah00\/CVE-2025-66628",
+ "owner": {
+ "login": "Sumitshah00",
+ "id": 149252561,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149252561?v=4",
+ "html_url": "https:\/\/github.com\/Sumitshah00",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Sumitshah00\/CVE-2025-66628",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-11T05:45:07Z",
+ "updated_at": "2026-01-16T17:03:55Z",
+ "pushed_at": "2025-12-12T14:26:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66947.json b/2025/CVE-2025-66947.json
new file mode 100644
index 0000000000..f32892b337
--- /dev/null
+++ b/2025/CVE-2025-66947.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1115557166,
+ "name": "CVE-2025-66947",
+ "full_name": "kabir0104k\/CVE-2025-66947",
+ "owner": {
+ "login": "kabir0104k",
+ "id": 86732367,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86732367?v=4",
+ "html_url": "https:\/\/github.com\/kabir0104k",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kabir0104k\/CVE-2025-66947",
+ "description": "SQL Injection in krishanmuraiji SMS v1.0 (CVE-2025-66947)",
+ "fork": false,
+ "created_at": "2025-12-13T04:50:32Z",
+ "updated_at": "2025-12-26T16:23:03Z",
+ "pushed_at": "2025-12-26T16:23:00Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-66955.json b/2025/CVE-2025-66955.json
new file mode 100644
index 0000000000..94a0665024
--- /dev/null
+++ b/2025/CVE-2025-66955.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1116784471,
+ "name": "CVE-2025-66955",
+ "full_name": "TheWoodenBench\/CVE-2025-66955",
+ "owner": {
+ "login": "TheWoodenBench",
+ "id": 48211611,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48211611?v=4",
+ "html_url": "https:\/\/github.com\/TheWoodenBench",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TheWoodenBench\/CVE-2025-66955",
+ "description": "Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via \"path\" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.",
+ "fork": false,
+ "created_at": "2025-12-15T11:28:43Z",
+ "updated_at": "2026-03-06T18:17:25Z",
+ "pushed_at": "2025-12-15T12:00:48Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67294.json b/2025/CVE-2025-67294.json
new file mode 100644
index 0000000000..ed1604b431
--- /dev/null
+++ b/2025/CVE-2025-67294.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118858919,
+ "name": "CVE-2025-67294",
+ "full_name": "0xthem7\/CVE-2025-67294",
+ "owner": {
+ "login": "0xthem7",
+ "id": 63031654,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63031654?v=4",
+ "html_url": "https:\/\/github.com\/0xthem7",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xthem7\/CVE-2025-67294",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T11:34:17Z",
+ "updated_at": "2025-12-18T11:34:17Z",
+ "pushed_at": "2025-12-18T11:34:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67435.json b/2025/CVE-2025-67435.json
index 213392c395..6825b28375 100644
--- a/2025/CVE-2025-67435.json
+++ b/2025/CVE-2025-67435.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1120276528,
+ "name": "CVE-2025-67435",
+ "full_name": "RajChowdhury240\/CVE-2025-67435",
+ "owner": {
+ "login": "RajChowdhury240",
+ "id": 30806882,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30806882?v=4",
+ "html_url": "https:\/\/github.com\/RajChowdhury240",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RajChowdhury240\/CVE-2025-67435",
+ "description": "A critical Remote Code Execution (RCE) vulnerability has been identified in PluXML CMS version 5.8.22. This vulnerability allows authenticated administrators to execute arbitrary PHP code on the web server by uploading malicious PHP web shells through the theme editor functionality.",
+ "fork": false,
+ "created_at": "2025-12-20T21:22:55Z",
+ "updated_at": "2026-01-02T20:55:27Z",
+ "pushed_at": "2025-12-25T07:20:19Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1151765037,
"name": "CVE-2025-67435-PoC",
diff --git a/2025/CVE-2025-67494.json b/2025/CVE-2025-67494.json
new file mode 100644
index 0000000000..dea4362de1
--- /dev/null
+++ b/2025/CVE-2025-67494.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1113786238,
+ "name": "CVE-2025-67494",
+ "full_name": "Chocapikk\/CVE-2025-67494",
+ "owner": {
+ "login": "Chocapikk",
+ "id": 88535377,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
+ "html_url": "https:\/\/github.com\/Chocapikk",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2025-67494",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T13:13:57Z",
+ "updated_at": "2025-12-27T22:32:06Z",
+ "pushed_at": "2025-12-10T13:17:24Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6759.json b/2025/CVE-2025-6759.json
new file mode 100644
index 0000000000..369c3dca5c
--- /dev/null
+++ b/2025/CVE-2025-6759.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016683233,
+ "name": "TestCitrixException",
+ "full_name": "olljanat\/TestCitrixException",
+ "owner": {
+ "login": "olljanat",
+ "id": 6213926,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6213926?v=4",
+ "html_url": "https:\/\/github.com\/olljanat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/olljanat\/TestCitrixException",
+ "description": "Minimal tool to test CVE-2025-6759 mitigation",
+ "fork": false,
+ "created_at": "2025-07-09T11:19:47Z",
+ "updated_at": "2026-02-08T04:09:38Z",
+ "pushed_at": "2025-07-09T13:11:02Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67780.json b/2025/CVE-2025-67780.json
new file mode 100644
index 0000000000..9a7aa5086a
--- /dev/null
+++ b/2025/CVE-2025-67780.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117446149,
+ "name": "MARMALADE-2-CVE-2025-67780-Exploit",
+ "full_name": "SteveAkawLabs\/MARMALADE-2-CVE-2025-67780-Exploit",
+ "owner": {
+ "login": "SteveAkawLabs",
+ "id": 122872687,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122872687?v=4",
+ "html_url": "https:\/\/github.com\/SteveAkawLabs",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/SteveAkawLabs\/MARMALADE-2-CVE-2025-67780-Exploit",
+ "description": "Exploit PoCs for MARMALDE 2 (CVE-2025-67780) vulnerability in Starlink Dishes",
+ "fork": false,
+ "created_at": "2025-12-16T10:21:49Z",
+ "updated_at": "2025-12-16T10:46:16Z",
+ "pushed_at": "2025-12-16T10:46:13Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67886.json b/2025/CVE-2025-67886.json
new file mode 100644
index 0000000000..08939763ce
--- /dev/null
+++ b/2025/CVE-2025-67886.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118774474,
+ "name": "CVE-2025-67886",
+ "full_name": "reewardius\/CVE-2025-67886",
+ "owner": {
+ "login": "reewardius",
+ "id": 68978608,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4",
+ "html_url": "https:\/\/github.com\/reewardius",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/reewardius\/CVE-2025-67886",
+ "description": "Bitrix24 <= 25.100.300 (Translate Module) Remote Code Execution Vulnerability",
+ "fork": false,
+ "created_at": "2025-12-18T09:02:48Z",
+ "updated_at": "2025-12-18T09:03:11Z",
+ "pushed_at": "2025-12-18T09:03:06Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67887.json b/2025/CVE-2025-67887.json
new file mode 100644
index 0000000000..ccb940324f
--- /dev/null
+++ b/2025/CVE-2025-67887.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1118773045,
+ "name": "CVE-2025-67887",
+ "full_name": "reewardius\/CVE-2025-67887",
+ "owner": {
+ "login": "reewardius",
+ "id": 68978608,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4",
+ "html_url": "https:\/\/github.com\/reewardius",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/reewardius\/CVE-2025-67887",
+ "description": "1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability",
+ "fork": false,
+ "created_at": "2025-12-18T09:00:12Z",
+ "updated_at": "2025-12-18T09:00:56Z",
+ "pushed_at": "2025-12-18T09:00:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1118909634,
+ "name": "CVE-2025-67887",
+ "full_name": "cyberok-org\/CVE-2025-67887",
+ "owner": {
+ "login": "cyberok-org",
+ "id": 110810767,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110810767?v=4",
+ "html_url": "https:\/\/github.com\/cyberok-org",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cyberok-org\/CVE-2025-67887",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-18T13:07:46Z",
+ "updated_at": "2025-12-18T14:28:26Z",
+ "pushed_at": "2025-12-18T14:28:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-67888.json b/2025/CVE-2025-67888.json
new file mode 100644
index 0000000000..70948edfa6
--- /dev/null
+++ b/2025/CVE-2025-67888.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118775364,
+ "name": "CVE-2025-67888",
+ "full_name": "reewardius\/CVE-2025-67888",
+ "owner": {
+ "login": "reewardius",
+ "id": 68978608,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4",
+ "html_url": "https:\/\/github.com\/reewardius",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/reewardius\/CVE-2025-67888",
+ "description": "Control Web Panel <= 0.9.8.1208 (admin\/index.php) OS Command Injection Vulnerability • Software Link:",
+ "fork": false,
+ "created_at": "2025-12-18T09:04:23Z",
+ "updated_at": "2025-12-18T09:06:32Z",
+ "pushed_at": "2025-12-18T09:06:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68055.json b/2025/CVE-2025-68055.json
new file mode 100644
index 0000000000..aef0b7f8e9
--- /dev/null
+++ b/2025/CVE-2025-68055.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1119461676,
+ "name": "CVE-2025-68055-poc",
+ "full_name": "Nosiume\/CVE-2025-68055-poc",
+ "owner": {
+ "login": "Nosiume",
+ "id": 42848276,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42848276?v=4",
+ "html_url": "https:\/\/github.com\/Nosiume",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nosiume\/CVE-2025-68055-poc",
+ "description": "Exploit POC for CVE-2025-68055 SQL injection in WP Hydra Booking Plugin <= 1.1.32",
+ "fork": false,
+ "created_at": "2025-12-19T10:01:48Z",
+ "updated_at": "2025-12-19T10:59:15Z",
+ "pushed_at": "2025-12-19T10:02:37Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68116.json b/2025/CVE-2025-68116.json
new file mode 100644
index 0000000000..6e4a341cc6
--- /dev/null
+++ b/2025/CVE-2025-68116.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1117206214,
+ "name": "CVE-2025-68116",
+ "full_name": "x0root\/CVE-2025-68116",
+ "owner": {
+ "login": "x0root",
+ "id": 99962731,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99962731?v=4",
+ "html_url": "https:\/\/github.com\/x0root",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/x0root\/CVE-2025-68116",
+ "description": "A Documentation of CVE-2025-68116",
+ "fork": false,
+ "created_at": "2025-12-16T01:38:10Z",
+ "updated_at": "2025-12-17T07:56:41Z",
+ "pushed_at": "2025-12-17T07:56:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68147.json b/2025/CVE-2025-68147.json
new file mode 100644
index 0000000000..b6ee4bb60c
--- /dev/null
+++ b/2025/CVE-2025-68147.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118395032,
+ "name": "CVE-2025-68147-OSPOS-Stored-XSS",
+ "full_name": "Nixon-H\/CVE-2025-68147-OSPOS-Stored-XSS",
+ "owner": {
+ "login": "Nixon-H",
+ "id": 182409281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182409281?v=4",
+ "html_url": "https:\/\/github.com\/Nixon-H",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nixon-H\/CVE-2025-68147-OSPOS-Stored-XSS",
+ "description": "PoC repository for CVE-2025-68147: Stored Cross-Site Scripting (XSS) in OpenSourcePOS. Vulnerability allows privilege escalation via malicious JavaScript injection in the Store Config module. Includes payload details and patch verification (v3.4.0). Security Researcher: Aditya Singh (Nixon-H).",
+ "fork": false,
+ "created_at": "2025-12-17T17:30:02Z",
+ "updated_at": "2026-03-03T08:39:13Z",
+ "pushed_at": "2025-12-18T15:52:39Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68325.json b/2025/CVE-2025-68325.json
new file mode 100644
index 0000000000..c87bd20f6a
--- /dev/null
+++ b/2025/CVE-2025-68325.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1120282925,
+ "name": "CVE-2025-68325",
+ "full_name": "n132\/CVE-2025-68325",
+ "owner": {
+ "login": "n132",
+ "id": 27342439,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27342439?v=4",
+ "html_url": "https:\/\/github.com\/n132",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/n132\/CVE-2025-68325",
+ "description": "PoC CVE-2025-68325",
+ "fork": false,
+ "created_at": "2025-12-20T21:45:48Z",
+ "updated_at": "2025-12-25T16:19:36Z",
+ "pushed_at": "2025-12-20T21:59:28Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68434.json b/2025/CVE-2025-68434.json
new file mode 100644
index 0000000000..5b2f03d7f9
--- /dev/null
+++ b/2025/CVE-2025-68434.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1118398940,
+ "name": "CVE-2025-68434-OSPOS-CSRF",
+ "full_name": "Nixon-H\/CVE-2025-68434-OSPOS-CSRF",
+ "owner": {
+ "login": "Nixon-H",
+ "id": 182409281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182409281?v=4",
+ "html_url": "https:\/\/github.com\/Nixon-H",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nixon-H\/CVE-2025-68434-OSPOS-CSRF",
+ "description": "PoC & Write-up for CVE-2025-68434: Critical CSRF in OpenSourcePOS. Exploits a disabled filter configuration to allow unauthenticated attackers to silently create rogue Administrator accounts, leading to full system takeover. Validated on versions < 3.4.0.",
+ "fork": false,
+ "created_at": "2025-12-17T17:37:18Z",
+ "updated_at": "2026-03-03T08:39:15Z",
+ "pushed_at": "2025-12-18T08:27:31Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68461.json b/2025/CVE-2025-68461.json
new file mode 100644
index 0000000000..41a096655e
--- /dev/null
+++ b/2025/CVE-2025-68461.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1119500706,
+ "name": "CVE-2025-68461",
+ "full_name": "rxerium\/CVE-2025-68461",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-68461",
+ "description": "Detection for CVE-2025-68461",
+ "fork": false,
+ "created_at": "2025-12-19T11:19:16Z",
+ "updated_at": "2026-02-09T17:07:54Z",
+ "pushed_at": "2025-12-19T11:21:37Z",
+ "stargazers_count": 16,
+ "watchers_count": 16,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 16,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121259069,
+ "name": "CVE-2025-68461",
+ "full_name": "gotr00t0day\/CVE-2025-68461",
+ "owner": {
+ "login": "gotr00t0day",
+ "id": 48636787,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48636787?v=4",
+ "html_url": "https:\/\/github.com\/gotr00t0day",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gotr00t0day\/CVE-2025-68461",
+ "description": "A C++ security scanner tool to detect Cross-Site Scripting (XSS) vulnerabilities in Roundcube Webmail installations.",
+ "fork": false,
+ "created_at": "2025-12-22T17:32:53Z",
+ "updated_at": "2026-03-31T08:43:36Z",
+ "pushed_at": "2025-12-24T03:52:43Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-68613.json b/2025/CVE-2025-68613.json
index 0f3e93f9bd..64ca1f0982 100644
--- a/2025/CVE-2025-68613.json
+++ b/2025/CVE-2025-68613.json
@@ -1,4 +1,498 @@
[
+ {
+ "id": 1120921970,
+ "name": "CVE-2025-68613",
+ "full_name": "rxerium\/CVE-2025-68613",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-68613",
+ "description": "Detection for CVE-2025-68613",
+ "fork": false,
+ "created_at": "2025-12-22T06:45:56Z",
+ "updated_at": "2026-03-13T12:31:34Z",
+ "pushed_at": "2025-12-22T06:48:58Z",
+ "stargazers_count": 29,
+ "watchers_count": 29,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "critical-vulnerability",
+ "n8n",
+ "nuclei",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 29,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121291601,
+ "name": "CVE-2025-68613-POC",
+ "full_name": "TheStingR\/CVE-2025-68613-POC",
+ "owner": {
+ "login": "TheStingR",
+ "id": 163915232,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163915232?v=4",
+ "html_url": "https:\/\/github.com\/TheStingR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TheStingR\/CVE-2025-68613-POC",
+ "description": "Public PoC + Scanner and research for CVE-2025-68613: Critical RCE in n8n Workflow Automation via Expression Injection (CVSS 10.0). Includes detection tools, full exploit, and remediation guidance.",
+ "fork": false,
+ "created_at": "2025-12-22T18:41:05Z",
+ "updated_at": "2026-05-18T09:13:48Z",
+ "pushed_at": "2025-12-26T22:25:32Z",
+ "stargazers_count": 25,
+ "watchers_count": 25,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-68613",
+ "cve-scanner",
+ "cybersecurity",
+ "exploit",
+ "n8n",
+ "poc",
+ "rce",
+ "security"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 25,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121346888,
+ "name": "Blackash-CVE-2025-68613",
+ "full_name": "sahilccras\/Blackash-CVE-2025-68613",
+ "owner": {
+ "login": "sahilccras",
+ "id": 170521088,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170521088?v=4",
+ "html_url": "https:\/\/github.com\/sahilccras",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sahilccras\/Blackash-CVE-2025-68613",
+ "description": "CVE-2025-68613",
+ "fork": false,
+ "created_at": "2025-12-22T20:57:39Z",
+ "updated_at": "2025-12-22T20:57:40Z",
+ "pushed_at": "2025-12-22T17:01:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121365073,
+ "name": "n8n-CVE-2025-68613-exploit",
+ "full_name": "wioui\/n8n-CVE-2025-68613-exploit",
+ "owner": {
+ "login": "wioui",
+ "id": 24246255,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24246255?v=4",
+ "html_url": "https:\/\/github.com\/wioui",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/wioui\/n8n-CVE-2025-68613-exploit",
+ "description": "CVE-2025-68613: n8n RCE vulnerability exploit and documentation",
+ "fork": false,
+ "created_at": "2025-12-22T21:49:36Z",
+ "updated_at": "2026-06-02T02:19:54Z",
+ "pushed_at": "2025-12-23T08:54:59Z",
+ "stargazers_count": 97,
+ "watchers_count": 97,
+ "has_discussions": false,
+ "forks_count": 22,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-68613",
+ "exploit",
+ "n8n",
+ "poc",
+ "security",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 22,
+ "watchers": 97,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121493890,
+ "name": "poc_CVE-2025-68613",
+ "full_name": "reem-012\/poc_CVE-2025-68613",
+ "owner": {
+ "login": "reem-012",
+ "id": 77372506,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77372506?v=4",
+ "html_url": "https:\/\/github.com\/reem-012",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/reem-012\/poc_CVE-2025-68613",
+ "description": "POC for CVE-2025-68613",
+ "fork": false,
+ "created_at": "2025-12-23T04:52:59Z",
+ "updated_at": "2025-12-27T01:07:45Z",
+ "pushed_at": "2025-12-23T04:53:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121541915,
+ "name": "CVE-2025-68613-poc-via-copilot",
+ "full_name": "intbjw\/CVE-2025-68613-poc-via-copilot",
+ "owner": {
+ "login": "intbjw",
+ "id": 38395031,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38395031?v=4",
+ "html_url": "https:\/\/github.com\/intbjw",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/intbjw\/CVE-2025-68613-poc-via-copilot",
+ "description": "通过GitHub Copilot 辅助分析CVE-2025-68613漏洞",
+ "fork": false,
+ "created_at": "2025-12-23T06:45:40Z",
+ "updated_at": "2025-12-23T06:46:28Z",
+ "pushed_at": "2025-12-23T06:46:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121695008,
+ "name": "Exploit-CVE-2025-68613",
+ "full_name": "ali-py3\/Exploit-CVE-2025-68613",
+ "owner": {
+ "login": "ali-py3",
+ "id": 67821624,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67821624?v=4",
+ "html_url": "https:\/\/github.com\/ali-py3",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ali-py3\/Exploit-CVE-2025-68613",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-23T11:57:17Z",
+ "updated_at": "2025-12-23T12:07:02Z",
+ "pushed_at": "2025-12-23T12:06:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121798216,
+ "name": "CVE-2025-68613",
+ "full_name": "nehkark\/CVE-2025-68613",
+ "owner": {
+ "login": "nehkark",
+ "id": 88349393,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88349393?v=4",
+ "html_url": "https:\/\/github.com\/nehkark",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nehkark\/CVE-2025-68613",
+ "description": "This repository contains a laboratory-grade analysis and a **safe Proof-of-Concept** for the vulnerability **CVE-2025-68613**, affecting the workflow automation platform **n8n**.",
+ "fork": false,
+ "created_at": "2025-12-23T15:14:52Z",
+ "updated_at": "2025-12-23T15:56:14Z",
+ "pushed_at": "2025-12-23T15:56:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1121888906,
+ "name": "POC-CVE-2025-68613",
+ "full_name": "GnuTLam\/POC-CVE-2025-68613",
+ "owner": {
+ "login": "GnuTLam",
+ "id": 131742384,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131742384?v=4",
+ "html_url": "https:\/\/github.com\/GnuTLam",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/GnuTLam\/POC-CVE-2025-68613",
+ "description": "My poc to exploit this vuln :D",
+ "fork": false,
+ "created_at": "2025-12-23T18:14:28Z",
+ "updated_at": "2025-12-23T18:19:09Z",
+ "pushed_at": "2025-12-23T18:19:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122224140,
+ "name": "CVE-2025-68613",
+ "full_name": "secjoker\/CVE-2025-68613",
+ "owner": {
+ "login": "secjoker",
+ "id": 66725665,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66725665?v=4",
+ "html_url": "https:\/\/github.com\/secjoker",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/secjoker\/CVE-2025-68613",
+ "description": "基于Pocsuite3 框架编写的漏洞验证与利用脚本，用于检测 n8n工作流自动化工具中的认证后远程代码执行漏洞（RCE）",
+ "fork": false,
+ "created_at": "2025-12-24T10:04:28Z",
+ "updated_at": "2025-12-24T10:14:54Z",
+ "pushed_at": "2025-12-24T10:14:51Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122304139,
+ "name": "CVE-2025-68613-n8n-lab",
+ "full_name": "r4j3sh-com\/CVE-2025-68613-n8n-lab",
+ "owner": {
+ "login": "r4j3sh-com",
+ "id": 136555809,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136555809?v=4",
+ "html_url": "https:\/\/github.com\/r4j3sh-com",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r4j3sh-com\/CVE-2025-68613-n8n-lab",
+ "description": "Analysis of CVE-2025-68613",
+ "fork": false,
+ "created_at": "2025-12-24T13:07:05Z",
+ "updated_at": "2025-12-25T01:23:48Z",
+ "pushed_at": "2025-12-25T01:23:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122309968,
+ "name": "CVE-2025-68613",
+ "full_name": "intelligent-ears\/CVE-2025-68613",
+ "owner": {
+ "login": "intelligent-ears",
+ "id": 186805503,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186805503?v=4",
+ "html_url": "https:\/\/github.com\/intelligent-ears",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/intelligent-ears\/CVE-2025-68613",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-24T13:19:53Z",
+ "updated_at": "2025-12-25T14:14:00Z",
+ "pushed_at": "2025-12-25T14:13:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122424305,
+ "name": "CVE-2025-68613_Scanner",
+ "full_name": "manyaigdtuw\/CVE-2025-68613_Scanner",
+ "owner": {
+ "login": "manyaigdtuw",
+ "id": 142112751,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142112751?v=4",
+ "html_url": "https:\/\/github.com\/manyaigdtuw",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/manyaigdtuw\/CVE-2025-68613_Scanner",
+ "description": "GUI Shodan-powered scanner to identify n8n instances exposed to CVE-2025-68613 (version range 0.211.0–1.122.0)",
+ "fork": false,
+ "created_at": "2025-12-24T17:38:27Z",
+ "updated_at": "2026-01-09T03:37:45Z",
+ "pushed_at": "2025-12-24T17:49:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "critical-vulnerability",
+ "cve-2025-68613",
+ "n8n",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122744025,
+ "name": "n8n-RCE",
+ "full_name": "AbdulRKB\/n8n-RCE",
+ "owner": {
+ "login": "AbdulRKB",
+ "id": 82715493,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82715493?v=4",
+ "html_url": "https:\/\/github.com\/AbdulRKB",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AbdulRKB\/n8n-RCE",
+ "description": "Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)",
+ "fork": false,
+ "created_at": "2025-12-25T12:11:37Z",
+ "updated_at": "2025-12-26T18:45:49Z",
+ "pushed_at": "2025-12-25T12:35:08Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-68613",
+ "n8n",
+ "n8n-exploits",
+ "n8n-workflow",
+ "rce"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1122840832,
"name": "CVE-2025-68613-Python-Exploit",
@@ -37,6 +531,341 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1122899153,
+ "name": "n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate",
+ "full_name": "hackersatyamrastogi\/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate",
+ "owner": {
+ "login": "hackersatyamrastogi",
+ "id": 47441267,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47441267?v=4",
+ "html_url": "https:\/\/github.com\/hackersatyamrastogi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hackersatyamrastogi\/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate",
+ "description": "n8n God Mode Ultimate - CVE-2025-68613 Scanner v1.0.0 ║ ║ Workflow Automation Remote Code Execution ",
+ "fork": false,
+ "created_at": "2025-12-25T19:12:04Z",
+ "updated_at": "2026-04-02T17:31:41Z",
+ "pushed_at": "2025-12-25T19:34:53Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1122913574,
+ "name": "n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613",
+ "full_name": "mbanyamer\/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613",
+ "owner": {
+ "login": "mbanyamer",
+ "id": 213306745,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
+ "html_url": "https:\/\/github.com\/mbanyamer",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mbanyamer\/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613",
+ "description": "Proof-of-Concept exploit for CVE-2025-68613: Authenticated Remote Code Execution in n8n via Expression Injection",
+ "fork": false,
+ "created_at": "2025-12-25T20:01:55Z",
+ "updated_at": "2026-02-20T10:41:36Z",
+ "pushed_at": "2025-12-25T20:03:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122957924,
+ "name": "analysis-and-poc-n8n-CVE-2025-68613",
+ "full_name": "releaseown\/analysis-and-poc-n8n-CVE-2025-68613",
+ "owner": {
+ "login": "releaseown",
+ "id": 226413267,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226413267?v=4",
+ "html_url": "https:\/\/github.com\/releaseown",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/releaseown\/analysis-and-poc-n8n-CVE-2025-68613",
+ "description": "Technical study of the CVE-2025-68613 vulnerability in n8n, covering affected versions, laboratory exploration scenario, offensive and defensive analysis, and mitigation strategies.",
+ "fork": false,
+ "created_at": "2025-12-25T23:00:36Z",
+ "updated_at": "2025-12-27T02:34:10Z",
+ "pushed_at": "2025-12-26T03:19:57Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123135851,
+ "name": "homelab-CVE-2025-68613",
+ "full_name": "Dlanang\/homelab-CVE-2025-68613",
+ "owner": {
+ "login": "Dlanang",
+ "id": 162309789,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162309789?v=4",
+ "html_url": "https:\/\/github.com\/Dlanang",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Dlanang\/homelab-CVE-2025-68613",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-26T08:52:35Z",
+ "updated_at": "2025-12-26T09:57:53Z",
+ "pushed_at": "2025-12-26T09:57:50Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123303990,
+ "name": "n8n-cve-2025-68613-thm",
+ "full_name": "Khin-96\/n8n-cve-2025-68613-thm",
+ "owner": {
+ "login": "Khin-96",
+ "id": 223312091,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223312091?v=4",
+ "html_url": "https:\/\/github.com\/Khin-96",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Khin-96\/n8n-cve-2025-68613-thm",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-26T15:40:47Z",
+ "updated_at": "2026-01-19T10:17:14Z",
+ "pushed_at": "2025-12-26T15:46:10Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123354905,
+ "name": "n8n-CVE-2025-68613-TryHackMe",
+ "full_name": "J4ck3LSyN-Gen2\/n8n-CVE-2025-68613-TryHackMe",
+ "owner": {
+ "login": "J4ck3LSyN-Gen2",
+ "id": 204588854,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204588854?v=4",
+ "html_url": "https:\/\/github.com\/J4ck3LSyN-Gen2",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/J4ck3LSyN-Gen2\/n8n-CVE-2025-68613-TryHackMe",
+ "description": "The minor methodology for room: https:\/\/tryhackme.com\/room\/n8ncve202568613",
+ "fork": false,
+ "created_at": "2025-12-26T17:40:42Z",
+ "updated_at": "2025-12-26T17:45:44Z",
+ "pushed_at": "2025-12-26T17:45:41Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123398814,
+ "name": "CVE-2025-68613-n8n-rce-analysis",
+ "full_name": "Ak-cybe\/CVE-2025-68613-n8n-rce-analysis",
+ "owner": {
+ "login": "Ak-cybe",
+ "id": 177183459,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177183459?v=4",
+ "html_url": "https:\/\/github.com\/Ak-cybe",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ak-cybe\/CVE-2025-68613-n8n-rce-analysis",
+ "description": "CVE-2025-68613 (n8n) Critical RCE analysis + defensive recommendations (patch validation, detection ideas, and hardening tips)",
+ "fork": false,
+ "created_at": "2025-12-26T19:40:46Z",
+ "updated_at": "2026-01-13T15:44:02Z",
+ "pushed_at": "2025-12-26T20:09:14Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123455008,
+ "name": "n8n-CVE-2025-68613",
+ "full_name": "LingerANR\/n8n-CVE-2025-68613",
+ "owner": {
+ "login": "LingerANR",
+ "id": 31801397,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31801397?v=4",
+ "html_url": "https:\/\/github.com\/LingerANR",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/LingerANR\/n8n-CVE-2025-68613",
+ "description": "This laboratory provides a controlled environment to analyze and reproduce CVE-2025-68613 in a vulnerable n8n instance.",
+ "fork": false,
+ "created_at": "2025-12-26T22:59:47Z",
+ "updated_at": "2026-01-09T15:12:35Z",
+ "pushed_at": "2025-12-26T23:05:38Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124250647,
+ "name": "n8n-cve-2025-68613",
+ "full_name": "gagaltotal\/n8n-cve-2025-68613",
+ "owner": {
+ "login": "gagaltotal",
+ "id": 23299078,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4",
+ "html_url": "https:\/\/github.com\/gagaltotal",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/gagaltotal\/n8n-cve-2025-68613",
+ "description": "n8n CVE-2025-68613",
+ "fork": false,
+ "created_at": "2025-12-28T16:47:13Z",
+ "updated_at": "2025-12-28T17:13:55Z",
+ "pushed_at": "2025-12-28T17:13:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "n8n",
+ "n8n-automation",
+ "n8n-workflow",
+ "python3"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1124605756,
+ "name": "n8n-CVE-2025-68613",
+ "full_name": "cv-sai-kamesh\/n8n-CVE-2025-68613",
+ "owner": {
+ "login": "cv-sai-kamesh",
+ "id": 246469156,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/246469156?v=4",
+ "html_url": "https:\/\/github.com\/cv-sai-kamesh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/cv-sai-kamesh\/n8n-CVE-2025-68613",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-29T09:52:12Z",
+ "updated_at": "2025-12-29T09:54:06Z",
+ "pushed_at": "2025-12-29T09:54:03Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1124786653,
"name": "n8n-CVE-2025-68613",
diff --git a/2025/CVE-2025-68645.json b/2025/CVE-2025-68645.json
index 140cd9b463..af610054d1 100644
--- a/2025/CVE-2025-68645.json
+++ b/2025/CVE-2025-68645.json
@@ -1,4 +1,42 @@
[
+ {
+ "id": 1125540858,
+ "name": "CVE-2025-68645-PoC",
+ "full_name": "chinaxploiter\/CVE-2025-68645-PoC",
+ "owner": {
+ "login": "chinaxploiter",
+ "id": 244077382,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244077382?v=4",
+ "html_url": "https:\/\/github.com\/chinaxploiter",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chinaxploiter\/CVE-2025-68645-PoC",
+ "description": "Academic proof-of-concept demonstrating CVE-2025-68645 for authorized security research.",
+ "fork": false,
+ "created_at": "2025-12-30T23:09:48Z",
+ "updated_at": "2026-01-26T12:42:13Z",
+ "pushed_at": "2025-12-30T23:23:24Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-68645",
+ "cve-2025-68645-poc",
+ "cve-2025-68645-zimbra",
+ "zimbra"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1126184779,
"name": "zimbramail-CVE-2025-68645-poc",
diff --git a/2025/CVE-2025-68664.json b/2025/CVE-2025-68664.json
index a20dcde983..c09ad5d6ac 100644
--- a/2025/CVE-2025-68664.json
+++ b/2025/CVE-2025-68664.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1123575284,
+ "name": "CVE-2025-68664-LangGrinch-PoC",
+ "full_name": "Ak-cybe\/CVE-2025-68664-LangGrinch-PoC",
+ "owner": {
+ "login": "Ak-cybe",
+ "id": 177183459,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177183459?v=4",
+ "html_url": "https:\/\/github.com\/Ak-cybe",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Ak-cybe\/CVE-2025-68664-LangGrinch-PoC",
+ "description": "A testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only",
+ "fork": false,
+ "created_at": "2025-12-27T06:49:55Z",
+ "updated_at": "2026-05-18T06:59:43Z",
+ "pushed_at": "2025-12-27T06:55:05Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1131880981,
"name": "CVE-2025-68664",
diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json
index 0c5e08e8e4..861093033f 100644
--- a/2025/CVE-2025-68921.json
+++ b/2025/CVE-2025-68921.json
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
- "updated_at": "2026-06-02T12:34:46Z",
- "pushed_at": "2026-06-02T12:34:01Z",
+ "updated_at": "2026-06-02T15:39:33Z",
+ "pushed_at": "2026-06-02T15:35:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-6907.json b/2025/CVE-2025-6907.json
new file mode 100644
index 0000000000..6c7df45510
--- /dev/null
+++ b/2025/CVE-2025-6907.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1013776712,
+ "name": "cve-2025-6907",
+ "full_name": "byteReaper77\/cve-2025-6907",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/cve-2025-6907",
+ "description": "a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODE_PROJECT service. ",
+ "fork": false,
+ "created_at": "2025-07-04T12:54:16Z",
+ "updated_at": "2026-02-07T05:17:59Z",
+ "pushed_at": "2025-07-04T13:02:29Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6934.json b/2025/CVE-2025-6934.json
index 6f888e7544..aacccd331f 100644
--- a/2025/CVE-2025-6934.json
+++ b/2025/CVE-2025-6934.json
@@ -1,4 +1,136 @@
[
+ {
+ "id": 1011868604,
+ "name": "CVE-2025-6934",
+ "full_name": "Nxploited\/CVE-2025-6934",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-6934",
+ "description": "Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-07-01T13:05:24Z",
+ "updated_at": "2026-04-15T06:45:17Z",
+ "pushed_at": "2025-07-01T13:29:05Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1012565980,
+ "name": "CVE-2025-6934",
+ "full_name": "MrjHaxcore\/CVE-2025-6934",
+ "owner": {
+ "login": "MrjHaxcore",
+ "id": 110843759,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110843759?v=4",
+ "html_url": "https:\/\/github.com\/MrjHaxcore",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/MrjHaxcore\/CVE-2025-6934",
+ "description": " CVE-2025-6934 POC",
+ "fork": false,
+ "created_at": "2025-07-02T14:23:48Z",
+ "updated_at": "2025-07-02T15:46:23Z",
+ "pushed_at": "2025-07-02T14:28:07Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1039067987,
+ "name": "CVE-2025-6934",
+ "full_name": "0xgh057r3c0n\/CVE-2025-6934",
+ "owner": {
+ "login": "0xgh057r3c0n",
+ "id": 144083709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144083709?v=4",
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xgh057r3c0n\/CVE-2025-6934",
+ "description": "CVE-2025-6934 is a critical vulnerability in the WordPress Opal Estate Pro plugin (<= 1.7.5) that allows unauthenticated attackers to create new administrator accounts through the plugin’s insecure AJAX registration process.",
+ "fork": false,
+ "created_at": "2025-08-16T12:12:21Z",
+ "updated_at": "2026-02-21T12:18:31Z",
+ "pushed_at": "2025-08-17T00:47:26Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045592640,
+ "name": "CVE-2025-6934",
+ "full_name": "yukinime\/CVE-2025-6934",
+ "owner": {
+ "login": "yukinime",
+ "id": 106898895,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106898895?v=4",
+ "html_url": "https:\/\/github.com\/yukinime",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yukinime\/CVE-2025-6934",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-27T12:24:15Z",
+ "updated_at": "2026-03-08T04:56:58Z",
+ "pushed_at": "2025-08-27T12:30:40Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1048906531,
"name": "CVE-2025-6934",
diff --git a/2025/CVE-2025-6970.json b/2025/CVE-2025-6970.json
new file mode 100644
index 0000000000..4a71397e8a
--- /dev/null
+++ b/2025/CVE-2025-6970.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1016980260,
+ "name": "CVE-2025-6970",
+ "full_name": "RandomRobbieBF\/CVE-2025-6970",
+ "owner": {
+ "login": "RandomRobbieBF",
+ "id": 51722811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
+ "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2025-6970",
+ "description": "Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter",
+ "fork": false,
+ "created_at": "2025-07-09T20:44:47Z",
+ "updated_at": "2026-02-24T12:58:50Z",
+ "pushed_at": "2025-07-09T20:45:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6980.json b/2025/CVE-2025-6980.json
new file mode 100644
index 0000000000..404b65dc2c
--- /dev/null
+++ b/2025/CVE-2025-6980.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1110251829,
+ "name": "CVE-2025-6980-check",
+ "full_name": "BishopFox\/CVE-2025-6980-check",
+ "owner": {
+ "login": "BishopFox",
+ "id": 4523757,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4523757?v=4",
+ "html_url": "https:\/\/github.com\/BishopFox",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BishopFox\/CVE-2025-6980-check",
+ "description": "Safely test Arista NGFW for information disclosure",
+ "fork": false,
+ "created_at": "2025-12-04T23:31:15Z",
+ "updated_at": "2026-02-04T07:21:10Z",
+ "pushed_at": "2025-12-04T23:34:39Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-6998.json b/2025/CVE-2025-6998.json
new file mode 100644
index 0000000000..6101c6cca6
--- /dev/null
+++ b/2025/CVE-2025-6998.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1026965302,
+ "name": "CVE-2025-6998-CalibreWeb-0.6.24-ReDoS",
+ "full_name": "mind2hex\/CVE-2025-6998-CalibreWeb-0.6.24-ReDoS",
+ "owner": {
+ "login": "mind2hex",
+ "id": 51345640,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51345640?v=4",
+ "html_url": "https:\/\/github.com\/mind2hex",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mind2hex\/CVE-2025-6998-CalibreWeb-0.6.24-ReDoS",
+ "description": "Exploit for the redos for CalibreWeb v0.6.24",
+ "fork": false,
+ "created_at": "2025-07-27T02:39:52Z",
+ "updated_at": "2025-07-27T02:55:48Z",
+ "pushed_at": "2025-07-27T02:55:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json
index 546d0120ad..d4f79c229f 100644
--- a/2025/CVE-2025-69985.json
+++ b/2025/CVE-2025-69985.json
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
- "updated_at": "2026-06-02T08:52:48Z",
- "pushed_at": "2026-06-02T08:52:44Z",
+ "updated_at": "2026-06-02T16:04:17Z",
+ "pushed_at": "2026-06-02T16:01:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json
index 4d75285119..69f26f8238 100644
--- a/2025/CVE-2025-70795.json
+++ b/2025/CVE-2025-70795.json
@@ -14,10 +14,10 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-06-02T08:48:27Z",
- "pushed_at": "2026-06-02T08:48:23Z",
- "stargazers_count": 2,
- "watchers_count": 2,
+ "updated_at": "2026-06-02T16:06:00Z",
+ "pushed_at": "2026-06-02T15:57:28Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 2,
+ "watchers": 3,
"score": 0,
"subscribers_count": 1
},
diff --git a/2025/CVE-2025-7338.json b/2025/CVE-2025-7338.json
new file mode 100644
index 0000000000..e5fbbb6185
--- /dev/null
+++ b/2025/CVE-2025-7338.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1110056807,
+ "name": "multer-sca-rule-test_cve-2025-7338",
+ "full_name": "r2c-CSE\/multer-sca-rule-test_cve-2025-7338",
+ "owner": {
+ "login": "r2c-CSE",
+ "id": 114427509,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114427509?v=4",
+ "html_url": "https:\/\/github.com\/r2c-CSE",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r2c-CSE\/multer-sca-rule-test_cve-2025-7338",
+ "description": "Test to validate CVE-2025-7338 https:\/\/semgrep.dev\/orgs\/-\/advisories?f=CAAQGRoTCg1jdmUtMjAyNS03MzM4GgAiAA%3D%3D",
+ "fork": false,
+ "created_at": "2025-12-04T16:47:17Z",
+ "updated_at": "2025-12-04T16:50:38Z",
+ "pushed_at": "2025-12-04T16:49:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7340.json b/2025/CVE-2025-7340.json
new file mode 100644
index 0000000000..77da7e8568
--- /dev/null
+++ b/2025/CVE-2025-7340.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1019815616,
+ "name": "CVE-2025-7340",
+ "full_name": "Nxploited\/CVE-2025-7340",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-7340",
+ "description": "HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-07-14T23:27:47Z",
+ "updated_at": "2025-12-12T19:12:01Z",
+ "pushed_at": "2025-07-14T23:41:47Z",
+ "stargazers_count": 7,
+ "watchers_count": 7,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 7,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1031921124,
+ "name": "WordPress-HT-Contact-CVE-2025-7340-RCE",
+ "full_name": "Kai-One001\/WordPress-HT-Contact-CVE-2025-7340-RCE",
+ "owner": {
+ "login": "Kai-One001",
+ "id": 76192879,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76192879?v=4",
+ "html_url": "https:\/\/github.com\/Kai-One001",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kai-One001\/WordPress-HT-Contact-CVE-2025-7340-RCE",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-04T14:30:04Z",
+ "updated_at": "2025-08-04T14:37:28Z",
+ "pushed_at": "2025-08-04T14:37:24Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7404.json b/2025/CVE-2025-7404.json
new file mode 100644
index 0000000000..d31d7e57bd
--- /dev/null
+++ b/2025/CVE-2025-7404.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1026974538,
+ "name": "CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection",
+ "full_name": "mind2hex\/CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection",
+ "owner": {
+ "login": "mind2hex",
+ "id": 51345640,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51345640?v=4",
+ "html_url": "https:\/\/github.com\/mind2hex",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mind2hex\/CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection",
+ "description": "CVE-2025-7404 exploit.",
+ "fork": false,
+ "created_at": "2025-07-27T03:21:03Z",
+ "updated_at": "2025-07-27T03:28:43Z",
+ "pushed_at": "2025-07-27T03:28:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7461.json b/2025/CVE-2025-7461.json
new file mode 100644
index 0000000000..092fee570e
--- /dev/null
+++ b/2025/CVE-2025-7461.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1018422218,
+ "name": "CVE-2025-7461",
+ "full_name": "bx33661\/CVE-2025-7461",
+ "owner": {
+ "login": "bx33661",
+ "id": 138348615,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138348615?v=4",
+ "html_url": "https:\/\/github.com\/bx33661",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bx33661\/CVE-2025-7461",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-12T08:17:49Z",
+ "updated_at": "2026-03-17T06:33:07Z",
+ "pushed_at": "2025-07-23T08:33:14Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": true,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7605.json b/2025/CVE-2025-7605.json
new file mode 100644
index 0000000000..5faa15064b
--- /dev/null
+++ b/2025/CVE-2025-7605.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1019221942,
+ "name": "CVE-2025-7605",
+ "full_name": "sunhuiHi666\/CVE-2025-7605",
+ "owner": {
+ "login": "sunhuiHi666",
+ "id": 175167371,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175167371?v=4",
+ "html_url": "https:\/\/github.com\/sunhuiHi666",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sunhuiHi666\/CVE-2025-7605",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-14T01:58:40Z",
+ "updated_at": "2025-07-14T04:58:42Z",
+ "pushed_at": "2025-07-14T04:58:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7606.json b/2025/CVE-2025-7606.json
new file mode 100644
index 0000000000..a161bdfd0a
--- /dev/null
+++ b/2025/CVE-2025-7606.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1019222054,
+ "name": "CVE-2025-7606",
+ "full_name": "sunhuiHi666\/CVE-2025-7606",
+ "owner": {
+ "login": "sunhuiHi666",
+ "id": 175167371,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175167371?v=4",
+ "html_url": "https:\/\/github.com\/sunhuiHi666",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sunhuiHi666\/CVE-2025-7606",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-07-14T01:59:00Z",
+ "updated_at": "2025-07-14T04:57:00Z",
+ "pushed_at": "2025-07-14T04:56:56Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7753.json b/2025/CVE-2025-7753.json
new file mode 100644
index 0000000000..17d7037a6a
--- /dev/null
+++ b/2025/CVE-2025-7753.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022142234,
+ "name": "CVE-2025-7753",
+ "full_name": "byteReaper77\/CVE-2025-7753",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-7753",
+ "description": "PoC Exploit for CVE-2025-7753 — Time-Based SQL Injection in Online Appointment Booking System 1.0 via the username parameter. Exploit written in C using libcurl.",
+ "fork": false,
+ "created_at": "2025-07-18T14:22:57Z",
+ "updated_at": "2026-02-07T05:18:19Z",
+ "pushed_at": "2025-07-18T14:35:22Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7766.json b/2025/CVE-2025-7766.json
new file mode 100644
index 0000000000..4fadcdfcd3
--- /dev/null
+++ b/2025/CVE-2025-7766.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1025122646,
+ "name": "CVE-2025-7766",
+ "full_name": "byteReaper77\/CVE-2025-7766",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-7766",
+ "description": "PoC exploit for CVE-2025-7766 – XXE vulnerability leading to potential RCE.",
+ "fork": false,
+ "created_at": "2025-07-23T18:57:46Z",
+ "updated_at": "2026-02-07T05:10:57Z",
+ "pushed_at": "2025-08-17T19:40:32Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7769.json b/2025/CVE-2025-7769.json
new file mode 100644
index 0000000000..3d90204f9c
--- /dev/null
+++ b/2025/CVE-2025-7769.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1033585891,
+ "name": "CVE-2025-7769",
+ "full_name": "byteReaper77\/CVE-2025-7769",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-7769",
+ "description": "PoC to inject a command via the DEVICE_PING endpoint",
+ "fork": false,
+ "created_at": "2025-08-07T03:48:35Z",
+ "updated_at": "2026-02-07T05:11:36Z",
+ "pushed_at": "2025-08-07T13:10:18Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7771.json b/2025/CVE-2025-7771.json
index 8572cefd31..569d292446 100644
--- a/2025/CVE-2025-7771.json
+++ b/2025/CVE-2025-7771.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1047877964,
+ "name": "ThrottleStopPoC",
+ "full_name": "fxrstor\/ThrottleStopPoC",
+ "owner": {
+ "login": "fxrstor",
+ "id": 132809543,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132809543?v=4",
+ "html_url": "https:\/\/github.com\/fxrstor",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fxrstor\/ThrottleStopPoC",
+ "description": "CVE-2025-7771: Arbitrary physical memory and I\/O port read\/write via ThrottleStop driver",
+ "fork": false,
+ "created_at": "2025-08-31T12:46:25Z",
+ "updated_at": "2026-05-19T03:07:50Z",
+ "pushed_at": "2025-09-05T12:51:44Z",
+ "stargazers_count": 16,
+ "watchers_count": 16,
+ "has_discussions": false,
+ "forks_count": 7,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 7,
+ "watchers": 16,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1052093040,
+ "name": "ThrottleStop",
+ "full_name": "Demoo1337\/ThrottleStop",
+ "owner": {
+ "login": "Demoo1337",
+ "id": 103380188,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103380188?v=4",
+ "html_url": "https:\/\/github.com\/Demoo1337",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Demoo1337\/ThrottleStop",
+ "description": "CVE-2025-7771 ThrottleStop.sys privilege escalation exploit - unrestricted IOCTL access to physical memory via MmMapIoSpace",
+ "fork": false,
+ "created_at": "2025-09-07T11:46:52Z",
+ "updated_at": "2026-06-01T14:11:47Z",
+ "pushed_at": "2025-09-07T11:47:59Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1069246757,
"name": "CVE-2025-7771",
@@ -32,6 +98,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1096063433,
+ "name": "throttlestop-exploit-rw",
+ "full_name": "AmrHuss\/throttlestop-exploit-rw",
+ "owner": {
+ "login": "AmrHuss",
+ "id": 120475533,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120475533?v=4",
+ "html_url": "https:\/\/github.com\/AmrHuss",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AmrHuss\/throttlestop-exploit-rw",
+ "description": "Arbitrary physical memory read\/write exploitation using ThrottleStop.sys (CVE-2025-7771) with superfetch address translation - Windows kernel security research",
+ "fork": false,
+ "created_at": "2025-11-13T22:26:38Z",
+ "updated_at": "2026-05-26T07:01:39Z",
+ "pushed_at": "2025-11-13T22:32:11Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 13,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125649674,
+ "name": "ThrottleStopPPL",
+ "full_name": "v31l0x1\/ThrottleStopPPL",
+ "owner": {
+ "login": "v31l0x1",
+ "id": 63537300,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63537300?v=4",
+ "html_url": "https:\/\/github.com\/v31l0x1",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/v31l0x1\/ThrottleStopPPL",
+ "description": "Poc for CVE-2025-7771 to modify PPL Protection",
+ "fork": false,
+ "created_at": "2025-12-31T05:19:36Z",
+ "updated_at": "2026-04-19T18:14:38Z",
+ "pushed_at": "2025-12-31T05:21:26Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1133842524,
"name": "CVE-2025-7771",
diff --git a/2025/CVE-2025-7775.json b/2025/CVE-2025-7775.json
index af274d64b1..76eb20a443 100644
--- a/2025/CVE-2025-7775.json
+++ b/2025/CVE-2025-7775.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1046098057,
+ "name": "CVE-2025-7775-PoC",
+ "full_name": "swabird\/CVE-2025-7775-PoC",
+ "owner": {
+ "login": "swabird",
+ "id": 2717140,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2717140?v=4",
+ "html_url": "https:\/\/github.com\/swabird",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/swabird\/CVE-2025-7775-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-28T07:22:42Z",
+ "updated_at": "2026-01-16T06:17:26Z",
+ "pushed_at": "2025-08-28T07:30:03Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1047344718,
+ "name": "CVE-2025-7775-vulnerable-lab",
+ "full_name": "Aaqilyousuf\/CVE-2025-7775-vulnerable-lab",
+ "owner": {
+ "login": "Aaqilyousuf",
+ "id": 118057216,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118057216?v=4",
+ "html_url": "https:\/\/github.com\/Aaqilyousuf",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Aaqilyousuf\/CVE-2025-7775-vulnerable-lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-30T07:53:26Z",
+ "updated_at": "2025-08-30T07:55:15Z",
+ "pushed_at": "2025-08-30T07:55:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1047985716,
"name": "CVE-2025-7775",
@@ -36,5 +102,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1049154127,
+ "name": "CVE-2025-7775",
+ "full_name": "mr-r3b00t\/CVE-2025-7775",
+ "owner": {
+ "login": "mr-r3b00t",
+ "id": 14963690,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14963690?v=4",
+ "html_url": "https:\/\/github.com\/mr-r3b00t",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mr-r3b00t\/CVE-2025-7775",
+ "description": "Version detection PowerShell ",
+ "fork": false,
+ "created_at": "2025-09-02T15:05:00Z",
+ "updated_at": "2025-09-03T08:11:22Z",
+ "pushed_at": "2025-09-02T22:27:47Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-7795.json b/2025/CVE-2025-7795.json
new file mode 100644
index 0000000000..a93206074a
--- /dev/null
+++ b/2025/CVE-2025-7795.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1022632210,
+ "name": "CVE-2025-7795",
+ "full_name": "byteReaper77\/CVE-2025-7795",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-7795",
+ "description": "Proof-of-Concept exploit for CVE-2025-7795 – A buffer overflow vulnerability affecting certain Tenda routers. The exploit sends crafted POST requests to trigger a crash and confirms the impact using ICMP (ping) checks.",
+ "fork": false,
+ "created_at": "2025-07-19T13:47:28Z",
+ "updated_at": "2026-02-07T05:17:23Z",
+ "pushed_at": "2025-07-19T15:10:41Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7840.json b/2025/CVE-2025-7840.json
new file mode 100644
index 0000000000..5daeb31bf2
--- /dev/null
+++ b/2025/CVE-2025-7840.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1023124165,
+ "name": "CVE-2025-7840",
+ "full_name": "byteReaper77\/CVE-2025-7840",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-7840",
+ "description": "Proof‑of‑concept exploit for CVE‑2025‑7840 that injects malicious payloads into the Firstname parameter of a reservation form to trigger XSS",
+ "fork": false,
+ "created_at": "2025-07-20T15:21:51Z",
+ "updated_at": "2026-02-07T05:17:32Z",
+ "pushed_at": "2025-07-20T15:32:49Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7847.json b/2025/CVE-2025-7847.json
new file mode 100644
index 0000000000..6e381ec814
--- /dev/null
+++ b/2025/CVE-2025-7847.json
@@ -0,0 +1,38 @@
+[
+ {
+ "id": 1030765399,
+ "name": "CVE-2025-7847-POC",
+ "full_name": "EricArdiansa\/CVE-2025-7847-POC",
+ "owner": {
+ "login": "EricArdiansa",
+ "id": 99806966,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99806966?v=4",
+ "html_url": "https:\/\/github.com\/EricArdiansa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EricArdiansa\/CVE-2025-7847-POC",
+ "description": "Wordpress Plugin AI Engine 2.9.3 - 2.9.4 Proof Of Concept",
+ "fork": false,
+ "created_at": "2025-08-02T09:22:20Z",
+ "updated_at": "2025-08-02T10:02:42Z",
+ "pushed_at": "2025-08-02T10:02:39Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "exploit"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7892.json b/2025/CVE-2025-7892.json
new file mode 100644
index 0000000000..d782f1f3cf
--- /dev/null
+++ b/2025/CVE-2025-7892.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1100691856,
+ "name": "CVE-2025-7892-Proof-of-Concept-Login-Form",
+ "full_name": "FlyingLemonade\/CVE-2025-7892-Proof-of-Concept-Login-Form",
+ "owner": {
+ "login": "FlyingLemonade",
+ "id": 143870185,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143870185?v=4",
+ "html_url": "https:\/\/github.com\/FlyingLemonade",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/FlyingLemonade\/CVE-2025-7892-Proof-of-Concept-Login-Form",
+ "description": "CVE-2025-7892",
+ "fork": false,
+ "created_at": "2025-11-20T16:12:48Z",
+ "updated_at": "2025-11-20T19:24:50Z",
+ "pushed_at": "2025-11-20T19:24:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-7955.json b/2025/CVE-2025-7955.json
new file mode 100644
index 0000000000..0ffec1d842
--- /dev/null
+++ b/2025/CVE-2025-7955.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1046253901,
+ "name": "CVE-2025-7955",
+ "full_name": "Nxploited\/CVE-2025-7955",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-7955",
+ "description": "RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentral_admin_login_2fa_verify Function",
+ "fork": false,
+ "created_at": "2025-08-28T12:18:00Z",
+ "updated_at": "2026-03-13T08:56:54Z",
+ "pushed_at": "2025-08-28T12:22:36Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8018.json b/2025/CVE-2025-8018.json
new file mode 100644
index 0000000000..b623d2484d
--- /dev/null
+++ b/2025/CVE-2025-8018.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1024932983,
+ "name": "CVE-2025-8018",
+ "full_name": "drackyjr\/CVE-2025-8018",
+ "owner": {
+ "login": "drackyjr",
+ "id": 146464209,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146464209?v=4",
+ "html_url": "https:\/\/github.com\/drackyjr",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/drackyjr\/CVE-2025-8018",
+ "description": "Python exploit script for CVE-2025-8018 a critical SQL injection in the Food Ordering Review System v1.0. This script helps you test, confirm, and exploit the vulnerability using UNION- and time-based SQL injection. Great for CTF practice, ethical hacking, and learning how real-world SQLi works. Educational use only.",
+ "fork": false,
+ "created_at": "2025-07-23T13:16:44Z",
+ "updated_at": "2025-09-13T17:49:28Z",
+ "pushed_at": "2025-07-23T13:27:59Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8061.json b/2025/CVE-2025-8061.json
index 18a2d2ff4f..9ea5e4fadc 100644
--- a/2025/CVE-2025-8061.json
+++ b/2025/CVE-2025-8061.json
@@ -1,4 +1,70 @@
[
+ {
+ "id": 1098189794,
+ "name": "lenovo-dispatcher-poc",
+ "full_name": "segura2010\/lenovo-dispatcher-poc",
+ "owner": {
+ "login": "segura2010",
+ "id": 1244724,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1244724?v=4",
+ "html_url": "https:\/\/github.com\/segura2010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/segura2010\/lenovo-dispatcher-poc",
+ "description": "PoC to exploit lenovo dispatcher driver (LnvMSRIO.sys) (CVE-2025-8061)",
+ "fork": false,
+ "created_at": "2025-11-17T11:21:42Z",
+ "updated_at": "2026-04-06T02:56:09Z",
+ "pushed_at": "2025-11-17T11:29:24Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113678736,
+ "name": "CVE-2025-8061-Exploit",
+ "full_name": "spawn451\/CVE-2025-8061-Exploit",
+ "owner": {
+ "login": "spawn451",
+ "id": 87195479,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87195479?v=4",
+ "html_url": "https:\/\/github.com\/spawn451",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/spawn451\/CVE-2025-8061-Exploit",
+ "description": "Exploit LnvMSRIO.sys vulnerable driver",
+ "fork": false,
+ "created_at": "2025-12-10T10:06:44Z",
+ "updated_at": "2026-05-12T09:38:01Z",
+ "pushed_at": "2025-12-10T10:08:09Z",
+ "stargazers_count": 15,
+ "watchers_count": 15,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 15,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1221804444,
"name": "Lenovo-CVE-2025-8061",
diff --git a/2025/CVE-2025-8067.json b/2025/CVE-2025-8067.json
new file mode 100644
index 0000000000..01000465b1
--- /dev/null
+++ b/2025/CVE-2025-8067.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1050449820,
+ "name": "CVE-2025-8067",
+ "full_name": "born0monday\/CVE-2025-8067",
+ "owner": {
+ "login": "born0monday",
+ "id": 160256886,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160256886?v=4",
+ "html_url": "https:\/\/github.com\/born0monday",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/born0monday\/CVE-2025-8067",
+ "description": "Proof of Concept for CVE-2025-8067",
+ "fork": false,
+ "created_at": "2025-09-04T12:57:30Z",
+ "updated_at": "2025-09-04T13:03:00Z",
+ "pushed_at": "2025-09-04T12:59:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json
index 6c6f181b62..49d24387a7 100644
--- a/2025/CVE-2025-8088.json
+++ b/2025/CVE-2025-8088.json
@@ -40,6 +40,615 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 1035604741,
+ "name": "CVE-2025-8088",
+ "full_name": "jordan922\/CVE-2025-8088",
+ "owner": {
+ "login": "jordan922",
+ "id": 87998876,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87998876?v=4",
+ "html_url": "https:\/\/github.com\/jordan922",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jordan922\/CVE-2025-8088",
+ "description": "Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088.",
+ "fork": false,
+ "created_at": "2025-08-10T18:45:39Z",
+ "updated_at": "2025-11-02T20:40:03Z",
+ "pushed_at": "2025-08-11T06:03:55Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1036278526,
+ "name": "cve-2025-8088",
+ "full_name": "travisbgreen\/cve-2025-8088",
+ "owner": {
+ "login": "travisbgreen",
+ "id": 1450909,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1450909?v=4",
+ "html_url": "https:\/\/github.com\/travisbgreen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/travisbgreen\/cve-2025-8088",
+ "description": "cve-2025-8088_detection",
+ "fork": false,
+ "created_at": "2025-08-11T20:43:36Z",
+ "updated_at": "2025-08-26T10:44:31Z",
+ "pushed_at": "2025-08-11T20:48:33Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1036705140,
+ "name": "WinRAR-CVE-2025-8088-PoC-RAR",
+ "full_name": "knight0x07\/WinRAR-CVE-2025-8088-PoC-RAR",
+ "owner": {
+ "login": "knight0x07",
+ "id": 60843949,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60843949?v=4",
+ "html_url": "https:\/\/github.com\/knight0x07",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/knight0x07\/WinRAR-CVE-2025-8088-PoC-RAR",
+ "description": "WinRAR 0day CVE-2025-8088 PoC RAR Archive",
+ "fork": false,
+ "created_at": "2025-08-12T13:16:47Z",
+ "updated_at": "2026-03-13T08:50:45Z",
+ "pushed_at": "2025-08-12T13:25:26Z",
+ "stargazers_count": 46,
+ "watchers_count": 46,
+ "has_discussions": false,
+ "forks_count": 12,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 12,
+ "watchers": 46,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1037295826,
+ "name": "CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-",
+ "full_name": "sxyrxyy\/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-",
+ "owner": {
+ "login": "sxyrxyy",
+ "id": 125439203,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125439203?v=4",
+ "html_url": "https:\/\/github.com\/sxyrxyy",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sxyrxyy\/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-",
+ "description": "CVE-2025-8088 WinRAR Proof of Concept (PoC-Exploit)",
+ "fork": false,
+ "created_at": "2025-08-13T11:05:46Z",
+ "updated_at": "2026-05-29T21:31:56Z",
+ "pushed_at": "2025-08-13T11:09:34Z",
+ "stargazers_count": 68,
+ "watchers_count": 68,
+ "has_discussions": false,
+ "forks_count": 31,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 31,
+ "watchers": 68,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1037679145,
+ "name": "CVE-2025-8088-Winrar-Tool",
+ "full_name": "onlytoxi\/CVE-2025-8088-Winrar-Tool",
+ "owner": {
+ "login": "onlytoxi",
+ "id": 211150972,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211150972?v=4",
+ "html_url": "https:\/\/github.com\/onlytoxi",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/onlytoxi\/CVE-2025-8088-Winrar-Tool",
+ "description": "Advanced WinRAR Path Traversal Exploit Tool for CVE-2025-8088",
+ "fork": false,
+ "created_at": "2025-08-14T00:36:24Z",
+ "updated_at": "2026-05-10T07:18:05Z",
+ "pushed_at": "2025-08-18T21:16:45Z",
+ "stargazers_count": 56,
+ "watchers_count": 56,
+ "has_discussions": false,
+ "forks_count": 17,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-8088",
+ "exploit",
+ "poc",
+ "redteam",
+ "security-research",
+ "vulnerability",
+ "winrar",
+ "zero-day",
+ "zeroday"
+ ],
+ "visibility": "public",
+ "forks": 17,
+ "watchers": 56,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1038780934,
+ "name": "CVE-2025-8088-WinRAR-PathTraversal-PoC",
+ "full_name": "0xAbolfazl\/CVE-2025-8088-WinRAR-PathTraversal-PoC",
+ "owner": {
+ "login": "0xAbolfazl",
+ "id": 196091110,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196091110?v=4",
+ "html_url": "https:\/\/github.com\/0xAbolfazl",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xAbolfazl\/CVE-2025-8088-WinRAR-PathTraversal-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-15T20:03:05Z",
+ "updated_at": "2025-11-21T05:11:54Z",
+ "pushed_at": "2025-08-16T23:03:32Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1038943165,
+ "name": "CVE-2025-8088-Multi-Document",
+ "full_name": "pentestfunctions\/CVE-2025-8088-Multi-Document",
+ "owner": {
+ "login": "pentestfunctions",
+ "id": 144001335,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144001335?v=4",
+ "html_url": "https:\/\/github.com\/pentestfunctions",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pentestfunctions\/CVE-2025-8088-Multi-Document",
+ "description": "Exploit systems using older WinRAR without knowing their username (unlike other projects)",
+ "fork": false,
+ "created_at": "2025-08-16T06:12:34Z",
+ "updated_at": "2026-05-09T23:50:35Z",
+ "pushed_at": "2025-08-17T02:58:56Z",
+ "stargazers_count": 36,
+ "watchers_count": 36,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 36,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1039403620,
+ "name": "WinRAR-CVE-2025-8088-Path-Traversal-PoC",
+ "full_name": "pexlexity\/WinRAR-CVE-2025-8088-Path-Traversal-PoC",
+ "owner": {
+ "login": "pexlexity",
+ "id": 216386706,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216386706?v=4",
+ "html_url": "https:\/\/github.com\/pexlexity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pexlexity\/WinRAR-CVE-2025-8088-Path-Traversal-PoC",
+ "description": "Proof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)",
+ "fork": false,
+ "created_at": "2025-08-17T06:31:47Z",
+ "updated_at": "2025-08-19T14:01:13Z",
+ "pushed_at": "2025-08-17T07:00:18Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1040493182,
+ "name": "CVE-2025-8088",
+ "full_name": "nhattanhh\/CVE-2025-8088",
+ "owner": {
+ "login": "nhattanhh",
+ "id": 130430279,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130430279?v=4",
+ "html_url": "https:\/\/github.com\/nhattanhh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/nhattanhh\/CVE-2025-8088",
+ "description": "CVE-2025-8088",
+ "fork": false,
+ "created_at": "2025-08-19T04:20:37Z",
+ "updated_at": "2025-09-16T04:20:20Z",
+ "pushed_at": "2025-08-19T10:09:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1041340381,
+ "name": "CVE-2025-8088-Winrar-Tool-Gui",
+ "full_name": "Syrins\/CVE-2025-8088-Winrar-Tool-Gui",
+ "owner": {
+ "login": "Syrins",
+ "id": 67106364,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67106364?v=4",
+ "html_url": "https:\/\/github.com\/Syrins",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Syrins\/CVE-2025-8088-Winrar-Tool-Gui",
+ "description": "A Windows GUI tool demonstrating a proof-of-concept archive traversal technique related to CVE-2025-8088 using WinRAR’s CLI. Allows building crafted RAR files with payload + decoy files through an easy modern interface. For educational and security-research purposes only.",
+ "fork": false,
+ "created_at": "2025-08-20T10:46:44Z",
+ "updated_at": "2026-02-04T11:58:13Z",
+ "pushed_at": "2025-08-20T11:20:14Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1041916645,
+ "name": "CVE-2025-8088",
+ "full_name": "ghostn4444\/CVE-2025-8088",
+ "owner": {
+ "login": "ghostn4444",
+ "id": 114788746,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114788746?v=4",
+ "html_url": "https:\/\/github.com\/ghostn4444",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ghostn4444\/CVE-2025-8088",
+ "description": "This PoC is for authorized study and testing. CVE-2025-8088 is actively exploited, and misuse may violate laws or cause harm. Update to WinRAR 7.13+ to avoid suspicious RARs.",
+ "fork": false,
+ "created_at": "2025-08-21T07:49:53Z",
+ "updated_at": "2025-08-29T06:18:02Z",
+ "pushed_at": "2025-08-29T06:17:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1044633767,
+ "name": "CVE-2025-8088-WinRAR-Startup-PoC",
+ "full_name": "DeepBlue-dot\/CVE-2025-8088-WinRAR-Startup-PoC",
+ "owner": {
+ "login": "DeepBlue-dot",
+ "id": 126600616,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126600616?v=4",
+ "html_url": "https:\/\/github.com\/DeepBlue-dot",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/DeepBlue-dot\/CVE-2025-8088-WinRAR-Startup-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-26T01:43:33Z",
+ "updated_at": "2025-11-02T20:42:27Z",
+ "pushed_at": "2025-08-26T01:56:25Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045090650,
+ "name": "-CVE-2025-8088",
+ "full_name": "pescada-dev\/-CVE-2025-8088",
+ "owner": {
+ "login": "pescada-dev",
+ "id": 228558933,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228558933?v=4",
+ "html_url": "https:\/\/github.com\/pescada-dev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pescada-dev\/-CVE-2025-8088",
+ "description": "POWERSHEL script to check if your device is affected or no",
+ "fork": false,
+ "created_at": "2025-08-26T16:32:43Z",
+ "updated_at": "2025-08-26T17:26:01Z",
+ "pushed_at": "2025-08-26T16:37:36Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1045218653,
+ "name": "CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal",
+ "full_name": "AdityaBhatt3010\/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal",
+ "owner": {
+ "login": "AdityaBhatt3010",
+ "id": 96762636,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96762636?v=4",
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AdityaBhatt3010\/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal",
+ "description": "An engaging walkthrough on uncovering, patching, and securing the WinRAR CVE-2025-8088 with a hands-on hacker’s twist.",
+ "fork": false,
+ "created_at": "2025-08-26T20:37:24Z",
+ "updated_at": "2026-05-04T07:53:27Z",
+ "pushed_at": "2025-08-26T20:54:50Z",
+ "stargazers_count": 12,
+ "watchers_count": 12,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cybersecurity",
+ "exploit",
+ "winrar"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 12,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045423488,
+ "name": "best-CVE-2025-8088",
+ "full_name": "pentestfunctions\/best-CVE-2025-8088",
+ "owner": {
+ "login": "pentestfunctions",
+ "id": 144001335,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144001335?v=4",
+ "html_url": "https:\/\/github.com\/pentestfunctions",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pentestfunctions\/best-CVE-2025-8088",
+ "description": "Winrar CVE exploitation before 7.13 using multiple ADS streams on a single file (Custom PDF implementation)",
+ "fork": false,
+ "created_at": "2025-08-27T06:32:31Z",
+ "updated_at": "2026-03-09T15:58:22Z",
+ "pushed_at": "2025-08-27T07:00:34Z",
+ "stargazers_count": 10,
+ "watchers_count": 10,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 10,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045787095,
+ "name": "WinRAR-Exploit-Tool---Rust-Edition",
+ "full_name": "kitsuneshade\/WinRAR-Exploit-Tool---Rust-Edition",
+ "owner": {
+ "login": "kitsuneshade",
+ "id": 226483175,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226483175?v=4",
+ "html_url": "https:\/\/github.com\/kitsuneshade",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kitsuneshade\/WinRAR-Exploit-Tool---Rust-Edition",
+ "description": "A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance.",
+ "fork": false,
+ "created_at": "2025-08-27T17:56:00Z",
+ "updated_at": "2026-04-15T07:48:43Z",
+ "pushed_at": "2025-08-30T15:35:21Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 3,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 3,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1045814902,
+ "name": "CVE-2025-8088",
+ "full_name": "walidpyh\/CVE-2025-8088",
+ "owner": {
+ "login": "walidpyh",
+ "id": 73798180,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73798180?v=4",
+ "html_url": "https:\/\/github.com\/walidpyh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/walidpyh\/CVE-2025-8088",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-27T18:47:33Z",
+ "updated_at": "2026-04-08T19:04:42Z",
+ "pushed_at": "2025-08-27T18:49:02Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1050472429,
+ "name": "CVE-2025-8088-Winrar-Tool",
+ "full_name": "hexsecteam\/CVE-2025-8088-Winrar-Tool",
+ "owner": {
+ "login": "hexsecteam",
+ "id": 206475088,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206475088?v=4",
+ "html_url": "https:\/\/github.com\/hexsecteam",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hexsecteam\/CVE-2025-8088-Winrar-Tool",
+ "description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.",
+ "fork": false,
+ "created_at": "2025-09-04T13:33:07Z",
+ "updated_at": "2026-05-31T20:12:56Z",
+ "pushed_at": "2025-09-04T13:46:26Z",
+ "stargazers_count": 34,
+ "watchers_count": 34,
+ "has_discussions": false,
+ "forks_count": 13,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 13,
+ "watchers": 34,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1056475002,
"name": "CVE-2025-8088-Exploit",
@@ -73,6 +682,147 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1058526798,
+ "name": "Cve-2025-8088-WinRar-vulnerability",
+ "full_name": "Shinkirou789\/Cve-2025-8088-WinRar-vulnerability",
+ "owner": {
+ "login": "Shinkirou789",
+ "id": 198753648,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/198753648?v=4",
+ "html_url": "https:\/\/github.com\/Shinkirou789",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shinkirou789\/Cve-2025-8088-WinRar-vulnerability",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-09-17T07:56:18Z",
+ "updated_at": "2025-09-18T00:43:49Z",
+ "pushed_at": "2025-09-17T08:59:02Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1059222969,
+ "name": "CVE-2025-8088-EXP",
+ "full_name": "hbesljx\/CVE-2025-8088-EXP",
+ "owner": {
+ "login": "hbesljx",
+ "id": 115783000,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115783000?v=4",
+ "html_url": "https:\/\/github.com\/hbesljx",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/hbesljx\/CVE-2025-8088-EXP",
+ "description": "WinRAR漏洞CVE-2025-8088的payload一键生成工具",
+ "fork": false,
+ "created_at": "2025-09-18T06:53:42Z",
+ "updated_at": "2025-09-18T06:56:34Z",
+ "pushed_at": "2025-09-18T06:56:30Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1063782674,
+ "name": "winrar-exploit",
+ "full_name": "starfallreverie\/winrar-exploit",
+ "owner": {
+ "login": "starfallreverie",
+ "id": 168567851,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168567851?v=4",
+ "html_url": "https:\/\/github.com\/starfallreverie",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/starfallreverie\/winrar-exploit",
+ "description": "CVE-2025-8088 exploit C++ impl",
+ "fork": false,
+ "created_at": "2025-09-25T05:44:47Z",
+ "updated_at": "2026-04-01T23:22:38Z",
+ "pushed_at": "2025-09-25T06:10:55Z",
+ "stargazers_count": 9,
+ "watchers_count": 9,
+ "has_discussions": false,
+ "forks_count": 2,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-8088",
+ "exploit",
+ "poc",
+ "vunerability",
+ "winrar",
+ "zero-day",
+ "zeroday"
+ ],
+ "visibility": "public",
+ "forks": 2,
+ "watchers": 9,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1106656517,
+ "name": "WinRAR-CVE-2025-8088-Exploitation-Toolkit",
+ "full_name": "xi0onamdev\/WinRAR-CVE-2025-8088-Exploitation-Toolkit",
+ "owner": {
+ "login": "xi0onamdev",
+ "id": 239578148,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239578148?v=4",
+ "html_url": "https:\/\/github.com\/xi0onamdev",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xi0onamdev\/WinRAR-CVE-2025-8088-Exploitation-Toolkit",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-11-29T17:20:37Z",
+ "updated_at": "2025-11-29T17:27:34Z",
+ "pushed_at": "2025-11-29T17:27:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1120103683,
"name": "cve-2025-8088",
@@ -88,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
- "updated_at": "2026-06-02T12:06:18Z",
- "pushed_at": "2026-06-02T12:06:14Z",
+ "updated_at": "2026-06-02T15:16:03Z",
+ "pushed_at": "2026-06-02T15:08:17Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json
index 8b431c7f10..4e474cfa18 100644
--- a/2025/CVE-2025-8110.json
+++ b/2025/CVE-2025-8110.json
@@ -1,4 +1,136 @@
[
+ {
+ "id": 1114413489,
+ "name": "CVE-2025-8110",
+ "full_name": "rxerium\/CVE-2025-8110",
+ "owner": {
+ "login": "rxerium",
+ "id": 59293085,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4",
+ "html_url": "https:\/\/github.com\/rxerium",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rxerium\/CVE-2025-8110",
+ "description": "Detection template for CVE-2025-8110",
+ "fork": false,
+ "created_at": "2025-12-11T10:37:58Z",
+ "updated_at": "2026-01-11T09:20:06Z",
+ "pushed_at": "2025-12-11T10:55:25Z",
+ "stargazers_count": 22,
+ "watchers_count": 22,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 22,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1115546899,
+ "name": "gogs-CVE-2025-8110",
+ "full_name": "zAbuQasem\/gogs-CVE-2025-8110",
+ "owner": {
+ "login": "zAbuQasem",
+ "id": 74984708,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74984708?v=4",
+ "html_url": "https:\/\/github.com\/zAbuQasem",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zAbuQasem\/gogs-CVE-2025-8110",
+ "description": "CVE-2025-8110 PoC",
+ "fork": false,
+ "created_at": "2025-12-13T04:15:23Z",
+ "updated_at": "2026-05-31T20:43:15Z",
+ "pushed_at": "2025-12-24T22:17:22Z",
+ "stargazers_count": 26,
+ "watchers_count": 26,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 26,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122029494,
+ "name": "goga-cve-2025-8110",
+ "full_name": "111ddea\/goga-cve-2025-8110",
+ "owner": {
+ "login": "111ddea",
+ "id": 41444127,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41444127?v=4",
+ "html_url": "https:\/\/github.com\/111ddea",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/111ddea\/goga-cve-2025-8110",
+ "description": "验证 Gogs 版本 0.13.2 是否存在 **CVE-2025-8110 (符号链接文件覆盖)** 漏洞。",
+ "fork": false,
+ "created_at": "2025-12-24T01:40:21Z",
+ "updated_at": "2025-12-24T01:44:59Z",
+ "pushed_at": "2025-12-24T01:40:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1122044728,
+ "name": "CVE-2025-8110",
+ "full_name": "tovd-go\/CVE-2025-8110",
+ "owner": {
+ "login": "tovd-go",
+ "id": 54167112,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54167112?v=4",
+ "html_url": "https:\/\/github.com\/tovd-go",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/tovd-go\/CVE-2025-8110",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-24T02:35:16Z",
+ "updated_at": "2025-12-24T02:35:17Z",
+ "pushed_at": "2025-12-24T02:35:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1125841506,
"name": "CVE-2025-8110",
@@ -14,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
- "updated_at": "2026-06-02T12:15:16Z",
- "pushed_at": "2026-06-02T12:15:10Z",
+ "updated_at": "2026-06-02T15:25:02Z",
+ "pushed_at": "2026-06-02T15:18:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-8191.json b/2025/CVE-2025-8191.json
index 10249c7d50..945603dcfa 100644
--- a/2025/CVE-2025-8191.json
+++ b/2025/CVE-2025-8191.json
@@ -31,5 +31,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1027449368,
+ "name": "CVE-2025-8191",
+ "full_name": "byteReaper77\/CVE-2025-8191",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-8191",
+ "description": "A repository containing a PoC exploit for CVE‑2025‑8191 in Swagger UI, leveraging XSS injection to exfiltrate session cookies.",
+ "fork": false,
+ "created_at": "2025-07-28T03:09:02Z",
+ "updated_at": "2026-02-07T05:14:23Z",
+ "pushed_at": "2025-07-28T15:15:09Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1125285238,
+ "name": "CVE-2025-8191",
+ "full_name": "YanC1e\/CVE-2025-8191",
+ "owner": {
+ "login": "YanC1e",
+ "id": 112929516,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112929516?v=4",
+ "html_url": "https:\/\/github.com\/YanC1e",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/YanC1e\/CVE-2025-8191",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-30T13:04:40Z",
+ "updated_at": "2025-12-30T13:20:49Z",
+ "pushed_at": "2025-12-30T13:20:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-8422.json b/2025/CVE-2025-8422.json
new file mode 100644
index 0000000000..b2dba91d9f
--- /dev/null
+++ b/2025/CVE-2025-8422.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1064624595,
+ "name": "CVE-2025-8422",
+ "full_name": "RandomRobbieBF\/CVE-2025-8422",
+ "owner": {
+ "login": "RandomRobbieBF",
+ "id": 51722811,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
+ "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2025-8422",
+ "description": "Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read",
+ "fork": false,
+ "created_at": "2025-09-26T10:04:32Z",
+ "updated_at": "2026-02-24T12:58:45Z",
+ "pushed_at": "2025-09-26T10:05:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8471.json b/2025/CVE-2025-8471.json
new file mode 100644
index 0000000000..fae3ae573b
--- /dev/null
+++ b/2025/CVE-2025-8471.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1031419925,
+ "name": "CVE-2025-8471",
+ "full_name": "byteReaper77\/CVE-2025-8471",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-8471",
+ "description": "Exploit SQL injection in projectworlds Online Admissions System v1.0",
+ "fork": false,
+ "created_at": "2025-08-03T17:43:53Z",
+ "updated_at": "2026-02-07T05:12:30Z",
+ "pushed_at": "2025-08-03T17:56:19Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8517.json b/2025/CVE-2025-8517.json
new file mode 100644
index 0000000000..f7f2c2c828
--- /dev/null
+++ b/2025/CVE-2025-8517.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1026517643,
+ "name": "Session-Fixation-in-Vvveb-CMS-v1.0.6.1",
+ "full_name": "helloandrewpaul\/Session-Fixation-in-Vvveb-CMS-v1.0.6.1",
+ "owner": {
+ "login": "helloandrewpaul",
+ "id": 80865709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80865709?v=4",
+ "html_url": "https:\/\/github.com\/helloandrewpaul",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/helloandrewpaul\/Session-Fixation-in-Vvveb-CMS-v1.0.6.1",
+ "description": "CVE-2025-8517: Session Fixation in Vvveb CMS v1.0.6.1",
+ "fork": false,
+ "created_at": "2025-07-26T03:54:07Z",
+ "updated_at": "2025-08-04T19:37:21Z",
+ "pushed_at": "2025-08-04T19:37:17Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8518.json b/2025/CVE-2025-8518.json
new file mode 100644
index 0000000000..db618ea140
--- /dev/null
+++ b/2025/CVE-2025-8518.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1066563581,
+ "name": "Vvveb-CMS-CVE-2025-8518",
+ "full_name": "maestro-ant\/Vvveb-CMS-CVE-2025-8518",
+ "owner": {
+ "login": "maestro-ant",
+ "id": 127076065,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127076065?v=4",
+ "html_url": "https:\/\/github.com\/maestro-ant",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/maestro-ant\/Vvveb-CMS-CVE-2025-8518",
+ "description": "This repository contains a Proof of Concept (PoC) demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution (RCE).",
+ "fork": false,
+ "created_at": "2025-09-29T16:51:44Z",
+ "updated_at": "2025-09-29T17:17:23Z",
+ "pushed_at": "2025-09-29T17:17:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8550.json b/2025/CVE-2025-8550.json
new file mode 100644
index 0000000000..9b995b5392
--- /dev/null
+++ b/2025/CVE-2025-8550.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1032760081,
+ "name": "CVE-2025-8550",
+ "full_name": "byteReaper77\/CVE-2025-8550",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-8550",
+ "description": " XSS exploit for CVE-2025-8550 in atjiu pybbs ≤6.0.0 ",
+ "fork": false,
+ "created_at": "2025-08-05T19:31:11Z",
+ "updated_at": "2026-02-07T04:55:53Z",
+ "pushed_at": "2025-09-22T16:26:55Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8570.json b/2025/CVE-2025-8570.json
new file mode 100644
index 0000000000..0566c6adc5
--- /dev/null
+++ b/2025/CVE-2025-8570.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1054861268,
+ "name": "CVE-2025-8570",
+ "full_name": "Nxploited\/CVE-2025-8570",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-8570",
+ "description": "BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation",
+ "fork": false,
+ "created_at": "2025-09-11T12:36:23Z",
+ "updated_at": "2026-03-13T08:56:52Z",
+ "pushed_at": "2025-09-11T12:41:54Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1055627565,
+ "name": "CVE-2025-8570",
+ "full_name": "chimdi2700\/CVE-2025-8570",
+ "owner": {
+ "login": "chimdi2700",
+ "id": 161825676,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161825676?v=4",
+ "html_url": "https:\/\/github.com\/chimdi2700",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chimdi2700\/CVE-2025-8570",
+ "description": "BeyondCart Connector <= 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation 🚨 BeyondCart Connector <= 2.1.0 - JWT Privilege Escalation (CVE-2025-8570)",
+ "fork": false,
+ "created_at": "2025-09-12T14:48:18Z",
+ "updated_at": "2025-09-12T14:48:19Z",
+ "pushed_at": "2025-09-12T14:48:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8571.json b/2025/CVE-2025-8571.json
new file mode 100644
index 0000000000..152a1f76d2
--- /dev/null
+++ b/2025/CVE-2025-8571.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1055631213,
+ "name": "CVE-2025-8571",
+ "full_name": "chimdi2700\/CVE-2025-8571",
+ "owner": {
+ "login": "chimdi2700",
+ "id": 161825676,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161825676?v=4",
+ "html_url": "https:\/\/github.com\/chimdi2700",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/chimdi2700\/CVE-2025-8571",
+ "description": "CVE-2025-8571",
+ "fork": false,
+ "created_at": "2025-09-12T14:54:26Z",
+ "updated_at": "2025-09-12T14:59:36Z",
+ "pushed_at": "2025-09-12T14:59:33Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8671.json b/2025/CVE-2025-8671.json
index 885f0c9abc..5db8e8adc5 100644
--- a/2025/CVE-2025-8671.json
+++ b/2025/CVE-2025-8671.json
@@ -36,6 +36,72 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1042337100,
+ "name": "PoC-CVE-2025-8671-MadeYouReset-HTTP-2",
+ "full_name": "mateusm1403\/PoC-CVE-2025-8671-MadeYouReset-HTTP-2",
+ "owner": {
+ "login": "mateusm1403",
+ "id": 110349909,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110349909?v=4",
+ "html_url": "https:\/\/github.com\/mateusm1403",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/mateusm1403\/PoC-CVE-2025-8671-MadeYouReset-HTTP-2",
+ "description": "PoC para validar vulnerabilidade MadeYouReset",
+ "fork": false,
+ "created_at": "2025-08-21T21:20:18Z",
+ "updated_at": "2025-09-10T07:37:49Z",
+ "pushed_at": "2025-08-21T21:29:58Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1043399904,
+ "name": "CVE-2025-8671",
+ "full_name": "abiyeenzo\/CVE-2025-8671",
+ "owner": {
+ "login": "abiyeenzo",
+ "id": 93532759,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93532759?v=4",
+ "html_url": "https:\/\/github.com\/abiyeenzo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/abiyeenzo\/CVE-2025-8671",
+ "description": "PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP\/2 sur lighttpd). À utiliser uniquement en laboratoire local.",
+ "fork": false,
+ "created_at": "2025-08-23T19:14:08Z",
+ "updated_at": "2025-08-23T19:16:58Z",
+ "pushed_at": "2025-08-23T19:16:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1153512542,
"name": "CVE-2025-8671-vulnerability-POC-",
diff --git a/2025/CVE-2025-8714.json b/2025/CVE-2025-8714.json
new file mode 100644
index 0000000000..679ad31c1d
--- /dev/null
+++ b/2025/CVE-2025-8714.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1047938319,
+ "name": "CVE-2025-8714-POC",
+ "full_name": "orderby99\/CVE-2025-8714-POC",
+ "owner": {
+ "login": "orderby99",
+ "id": 119437613,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119437613?v=4",
+ "html_url": "https:\/\/github.com\/orderby99",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/orderby99\/CVE-2025-8714-POC",
+ "description": "PoC de RCE en PostgreSQL — CVE-2025-8714",
+ "fork": false,
+ "created_at": "2025-08-31T15:11:47Z",
+ "updated_at": "2025-11-03T19:09:26Z",
+ "pushed_at": "2025-08-31T15:24:50Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8723.json b/2025/CVE-2025-8723.json
new file mode 100644
index 0000000000..2c7d5459cc
--- /dev/null
+++ b/2025/CVE-2025-8723.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1040711576,
+ "name": "CVE-2025-8723",
+ "full_name": "Nxploited\/CVE-2025-8723",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-8723",
+ "description": "Cloudflare Image Resizing <= 1.5.6 | Unauthenticated Remote Code Execution",
+ "fork": false,
+ "created_at": "2025-08-19T11:50:01Z",
+ "updated_at": "2026-03-13T08:56:55Z",
+ "pushed_at": "2025-08-19T12:16:33Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8730.json b/2025/CVE-2025-8730.json
new file mode 100644
index 0000000000..5847b745b7
--- /dev/null
+++ b/2025/CVE-2025-8730.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1034711711,
+ "name": "CVE-2025-8730",
+ "full_name": "byteReaper77\/CVE-2025-8730",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-8730",
+ "description": "Exploit demonstrating an authentication bypass vulnerability in the web interface of Belkin F9K1009 and F9K1010 routers.",
+ "fork": false,
+ "created_at": "2025-08-08T21:12:35Z",
+ "updated_at": "2026-02-07T05:11:26Z",
+ "pushed_at": "2025-08-08T21:36:23Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8889.json b/2025/CVE-2025-8889.json
new file mode 100644
index 0000000000..b77d04b08f
--- /dev/null
+++ b/2025/CVE-2025-8889.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041555828,
+ "name": "CVE-2025-8889",
+ "full_name": "siberkampus\/CVE-2025-8889",
+ "owner": {
+ "login": "siberkampus",
+ "id": 84104008,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84104008?v=4",
+ "html_url": "https:\/\/github.com\/siberkampus",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/siberkampus\/CVE-2025-8889",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-20T16:57:18Z",
+ "updated_at": "2025-08-20T17:12:02Z",
+ "pushed_at": "2025-08-20T17:11:59Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8924.json b/2025/CVE-2025-8924.json
new file mode 100644
index 0000000000..314d89bc33
--- /dev/null
+++ b/2025/CVE-2025-8924.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1111961511,
+ "name": "CVE-2025-8924",
+ "full_name": "encrypter15\/CVE-2025-8924",
+ "owner": {
+ "login": "encrypter15",
+ "id": 131310758,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131310758?v=4",
+ "html_url": "https:\/\/github.com\/encrypter15",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/encrypter15\/CVE-2025-8924",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-08T00:16:08Z",
+ "updated_at": "2025-12-08T00:16:16Z",
+ "pushed_at": "2025-12-08T00:16:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-8971.json b/2025/CVE-2025-8971.json
new file mode 100644
index 0000000000..9c72a6f0d7
--- /dev/null
+++ b/2025/CVE-2025-8971.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1038629462,
+ "name": "CVE-2025-8971",
+ "full_name": "byteReaper77\/CVE-2025-8971",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-8971",
+ "description": "Sql injection in itsourcecode Online Tour and Travel Management System 1.0.",
+ "fork": false,
+ "created_at": "2025-08-15T14:51:51Z",
+ "updated_at": "2026-02-07T05:11:09Z",
+ "pushed_at": "2025-08-15T15:25:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json
index 5e5dca573e..3fe5d24720 100644
--- a/2025/CVE-2025-9074.json
+++ b/2025/CVE-2025-9074.json
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
- "updated_at": "2026-06-02T12:16:54Z",
- "pushed_at": "2026-06-02T12:16:50Z",
+ "updated_at": "2026-06-02T15:27:09Z",
+ "pushed_at": "2026-06-02T15:19:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -46,6 +46,109 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1043162465,
+ "name": "cve-2025-9074-poc",
+ "full_name": "XRayZen\/cve-2025-9074-poc",
+ "owner": {
+ "login": "XRayZen",
+ "id": 31905238,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31905238?v=4",
+ "html_url": "https:\/\/github.com\/XRayZen",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/XRayZen\/cve-2025-9074-poc",
+ "description": "２０２５年８月２０日に公開されたDockerDesktopの脆弱性(対策済み)を実証する",
+ "fork": false,
+ "created_at": "2025-08-23T09:14:24Z",
+ "updated_at": "2026-03-25T04:40:46Z",
+ "pushed_at": "2025-08-23T09:53:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": false,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "dockerdesktop",
+ "exploit",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1044105387,
+ "name": "CVE-2025-9074",
+ "full_name": "zenzue\/CVE-2025-9074",
+ "owner": {
+ "login": "zenzue",
+ "id": 19271340,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19271340?v=4",
+ "html_url": "https:\/\/github.com\/zenzue",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zenzue\/CVE-2025-9074",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-08-25T07:36:35Z",
+ "updated_at": "2026-01-12T08:33:50Z",
+ "pushed_at": "2025-08-25T07:47:29Z",
+ "stargazers_count": 11,
+ "watchers_count": 11,
+ "has_discussions": false,
+ "forks_count": 4,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 4,
+ "watchers": 11,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1049963972,
+ "name": "CVE-2025-9074",
+ "full_name": "j3r1ch0123\/CVE-2025-9074",
+ "owner": {
+ "login": "j3r1ch0123",
+ "id": 110147529,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110147529?v=4",
+ "html_url": "https:\/\/github.com\/j3r1ch0123",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/j3r1ch0123\/CVE-2025-9074",
+ "description": "New vulnerability found in Docker. Credit for finding the vulnerability goes to Felix Boulet",
+ "fork": false,
+ "created_at": "2025-09-03T18:46:52Z",
+ "updated_at": "2025-12-17T21:05:04Z",
+ "pushed_at": "2025-09-03T18:54:41Z",
+ "stargazers_count": 8,
+ "watchers_count": 8,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 8,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1060505002,
"name": "CVE-2025-9074",
@@ -79,6 +182,297 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1111403249,
+ "name": "CVE-2025-9074-PoC",
+ "full_name": "BridgerAlderson\/CVE-2025-9074-PoC",
+ "owner": {
+ "login": "BridgerAlderson",
+ "id": 139403792,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139403792?v=4",
+ "html_url": "https:\/\/github.com\/BridgerAlderson",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/BridgerAlderson\/CVE-2025-9074-PoC",
+ "description": "A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.",
+ "fork": false,
+ "created_at": "2025-12-06T21:38:19Z",
+ "updated_at": "2026-04-15T09:43:34Z",
+ "pushed_at": "2025-12-07T12:16:59Z",
+ "stargazers_count": 48,
+ "watchers_count": 48,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 48,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1111658273,
+ "name": "poc-2025-9074",
+ "full_name": "xwpdx0\/poc-2025-9074",
+ "owner": {
+ "login": "xwpdx0",
+ "id": 162915223,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162915223?v=4",
+ "html_url": "https:\/\/github.com\/xwpdx0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xwpdx0\/poc-2025-9074",
+ "description": "Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell.",
+ "fork": false,
+ "created_at": "2025-12-07T11:49:52Z",
+ "updated_at": "2026-01-10T14:57:03Z",
+ "pushed_at": "2025-12-09T22:49:48Z",
+ "stargazers_count": 4,
+ "watchers_count": 4,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "api",
+ "cve-2025-9074",
+ "docker",
+ "docker-api",
+ "poc"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 4,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113003164,
+ "name": "CVE-2025-9074-Docker-Desktop-Container-Escape",
+ "full_name": "PtechAmanja\/CVE-2025-9074-Docker-Desktop-Container-Escape",
+ "owner": {
+ "login": "PtechAmanja",
+ "id": 91968404,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91968404?v=4",
+ "html_url": "https:\/\/github.com\/PtechAmanja",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/PtechAmanja\/CVE-2025-9074-Docker-Desktop-Container-Escape",
+ "description": " Proof of concept exploit for CVE-2025-9074 - Unauthenticated Docker Engine API container escape affecting Docker Desktop < 4.44.3 on Windows and macOS (CVSS 9.3)",
+ "fork": false,
+ "created_at": "2025-12-09T11:46:54Z",
+ "updated_at": "2026-05-12T14:36:53Z",
+ "pushed_at": "2025-12-09T12:34:39Z",
+ "stargazers_count": 2,
+ "watchers_count": 2,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-9074",
+ "docker"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 2,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1113530269,
+ "name": "CVE-2025-9074-PoC-Bash",
+ "full_name": "pppxo\/CVE-2025-9074-PoC-Bash",
+ "owner": {
+ "login": "pppxo",
+ "id": 50279784,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50279784?v=4",
+ "html_url": "https:\/\/github.com\/pppxo",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/pppxo\/CVE-2025-9074-PoC-Bash",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-10T05:25:54Z",
+ "updated_at": "2025-12-11T06:30:15Z",
+ "pushed_at": "2025-12-10T05:56:31Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1113970676,
+ "name": "CVE-2025-9074-POC",
+ "full_name": "3rendil\/CVE-2025-9074-POC",
+ "owner": {
+ "login": "3rendil",
+ "id": 146058402,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146058402?v=4",
+ "html_url": "https:\/\/github.com\/3rendil",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/3rendil\/CVE-2025-9074-POC",
+ "description": "Proof-of-Concept exploit for CVE-2025-9074",
+ "fork": false,
+ "created_at": "2025-12-10T18:06:02Z",
+ "updated_at": "2025-12-10T18:20:43Z",
+ "pushed_at": "2025-12-10T18:11:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1116432087,
+ "name": "CVE-2025-9074_DAEMON_KILLER",
+ "full_name": "fsoc-ghost-0x\/CVE-2025-9074_DAEMON_KILLER",
+ "owner": {
+ "login": "fsoc-ghost-0x",
+ "id": 171997927,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171997927?v=4",
+ "html_url": "https:\/\/github.com\/fsoc-ghost-0x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/fsoc-ghost-0x\/CVE-2025-9074_DAEMON_KILLER",
+ "description": "The Ultimate DAEMON_KILLER. Control is an illusion. This Exploit forces CVE-2025-9074 to break the Docker cage. Advanced Container Escape & Root Escalation toolkit. Verify the vulnerability, take the host, destroy the logs. > We Are Fsociety_",
+ "fork": false,
+ "created_at": "2025-12-14T21:01:03Z",
+ "updated_at": "2026-05-14T20:35:50Z",
+ "pushed_at": "2025-12-15T02:59:52Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "bash",
+ "c0deghost",
+ "container-escape",
+ "cve-2025-9074",
+ "docker",
+ "docker-escape",
+ "exploit",
+ "exploit-development",
+ "fsociety",
+ "linux-hacking",
+ "malware-development",
+ "offensive-security",
+ "privilege-escalation",
+ "red-team",
+ "root",
+ "root-privileges",
+ "windows"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ },
+ {
+ "id": 1121106428,
+ "name": "CVE-2025-9074-Poc",
+ "full_name": "zaydbf\/CVE-2025-9074-Poc",
+ "owner": {
+ "login": "zaydbf",
+ "id": 87782959,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87782959?v=4",
+ "html_url": "https:\/\/github.com\/zaydbf",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zaydbf\/CVE-2025-9074-Poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-22T12:54:46Z",
+ "updated_at": "2025-12-22T12:56:21Z",
+ "pushed_at": "2025-12-22T12:56:18Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1123157801,
+ "name": "CVE-2025-9074-Docker-Exploit",
+ "full_name": "Shaoshi17\/CVE-2025-9074-Docker-Exploit",
+ "owner": {
+ "login": "Shaoshi17",
+ "id": 137501927,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137501927?v=4",
+ "html_url": "https:\/\/github.com\/Shaoshi17",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Shaoshi17\/CVE-2025-9074-Docker-Exploit",
+ "description": "一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。",
+ "fork": false,
+ "created_at": "2025-12-26T09:45:22Z",
+ "updated_at": "2026-04-07T08:49:26Z",
+ "pushed_at": "2025-12-26T09:55:14Z",
+ "stargazers_count": 12,
+ "watchers_count": 12,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 12,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1127085375,
"name": "kvzinncpx7.github.io",
diff --git a/2025/CVE-2025-9090.json b/2025/CVE-2025-9090.json
new file mode 100644
index 0000000000..5d06d992fa
--- /dev/null
+++ b/2025/CVE-2025-9090.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1039690575,
+ "name": "CVE-2025-9090",
+ "full_name": "byteReaper77\/CVE-2025-9090",
+ "owner": {
+ "login": "byteReaper77",
+ "id": 204947170,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4",
+ "html_url": "https:\/\/github.com\/byteReaper77",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2025-9090",
+ "description": "Command Injection in Tenda AC20 16.03.08.12 (\/goform\/telnet)",
+ "fork": false,
+ "created_at": "2025-08-17T19:22:18Z",
+ "updated_at": "2026-02-07T05:10:01Z",
+ "pushed_at": "2025-08-17T19:49:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9209.json b/2025/CVE-2025-9209.json
new file mode 100644
index 0000000000..f3c4241ba6
--- /dev/null
+++ b/2025/CVE-2025-9209.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1090556007,
+ "name": "CVE-2025-9209",
+ "full_name": "Nxploited\/CVE-2025-9209",
+ "owner": {
+ "login": "Nxploited",
+ "id": 188819918,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
+ "html_url": "https:\/\/github.com\/Nxploited",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Nxploited\/CVE-2025-9209",
+ "description": "RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT",
+ "fork": false,
+ "created_at": "2025-11-05T20:31:42Z",
+ "updated_at": "2026-03-13T08:56:37Z",
+ "pushed_at": "2025-11-05T20:53:42Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9215.json b/2025/CVE-2025-9215.json
new file mode 100644
index 0000000000..265039fbd7
--- /dev/null
+++ b/2025/CVE-2025-9215.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041011601,
+ "name": "CVE-2025-9215",
+ "full_name": "d0n601\/CVE-2025-9215",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-9215",
+ "description": "StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.4.0 - Authenticated (Subscriber+) Arbitrary File Download",
+ "fork": false,
+ "created_at": "2025-08-19T21:04:30Z",
+ "updated_at": "2025-09-16T18:51:24Z",
+ "pushed_at": "2025-08-19T21:14:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9216.json b/2025/CVE-2025-9216.json
new file mode 100644
index 0000000000..7cdf35e75f
--- /dev/null
+++ b/2025/CVE-2025-9216.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1041012094,
+ "name": "CVE-2025-9216",
+ "full_name": "d0n601\/CVE-2025-9216",
+ "owner": {
+ "login": "d0n601",
+ "id": 8961705,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4",
+ "html_url": "https:\/\/github.com\/d0n601",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/d0n601\/CVE-2025-9216",
+ "description": "StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.4.0 - Authenticated (Subscriber+) Arbitrary File Upload",
+ "fork": false,
+ "created_at": "2025-08-19T21:05:42Z",
+ "updated_at": "2025-09-16T18:50:52Z",
+ "pushed_at": "2025-08-19T21:12:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9223.json b/2025/CVE-2025-9223.json
new file mode 100644
index 0000000000..42d48060ac
--- /dev/null
+++ b/2025/CVE-2025-9223.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1094344039,
+ "name": "CVE-2025-9223",
+ "full_name": "networkkiller\/CVE-2025-9223",
+ "owner": {
+ "login": "networkkiller",
+ "id": 71563446,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71563446?v=4",
+ "html_url": "https:\/\/github.com\/networkkiller",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/networkkiller\/CVE-2025-9223",
+ "description": "POC CVE-2025-9223",
+ "fork": false,
+ "created_at": "2025-11-11T15:30:59Z",
+ "updated_at": "2026-01-15T19:15:34Z",
+ "pushed_at": "2025-11-11T15:45:27Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 1
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9267.json b/2025/CVE-2025-9267.json
new file mode 100644
index 0000000000..96947488d3
--- /dev/null
+++ b/2025/CVE-2025-9267.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1066111290,
+ "name": "CVE-2025-9267",
+ "full_name": "Tiger3080\/CVE-2025-9267",
+ "owner": {
+ "login": "Tiger3080",
+ "id": 116190378,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116190378?v=4",
+ "html_url": "https:\/\/github.com\/Tiger3080",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Tiger3080\/CVE-2025-9267",
+ "description": "Seagate Toolkit for Windows (Installer <2.35.0.6) is vulnerable to insecure DLL loading. The installer loads DLLs from the working directory without validation, allowing attackers to place a malicious DLL alongside the installer and execute arbitrary code.",
+ "fork": false,
+ "created_at": "2025-09-29T03:22:07Z",
+ "updated_at": "2025-09-30T02:21:10Z",
+ "pushed_at": "2025-09-29T03:56:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9316.json b/2025/CVE-2025-9316.json
index 41291da9dc..f32243635a 100644
--- a/2025/CVE-2025-9316.json
+++ b/2025/CVE-2025-9316.json
@@ -1,4 +1,37 @@
[
+ {
+ "id": 1096624807,
+ "name": "n-able_n-central_xxe_file_read",
+ "full_name": "horizon3ai\/n-able_n-central_xxe_file_read",
+ "owner": {
+ "login": "horizon3ai",
+ "id": 79593994,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4",
+ "html_url": "https:\/\/github.com\/horizon3ai",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/horizon3ai\/n-able_n-central_xxe_file_read",
+ "description": "Proof of concept exploit for N-able N-central to chain CVE-2025-9316 and CVE-2025-11700 to read files",
+ "fork": false,
+ "created_at": "2025-11-14T17:43:55Z",
+ "updated_at": "2026-05-03T08:12:46Z",
+ "pushed_at": "2025-11-14T17:55:49Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 3,
+ "score": 0,
+ "subscribers_count": 1
+ },
{
"id": 1144953984,
"name": "CVE-2025-9316_CVE-2025-11700",
diff --git a/2025/CVE-2025-9345.json b/2025/CVE-2025-9345.json
new file mode 100644
index 0000000000..221b9c4a8b
--- /dev/null
+++ b/2025/CVE-2025-9345.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1035348310,
+ "name": "CVE-2025-9345",
+ "full_name": "NagisaYumaa\/CVE-2025-9345",
+ "owner": {
+ "login": "NagisaYumaa",
+ "id": 64585475,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64585475?v=4",
+ "html_url": "https:\/\/github.com\/NagisaYumaa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/NagisaYumaa\/CVE-2025-9345",
+ "description": "CVE-2025-9345",
+ "fork": false,
+ "created_at": "2025-08-10T07:44:27Z",
+ "updated_at": "2025-08-28T09:54:10Z",
+ "pushed_at": "2025-08-22T07:32:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9435.json b/2025/CVE-2025-9435.json
new file mode 100644
index 0000000000..570f8b40ed
--- /dev/null
+++ b/2025/CVE-2025-9435.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1106534535,
+ "name": "CVE-2025-9435",
+ "full_name": "passtheticket\/CVE-2025-9435",
+ "owner": {
+ "login": "passtheticket",
+ "id": 76125965,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76125965?v=4",
+ "html_url": "https:\/\/github.com\/passtheticket",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/passtheticket\/CVE-2025-9435",
+ "description": "ADManager Plus Build < 7230 Elevation of Privilege",
+ "fork": false,
+ "created_at": "2025-11-29T12:52:50Z",
+ "updated_at": "2025-12-25T21:07:32Z",
+ "pushed_at": "2025-12-25T21:07:29Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9478.json b/2025/CVE-2025-9478.json
new file mode 100644
index 0000000000..e296e6ef96
--- /dev/null
+++ b/2025/CVE-2025-9478.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1048058883,
+ "name": "STIG-Edge-RCE-CVE2025-9478",
+ "full_name": "Kamgreen50\/STIG-Edge-RCE-CVE2025-9478",
+ "owner": {
+ "login": "Kamgreen50",
+ "id": 148400787,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148400787?v=4",
+ "html_url": "https:\/\/github.com\/Kamgreen50",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Kamgreen50\/STIG-Edge-RCE-CVE2025-9478",
+ "description": "Remediation of Microsoft Edge (Chromium) Remote Code Execution vulnerability (CVE-2025-9478, Plugin ID: 258091). Documentation includes before\/after evidence, remediation steps, and Tenable validation.",
+ "fork": false,
+ "created_at": "2025-08-31T20:29:10Z",
+ "updated_at": "2025-08-31T20:30:49Z",
+ "pushed_at": "2025-08-31T20:30:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9491.json b/2025/CVE-2025-9491.json
new file mode 100644
index 0000000000..efcae6f38a
--- /dev/null
+++ b/2025/CVE-2025-9491.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1091808812,
+ "name": "CVE-2025-9491_POC",
+ "full_name": "Amperclock\/CVE-2025-9491_POC",
+ "owner": {
+ "login": "Amperclock",
+ "id": 33828439,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33828439?v=4",
+ "html_url": "https:\/\/github.com\/Amperclock",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Amperclock\/CVE-2025-9491_POC",
+ "description": "Proof-of-Concept of the CVE-2025-9491 using invisible characters in the arguments of a Windows shortcut file (.lnk)",
+ "fork": false,
+ "created_at": "2025-11-07T14:52:05Z",
+ "updated_at": "2026-04-23T20:07:30Z",
+ "pushed_at": "2025-11-07T15:02:30Z",
+ "stargazers_count": 19,
+ "watchers_count": 19,
+ "has_discussions": false,
+ "forks_count": 5,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 5,
+ "watchers": 19,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9728.json b/2025/CVE-2025-9728.json
new file mode 100644
index 0000000000..59ad8d8f4f
--- /dev/null
+++ b/2025/CVE-2025-9728.json
@@ -0,0 +1,39 @@
+[
+ {
+ "id": 1042441688,
+ "name": "Reflected-XSS-in-Vvveb-CMS-v1.0.7.2",
+ "full_name": "helloandrewpaul\/Reflected-XSS-in-Vvveb-CMS-v1.0.7.2",
+ "owner": {
+ "login": "helloandrewpaul",
+ "id": 80865709,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80865709?v=4",
+ "html_url": "https:\/\/github.com\/helloandrewpaul",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/helloandrewpaul\/Reflected-XSS-in-Vvveb-CMS-v1.0.7.2",
+ "description": "CVE-2025-9728: Reflected XSS in Login Form (Email & Password Fields) Vvveb CMS v1.0.7.2",
+ "fork": false,
+ "created_at": "2025-08-22T03:01:44Z",
+ "updated_at": "2025-08-31T03:13:47Z",
+ "pushed_at": "2025-08-31T03:13:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cross-site-scripting",
+ "cve-2025-9728",
+ "xss"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9816.json b/2025/CVE-2025-9816.json
new file mode 100644
index 0000000000..1385fe4174
--- /dev/null
+++ b/2025/CVE-2025-9816.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1095539438,
+ "name": "CVE-2025-9816",
+ "full_name": "monzaviman\/CVE-2025-9816",
+ "owner": {
+ "login": "monzaviman",
+ "id": 109132157,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109132157?v=4",
+ "html_url": "https:\/\/github.com\/monzaviman",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/monzaviman\/CVE-2025-9816",
+ "description": "Proof of Concept for Stored-XSS on Vulnerable WP-Statistics Plugin known as CVE-2025-9816",
+ "fork": false,
+ "created_at": "2025-11-13T07:27:07Z",
+ "updated_at": "2025-11-13T08:01:49Z",
+ "pushed_at": "2025-11-13T08:01:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-9961.json b/2025/CVE-2025-9961.json
new file mode 100644
index 0000000000..b9d1738e63
--- /dev/null
+++ b/2025/CVE-2025-9961.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1124798708,
+ "name": "CVE-2025-9961",
+ "full_name": "yt2w\/CVE-2025-9961",
+ "owner": {
+ "login": "yt2w",
+ "id": 240546344,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/240546344?v=4",
+ "html_url": "https:\/\/github.com\/yt2w",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yt2w\/CVE-2025-9961",
+ "description": null,
+ "fork": false,
+ "created_at": "2025-12-29T16:26:16Z",
+ "updated_at": "2026-05-28T13:23:56Z",
+ "pushed_at": "2025-12-29T16:27:04Z",
+ "stargazers_count": 5,
+ "watchers_count": 5,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 5,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json
index 079b253786..3b1329764f 100644
--- a/2026/CVE-2026-0073.json
+++ b/2026/CVE-2026-0073.json
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-05T21:53:08Z",
- "updated_at": "2026-05-31T14:03:17Z",
+ "updated_at": "2026-06-02T14:43:55Z",
"pushed_at": "2026-05-05T22:11:24Z",
- "stargazers_count": 72,
- "watchers_count": 72,
+ "stargazers_count": 73,
+ "watchers_count": 73,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
- "watchers": 72,
+ "watchers": 73,
"score": 0,
"subscribers_count": 1
},
diff --git a/2026/CVE-2026-0300.json b/2026/CVE-2026-0300.json
index 4468e1934b..309f4dda5b 100644
--- a/2026/CVE-2026-0300.json
+++ b/2026/CVE-2026-0300.json
@@ -224,10 +224,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-06T23:56:52Z",
- "updated_at": "2026-06-02T05:30:40Z",
+ "updated_at": "2026-06-02T16:05:41Z",
"pushed_at": "2026-05-07T12:41:25Z",
- "stargazers_count": 17,
- "watchers_count": 17,
+ "stargazers_count": 18,
+ "watchers_count": 18,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -238,7 +238,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
- "watchers": 17,
+ "watchers": 18,
"score": 0,
"subscribers_count": 1
},
diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json
index 2aa53c708d..d1eb772440 100644
--- a/2026/CVE-2026-0828.json
+++ b/2026/CVE-2026-0828.json
@@ -14,10 +14,10 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-06-02T08:48:27Z",
- "pushed_at": "2026-06-02T08:48:23Z",
- "stargazers_count": 2,
- "watchers_count": 2,
+ "updated_at": "2026-06-02T16:06:00Z",
+ "pushed_at": "2026-06-02T15:57:28Z",
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 2,
+ "watchers": 3,
"score": 0,
"subscribers_count": 1
},
diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json
index 01cf2a5752..47c1799f0e 100644
--- a/2026/CVE-2026-20841.json
+++ b/2026/CVE-2026-20841.json
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
- "updated_at": "2026-06-02T08:47:53Z",
- "pushed_at": "2026-06-02T08:47:49Z",
+ "updated_at": "2026-06-02T15:58:25Z",
+ "pushed_at": "2026-06-02T15:56:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
- "updated_at": "2026-06-02T08:46:55Z",
- "pushed_at": "2026-06-02T08:46:51Z",
+ "updated_at": "2026-06-02T15:58:05Z",
+ "pushed_at": "2026-06-02T15:55:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-23631.json b/2026/CVE-2026-23631.json
new file mode 100644
index 0000000000..0dcf3bafe4
--- /dev/null
+++ b/2026/CVE-2026-23631.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1231938449,
+ "name": "DarkReplica",
+ "full_name": "yoyosh\/DarkReplica",
+ "owner": {
+ "login": "yoyosh",
+ "id": 17078876,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17078876?v=4",
+ "html_url": "https:\/\/github.com\/yoyosh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/yoyosh\/DarkReplica",
+ "description": "CVE-2026-23631 (DarkReplica) Redis Exploit",
+ "fork": false,
+ "created_at": "2026-05-07T12:36:35Z",
+ "updated_at": "2026-06-02T15:42:53Z",
+ "pushed_at": "2026-06-02T13:59:53Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-23744.json b/2026/CVE-2026-23744.json
index 0147b1b83a..3bf39f7525 100644
--- a/2026/CVE-2026-23744.json
+++ b/2026/CVE-2026-23744.json
@@ -305,5 +305,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1257420096,
+ "name": "CVE-2026-23744",
+ "full_name": "TYehan\/CVE-2026-23744",
+ "owner": {
+ "login": "TYehan",
+ "id": 85949077,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4",
+ "html_url": "https:\/\/github.com\/TYehan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TYehan\/CVE-2026-23744",
+ "description": "Proof of Concept exploit for CVE-2026-23744: Remote Code Execution vulnerability in MCPJam Inspector <= 1.4.2",
+ "fork": false,
+ "created_at": "2026-06-02T16:57:56Z",
+ "updated_at": "2026-06-02T16:59:00Z",
+ "pushed_at": "2026-06-02T16:58:05Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json
index 57765a3321..909343868a 100644
--- a/2026/CVE-2026-2406.json
+++ b/2026/CVE-2026-2406.json
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
- "updated_at": "2026-06-02T12:44:55Z",
- "pushed_at": "2026-06-02T12:44:48Z",
+ "updated_at": "2026-06-02T15:47:28Z",
+ "pushed_at": "2026-06-02T15:46:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json
index 118908de3a..841b00fe31 100644
--- a/2026/CVE-2026-24061.json
+++ b/2026/CVE-2026-24061.json
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
- "updated_at": "2026-06-02T12:41:30Z",
- "pushed_at": "2026-06-02T12:41:26Z",
+ "updated_at": "2026-06-02T15:45:50Z",
+ "pushed_at": "2026-06-02T15:43:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json
index 23394de822..da319ab08b 100644
--- a/2026/CVE-2026-24291.json
+++ b/2026/CVE-2026-24291.json
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
- "updated_at": "2026-06-02T09:08:12Z",
- "pushed_at": "2026-06-02T09:07:35Z",
+ "updated_at": "2026-06-02T16:18:13Z",
+ "pushed_at": "2026-06-02T16:17:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json
index a3bbd1059b..73f4766a9d 100644
--- a/2026/CVE-2026-2441.json
+++ b/2026/CVE-2026-2441.json
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
- "updated_at": "2026-06-02T08:50:55Z",
- "pushed_at": "2026-06-02T08:50:50Z",
+ "updated_at": "2026-06-02T16:01:26Z",
+ "pushed_at": "2026-06-02T15:59:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json
index 348ac8fdad..17b1a8ca00 100644
--- a/2026/CVE-2026-2472.json
+++ b/2026/CVE-2026-2472.json
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
- "updated_at": "2026-06-02T08:55:26Z",
- "pushed_at": "2026-06-02T08:55:22Z",
+ "updated_at": "2026-06-02T16:05:56Z",
+ "pushed_at": "2026-06-02T16:04:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json
index 9f4086b353..feac1b4744 100644
--- a/2026/CVE-2026-25643.json
+++ b/2026/CVE-2026-25643.json
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
- "updated_at": "2026-06-02T08:54:07Z",
- "pushed_at": "2026-06-02T08:54:03Z",
+ "updated_at": "2026-06-02T16:03:38Z",
+ "pushed_at": "2026-06-02T16:03:18Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-27212.json b/2026/CVE-2026-27212.json
index 89d9444440..5b98a00a3d 100644
--- a/2026/CVE-2026-27212.json
+++ b/2026/CVE-2026-27212.json
@@ -14,8 +14,8 @@
"description": "Security-hardened fork of the WordPress plugin \"Resize Image Before Upload\" — removes all ads\/promotions and the bundled Swiper 8.2.4 library (CVE-2026-27212, CRITICAL). Core client-side image-resize feature unchanged. GPLv3.",
"fork": false,
"created_at": "2026-06-02T11:05:13Z",
- "updated_at": "2026-06-02T12:30:01Z",
- "pushed_at": "2026-06-02T12:29:09Z",
+ "updated_at": "2026-06-02T17:23:31Z",
+ "pushed_at": "2026-06-02T17:23:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json
index f919cc3ea0..3ca8f9e313 100644
--- a/2026/CVE-2026-2991.json
+++ b/2026/CVE-2026-2991.json
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
- "updated_at": "2026-06-02T09:12:49Z",
- "pushed_at": "2026-06-02T09:11:52Z",
+ "updated_at": "2026-06-02T16:22:23Z",
+ "pushed_at": "2026-06-02T16:22:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json
index a00eda0962..38858ecc72 100644
--- a/2026/CVE-2026-31431.json
+++ b/2026/CVE-2026-31431.json
@@ -193,72 +193,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1225158137,
- "name": "CVE-2026-31431",
- "full_name": "yiyihuohuo\/CVE-2026-31431",
- "owner": {
- "login": "yiyihuohuo",
- "id": 62894366,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62894366?v=4",
- "html_url": "https:\/\/github.com\/yiyihuohuo",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/yiyihuohuo\/CVE-2026-31431",
- "description": "CVE-2026-31431EXP",
- "fork": false,
- "created_at": "2026-04-30T02:17:25Z",
- "updated_at": "2026-04-30T02:19:21Z",
- "pushed_at": "2026-04-30T02:19:12Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 0
- },
- {
- "id": 1225160135,
- "name": "cve-2026-31431",
- "full_name": "ruattd\/cve-2026-31431",
- "owner": {
- "login": "ruattd",
- "id": 61044187,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61044187?v=4",
- "html_url": "https:\/\/github.com\/ruattd",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ruattd\/cve-2026-31431",
- "description": "Copy fail action runner test",
- "fork": false,
- "created_at": "2026-04-30T02:21:09Z",
- "updated_at": "2026-04-30T03:24:08Z",
- "pushed_at": "2026-04-30T03:24:05Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": true,
- "web_commit_signoff_required": false,
- "has_pull_requests": false,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1225166437,
"name": "CVE-2026-31431",
@@ -325,39 +259,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1225179698,
- "name": "CVE-2026-31431",
- "full_name": "luotian2\/CVE-2026-31431",
- "owner": {
- "login": "luotian2",
- "id": 278251426,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278251426?v=4",
- "html_url": "https:\/\/github.com\/luotian2",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/luotian2\/CVE-2026-31431",
- "description": null,
- "fork": false,
- "created_at": "2026-04-30T02:57:05Z",
- "updated_at": "2026-05-19T13:20:03Z",
- "pushed_at": "2026-04-30T03:13:25Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1225193020,
"name": "Detections-CVE-2026-31431",
@@ -391,72 +292,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1225193075,
- "name": "CopyFail-CVE-2026-31431",
- "full_name": "JnamerZ\/CopyFail-CVE-2026-31431",
- "owner": {
- "login": "JnamerZ",
- "id": 97386720,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97386720?v=4",
- "html_url": "https:\/\/github.com\/JnamerZ",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/JnamerZ\/CopyFail-CVE-2026-31431",
- "description": "Rewrite https:\/\/github.com\/theori-io\/copy-fail-CVE-2026-31431 to C code",
- "fork": false,
- "created_at": "2026-04-30T03:22:07Z",
- "updated_at": "2026-05-11T09:24:16Z",
- "pushed_at": "2026-04-30T03:24:25Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 0
- },
- {
- "id": 1225196738,
- "name": "copy-fail-CVE-2026-31431",
- "full_name": "vishwanathakuthota\/copy-fail-CVE-2026-31431",
- "owner": {
- "login": "vishwanathakuthota",
- "id": 32350453,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32350453?v=4",
- "html_url": "https:\/\/github.com\/vishwanathakuthota",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/vishwanathakuthota\/copy-fail-CVE-2026-31431",
- "description": "copy-fail-CVE-2026-31431",
- "fork": false,
- "created_at": "2026-04-30T03:29:15Z",
- "updated_at": "2026-04-30T03:31:19Z",
- "pushed_at": "2026-04-30T03:31:14Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1225203827,
"name": "CVE-2026-31431",
@@ -4145,10 +3980,10 @@
"description": "Copy Fail -- CVE-2026-31431 - Hardened AF_ALG\/splice page-cache mutation primitive for RedTeam Ops.",
"fork": false,
"created_at": "2026-05-01T10:43:26Z",
- "updated_at": "2026-05-28T02:36:03Z",
+ "updated_at": "2026-06-02T16:40:41Z",
"pushed_at": "2026-05-01T16:19:38Z",
- "stargazers_count": 9,
- "watchers_count": 9,
+ "stargazers_count": 10,
+ "watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4170,7 +4005,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 9,
+ "watchers": 10,
"score": 0,
"subscribers_count": 1
},
@@ -7590,8 +7425,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
- "updated_at": "2026-06-02T09:31:24Z",
- "pushed_at": "2026-06-02T09:31:20Z",
+ "updated_at": "2026-06-02T16:42:51Z",
+ "pushed_at": "2026-06-02T16:42:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8425,8 +8260,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
- "updated_at": "2026-06-02T09:32:22Z",
- "pushed_at": "2026-06-02T09:32:18Z",
+ "updated_at": "2026-06-02T16:43:51Z",
+ "pushed_at": "2026-06-02T16:43:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -9516,10 +9351,10 @@
"description": "Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel\/module state and suggests mitigations.",
"fork": false,
"created_at": "2026-05-09T14:47:57Z",
- "updated_at": "2026-05-12T16:37:14Z",
+ "updated_at": "2026-06-02T14:04:54Z",
"pushed_at": "2026-05-12T15:20:29Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -9530,7 +9365,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -10876,7 +10711,7 @@
"fork": false,
"created_at": "2026-06-01T18:53:44Z",
"updated_at": "2026-06-02T11:14:45Z",
- "pushed_at": "2026-06-02T11:41:46Z",
+ "pushed_at": "2026-06-02T16:00:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json
index 9593c1f33d..e301f11a51 100644
--- a/2026/CVE-2026-31802.json
+++ b/2026/CVE-2026-31802.json
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
- "updated_at": "2026-06-02T09:09:24Z",
- "pushed_at": "2026-06-02T09:08:48Z",
+ "updated_at": "2026-06-02T16:20:43Z",
+ "pushed_at": "2026-06-02T16:19:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-34621.json b/2026/CVE-2026-34621.json
index a7437a773d..aa6bf03575 100644
--- a/2026/CVE-2026-34621.json
+++ b/2026/CVE-2026-34621.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-12T20:58:43Z",
- "updated_at": "2026-05-29T19:07:11Z",
+ "updated_at": "2026-06-02T13:49:41Z",
"pushed_at": "2026-05-12T21:15:55Z",
- "stargazers_count": 19,
- "watchers_count": 19,
+ "stargazers_count": 20,
+ "watchers_count": 20,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 19,
+ "watchers": 20,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json
index 49925fc3cd..3bf5732fa5 100644
--- a/2026/CVE-2026-3609.json
+++ b/2026/CVE-2026-3609.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-06-02T11:13:48Z",
+ "updated_at": "2026-06-02T15:41:28Z",
"pushed_at": "2026-06-02T11:07:33Z",
- "stargazers_count": 771,
- "watchers_count": 771,
+ "stargazers_count": 772,
+ "watchers_count": 772,
"has_discussions": false,
"forks_count": 113,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 113,
- "watchers": 771,
+ "watchers": 772,
"score": 0,
"subscribers_count": 19
},
diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json
index 08556be0d9..8c3e35a613 100644
--- a/2026/CVE-2026-41089.json
+++ b/2026/CVE-2026-41089.json
@@ -14,12 +14,12 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
- "updated_at": "2026-06-02T12:45:28Z",
+ "updated_at": "2026-06-02T18:45:17Z",
"pushed_at": "2026-06-02T08:30:55Z",
- "stargazers_count": 89,
- "watchers_count": 89,
+ "stargazers_count": 111,
+ "watchers_count": 111,
"has_discussions": false,
- "forks_count": 32,
+ "forks_count": 38,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"windows-server"
],
"visibility": "public",
- "forks": 32,
- "watchers": 89,
+ "forks": 38,
+ "watchers": 111,
"score": 0,
"subscribers_count": 0
},
@@ -75,5 +75,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1257306197,
+ "name": "CVE-2026-41089",
+ "full_name": "sananpa\/CVE-2026-41089",
+ "owner": {
+ "login": "sananpa",
+ "id": 246485053,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/246485053?v=4",
+ "html_url": "https:\/\/github.com\/sananpa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/sananpa\/CVE-2026-41089",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-06-02T14:54:54Z",
+ "updated_at": "2026-06-02T15:03:34Z",
+ "pushed_at": "2026-06-02T14:54:57Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-41096.json b/2026/CVE-2026-41096.json
index 2b26a7f5ff..e801793d72 100644
--- a/2026/CVE-2026-41096.json
+++ b/2026/CVE-2026-41096.json
@@ -47,10 +47,10 @@
"description": "windows api bug",
"fork": false,
"created_at": "2026-05-24T00:46:09Z",
- "updated_at": "2026-06-01T09:37:02Z",
+ "updated_at": "2026-06-02T14:26:06Z",
"pushed_at": "2026-05-24T01:47:32Z",
- "stargazers_count": 37,
- "watchers_count": 37,
+ "stargazers_count": 38,
+ "watchers_count": 38,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
- "watchers": 37,
+ "watchers": 38,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json
index 0775ee9896..86d533b872 100644
--- a/2026/CVE-2026-41651.json
+++ b/2026/CVE-2026-41651.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1225181511,
- "name": "check_pack2theroot",
- "full_name": "mazofeifaalfaro\/check_pack2theroot",
- "owner": {
- "login": "mazofeifaalfaro",
- "id": 74288566,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74288566?v=4",
- "html_url": "https:\/\/github.com\/mazofeifaalfaro",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mazofeifaalfaro\/check_pack2theroot",
- "description": "This is a repo containing a script to check whether a Linux system may be affected by Pack2TheRoot \/ CVE-2026-41651 by reviewing the PackageKit version, service status, changelog, and recent logs. It also offers to update the system, but only if the user explicitly confirms by typing yes. It is a defensive validation script, not an exploit.",
- "fork": false,
- "created_at": "2026-04-30T03:00:19Z",
- "updated_at": "2026-04-30T03:00:20Z",
- "pushed_at": "2026-04-30T03:00:20Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1227686549,
"name": "CVE-2026-41651",
diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json
index e7ae91f7f1..7cc3cfc16d 100644
--- a/2026/CVE-2026-41940.json
+++ b/2026/CVE-2026-41940.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1225169993,
- "name": "cve-2026-41940-poc",
- "full_name": "adriyansyah-mf\/cve-2026-41940-poc",
- "owner": {
- "login": "adriyansyah-mf",
- "id": 72158292,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72158292?v=4",
- "html_url": "https:\/\/github.com\/adriyansyah-mf",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/adriyansyah-mf\/cve-2026-41940-poc",
- "description": null,
- "fork": false,
- "created_at": "2026-04-30T02:38:37Z",
- "updated_at": "2026-05-28T23:56:44Z",
- "pushed_at": "2026-04-30T02:47:37Z",
- "stargazers_count": 28,
- "watchers_count": 28,
- "has_discussions": false,
- "forks_count": 15,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 15,
- "watchers": 28,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1225295552,
"name": "poc-cve-2026-41940",
@@ -672,12 +639,12 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
- "updated_at": "2026-06-02T12:49:34Z",
+ "updated_at": "2026-06-02T17:17:03Z",
"pushed_at": "2026-05-01T12:10:32Z",
- "stargazers_count": 454,
- "watchers_count": 454,
+ "stargazers_count": 455,
+ "watchers_count": 455,
"has_discussions": false,
- "forks_count": 132,
+ "forks_count": 131,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -685,8 +652,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 132,
- "watchers": 454,
+ "forks": 131,
+ "watchers": 455,
"score": 0,
"subscribers_count": 6
},
@@ -1392,6 +1359,39 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1228735861,
+ "name": "cPanelSniper",
+ "full_name": "zwanski2019\/cPanelSniper",
+ "owner": {
+ "login": "zwanski2019",
+ "id": 53589819,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53589819?v=4",
+ "html_url": "https:\/\/github.com\/zwanski2019",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/zwanski2019\/cPanelSniper",
+ "description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
+ "fork": false,
+ "created_at": "2026-05-04T10:19:20Z",
+ "updated_at": "2026-06-02T17:18:07Z",
+ "pushed_at": "2026-05-04T10:19:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1228742106,
"name": "sorry-ransomware-analysis",
@@ -1746,8 +1746,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
- "updated_at": "2026-06-02T09:32:42Z",
- "pushed_at": "2026-06-02T09:32:38Z",
+ "updated_at": "2026-06-02T16:44:17Z",
+ "pushed_at": "2026-06-02T16:44:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json
index d37cb31838..256bb1110a 100644
--- a/2026/CVE-2026-42945.json
+++ b/2026/CVE-2026-42945.json
@@ -151,7 +151,7 @@
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
- "forks_count": 6,
+ "forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 6,
+ "forks": 7,
"watchers": 31,
"score": 0,
"subscribers_count": 1
diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json
index 1d390f6bcc..fd74527af5 100644
--- a/2026/CVE-2026-43284.json
+++ b/2026/CVE-2026-43284.json
@@ -169,8 +169,8 @@
"description": "Tracking CVE-2026-43284",
"fork": false,
"created_at": "2026-05-08T18:24:12Z",
- "updated_at": "2026-06-02T03:12:39Z",
- "pushed_at": "2026-06-02T03:12:34Z",
+ "updated_at": "2026-06-02T18:33:12Z",
+ "pushed_at": "2026-06-02T18:33:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-45332.json b/2026/CVE-2026-45332.json
new file mode 100644
index 0000000000..52561960ac
--- /dev/null
+++ b/2026/CVE-2026-45332.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1257434663,
+ "name": "CVE-2026-45332-PoC",
+ "full_name": "lorenzocamilli\/CVE-2026-45332-PoC",
+ "owner": {
+ "login": "lorenzocamilli",
+ "id": 80099484,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80099484?v=4",
+ "html_url": "https:\/\/github.com\/lorenzocamilli",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lorenzocamilli\/CVE-2026-45332-PoC",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-06-02T17:15:09Z",
+ "updated_at": "2026-06-02T17:15:56Z",
+ "pushed_at": "2026-06-02T17:15:47Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json
index ef3c34eff7..ef67da5b60 100644
--- a/2026/CVE-2026-45585.json
+++ b/2026/CVE-2026-45585.json
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
- "forks_count": 0,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 0,
+ "forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -80,12 +80,12 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
- "updated_at": "2026-06-02T12:50:13Z",
+ "updated_at": "2026-06-02T18:08:57Z",
"pushed_at": "2026-05-23T17:24:38Z",
- "stargazers_count": 259,
- "watchers_count": 259,
+ "stargazers_count": 211,
+ "watchers_count": 211,
"has_discussions": false,
- "forks_count": 21,
+ "forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -108,8 +108,8 @@
"yellowkey-vulnerability"
],
"visibility": "public",
- "forks": 21,
- "watchers": 259,
+ "forks": 23,
+ "watchers": 211,
"score": 0,
"subscribers_count": 2
},
diff --git a/2026/CVE-2026-46243.json b/2026/CVE-2026-46243.json
index 2cfe8af7f9..3ff3c5ee6d 100644
--- a/2026/CVE-2026-46243.json
+++ b/2026/CVE-2026-46243.json
@@ -11,13 +11,13 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MrForkBomb\/CIFSwitch-Checker-CVE-2026-46243",
- "description": "Script para comprobar si la vulnerabilidad de Linux CIFSwitch (CVE-2026-46243) nos afecta.Detecta configuraciones potencialmente vulnerables y mitigaciones sin ejecutar exploits.",
+ "description": "Script para comprobar si la vulnerabilidad de Linux CIFSwitch (CVE-2026-46243) nos afecta. Detecta configuraciones potencialmente vulnerables y mitigaciones sin ejecutar exploits.",
"fork": false,
"created_at": "2026-06-02T11:39:07Z",
- "updated_at": "2026-06-02T12:00:55Z",
- "pushed_at": "2026-06-02T12:00:45Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "updated_at": "2026-06-02T16:32:49Z",
+ "pushed_at": "2026-06-02T13:03:22Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-46300.json b/2026/CVE-2026-46300.json
index f6916a9fea..e7acfc435c 100644
--- a/2026/CVE-2026-46300.json
+++ b/2026/CVE-2026-46300.json
@@ -212,8 +212,41 @@
"description": null,
"fork": false,
"created_at": "2026-06-02T06:42:25Z",
- "updated_at": "2026-06-02T10:42:36Z",
- "pushed_at": "2026-06-02T10:42:32Z",
+ "updated_at": "2026-06-02T13:28:39Z",
+ "pushed_at": "2026-06-02T13:27:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1257319822,
+ "name": "FRAGNESIA-Charan-cve-2026-46300",
+ "full_name": "AzDevops143\/FRAGNESIA-Charan-cve-2026-46300",
+ "owner": {
+ "login": "AzDevops143",
+ "id": 137193230,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137193230?v=4",
+ "html_url": "https:\/\/github.com\/AzDevops143",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/AzDevops143\/FRAGNESIA-Charan-cve-2026-46300",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-06-02T15:08:48Z",
+ "updated_at": "2026-06-02T15:42:21Z",
+ "pushed_at": "2026-06-02T15:40:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-7299.json b/2026/CVE-2026-7299.json
new file mode 100644
index 0000000000..d2eace369b
--- /dev/null
+++ b/2026/CVE-2026-7299.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1196742440,
+ "name": "Appsmith-1.98-Stored-XSS-Exploit",
+ "full_name": "Stuub\/Appsmith-1.98-Stored-XSS-Exploit",
+ "owner": {
+ "login": "Stuub",
+ "id": 60468836,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60468836?v=4",
+ "html_url": "https:\/\/github.com\/Stuub",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Stuub\/Appsmith-1.98-Stored-XSS-Exploit",
+ "description": "Automating the exploitation of CVE-2026-7299 - Stored XSS via Database Table\/Column Names in SQL Autocomplete within Appsmith =>1.99. Initial discovery 30\/03\/26",
+ "fork": false,
+ "created_at": "2026-03-31T02:02:37Z",
+ "updated_at": "2026-06-02T14:24:13Z",
+ "pushed_at": "2026-06-02T14:19:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-8181.json b/2026/CVE-2026-8181.json
index 288594abd6..6faa0e22f8 100644
--- a/2026/CVE-2026-8181.json
+++ b/2026/CVE-2026-8181.json
@@ -333,8 +333,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-02T12:46:24Z",
- "updated_at": "2026-06-02T12:46:29Z",
- "pushed_at": "2026-06-02T12:46:25Z",
+ "updated_at": "2026-06-02T13:45:00Z",
+ "pushed_at": "2026-06-02T13:43:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/README.md b/README.md
index 1c2bd7c610..c81ba73f1f 100644
--- a/README.md
+++ b/README.md
@@ -530,6 +530,13 @@
- [babyshen/freebsd-CVE-2026-7270](https://github.com/babyshen/freebsd-CVE-2026-7270)
+### CVE-2026-7299 (2026-06-02)
+
+Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Developer to inject persistent XSS by a malicious table or column names triggering arbitrary code execution in the sessions of other workspace members when they interact with the same datasource.
+
+
+- [Stuub/Appsmith-1.98-Stored-XSS-Exploit](https://github.com/Stuub/Appsmith-1.98-Stored-XSS-Exploit)
+
### CVE-2026-7392 (2026-04-29)
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function delete_supplier of the file /ajax.php?action=delete_supplier. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
@@ -867,6 +874,13 @@
- [kikechans/-Educational-PoC-CVE-2026-23520](https://github.com/kikechans/-Educational-PoC-CVE-2026-23520)
+### CVE-2026-23631 (2026-05-05)
+
+Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.
+
+
+- [yoyosh/DarkReplica](https://github.com/yoyosh/DarkReplica)
+
### CVE-2026-23744 (2026-01-16)
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
@@ -881,6 +895,7 @@
- [afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744](https://github.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744)
- [alisster00/CVE-2026-23744-RCE](https://github.com/alisster00/CVE-2026-23744-RCE)
- [m2sousa/CVE-2026-23744](https://github.com/m2sousa/CVE-2026-23744)
+- [TYehan/CVE-2026-23744](https://github.com/TYehan/CVE-2026-23744)
### CVE-2026-23813 (2026-03-11)
@@ -1192,14 +1207,9 @@
- [tgies/copy-fail-c](https://github.com/tgies/copy-fail-c)
- [Crihexe/copy-fail-tiny-elf-CVE-2026-31431](https://github.com/Crihexe/copy-fail-tiny-elf-CVE-2026-31431)
- [Percivalll/Copy-Fail-CVE-2026-31431-Statically-PoC](https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Statically-PoC)
-- [yiyihuohuo/CVE-2026-31431](https://github.com/yiyihuohuo/CVE-2026-31431)
-- [ruattd/cve-2026-31431](https://github.com/ruattd/cve-2026-31431)
- [gubaiovo/CVE-2026-31431](https://github.com/gubaiovo/CVE-2026-31431)
- [Sndav/CVE-2026-31431-Advanced-Exploit](https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit)
-- [luotian2/CVE-2026-31431](https://github.com/luotian2/CVE-2026-31431)
- [insomnisec/Detections-CVE-2026-31431](https://github.com/insomnisec/Detections-CVE-2026-31431)
-- [JnamerZ/CopyFail-CVE-2026-31431](https://github.com/JnamerZ/CopyFail-CVE-2026-31431)
-- [vishwanathakuthota/copy-fail-CVE-2026-31431](https://github.com/vishwanathakuthota/copy-fail-CVE-2026-31431)
- [desultory/CVE-2026-31431](https://github.com/desultory/CVE-2026-31431)
- [someCorp/copyFail-CVE-2026-31431-workaround-bash](https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash)
- [iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail](https://github.com/iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail)
@@ -2127,6 +2137,7 @@
- [0xABCD01/CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089)
- [0xBlackash/CVE-2026-41089](https://github.com/0xBlackash/CVE-2026-41089)
+- [sananpa/CVE-2026-41089](https://github.com/sananpa/CVE-2026-41089)
### CVE-2026-41091 (2026-05-20)
@@ -2164,7 +2175,6 @@
PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction->cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction->cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.
-- [mazofeifaalfaro/check_pack2theroot](https://github.com/mazofeifaalfaro/check_pack2theroot)
- [aexdyhaxor/CVE-2026-41651](https://github.com/aexdyhaxor/CVE-2026-41651)
- [Kowntaewook/CVE-2026-41651-analysis](https://github.com/Kowntaewook/CVE-2026-41651-analysis)
- [mawussid/CVE-2026-41651-Python](https://github.com/mawussid/CVE-2026-41651-Python)
@@ -2189,7 +2199,6 @@
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
-- [adriyansyah-mf/cve-2026-41940-poc](https://github.com/adriyansyah-mf/cve-2026-41940-poc)
- [rdyprtmx/poc-cve-2026-41940](https://github.com/rdyprtmx/poc-cve-2026-41940)
- [Kagantua/cPanelWHM-AuthBypass](https://github.com/Kagantua/cPanelWHM-AuthBypass)
- [Wesuiliye/CVE-2026-41940](https://github.com/Wesuiliye/CVE-2026-41940)
@@ -2229,6 +2238,7 @@
- [tfawnies/CVE-2026-41940-next](https://github.com/tfawnies/CVE-2026-41940-next)
- [Underh0st/CPanel-Audit-Remediation-Tool](https://github.com/Underh0st/CPanel-Audit-Remediation-Tool)
- [cy3erm/CVE-2026-41940-POC](https://github.com/cy3erm/CVE-2026-41940-POC)
+- [zwanski2019/cPanelSniper](https://github.com/zwanski2019/cPanelSniper)
- [habibkaratas/sorry-ransomware-analysis](https://github.com/habibkaratas/sorry-ransomware-analysis)
- [sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool](https://github.com/sercanokur/CVE-2026-41940-cPanel-WHM-Verification-Tool)
- [nickpaulsec/2026-41940-poc](https://github.com/nickpaulsec/2026-41940-poc)
@@ -2607,6 +2617,13 @@
- [prashanthnataraj/mini-shai-hulud-detector](https://github.com/prashanthnataraj/mini-shai-hulud-detector)
- [renewablehacking/CVE-2026-45321-Tanstack](https://github.com/renewablehacking/CVE-2026-45321-Tanstack)
+### CVE-2026-45332 (2026-05-28)
+
+Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password hash of every administrator account with a single POST request. The /_api/user-collection/create-first-user setup endpoint remains publicly accessible once initial configuration is complete and returns full serialized user data in the JSON response body. This vulnerability is fixed in 2.0.0-beta.28.
+
+
+- [lorenzocamilli/CVE-2026-45332-PoC](https://github.com/lorenzocamilli/CVE-2026-45332-PoC)
+
### CVE-2026-45401 (2026-05-15)
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5.
@@ -2671,6 +2688,7 @@
- [Koshmare-Blossom/Fragnesia-go](https://github.com/Koshmare-Blossom/Fragnesia-go)
- [Maxime288/Fragnesia-CVE-2026-46300](https://github.com/Maxime288/Fragnesia-CVE-2026-46300)
- [AzDevops143/fragnesia-cve-2026-46300](https://github.com/AzDevops143/fragnesia-cve-2026-46300)
+- [AzDevops143/FRAGNESIA-Charan-cve-2026-46300](https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300)
### CVE-2026-46333 (2026-05-15)
@@ -2852,8 +2870,17 @@
- [ynsmroztas/-CVE-2025-0133-GlobalProtect-XSS](https://github.com/ynsmroztas/-CVE-2025-0133-GlobalProtect-XSS)
- [wiseep/CVE-2025-0133](https://github.com/wiseep/CVE-2025-0133)
- [INTELEON404/CVE-2025-0133](https://github.com/INTELEON404/CVE-2025-0133)
+- [shawarkhanethicalhacker/CVE-2025-0133-exploit](https://github.com/shawarkhanethicalhacker/CVE-2025-0133-exploit)
+- [adhamelhansye/CVE-2025-0133](https://github.com/adhamelhansye/CVE-2025-0133)
- [cruxN3T/CVE-2025-0133](https://github.com/cruxN3T/CVE-2025-0133)
+### CVE-2025-0184 (2025-03-20)
+
+A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests' module instead of the 'ssrf_proxy', leading to an SSRF vulnerability. This issue was fixed in version 0.11.0.
+
+
+- [m0d0ri205/wargame_Re-LS](https://github.com/m0d0ri205/wargame_Re-LS)
+
### CVE-2025-0282 (2025-01-08)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
@@ -2878,6 +2905,13 @@
- [barhen12/CVE-2025-0288](https://github.com/barhen12/CVE-2025-0288)
- [MeisamEb/CVE-2025-0288](https://github.com/MeisamEb/CVE-2025-0288)
+### CVE-2025-0309 (2025-08-14)
+
+An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to elevate privileges.
+
+
+- [AmberWolfCyber/UpSkope](https://github.com/AmberWolfCyber/UpSkope)
+
### CVE-2025-0316 (2025-02-08)
The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_enquiry_agent_contact_form_submit_callback' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.
@@ -2961,6 +2995,13 @@
- [r3m0t3nu11/CVE-2025-1015](https://github.com/r3m0t3nu11/CVE-2025-1015)
+### CVE-2025-1055 (2025-06-10)
+
+A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected by the operating system. This flaw stems from missing access control in the driver's IOCTL handler, enabling unprivileged users to perform privileged actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical services or privileged applications.
+
+
+- [diego-tella/CVE-2025-1055-poc](https://github.com/diego-tella/CVE-2025-1055-poc)
+
### CVE-2025-1094 (2025-02-13)
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
@@ -3010,6 +3051,7 @@
- [EQSTLab/CVE-2025-1302](https://github.com/EQSTLab/CVE-2025-1302)
+- [abrewer251/CVE-2025-1302_jsonpath-plus_RCE](https://github.com/abrewer251/CVE-2025-1302_jsonpath-plus_RCE)
### CVE-2025-1304 (2025-05-01)
@@ -3039,6 +3081,13 @@
- [p33d/cve-2025-1323](https://github.com/p33d/cve-2025-1323)
+### CVE-2025-1337 (2025-02-16)
+
+Es wurde eine Schwachstelle in Eastnets PaymentSafe 2.5.26.0 ausgemacht. Sie wurde als problematisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Komponente BIC Search. Durch das Beeinflussen mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Ein Aktualisieren auf die Version 2.5.27.0 vermag dieses Problem zu lösen.
+
+
+- [ada-z3r0/CVE-2025-1337-PoC](https://github.com/ada-z3r0/CVE-2025-1337-PoC)
+
### CVE-2025-1461 (2025-05-28)
Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting (XSS) https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the default Vuetify translator will return the translation key as the translation, if it can't find an actual translation.\n\nThis issue affects Vuetify versions greater than or equal to 2.0.0 and less than 3.0.0.\n\nNote:\nVersion 2.x of Vuetify is End-of-Life and will not receive any updates to address this issue. For more information see here https://v2.vuetifyjs.com/en/about/eol/ .
@@ -3046,6 +3095,13 @@
- [neverendingsupport/nes-vuetify-cve-2025-1461](https://github.com/neverendingsupport/nes-vuetify-cve-2025-1461)
+### CVE-2025-1489 (2025-02-21)
+
+The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
+
+
+- [khaifunglee/reproducing-CVE-2025-1489](https://github.com/khaifunglee/reproducing-CVE-2025-1489)
+
### CVE-2025-1562 (2025-06-18)
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.
@@ -3105,6 +3161,13 @@
- [lutrasecurity/CVE-2025-1910-WatchGuard-Privilege-Escalation](https://github.com/lutrasecurity/CVE-2025-1910-WatchGuard-Privilege-Escalation)
+### CVE-2025-1913 (2025-03-26)
+
+The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
+
+
+- [S0haib518-KSA/CVE-2025-1913-PoC](https://github.com/S0haib518-KSA/CVE-2025-1913-PoC)
+
### CVE-2025-1974 (2025-03-24)
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
@@ -3126,6 +3189,11 @@
- [chhhd/CVE-2025-1974](https://github.com/chhhd/CVE-2025-1974)
- [salt318/CVE-2025-1974](https://github.com/salt318/CVE-2025-1974)
- [abrewer251/CVE-2025-1974_IngressNightmare_PoC](https://github.com/abrewer251/CVE-2025-1974_IngressNightmare_PoC)
+- [Armand2002/Exploit-CVE-2025-1974-Lab](https://github.com/Armand2002/Exploit-CVE-2025-1974-Lab)
+- [BiiTts/POC-IngressNightmare-CVE-2025-1974](https://github.com/BiiTts/POC-IngressNightmare-CVE-2025-1974)
+- [iteride/CVE-2025-1974](https://github.com/iteride/CVE-2025-1974)
+- [I3r1h0n/IngressNightterror](https://github.com/I3r1h0n/IngressNightterror)
+- [gunyakit/CVE-2025-1974-PoC-exploit](https://github.com/gunyakit/CVE-2025-1974-PoC-exploit)
- [BoianEduard/CVE-2025-1974](https://github.com/BoianEduard/CVE-2025-1974)
- [zsxen/CVE-2025-1974](https://github.com/zsxen/CVE-2025-1974)
- [zsxen/cve-2025-1974-lab](https://github.com/zsxen/cve-2025-1974-lab)
@@ -3145,6 +3213,7 @@
- [datagoboom/CVE-2025-2011](https://github.com/datagoboom/CVE-2025-2011)
+- [X3RX3SSec/CVE-2025-2011](https://github.com/X3RX3SSec/CVE-2025-2011)
- [zsy107u/CVE-2025-2011-poc](https://github.com/zsy107u/CVE-2025-2011-poc)
### CVE-2025-2026 (2025-12-31)
@@ -3160,6 +3229,7 @@
- [Burak1320demiroz/cve-2025-2082](https://github.com/Burak1320demiroz/cve-2025-2082)
+- [shirabo/cve-2025-2082-POV](https://github.com/shirabo/cve-2025-2082-POV)
### CVE-2025-2135 (2025-03-10)
@@ -3193,6 +3263,8 @@
- [romanedutov/CVE-2025-2294](https://github.com/romanedutov/CVE-2025-2294)
- [Yucaerin/CVE-2025-2294](https://github.com/Yucaerin/CVE-2025-2294)
- [0xWhoami35/CVE-2025-2294](https://github.com/0xWhoami35/CVE-2025-2294)
+- [r0otk3r/CVE-2025-2294](https://github.com/r0otk3r/CVE-2025-2294)
+- [iteride/CVE-2025-2294](https://github.com/iteride/CVE-2025-2294)
- [fumioryoto/CVE-2025-2294-Kubio-2.5.1-LFi-Checker](https://github.com/fumioryoto/CVE-2025-2294-Kubio-2.5.1-LFi-Checker)
### CVE-2025-2301 (2025-07-21)
@@ -3240,6 +3312,13 @@
- [murrez/ASUS-AiCloud-RCE](https://github.com/murrez/ASUS-AiCloud-RCE)
+### CVE-2025-2502 (2025-05-30)
+
+An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
+
+
+- [IHK-ONE/CVE-2025-2502](https://github.com/IHK-ONE/CVE-2025-2502)
+
### CVE-2025-2512 (2025-03-19)
The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -3256,6 +3335,7 @@
- [RootHarpy/CVE-2025-2539](https://github.com/RootHarpy/CVE-2025-2539)
- [Yucaerin/CVE-2025-2539](https://github.com/Yucaerin/CVE-2025-2539)
- [d4rkh0rse/CVE-2025-2539](https://github.com/d4rkh0rse/CVE-2025-2539)
+- [fazaroot/CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read](https://github.com/fazaroot/CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read)
### CVE-2025-2563 (2025-04-14)
@@ -3274,6 +3354,14 @@
- [ubaydev/CVE-2025-2594](https://github.com/ubaydev/CVE-2025-2594)
+### CVE-2025-2598 (2025-03-21)
+
+When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this issue, users should upgrade to version 2.178.2 or later and ensure any forked or derivative code is patched to incorporate the new fixes.
+
+
+- [Catnip-Express-Maxim/AWSTESTEXPLOIT](https://github.com/Catnip-Express-Maxim/AWSTESTEXPLOIT)
+- [SallyXVIII/Final-Proj](https://github.com/SallyXVIII/Final-Proj)
+
### CVE-2025-2620 (2025-03-22)
In D-Link DAP-1620 1.03 wurde eine kritische Schwachstelle gefunden. Betroffen ist die Funktion mod_graph_auth_uri_handler der Datei /storage der Komponente Authentication Handler. Durch die Manipulation mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
@@ -3295,6 +3383,13 @@
- [watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain](https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain)
+### CVE-2025-2776 (2025-05-07)
+
+SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
+
+
+- [mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack](https://github.com/mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack)
+
### CVE-2025-2783 (2025-03-26)
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
@@ -3322,6 +3417,8 @@
- [WOOOOONG/CVE-2025-2825](https://github.com/WOOOOONG/CVE-2025-2825)
- [punitdarji/crushftp-CVE-2025-2825](https://github.com/punitdarji/crushftp-CVE-2025-2825)
- [ghostsec420/ShatteredFTP](https://github.com/ghostsec420/ShatteredFTP)
+- [Shivshantp/CVE-2025-2825-CrushFTP-AuthBypass](https://github.com/Shivshantp/CVE-2025-2825-CrushFTP-AuthBypass)
+- [iteride/CVE-2025-2825](https://github.com/iteride/CVE-2025-2825)
### CVE-2025-2907 (2025-04-26)
@@ -3337,6 +3434,8 @@
- [abrewer251/CVE-2025-2945_PgAdmin_PoC](https://github.com/abrewer251/CVE-2025-2945_PgAdmin_PoC)
- [Cycloctane/cve-2025-2945-poc](https://github.com/Cycloctane/cve-2025-2945-poc)
+- [I3r1h0n/pgAdminOpendoor](https://github.com/I3r1h0n/pgAdminOpendoor)
+- [ExtremeUday/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-](https://github.com/ExtremeUday/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-)
- [plur1bu5/CVE-2025-2945-pgadmin-rce](https://github.com/plur1bu5/CVE-2025-2945-pgadmin-rce)
### CVE-2025-2995 (2025-03-31)
@@ -3410,7 +3509,12 @@
- [dennisec/CVE-2025-3248](https://github.com/dennisec/CVE-2025-3248)
- [dennisec/Mass-CVE-2025-3248](https://github.com/dennisec/Mass-CVE-2025-3248)
- [ill-deed/Langflow-CVE-2025-3248-Multi-target](https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target)
+- [r0otk3r/CVE-2025-3248](https://github.com/r0otk3r/CVE-2025-3248)
+- [min8282/CVE-2025-3248](https://github.com/min8282/CVE-2025-3248)
+- [EQSTLab/CVE-2025-3248](https://github.com/EQSTLab/CVE-2025-3248)
- [wand3rlust/CVE-2025-3248](https://github.com/wand3rlust/CVE-2025-3248)
+- [drackyjr/cve-2025-3248-exploit](https://github.com/drackyjr/cve-2025-3248-exploit)
+- [b0ySie7e/CVE-2025-3248-POC](https://github.com/b0ySie7e/CVE-2025-3248-POC)
- [12-test-12/CVE-2025-3248](https://github.com/12-test-12/CVE-2025-3248)
- [nebari-playground/langflow-cve-2025-3248](https://github.com/nebari-playground/langflow-cve-2025-3248)
@@ -3428,12 +3532,21 @@
- [jeffaf/CVE-2025-3464-AsIO3-LPE](https://github.com/jeffaf/CVE-2025-3464-AsIO3-LPE)
+### CVE-2025-3500 (2025-12-01)
+
+Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3.
+
+
+- [chicken3962/CVE-2025-3500-Poc](https://github.com/chicken3962/CVE-2025-3500-Poc)
+
### CVE-2025-3515 (2025-06-17)
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and upload .phar or other dangerous file types on the affected site's server, which may make remote code execution possible on the servers that are configured to handle .phar files as executable PHP scripts, particularly in default Apache+mod_php configurations where the file extension is not strictly validated before being passed to the PHP interpreter.
- [Professor6T9/CVE-2025-3515](https://github.com/Professor6T9/CVE-2025-3515)
+- [blueisbeautiful/CVE-2025-3515](https://github.com/blueisbeautiful/CVE-2025-3515)
+- [ImBIOS/lab-cve-2025-3515](https://github.com/ImBIOS/lab-cve-2025-3515)
### CVE-2025-3568 (2025-04-14)
@@ -3464,6 +3577,13 @@
- [b4d-53ct0r/CVE-2025-3616](https://github.com/b4d-53ct0r/CVE-2025-3616)
+### CVE-2025-3639 (2025-08-18)
+
+Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 and 7.3 GA through update 36 allows unauthenticated users with valid credentials to bypass the login process by changing the POST method to GET, once the site has MFA enabled.
+
+
+- [6lj/CVE-2025-3639](https://github.com/6lj/CVE-2025-3639)
+
### CVE-2025-3776 (2025-04-24)
The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function. This is due to a lack of validation on the type of function that can be called. This makes it possible for unauthenticated attackers to execute any callable function on the site, such as phpinfo().
@@ -3510,6 +3630,14 @@
- [imbas007/CVE-2025-4123-template](https://github.com/imbas007/CVE-2025-4123-template)
- [ynsmroztas/CVE-2025-4123-Exploit-Tool-Grafana-](https://github.com/ynsmroztas/CVE-2025-4123-Exploit-Tool-Grafana-)
- [punitdarji/Grafana-cve-2025-4123](https://github.com/punitdarji/Grafana-cve-2025-4123)
+- [ItsNee/Grafana-CVE-2025-4123-POC](https://github.com/ItsNee/Grafana-CVE-2025-4123-POC)
+
+### CVE-2025-4126 (2025-05-15)
+
+The EG-Series plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [series] shortcode in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping on user supplied attributes in the shortcode_title function. This makes it possible for authenticated attackers - with contributor-level access and above, on sites with the Classic Editor plugin activated - to inject arbitrary JavaScript code in the titletag attribute that will execute whenever a user access an injected page.
+
+
+- [Slow-Mist/CVE-2025-4126](https://github.com/Slow-Mist/CVE-2025-4126)
### CVE-2025-4138 (2025-06-03)
@@ -3569,6 +3697,13 @@
- [d0n601/CVE-2025-4336](https://github.com/d0n601/CVE-2025-4336)
+### CVE-2025-4380 (2025-07-02)
+
+The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.
+
+
+- [r0otk3r/CVE-2025-4380](https://github.com/r0otk3r/CVE-2025-4380)
+
### CVE-2025-4389 (2025-05-17)
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -3591,6 +3726,13 @@
- [Yucaerin/CVE-2025-4403](https://github.com/Yucaerin/CVE-2025-4403)
+### CVE-2025-4404 (2025-06-17)
+
+A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
+
+
+- [Im10n/CVE-2025-4404-POC](https://github.com/Im10n/CVE-2025-4404-POC)
+
### CVE-2025-4427 (2025-05-13)
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
@@ -3627,6 +3769,13 @@
- [ptrstr/CVE-2025-4524](https://github.com/ptrstr/CVE-2025-4524)
+### CVE-2025-4578 (2025-06-04)
+
+The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
+
+
+- [RandomRobbieBF/CVE-2025-4578](https://github.com/RandomRobbieBF/CVE-2025-4578)
+
### CVE-2025-4601 (2025-06-10)
The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to set their role to that of an administrator. The vulnerability was partially patched in version 4.4.0, and fully patched in version 4.4.1.
@@ -3653,6 +3802,8 @@
The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
+- [Yucaerin/CVE-2025-4606](https://github.com/Yucaerin/CVE-2025-4606)
+- [UcenHaxor07/CVE-2025-4606](https://github.com/UcenHaxor07/CVE-2025-4606)
- [Yetazyyy/CVE-2025-4606](https://github.com/Yetazyyy/CVE-2025-4606)
### CVE-2025-4611 (2025-05-21)
@@ -3684,6 +3835,13 @@
- [MantisToboggan-git/CVE-2025-4632-POC](https://github.com/MantisToboggan-git/CVE-2025-4632-POC)
- [digitalsurgn/CVE-2025-4632_POC](https://github.com/digitalsurgn/CVE-2025-4632_POC)
+### CVE-2025-4660 (2025-05-13)
+
+A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent. \n\n\n\nThis does not impact Linux or OSX Secure Connector.
+
+
+- [NetSPI/CVE-2025-4660](https://github.com/NetSPI/CVE-2025-4660)
+
### CVE-2025-4664 (2025-05-14)
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
@@ -3693,6 +3851,13 @@
- [Leviticus-Triage/ChromSploit-Framework](https://github.com/Leviticus-Triage/ChromSploit-Framework)
- [amalmurali47/cve-2025-4664](https://github.com/amalmurali47/cve-2025-4664)
+### CVE-2025-4679 (2025-05-16)
+
+A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors.
+
+
+- [fevar54/CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo](https://github.com/fevar54/CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo)
+
### CVE-2025-4686 (2026-01-30)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection.This issue affects Online Exam and Assessment: through 30012026. \n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.
@@ -3721,6 +3886,13 @@
- [sahici/CVE-2025-4784](https://github.com/sahici/CVE-2025-4784)
+### CVE-2025-4796 (2025-08-08)
+
+The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the 'Eventin\Speaker\Api\SpeakerController::update_item' function. This makes it possible for unauthenticated attackers with contributor-level and above permissions to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
+
+
+- [AnotherSec/CVE-2025-4796](https://github.com/AnotherSec/CVE-2025-4796)
+
### CVE-2025-4802 (2025-05-16)
Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).
@@ -3735,6 +3907,27 @@
- [sahici/CVE-2025-4822](https://github.com/sahici/CVE-2025-4822)
+### CVE-2025-4840 (2025-06-10)
+
+The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
+
+
+- [RandomRobbieBF/CVE-2025-4840](https://github.com/RandomRobbieBF/CVE-2025-4840)
+
+### CVE-2025-4866 (2025-05-18)
+
+Es wurde eine kritische Schwachstelle in weibocom rill-flow 0.1.18 ausgemacht. Dabei betrifft es einen unbekannter Codeteil der Komponente Management Console. Dank der Manipulation mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [bloodcode-spasov/ble-cve2025-attack-new-version](https://github.com/bloodcode-spasov/ble-cve2025-attack-new-version)
+
+### CVE-2025-5025 (2025-05-28)
+
+libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC and HTTP/3. Since pinning makes the transfer succeed if the pin is fine, users could unwittingly connect to an impostor server without noticing.
+
+
+- [KiPhuong/cve-2025-5025](https://github.com/KiPhuong/cve-2025-5025)
+
### CVE-2025-5054 (2025-05-30)
Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces.\n\n\n\n\nWhen handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `consistency_checks`, which attempts to detect if the crashing process had been replaced. Because of this, if a process crashed and was quickly replaced with a containerized one, apport could be made to forward the core dump to the container, potentially leaking sensitive information. `consistency_checks` is now being called before `_check_global_pid_and_forward`. Additionally, given that the PID-reuse race condition cannot be reliably detected from userspace alone, crashes are only forwarded to containers if the kernel provided a pidfd, or if the crashing process was unprivileged (i.e., if dump mode == 1).
@@ -3749,6 +3942,13 @@
- [d0n601/CVE-2025-5058](https://github.com/d0n601/CVE-2025-5058)
+### CVE-2025-5095 (2025-08-08)
+
+Burk Technology ARC Solo's password change mechanism can be utilized without proper \nauthentication procedures, allowing an attacker to take over the device.\n A password change request can be sent directly to the device's HTTP \nendpoint without providing valid credentials. The system does not \nenforce proper authentication or session validation, allowing the \npassword change to proceed without verifying the request's legitimacy.
+
+
+- [TeteuXD2/CVE-2025-5095-POC](https://github.com/TeteuXD2/CVE-2025-5095-POC)
+
### CVE-2025-5154 (2025-05-25)
Es wurde eine Schwachstelle in PhonePe App 25.03.21.0 für Android gefunden. Sie wurde als problematisch eingestuft. Es geht dabei um eine nicht klar definierte Funktion der Datei /data/data/com.phonepe.app/databases/ der Komponente SQLite Database. Durch das Beeinflussen mit unbekannten Daten kann eine cleartext storage in a file or on disk-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung.
@@ -3756,6 +3956,13 @@
- [honestcorrupt/phonepe-sensitive-data-exposure-cve-2025-5154](https://github.com/honestcorrupt/phonepe-sensitive-data-exposure-cve-2025-5154)
+### CVE-2025-5182 (2025-05-26)
+
+In Summer Pearl Group Vacation Rental Management Platform bis 1.0.1 wurde eine kritische Schwachstelle gefunden. Es geht um eine nicht näher bekannte Funktion der Komponente Listing Handler. Durch Manipulation mit unbekannten Daten kann eine authorization bypass-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Ein Aktualisieren auf die Version 1.0.2 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
+
+
+- [vulnvault/react2shell](https://github.com/vulnvault/react2shell)
+
### CVE-2025-5196 (2025-05-26)
In Wing FTP Server bis 7.4.3 wurde eine Schwachstelle gefunden. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Komponente Lua Admin Console. Mit der Manipulation mit unbekannten Daten kann eine execution with unnecessary privileges-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Die Komplexität eines Angriffs ist eher hoch. Sie gilt als schwierig ausnutzbar. Ein Aktualisieren auf die Version 7.4.4 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
@@ -3787,6 +3994,13 @@
- [Nxploited/CVE-2025-5288](https://github.com/Nxploited/CVE-2025-5288)
+### CVE-2025-5304 (2025-06-28)
+
+The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
+
+
+- [Nxploited/CVE-2025-5304](https://github.com/Nxploited/CVE-2025-5304)
+
### CVE-2025-5319 (2026-02-03)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection.This issue affects DIGITA Efficiency Management System: through 03022026. \nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.
@@ -3801,6 +4015,22 @@
- [sahici/CVE-2025-5329](https://github.com/sahici/CVE-2025-5329)
+### CVE-2025-5349 (2025-06-17)
+
+Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
+
+
+- [olimpiofreitas/CVE-2025-5349-Scanner](https://github.com/olimpiofreitas/CVE-2025-5349-Scanner)
+
+### CVE-2025-5394 (2025-07-15)
+
+The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This makes it possible for unauthenticated attackers to upload zip files containing webshells disguised as plugins from remote locations to achieve remote code execution. CVE-2025-54019 is likely a duplicate of this.
+
+
+- [fokda-prodz/CVE-2025-5394](https://github.com/fokda-prodz/CVE-2025-5394)
+- [Nxploited/CVE-2025-5394](https://github.com/Nxploited/CVE-2025-5394)
+- [Yucaerin/CVE-2025-5394](https://github.com/Yucaerin/CVE-2025-5394)
+
### CVE-2025-5419 (2025-06-02)
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
@@ -3808,6 +4038,8 @@
- [Riquelme54322/CVE-2025-5419](https://github.com/Riquelme54322/CVE-2025-5419)
- [itsShotgun/chrome_v8_cve_checker](https://github.com/itsShotgun/chrome_v8_cve_checker)
+- [riemannj/CVE-2025-5419](https://github.com/riemannj/CVE-2025-5419)
+- [mistymntncop/CVE-2025-5419](https://github.com/mistymntncop/CVE-2025-5419)
- [bjrjk/CVE-2025-5419](https://github.com/bjrjk/CVE-2025-5419)
- [Riquelme54322/riquelme54322.github.io](https://github.com/Riquelme54322/riquelme54322.github.io)
@@ -3867,14 +4099,40 @@
- [Nxploited/CVE-2025-5701](https://github.com/Nxploited/CVE-2025-5701)
- [RandomRobbieBF/CVE-2025-5701](https://github.com/RandomRobbieBF/CVE-2025-5701)
+### CVE-2025-5755 (2025-06-06)
+
+Es wurde eine kritische Schwachstelle in SourceCodester Open Source Clinic Management System 1.0 ausgemacht. Dabei betrifft es einen unbekannter Codeteil der Datei /email_config.php. Durch das Beeinflussen des Arguments email mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [cybertechajju/cve-2025-5755](https://github.com/cybertechajju/cve-2025-5755)
+
### CVE-2025-5777 (2025-06-17)
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
- [mingshenhk/CitrixBleed-2-CVE-2025-5777-PoC-](https://github.com/mingshenhk/CitrixBleed-2-CVE-2025-5777-PoC-)
+- [RickGeex/CVE-2025-5777-CitrixBleed](https://github.com/RickGeex/CVE-2025-5777-CitrixBleed)
+- [idobarel/CVE-2025-5777](https://github.com/idobarel/CVE-2025-5777)
+- [nocerainfosec/cve-2025-5777](https://github.com/nocerainfosec/cve-2025-5777)
+- [RaR1991/citrix_bleed_2](https://github.com/RaR1991/citrix_bleed_2)
+- [orange0Mint/CitrixBleed-2-CVE-2025-5777](https://github.com/orange0Mint/CitrixBleed-2-CVE-2025-5777)
+- [Chocapikk/CVE-2025-5777](https://github.com/Chocapikk/CVE-2025-5777)
+- [win3zz/CVE-2025-5777](https://github.com/win3zz/CVE-2025-5777)
- [FrenzisRed/CVE-2025-5777](https://github.com/FrenzisRed/CVE-2025-5777)
+- [bughuntar/CVE-2025-5777](https://github.com/bughuntar/CVE-2025-5777)
+- [0xgh057r3c0n/CVE-2025-5777](https://github.com/0xgh057r3c0n/CVE-2025-5777)
+- [SleepNotF0und/CVE-2025-5777](https://github.com/SleepNotF0und/CVE-2025-5777)
+- [cyberleelawat/ExploitVeer](https://github.com/cyberleelawat/ExploitVeer)
+- [Shivshantp/CVE-2025-5777-TrendMicro-ApexCentral-RCE](https://github.com/Shivshantp/CVE-2025-5777-TrendMicro-ApexCentral-RCE)
+- [rob0tstxt/POC-CVE-2025-5777](https://github.com/rob0tstxt/POC-CVE-2025-5777)
+- [below0day/Honeypot-Logs-CVE-2025-5777](https://github.com/below0day/Honeypot-Logs-CVE-2025-5777)
+- [soltanali0/CVE-2025-5777-Exploit](https://github.com/soltanali0/CVE-2025-5777-Exploit)
+- [rootxsushant/Citrix-NetScaler-Memory-Leak-CVE-2025-5777](https://github.com/rootxsushant/Citrix-NetScaler-Memory-Leak-CVE-2025-5777)
- [ndr-repo/CVE-2025-5777](https://github.com/ndr-repo/CVE-2025-5777)
+- [mr-r3b00t/CVE-2025-5777](https://github.com/mr-r3b00t/CVE-2025-5777)
+- [Anshika2709/Citrixbleed2-CVE-2025-5777](https://github.com/Anshika2709/Citrixbleed2-CVE-2025-5777)
+- [rashedhasan090/CVE-2025-5777](https://github.com/rashedhasan090/CVE-2025-5777)
- [0xBlackash/CVE-2025-5777](https://github.com/0xBlackash/CVE-2025-5777)
### CVE-2025-5815 (2025-06-13)
@@ -3918,6 +4176,7 @@
- [d0n601/CVE-2025-5961](https://github.com/d0n601/CVE-2025-5961)
+- [Nxploited/CVE-2025-5961](https://github.com/Nxploited/CVE-2025-5961)
### CVE-2025-5964 (2025-06-15)
@@ -3938,6 +4197,10 @@
A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, "allow_active" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations.
+- [iamgithubber/CVE-2025-6018-19-exploit](https://github.com/iamgithubber/CVE-2025-6018-19-exploit)
+- [dreysanox/CVE-2025-6018_Poc](https://github.com/dreysanox/CVE-2025-6018_Poc)
+- [ibrahmsql/CVE-2025-6018](https://github.com/ibrahmsql/CVE-2025-6018)
+- [euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019](https://github.com/euxem/Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019)
- [AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation](https://github.com/AzureADTrent/CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation)
- [muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit](https://github.com/muyuanlove/CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit)
- [0rionCollector/Exploit-Chain-CVE-2025-6018-6019](https://github.com/0rionCollector/Exploit-Chain-CVE-2025-6018-6019)
@@ -3958,12 +4221,31 @@
- [guinea-offensive-security/CVE-2025-6019](https://github.com/guinea-offensive-security/CVE-2025-6019)
- [And-oss/CVE-2025-6019-exploit](https://github.com/And-oss/CVE-2025-6019-exploit)
- [neko205-mx/CVE-2025-6019_Exploit](https://github.com/neko205-mx/CVE-2025-6019_Exploit)
+- [harshitvarma05/CVE-2025-6019](https://github.com/harshitvarma05/CVE-2025-6019)
+- [robbin0919/CVE-2025-6019](https://github.com/robbin0919/CVE-2025-6019)
+- [phamdinhquy2512/CVE-2025-6019-Exploitation](https://github.com/phamdinhquy2512/CVE-2025-6019-Exploitation)
- [0x5chltz/CVE-2025-6019](https://github.com/0x5chltz/CVE-2025-6019)
- [symphony2colour/CVE-2025-6019-udisks-lpe-no-image](https://github.com/symphony2colour/CVE-2025-6019-udisks-lpe-no-image)
- [boboaung1337/CVE-2025-6019](https://github.com/boboaung1337/CVE-2025-6019)
- [tr3m0x/CVE-2025-6019](https://github.com/tr3m0x/CVE-2025-6019)
- [JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation)
+### CVE-2025-6058 (2025-07-12)
+
+The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() function hooked via the 'add_booking_type' route in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [Nxploited/CVE-2025-6058](https://github.com/Nxploited/CVE-2025-6058)
+- [JayVillain/Scan-CVE-2025-6058](https://github.com/JayVillain/Scan-CVE-2025-6058)
+- [0xgh057r3c0n/CVE-2025-6058](https://github.com/0xgh057r3c0n/CVE-2025-6058)
+
+### CVE-2025-6082 (2025-07-22)
+
+The Birth Chart Compatibility plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0. This is due to insufficient protection against directly accessing the plugin's index.php file, which causes an error exposing the full path. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
+
+
+- [byteReaper77/CVE-2025-6082](https://github.com/byteReaper77/CVE-2025-6082)
+
### CVE-2025-6085 (2025-09-04)
The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, and including, 1.5.10. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -3985,6 +4267,10 @@
- [speinador/CVE-2025-6218_WinRAR](https://github.com/speinador/CVE-2025-6218_WinRAR)
- [ignis-sec/CVE-2025-6218](https://github.com/ignis-sec/CVE-2025-6218)
+- [skimask1690/CVE-2025-6218-POC](https://github.com/skimask1690/CVE-2025-6218-POC)
+- [mulwareX/CVE-2025-6218-POC](https://github.com/mulwareX/CVE-2025-6218-POC)
+- [absholi7ly/CVE-2025-6218-WinRAR-Directory-Traversal-RCE](https://github.com/absholi7ly/CVE-2025-6218-WinRAR-Directory-Traversal-RCE)
+- [Chrxstxqn/CVE-2025-6218-WinRAR-RCE-POC](https://github.com/Chrxstxqn/CVE-2025-6218-WinRAR-RCE-POC)
### CVE-2025-6220 (2025-06-18)
@@ -4012,6 +4298,7 @@
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.\n\nBy inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE (Remote Code Execution).\n\nThis issue affects CrafterCMS: from 4.0.0 through 4.2.2.
+- [mbadanoiu/CVE-2025-6384](https://github.com/mbadanoiu/CVE-2025-6384)
- [maestro-ant/CrafterCMS-CVE-2025-6384](https://github.com/maestro-ant/CrafterCMS-CVE-2025-6384)
### CVE-2025-6389 (2025-11-25)
@@ -4019,6 +4306,8 @@
The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.
+- [AivarSaar/blackash-cve-2025-6389](https://github.com/AivarSaar/blackash-cve-2025-6389)
+- [itsismarcos/SneeitScanner-CVE-2025-6389](https://github.com/itsismarcos/SneeitScanner-CVE-2025-6389)
- [Nxploited/CVE-2025-6389](https://github.com/Nxploited/CVE-2025-6389)
### CVE-2025-6440 (2025-10-24)
@@ -4026,11 +4315,22 @@
The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+- [AnotherSec/CVE-2025-6440](https://github.com/AnotherSec/CVE-2025-6440)
+- [Nxploited/CVE-2025-6440](https://github.com/Nxploited/CVE-2025-6440)
+- [m2hcz/CVE-2025-6440-Poc-Exploit](https://github.com/m2hcz/CVE-2025-6440-Poc-Exploit)
- [rimbadirgantara/CVE-2025-6440](https://github.com/rimbadirgantara/CVE-2025-6440)
- [0axz-tools/CVE-2025-6440](https://github.com/0axz-tools/CVE-2025-6440)
- [BastianXploited/CVE-2025-6440](https://github.com/BastianXploited/CVE-2025-6440)
- [sahmsec/CVE-2025-6440](https://github.com/sahmsec/CVE-2025-6440)
+### CVE-2025-6514 (2025-07-09)
+
+mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
+
+
+- [ChaseHCS/CVE-2025-6514](https://github.com/ChaseHCS/CVE-2025-6514)
+- [Cyberency/CVE-2025-6514](https://github.com/Cyberency/CVE-2025-6514)
+
### CVE-2025-6543 (2025-06-25)
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
@@ -4038,13 +4338,29 @@
- [grupooruss/Citrix-cve-2025-6543](https://github.com/grupooruss/Citrix-cve-2025-6543)
- [lex1010/CVE-2025-6543](https://github.com/lex1010/CVE-2025-6543)
+- [abrewer251/CVE-2025-6543_CitrixNetScaler_PoC](https://github.com/abrewer251/CVE-2025-6543_CitrixNetScaler_PoC)
### CVE-2025-6554 (2025-06-30)
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
+- [gmh5225/CVE-2025-6554](https://github.com/gmh5225/CVE-2025-6554)
+- [gmh5225/CVE-2025-6554-2](https://github.com/gmh5225/CVE-2025-6554-2)
+- [PwnToday/CVE-2025-6554](https://github.com/PwnToday/CVE-2025-6554)
+- [ghostn4444/POC-CVE-2025-6554](https://github.com/ghostn4444/POC-CVE-2025-6554)
+- [LordBheem/CVE-2025-6554](https://github.com/LordBheem/CVE-2025-6554)
- [juccoblak/CVE-2025-6554](https://github.com/juccoblak/CVE-2025-6554)
+- [Muhammednihalmp/Google-chrome-zero-day](https://github.com/Muhammednihalmp/Google-chrome-zero-day)
+- [aklnjakln/CVE-2025-6554](https://github.com/aklnjakln/CVE-2025-6554)
+
+### CVE-2025-6558 (2025-07-15)
+
+Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
+
+
+- [gmh5225/CVE-2025-6558-exp](https://github.com/gmh5225/CVE-2025-6558-exp)
+- [DevBuiHieu/CVE-2025-6558-Proof-Of-Concept](https://github.com/DevBuiHieu/CVE-2025-6558-Proof-Of-Concept)
### CVE-2025-6586 (2025-07-04)
@@ -4060,6 +4376,13 @@
- [c137req/CVE-2025-6713](https://github.com/c137req/CVE-2025-6713)
+### CVE-2025-6759 (2025-07-08)
+
+Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS
+
+
+- [olljanat/TestCitrixException](https://github.com/olljanat/TestCitrixException)
+
### CVE-2025-6782 (2025-07-04)
The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -4088,6 +4411,13 @@
- [byteReaper77/CVE-2025-6860](https://github.com/byteReaper77/CVE-2025-6860)
+### CVE-2025-6907 (2025-06-30)
+
+In code-projects Car Rental System 1.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /book_car.php. Durch das Manipulieren des Arguments fname mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/cve-2025-6907](https://github.com/byteReaper77/cve-2025-6907)
+
### CVE-2025-6916 (2025-06-30)
Es wurde eine kritische Schwachstelle in TOTOLINK T6 4.1.5cu.748_B20211015 gefunden. Betroffen hiervon ist die Funktion Form_Login der Datei /formLoginAuth.htm. Durch das Manipulieren des Arguments authCode/goURL mit unbekannten Daten kann eine missing authentication-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff im lokalen Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
@@ -4100,12 +4430,59 @@
The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role restriction during registration in the 'on_regiser_user' function. This makes it possible for unauthenticated attackers to arbitrarily choose the role, including the Administrator role, assigned when registering.
+- [Nxploited/CVE-2025-6934](https://github.com/Nxploited/CVE-2025-6934)
+- [MrjHaxcore/CVE-2025-6934](https://github.com/MrjHaxcore/CVE-2025-6934)
+- [0xgh057r3c0n/CVE-2025-6934](https://github.com/0xgh057r3c0n/CVE-2025-6934)
+- [yukinime/CVE-2025-6934](https://github.com/yukinime/CVE-2025-6934)
- [AnotherSec/CVE-2025-6934](https://github.com/AnotherSec/CVE-2025-6934)
- [Jenderal92/WP-CVE-2025-6934](https://github.com/Jenderal92/WP-CVE-2025-6934)
- [1atakan1/CVE-2025-6934](https://github.com/1atakan1/CVE-2025-6934)
- [0xTerror/CVE-2025-6934](https://github.com/0xTerror/CVE-2025-6934)
- [MejbanKadir/CVE-2025-6934-PoC](https://github.com/MejbanKadir/CVE-2025-6934-PoC)
+### CVE-2025-6970 (2025-07-09)
+
+The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
+
+
+- [RandomRobbieBF/CVE-2025-6970](https://github.com/RandomRobbieBF/CVE-2025-6970)
+
+### CVE-2025-6980 (2025-10-23)
+
+Captive Portal can expose sensitive information
+
+
+- [BishopFox/CVE-2025-6980-check](https://github.com/BishopFox/CVE-2025-6980-check)
+
+### CVE-2025-6998 (2025-07-24)
+
+ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.
+
+
+- [mind2hex/CVE-2025-6998-CalibreWeb-0.6.24-ReDoS](https://github.com/mind2hex/CVE-2025-6998-CalibreWeb-0.6.24-ReDoS)
+
+### CVE-2025-7338 (2025-07-17)
+
+Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available.
+
+
+- [r2c-CSE/multer-sca-rule-test_cve-2025-7338](https://github.com/r2c-CSE/multer-sca-rule-test_cve-2025-7338)
+
+### CVE-2025-7340 (2025-07-15)
+
+The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload() function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [Nxploited/CVE-2025-7340](https://github.com/Nxploited/CVE-2025-7340)
+- [Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE](https://github.com/Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE)
+
+### CVE-2025-7404 (2025-07-24)
+
+Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.
+
+
+- [mind2hex/CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection](https://github.com/mind2hex/CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection)
+
### CVE-2025-7431 (2025-07-18)
The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin slug setting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
@@ -4120,6 +4497,13 @@
- [AnotherSec/CVE-2025-7441](https://github.com/AnotherSec/CVE-2025-7441)
+### CVE-2025-7461 (2025-07-12)
+
+Eine Schwachstelle wurde in code-projects Modern Bag 1.0 gefunden. Sie wurde als kritisch eingestuft. Dies betrifft einen unbekannten Teil der Datei /action.php. Mittels dem Manipulieren des Arguments proId mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [bx33661/CVE-2025-7461](https://github.com/bx33661/CVE-2025-7461)
+
### CVE-2025-7545 (2025-07-13)
In GNU Binutils 2.45 wurde eine problematische Schwachstelle entdeckt. Dabei geht es um die Funktion copy_section der Datei binutils/objcopy.c. Durch Manipulation mit unbekannten Daten kann eine heap-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur öffentlichen Verfügung. Der Patch wird als 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944 bezeichnet. Als bestmögliche Massnahme wird Patching empfohlen.
@@ -4127,12 +4511,51 @@
- [alxsourin/Firmware-CVE-2025-7545](https://github.com/alxsourin/Firmware-CVE-2025-7545)
+### CVE-2025-7605 (2025-07-14)
+
+Eine kritische Schwachstelle wurde in code-projects AVL Rooms 1.0 ausgemacht. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /profile.php. Durch Beeinflussen des Arguments first_name mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [sunhuiHi666/CVE-2025-7605](https://github.com/sunhuiHi666/CVE-2025-7605)
+
+### CVE-2025-7606 (2025-07-14)
+
+Es wurde eine Schwachstelle in code-projects AVL Rooms 1.0 entdeckt. Sie wurde als kritisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /city.php. Dank der Manipulation des Arguments city mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [sunhuiHi666/CVE-2025-7606](https://github.com/sunhuiHi666/CVE-2025-7606)
+
+### CVE-2025-7753 (2025-07-17)
+
+Es wurde eine Schwachstelle in code-projects Online Appointment Booking System 1.0 ausgemacht. Sie wurde als kritisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Datei /admin/adddoctor.php. Durch das Beeinflussen des Arguments Username mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-7753](https://github.com/byteReaper77/CVE-2025-7753)
+
+### CVE-2025-7766 (2025-07-22)
+
+Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.
+
+
+- [byteReaper77/CVE-2025-7766](https://github.com/byteReaper77/CVE-2025-7766)
+
+### CVE-2025-7769 (2025-08-06)
+
+Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this enables attackers to execute arbitrary commands on the device that could cause potential unauthorized access, service disruption, and data exposure.
+
+
+- [byteReaper77/CVE-2025-7769](https://github.com/byteReaper77/CVE-2025-7769)
+
### CVE-2025-7771 (2025-08-06)
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions with ring-0 privileges. The vulnerability enables local attackers to execute arbitrary code in kernel context, resulting in privilege escalation and potential follow-on attacks, such as disabling security software or bypassing kernel-level protections. ThrottleStop.sys version 3.0.0.0 and possibly others are affected. Apply updates per vendor instructions.
+- [fxrstor/ThrottleStopPoC](https://github.com/fxrstor/ThrottleStopPoC)
+- [Demoo1337/ThrottleStop](https://github.com/Demoo1337/ThrottleStop)
- [Gabriel-Lacorte/CVE-2025-7771](https://github.com/Gabriel-Lacorte/CVE-2025-7771)
+- [AmrHuss/throttlestop-exploit-rw](https://github.com/AmrHuss/throttlestop-exploit-rw)
+- [v31l0x1/ThrottleStopPPL](https://github.com/v31l0x1/ThrottleStopPPL)
- [xM0kht4r/CVE-2025-7771](https://github.com/xM0kht4r/CVE-2025-7771)
- [lzty/CVE-2025-7771](https://github.com/lzty/CVE-2025-7771)
- [DeathShotXD/0xKern3lCrush](https://github.com/DeathShotXD/0xKern3lCrush)
@@ -4144,7 +4567,10 @@
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX
+- [swabird/CVE-2025-7775-PoC](https://github.com/swabird/CVE-2025-7775-PoC)
+- [Aaqilyousuf/CVE-2025-7775-vulnerable-lab](https://github.com/Aaqilyousuf/CVE-2025-7775-vulnerable-lab)
- [rxerium/CVE-2025-7775](https://github.com/rxerium/CVE-2025-7775)
+- [mr-r3b00t/CVE-2025-7775](https://github.com/mr-r3b00t/CVE-2025-7775)
### CVE-2025-7783 (2025-07-18)
@@ -4153,20 +4579,93 @@
- [benweissmann/CVE-2025-7783-poc](https://github.com/benweissmann/CVE-2025-7783-poc)
+### CVE-2025-7795 (2025-07-18)
+
+Eine kritische Schwachstelle wurde in Tenda FH451 1.0.0.9 entdeckt. Es geht hierbei um die Funktion fromP2pListFilter der Datei /goform/P2pListFilter. Dank Manipulation des Arguments page mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-7795](https://github.com/byteReaper77/CVE-2025-7795)
+
+### CVE-2025-7840 (2025-07-19)
+
+Es wurde eine Schwachstelle in Campcodes Online Movie Theater Seat Reservation System 1.0 ausgemacht. Sie wurde als problematisch eingestuft. Hiervon betroffen ist ein unbekannter Codeblock der Datei /index.php?page=reserve der Komponente Reserve Your Seat Page. Durch das Beeinflussen des Arguments Firstname/Lastname mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-7840](https://github.com/byteReaper77/CVE-2025-7840)
+
+### CVE-2025-7847 (2025-07-31)
+
+The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_simpleFileUpload() function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server when the REST API is enabled, which may make remote code execution possible.
+
+
+- [EricArdiansa/CVE-2025-7847-POC](https://github.com/EricArdiansa/CVE-2025-7847-POC)
+
+### CVE-2025-7892 (2025-07-20)
+
+Es wurde eine Schwachstelle in IDnow App bis 9.6.0 für Android entdeckt. Sie wurde als problematisch eingestuft. Es geht dabei um eine nicht klar definierte Funktion der Datei AndroidManifest.xml der Komponente de.idnow. Durch das Beeinflussen mit unbekannten Daten kann eine improper export of android application components-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [FlyingLemonade/CVE-2025-7892-Proof-of-Concept-Login-Form](https://github.com/FlyingLemonade/CVE-2025-7892-Proof-of-Concept-Login-Form)
+
+### CVE-2025-7955 (2025-08-28)
+
+The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identical bogus codes.
+
+
+- [Nxploited/CVE-2025-7955](https://github.com/Nxploited/CVE-2025-7955)
+
+### CVE-2025-8018 (2025-07-22)
+
+In code-projects Food Ordering Review System 1.0 wurde eine kritische Schwachstelle ausgemacht. Das betrifft eine unbekannte Funktionalität der Datei /user/reservation_page.php. Durch die Manipulation des Arguments reg_Id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [drackyjr/CVE-2025-8018](https://github.com/drackyjr/CVE-2025-8018)
+
### CVE-2025-8061 (2025-09-11)
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
+- [segura2010/lenovo-dispatcher-poc](https://github.com/segura2010/lenovo-dispatcher-poc)
+- [spawn451/CVE-2025-8061-Exploit](https://github.com/spawn451/CVE-2025-8061-Exploit)
- [vxqs/Lenovo-CVE-2025-8061](https://github.com/vxqs/Lenovo-CVE-2025-8061)
+### CVE-2025-8067 (2025-08-28)
+
+A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor list and index specifying the file where the loop device should be backed. The function itself validates the index value to ensure it isn't bigger than the maximum value allowed. However, it fails to validate the lower bound, allowing the index parameter to be a negative value. Under these circumstances, an attacker can cause the UDisks daemon to crash or perform a local privilege escalation by gaining access to files owned by privileged users.
+
+
+- [born0monday/CVE-2025-8067](https://github.com/born0monday/CVE-2025-8067)
+
### CVE-2025-8088 (2025-08-08)
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček\n from ESET.
- [aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool](https://github.com/aldisakti2/CVE-2025-8088-BUILDER-Winrar-Tool)
+- [jordan922/CVE-2025-8088](https://github.com/jordan922/CVE-2025-8088)
+- [travisbgreen/cve-2025-8088](https://github.com/travisbgreen/cve-2025-8088)
+- [knight0x07/WinRAR-CVE-2025-8088-PoC-RAR](https://github.com/knight0x07/WinRAR-CVE-2025-8088-PoC-RAR)
+- [sxyrxyy/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-](https://github.com/sxyrxyy/CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-)
+- [onlytoxi/CVE-2025-8088-Winrar-Tool](https://github.com/onlytoxi/CVE-2025-8088-Winrar-Tool)
+- [0xAbolfazl/CVE-2025-8088-WinRAR-PathTraversal-PoC](https://github.com/0xAbolfazl/CVE-2025-8088-WinRAR-PathTraversal-PoC)
+- [pentestfunctions/CVE-2025-8088-Multi-Document](https://github.com/pentestfunctions/CVE-2025-8088-Multi-Document)
+- [pexlexity/WinRAR-CVE-2025-8088-Path-Traversal-PoC](https://github.com/pexlexity/WinRAR-CVE-2025-8088-Path-Traversal-PoC)
+- [nhattanhh/CVE-2025-8088](https://github.com/nhattanhh/CVE-2025-8088)
+- [Syrins/CVE-2025-8088-Winrar-Tool-Gui](https://github.com/Syrins/CVE-2025-8088-Winrar-Tool-Gui)
+- [ghostn4444/CVE-2025-8088](https://github.com/ghostn4444/CVE-2025-8088)
+- [DeepBlue-dot/CVE-2025-8088-WinRAR-Startup-PoC](https://github.com/DeepBlue-dot/CVE-2025-8088-WinRAR-Startup-PoC)
+- [pescada-dev/-CVE-2025-8088](https://github.com/pescada-dev/-CVE-2025-8088)
+- [AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal](https://github.com/AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal)
+- [pentestfunctions/best-CVE-2025-8088](https://github.com/pentestfunctions/best-CVE-2025-8088)
+- [kitsuneshade/WinRAR-Exploit-Tool---Rust-Edition](https://github.com/kitsuneshade/WinRAR-Exploit-Tool---Rust-Edition)
+- [walidpyh/CVE-2025-8088](https://github.com/walidpyh/CVE-2025-8088)
+- [hexsecteam/CVE-2025-8088-Winrar-Tool](https://github.com/hexsecteam/CVE-2025-8088-Winrar-Tool)
- [techcorp/CVE-2025-8088-Exploit](https://github.com/techcorp/CVE-2025-8088-Exploit)
+- [Shinkirou789/Cve-2025-8088-WinRar-vulnerability](https://github.com/Shinkirou789/Cve-2025-8088-WinRar-vulnerability)
+- [hbesljx/CVE-2025-8088-EXP](https://github.com/hbesljx/CVE-2025-8088-EXP)
+- [starfallreverie/winrar-exploit](https://github.com/starfallreverie/winrar-exploit)
+- [xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit](https://github.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit)
- [Markusino488/cve-2025-8088](https://github.com/Markusino488/cve-2025-8088)
- [ilhamrzr/RAR-Anomaly-Inspector](https://github.com/ilhamrzr/RAR-Anomaly-Inspector)
- [IsmaelCosma/CVE-2025-8088](https://github.com/IsmaelCosma/CVE-2025-8088)
@@ -4186,6 +4685,10 @@
Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.
+- [rxerium/CVE-2025-8110](https://github.com/rxerium/CVE-2025-8110)
+- [zAbuQasem/gogs-CVE-2025-8110](https://github.com/zAbuQasem/gogs-CVE-2025-8110)
+- [111ddea/goga-cve-2025-8110](https://github.com/111ddea/goga-cve-2025-8110)
+- [tovd-go/CVE-2025-8110](https://github.com/tovd-go/CVE-2025-8110)
- [freiwi/CVE-2025-8110](https://github.com/freiwi/CVE-2025-8110)
- [George0Papasotiriou/CVE-2025-8110-Gogs-Remote-Code-Execution](https://github.com/George0Papasotiriou/CVE-2025-8110-Gogs-Remote-Code-Execution)
- [3jee/CVE-2025-8110](https://github.com/3jee/CVE-2025-8110)
@@ -4205,6 +4708,8 @@
- [mayank-s16/Swagger-HTML-Injection-CVE-2025-8191](https://github.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191)
+- [byteReaper77/CVE-2025-8191](https://github.com/byteReaper77/CVE-2025-8191)
+- [YanC1e/CVE-2025-8191](https://github.com/YanC1e/CVE-2025-8191)
### CVE-2025-8220 (2025-07-27)
@@ -4213,15 +4718,88 @@
- [m3m0o/engeman-web-language-combobox-sqli](https://github.com/m3m0o/engeman-web-language-combobox-sqli)
+### CVE-2025-8422 (2025-09-11)
+
+The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
+
+
+- [RandomRobbieBF/CVE-2025-8422](https://github.com/RandomRobbieBF/CVE-2025-8422)
+
+### CVE-2025-8471 (2025-08-02)
+
+Eine Schwachstelle wurde in projectworlds Online Admission System 1.0 entdeckt. Sie wurde als kritisch eingestuft. Es geht hierbei um eine nicht näher spezifizierte Funktion der Datei /adminlogin.php. Mittels dem Manipulieren des Arguments a_id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-8471](https://github.com/byteReaper77/CVE-2025-8471)
+
+### CVE-2025-8517 (2025-08-04)
+
+In givanz Vvveb 1.0.6.1 ist eine Schwachstelle entdeckt worden. Betroffen ist eine unbekannte Verarbeitung. Durch die Manipulation mit unbekannten Daten kann eine session fixiation-Schwachstelle ausgenutzt werden. Es ist möglich, den Angriff aus der Ferne durchzuführen. Der Exploit ist öffentlich verfügbar und könnte genutzt werden. Das Aktualisieren auf Version 1.0.7 kann dieses Problem lösen. Der Patch wird als d4b1e030066417b77d15b4ac505eed5ae7bf2c5e bezeichnet. Ein Upgrade der betroffenen Komponente wird empfohlen.
+
+
+- [helloandrewpaul/Session-Fixation-in-Vvveb-CMS-v1.0.6.1](https://github.com/helloandrewpaul/Session-Fixation-in-Vvveb-CMS-v1.0.6.1)
+
+### CVE-2025-8518 (2025-08-04)
+
+Eine kritische Schwachstelle wurde in givanz Vvveb 1.0.5 ausgemacht. Hierbei geht es um die Funktion Save der Datei admin/controller/editor/code.php der Komponente Code Editor. Durch das Manipulieren mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 1.0.6 vermag dieses Problem zu lösen. Der Patch wird als f684f3e374d04db715730fc4796e102f5ebcacb2 bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
+
+
+- [maestro-ant/Vvveb-CMS-CVE-2025-8518](https://github.com/maestro-ant/Vvveb-CMS-CVE-2025-8518)
+
+### CVE-2025-8550 (2025-08-05)
+
+In atjiu pybbs bis 6.0.0 wurde eine problematische Schwachstelle ausgemacht. Hierbei betrifft es unbekannten Programmcode der Datei /admin/topic/list. Durch das Beeinflussen des Arguments Username mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Der Patch wird als 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22 bezeichnet. Als bestmögliche Massnahme wird Patching empfohlen.
+
+
+- [byteReaper77/CVE-2025-8550](https://github.com/byteReaper77/CVE-2025-8550)
+
+### CVE-2025-8570 (2025-09-11)
+
+The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 3.0.1. This makes it possible for unauthenticated attackers to craft valid tokens and assume any user’s identity.
+
+
+- [Nxploited/CVE-2025-8570](https://github.com/Nxploited/CVE-2025-8570)
+- [chimdi2700/CVE-2025-8570](https://github.com/chimdi2700/CVE-2025-8570)
+
+### CVE-2025-8571 (2025-08-05)
+
+Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and (if victim is an admin), the execution of unauthorized actions. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Fortbridge https://fortbridge.co.uk/ for performing a penetration test and vulnerability assessment on Concrete CMS and reporting this issue.
+
+
+- [chimdi2700/CVE-2025-8571](https://github.com/chimdi2700/CVE-2025-8571)
+
### CVE-2025-8671 (2025-08-13)
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
- [moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS](https://github.com/moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS)
+- [mateusm1403/PoC-CVE-2025-8671-MadeYouReset-HTTP-2](https://github.com/mateusm1403/PoC-CVE-2025-8671-MadeYouReset-HTTP-2)
+- [abiyeenzo/CVE-2025-8671](https://github.com/abiyeenzo/CVE-2025-8671)
- [mysara2022/CVE-2025-8671-vulnerability-POC-](https://github.com/mysara2022/CVE-2025-8671-vulnerability-POC-)
- [ayushghatkar8080/MadeYouReset_Tester](https://github.com/ayushghatkar8080/MadeYouReset_Tester)
+### CVE-2025-8714 (2025-08-14)
+
+Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. This is similar to MySQL CVE-2024-21096. Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 are affected.
+
+
+- [orderby99/CVE-2025-8714-POC](https://github.com/orderby99/CVE-2025-8714-POC)
+
+### CVE-2025-8723 (2025-08-19)
+
+The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispatch() method in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary PHP into the codebase, achieving remote code execution.
+
+
+- [Nxploited/CVE-2025-8723](https://github.com/Nxploited/CVE-2025-8723)
+
+### CVE-2025-8730 (2025-08-08)
+
+Eine Schwachstelle wurde in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 gefunden. Sie wurde als kritisch eingestuft. Es geht hierbei um eine nicht näher spezifizierte Funktion der Komponente Web Interface. Mittels Manipulieren mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-8730](https://github.com/byteReaper77/CVE-2025-8730)
+
### CVE-2025-8875 (2025-08-14)
Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
@@ -4229,13 +4807,45 @@
- [rxerium/CVE-2025-8875-CVE-2025-8876](https://github.com/rxerium/CVE-2025-8875-CVE-2025-8876)
+### CVE-2025-8889 (2025-09-09)
+
+The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup)
+
+
+- [siberkampus/CVE-2025-8889](https://github.com/siberkampus/CVE-2025-8889)
+
+### CVE-2025-8924 (2025-08-13)
+
+Betroffen davon ist ein unbekannter Prozess der Datei /viewbill.php. Durch die Manipulation des Arguments ID mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [encrypter15/CVE-2025-8924](https://github.com/encrypter15/CVE-2025-8924)
+
+### CVE-2025-8971 (2025-08-14)
+
+Das betrifft eine unbekannte Funktionalität der Datei /admin/operations/travellers.php. Durch das Beeinflussen des Arguments val-username mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-8971](https://github.com/byteReaper77/CVE-2025-8971)
+
### CVE-2025-9074 (2025-08-20)
A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine API via the configured Docker subnet, at 192.168.65.7:2375 by default. This vulnerability occurs with or without Enhanced Container Isolation (ECI) enabled, and with or without the "Expose daemon on tcp://localhost:2375 without TLS" option enabled.\nThis can lead to execution of a wide range of privileged commands to the engine API, including controlling other containers, creating new ones, managing images etc. In some circumstances (e.g. Docker Desktop for Windows with WSL backend) it also allows mounting the host drive with the same privileges as the user running Docker Desktop.
- [KvzinNcpx7/CVE-2025-9074_DAEMON_KILLER](https://github.com/KvzinNcpx7/CVE-2025-9074_DAEMON_KILLER)
+- [XRayZen/cve-2025-9074-poc](https://github.com/XRayZen/cve-2025-9074-poc)
+- [zenzue/CVE-2025-9074](https://github.com/zenzue/CVE-2025-9074)
+- [j3r1ch0123/CVE-2025-9074](https://github.com/j3r1ch0123/CVE-2025-9074)
- [pucagit/CVE-2025-9074](https://github.com/pucagit/CVE-2025-9074)
+- [BridgerAlderson/CVE-2025-9074-PoC](https://github.com/BridgerAlderson/CVE-2025-9074-PoC)
+- [xwpdx0/poc-2025-9074](https://github.com/xwpdx0/poc-2025-9074)
+- [PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape](https://github.com/PtechAmanja/CVE-2025-9074-Docker-Desktop-Container-Escape)
+- [pppxo/CVE-2025-9074-PoC-Bash](https://github.com/pppxo/CVE-2025-9074-PoC-Bash)
+- [3rendil/CVE-2025-9074-POC](https://github.com/3rendil/CVE-2025-9074-POC)
+- [fsoc-ghost-0x/CVE-2025-9074_DAEMON_KILLER](https://github.com/fsoc-ghost-0x/CVE-2025-9074_DAEMON_KILLER)
+- [zaydbf/CVE-2025-9074-Poc](https://github.com/zaydbf/CVE-2025-9074-Poc)
+- [Shaoshi17/CVE-2025-9074-Docker-Exploit](https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit)
- [KvzinNcpx7/kvzinncpx7.github.io](https://github.com/KvzinNcpx7/kvzinncpx7.github.io)
- [x0da6h/POC-for-CVE-2025-9074](https://github.com/x0da6h/POC-for-CVE-2025-9074)
- [matesz44/CVE-2025-9074](https://github.com/matesz44/CVE-2025-9074)
@@ -4244,6 +4854,13 @@
- [Medaz-Sploit/CVE-2025-9074-Docker-Desktop-API-Escape-PoC](https://github.com/Medaz-Sploit/CVE-2025-9074-Docker-Desktop-API-Escape-PoC)
- [c0gnit00/CVE-2025-9074](https://github.com/c0gnit00/CVE-2025-9074)
+### CVE-2025-9090 (2025-08-17)
+
+In Tenda AC20 16.03.08.12 wurde eine Schwachstelle gefunden. Dabei betrifft es die Funktion websFormDefine der Datei /goform/telnet der Komponente Telnet Service. Mittels dem Manipulieren mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [byteReaper77/CVE-2025-9090](https://github.com/byteReaper77/CVE-2025-9090)
+
### CVE-2025-9172 (2025-08-26)
The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -4258,6 +4875,34 @@
- [MooseLoveti/Trinity-Audio-CVE-Report](https://github.com/MooseLoveti/Trinity-Audio-CVE-Report)
+### CVE-2025-9209 (2025-10-03)
+
+The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated attackers to forge JWT tokens for other users, including administrators, and authenticate as them.
+
+
+- [Nxploited/CVE-2025-9209](https://github.com/Nxploited/CVE-2025-9209)
+
+### CVE-2025-9215 (2025-09-17)
+
+The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the file_download() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
+
+
+- [d0n601/CVE-2025-9215](https://github.com/d0n601/CVE-2025-9215)
+
+### CVE-2025-9216 (2025-09-17)
+
+The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to, and including, 1.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-9216](https://github.com/d0n601/CVE-2025-9216)
+
+### CVE-2025-9223 (2025-11-11)
+
+Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.
+
+
+- [networkkiller/CVE-2025-9223](https://github.com/networkkiller/CVE-2025-9223)
+
### CVE-2025-9242 (2025-09-17)
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
@@ -4265,13 +4910,42 @@
- [watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242](https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242)
+### CVE-2025-9267 (2025-09-26)
+
+In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their origin or integrity. This behavior can be exploited by placing a malicious DLL in the same directory as the installer executable, leading to arbitrary code execution with the privileges of the user running the installer. The issue stems from the use of insecure DLL loading practices, such as relying on relative paths or failing to specify fully qualified paths when invoking system libraries.
+
+
+- [Tiger3080/CVE-2025-9267](https://github.com/Tiger3080/CVE-2025-9267)
+
### CVE-2025-9316 (2025-11-12)
N-central < 2025.4 can generate sessionIDs for unauthenticated users\n\n\n\n\n\nThis issue affects N-central: before 2025.4.
+- [horizon3ai/n-able_n-central_xxe_file_read](https://github.com/horizon3ai/n-able_n-central_xxe_file_read)
- [zyyyys123/CVE-2025-9316_CVE-2025-11700](https://github.com/zyyyys123/CVE-2025-9316_CVE-2025-11700)
+### CVE-2025-9345 (2025-08-28)
+
+The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory.
+
+
+- [NagisaYumaa/CVE-2025-9345](https://github.com/NagisaYumaa/CVE-2025-9345)
+
+### CVE-2025-9435 (2026-01-13)
+
+Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module
+
+
+- [passtheticket/CVE-2025-9435](https://github.com/passtheticket/CVE-2025-9435)
+
+### CVE-2025-9478 (2025-08-26)
+
+Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
+
+
+- [Kamgreen50/STIG-Edge-RCE-CVE2025-9478](https://github.com/Kamgreen50/STIG-Edge-RCE-CVE2025-9478)
+
### CVE-2025-9485 (2025-10-04)
The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the `get_resource_owner_from_id_token` function. This makes it possible for unauthenticated attackers to bypass authentication and gain access to any existing user account - including administrators in certain configurations - or to create arbitrary subscriber-level accounts.
@@ -4279,6 +4953,13 @@
- [jFriedli/CVE-2025-9485](https://github.com/jFriedli/CVE-2025-9485)
+### CVE-2025-9491 (2025-08-26)
+
+Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the handling of .LNK files. Crafted data in an .LNK file can cause hazardous content in the file to be invisible to a user who inspects the file via the Windows-provided user interface. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25373.
+
+
+- [Amperclock/CVE-2025-9491_POC](https://github.com/Amperclock/CVE-2025-9491_POC)
+
### CVE-2025-9501 (2025-11-17)
The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.
@@ -4286,6 +4967,13 @@
- [InnerFireZ/CVE-2025_9501-POC](https://github.com/InnerFireZ/CVE-2025_9501-POC)
+### CVE-2025-9728 (2025-08-31)
+
+Es wurde eine Schwachstelle in givanz Vvveb 1.0.7.2 entdeckt. Betroffen ist eine unbekannte Funktion der Datei app/template/user/login.tpl. Durch die Manipulation des Arguments Email/Password mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Ein Angriff ist aus der Distanz möglich. Der Patch trägt den Namen bbd4c42c66ab818142240348173a669d1d2537fe. Es wird geraten, einen Patch zu installieren, um dieses Problem zu lösen.
+
+
+- [helloandrewpaul/Reflected-XSS-in-Vvveb-CMS-v1.0.7.2](https://github.com/helloandrewpaul/Reflected-XSS-in-Vvveb-CMS-v1.0.7.2)
+
### CVE-2025-9776 (2025-09-11)
The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -4300,6 +4988,13 @@
- [drackyjr/CVE-2025-9784](https://github.com/drackyjr/CVE-2025-9784)
+### CVE-2025-9816 (2025-09-27)
+
+The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
+
+
+- [monzaviman/CVE-2025-9816](https://github.com/monzaviman/CVE-2025-9816)
+
### CVE-2025-9876 (2025-10-03)
The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
@@ -4321,6 +5016,13 @@
- [titanmaster96/cve-2025-9933](https://github.com/titanmaster96/cve-2025-9933)
+### CVE-2025-9961 (2025-09-06)
+
+An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. \n\nThe exploit can only be conducted via a Man-In-The-Middle (MITM) attack. \n\nThis issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6: before 1.3.11.
+
+
+- [yt2w/CVE-2025-9961](https://github.com/yt2w/CVE-2025-9961)
+
### CVE-2025-9967 (2025-10-15)
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's password to a one-time password if the attacker knows the user's phone number
@@ -4341,6 +5043,8 @@
- [rxerium/CVE-2025-10035](https://github.com/rxerium/CVE-2025-10035)
+- [ThemeHackers/CVE-2025-10035](https://github.com/ThemeHackers/CVE-2025-10035)
+- [orange0Mint/CVE-2025-10035_GoAnywhere](https://github.com/orange0Mint/CVE-2025-10035_GoAnywhere)
### CVE-2025-10042 (2025-09-17)
@@ -4349,6 +5053,13 @@
- [fumioryoto/Quiz-Maker-SQL-Injection-CVE-2025-10042](https://github.com/fumioryoto/Quiz-Maker-SQL-Injection-CVE-2025-10042)
+### CVE-2025-10046 (2025-09-06)
+
+The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the 'file_to_delete' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
+
+
+- [byteReaper77/CVE-2025-10046](https://github.com/byteReaper77/CVE-2025-10046)
+
### CVE-2025-10142 (2025-09-10)
The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -4385,6 +5096,14 @@
- [People-11/CVE-2025-10184_PoC](https://github.com/People-11/CVE-2025-10184_PoC)
- [yuuouu/ColorOS-CVE-2025-10184](https://github.com/yuuouu/ColorOS-CVE-2025-10184)
+### CVE-2025-10230 (2025-11-07)
+
+A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
+
+
+- [nehkark/CVE-2025-10230](https://github.com/nehkark/CVE-2025-10230)
+- [marcostolosa/CVE-2025-10230](https://github.com/marcostolosa/CVE-2025-10230)
+
### CVE-2025-10294 (2025-10-15)
The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet.
@@ -4413,6 +5132,20 @@
- [tempiltin/CVE-2025-10353-POC](https://github.com/tempiltin/CVE-2025-10353-POC)
+### CVE-2025-10377 (2025-09-26)
+
+The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sd_toggle_logs() function. This makes it possible for unauthenticated attackers to toggle critical logging settings including Page Access Logs, Error Logs, and Email Delivery Logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
+
+
+- [NagisaYumaa/CVE-2025-10377](https://github.com/NagisaYumaa/CVE-2025-10377)
+
+### CVE-2025-10585 (2025-09-24)
+
+Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
+
+
+- [AdityaBhatt3010/CVE-2025-10585-The-Chrome-V8-Zero-Day](https://github.com/AdityaBhatt3010/CVE-2025-10585-The-Chrome-V8-Zero-Day)
+
### CVE-2025-10658 (2025-09-20)
The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.3.7. This is due to missing rate limiting on the OTP verification for guest login. This makes it possible for unauthenticated attackers to bypass authentication and gain unauthorized access to customer support tickets by brute forcing the 6-digit OTP code.
@@ -4434,6 +5167,31 @@
- [lorenzocamilli/CVE-2025-10720-PoC](https://github.com/lorenzocamilli/CVE-2025-10720-PoC)
+### CVE-2025-11001 (2025-11-19)
+
+7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
+
+
+- [pacbypass/CVE-2025-11001](https://github.com/pacbypass/CVE-2025-11001)
+- [lastvocher/7zip-CVE-2025-11001](https://github.com/lastvocher/7zip-CVE-2025-11001)
+- [mbanyamer/CVE-2025-11001---7-Zip](https://github.com/mbanyamer/CVE-2025-11001---7-Zip)
+- [ranasen-rat/CVE-2025-11001](https://github.com/ranasen-rat/CVE-2025-11001)
+- [I3r1h0n/7Ziprowler](https://github.com/I3r1h0n/7Ziprowler)
+
+### CVE-2025-11077 (2025-09-27)
+
+Es wurde eine Schwachstelle in Campcodes Online Learning Management System 1.0 entdeckt. Es geht hierbei um eine nicht näher spezifizierte Funktion der Datei /admin/add_content.php. Dank Manipulation des Arguments Title mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Die Schwachstelle wurde öffentlich offengelegt und könnte ausgenutzt werden.
+
+
+- [byteReaper77/CVE-2025-11077](https://github.com/byteReaper77/CVE-2025-11077)
+
+### CVE-2025-11170 (2025-11-11)
+
+The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [Nxploited/CVE-2025-11170](https://github.com/Nxploited/CVE-2025-11170)
+
### CVE-2025-11171 (2025-10-08)
The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter, without any nonce or capability checks. This makes it possible for unauthenticated attackers to execute administrative functions via the wp-admin/admin-ajax.php endpoint granted they can identify callable method names.
@@ -4483,6 +5241,13 @@
- [lylzjnqe/CVE-2025-11460-Chrome-RCE](https://github.com/lylzjnqe/CVE-2025-11460-Chrome-RCE)
+### CVE-2025-11492 (2025-10-16)
+
+In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some communications over the HTTP channel is updated in the Automate 2025.9 patch to enforce HTTPS for all agent communications.
+
+
+- [synap5e/connectwise-automate-AiTM-rce](https://github.com/synap5e/connectwise-automate-AiTM-rce)
+
### CVE-2025-11627 (2025-10-30)
The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause denial of service via disk space exhaustion.
@@ -4490,6 +5255,13 @@
- [jFriedli/CVE-2025-11627](https://github.com/jFriedli/CVE-2025-11627)
+### CVE-2025-11749 (2025-11-05)
+
+The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.
+
+
+- [Nxploited/CVE-2025-11749](https://github.com/Nxploited/CVE-2025-11749)
+
### CVE-2025-11771 (2025-11-21)
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'createSaleRecord' function in all versions up to, and including, 2.4.7. This makes it possible for unauthenticated attackers to manipulate presales counters.
@@ -4504,6 +5276,13 @@
- [NetVanguard-cmd/CVE-2025-11832](https://github.com/NetVanguard-cmd/CVE-2025-11832)
+### CVE-2025-11833 (2025-11-01)
+
+The Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the __construct function in all versions up to, and including, 3.6.0. This makes it possible for unauthenticated attackers to read arbitrary logged emails sent through the Post SMTP plugin, including password reset emails containing password reset links, which can lead to account takeover.
+
+
+- [bocgoInfosec/CVE-2025-11833-PoC](https://github.com/bocgoInfosec/CVE-2025-11833-PoC)
+
### CVE-2025-11844 (2025-10-22)
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0.
@@ -4523,6 +5302,7 @@
The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.
+- [GhoStZA-debug/PoC-CVE-collection](https://github.com/GhoStZA-debug/PoC-CVE-collection)
- [Mr-In4inci3le/CVE-2025-11953-POC-](https://github.com/Mr-In4inci3le/CVE-2025-11953-POC-)
- [boroeurnprach/CVE-2025-11953-PoC](https://github.com/boroeurnprach/CVE-2025-11953-PoC)
@@ -4568,6 +5348,21 @@
- [DeadExpl0it/CVE-2025-12057-WordPress-Exploit-PoC](https://github.com/DeadExpl0it/CVE-2025-12057-WordPress-Exploit-PoC)
+### CVE-2025-12097 (2025-12-04)
+
+There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure. Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files. This vulnerability existed in the NI System Web Server 2012 and prior versions. It was fixed in 2013.
+
+
+- [matejsmycka/PoC-CVE-2025-12097](https://github.com/matejsmycka/PoC-CVE-2025-12097)
+
+### CVE-2025-12101 (2025-11-11)
+
+Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
+
+
+- [6h4ack/CVE-2025-12101-checker](https://github.com/6h4ack/CVE-2025-12101-checker)
+- [boneys/CVE-2025-12101-Scanner-PoC](https://github.com/boneys/CVE-2025-12101-Scanner-PoC)
+
### CVE-2025-12137 (2025-11-01)
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.14.16. This is due to the plugin's REST API endpoint accepting arbitrary absolute file paths without proper validation in the 'attach_file()' function when handling 'file_local' actions. This makes it possible for authenticated attackers, with administrator-level access and above, to read arbitrary files on the server's filesystem, including sensitive configuration files and system files via the 'local_url' parameter.
@@ -4575,6 +5370,13 @@
- [jFriedli/CVE-2025-12137](https://github.com/jFriedli/CVE-2025-12137)
+### CVE-2025-12139 (2025-11-05)
+
+The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthenticated attackers to extract sensitive data including Google OAuth credentials (client_id and client_secret) and Google account email addresses.
+
+
+- [Galaxy-sc/CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit](https://github.com/Galaxy-sc/CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit)
+
### CVE-2025-12163 (2025-12-05)
The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
@@ -4589,6 +5391,13 @@
- [cyberdudebivash/CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script](https://github.com/cyberdudebivash/CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script)
+### CVE-2025-12539 (2025-11-11)
+
+The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the web-accessible wp-content directory without adequate protection in the "Tnc_Wp_Toolbox_Settings::save_settings" function. This makes it possible for unauthenticated attackers to retrieve these credentials and use them to interact with the cPanel API, which can lead to arbitrary file uploads, remote code execution, and full compromise of the hosting environment.
+
+
+- [Nxploited/CVE-2025-12539](https://github.com/Nxploited/CVE-2025-12539)
+
### CVE-2025-12543 (2026-01-07)
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
@@ -4596,6 +5405,13 @@
- [kavin71725/CVE-2025-12543-Fix-for-Wildfly](https://github.com/kavin71725/CVE-2025-12543-Fix-for-Wildfly)
+### CVE-2025-12673 (2025-12-06)
+
+The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-12673](https://github.com/d0n601/CVE-2025-12673)
+
### CVE-2025-12674 (2025-11-05)
The KiotViet Sync plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the create_media() function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -4603,13 +5419,99 @@
- [Nxploited/CVE-2025-12674](https://github.com/Nxploited/CVE-2025-12674)
+### CVE-2025-12720 (2025-12-06)
+
+The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization that can be spoofed in the handle_enqueue_only() function in all versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to delete arbitrary products.
+
+
+- [d0n601/CVE-2025-12720](https://github.com/d0n601/CVE-2025-12720)
+
+### CVE-2025-12721 (2025-12-06)
+
+The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /server_status REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attackers to extract information about the server.
+
+
+- [d0n601/CVE-2025-12721](https://github.com/d0n601/CVE-2025-12721)
+
### CVE-2025-12735 (2025-11-05)
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.
+- [alnashawatirohwederb2167-max/cve-2025-12735-expr-eval-rce](https://github.com/alnashawatirohwederb2167-max/cve-2025-12735-expr-eval-rce)
+- [AN5I/cve-2025-12735-expr-eval-rce](https://github.com/AN5I/cve-2025-12735-expr-eval-rce)
- [alecasg555/safe-expr-eval](https://github.com/alecasg555/safe-expr-eval)
+### CVE-2025-12744 (2025-12-03)
+
+A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.
+
+
+- [initstring/abrt_root](https://github.com/initstring/abrt_root)
+
+### CVE-2025-12748 (2025-11-11)
+
+A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.
+
+
+- [TERESH1/CVE-2025-12748](https://github.com/TERESH1/CVE-2025-12748)
+
+### CVE-2025-12758 (2025-11-27)
+
+Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequence which lead to improper string length calculation. This can lead to an application using isLength for input validation accepting strings significantly longer than intended, resulting in issues like data truncation in databases, buffer overflows in other system components, or denial-of-service.
+
+
+- [open-flaw/CVE-2025-12758](https://github.com/open-flaw/CVE-2025-12758)
+
+### CVE-2025-12762 (2025-11-13)
+
+pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
+
+
+- [djayaGit/Blackash-CVE-2025-12762](https://github.com/djayaGit/Blackash-CVE-2025-12762)
+
+### CVE-2025-12904 (2025-11-14)
+
+The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' AJAX endpoint in all versions up to, and including, 0.4.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
+
+
+- [MooseLoveti/SNORDIAN-s-H5PxAPIkatchu-CVE-Report](https://github.com/MooseLoveti/SNORDIAN-s-H5PxAPIkatchu-CVE-Report)
+
+### CVE-2025-12916 (2025-11-08)
+
+In Sangfor Operation and Maintenance Security Management System 3.0 wurde eine Schwachstelle gefunden. Dies betrifft einen unbekannten Teil der Datei /fort/portal_login der Komponente Frontend. Mit der Manipulation des Arguments loginUrl mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Die Ausnutzung wurde veröffentlicht und kann verwendet werden. Das Problem kann durch ein Upgrade auf Version 3.0.11 and 3.0.12 adressiert werden. Die Aktualisierung der betroffenen Komponente wird empfohlen.
+
+
+- [Jinxia62/Sangfor-CVE-2025-12916](https://github.com/Jinxia62/Sangfor-CVE-2025-12916)
+
+### CVE-2025-12917 (2025-11-09)
+
+In TOZED ZLT T10 T10PLUS_3.04.15 ist eine Schwachstelle entdeckt worden. Dabei betrifft es einen unbekannter Codeteil der Datei /reqproc/proc_post der Komponente Reboot Handler. Durch die Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei im lokalen Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
+
+
+- [0xcucumbersalad/CVE-2025-12917-PoC](https://github.com/0xcucumbersalad/CVE-2025-12917-PoC)
+
+### CVE-2025-12973 (2025-11-21)
+
+The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-12973](https://github.com/d0n601/CVE-2025-12973)
+
+### CVE-2025-13156 (2025-11-21)
+
+The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the insert_media_attachment() function in all versions up to, and including, 3.3.0. This is due to the save_update_category_img() function accepting user-supplied file types without validation when processing category images. This makes it possible for authenticated attackers, with subscriber level access and above, to upload arbitrary files on the affected site's server which makes remote code execution possible.
+
+
+- [MooseLoveti/Vitepos-CVE-Report](https://github.com/MooseLoveti/Vitepos-CVE-Report)
+
+### CVE-2025-13159 (2025-11-21)
+
+The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing SVG file uploads via an unauthenticated AJAX endpoint (`flo_form_submit`) without proper file content validation. This makes it possible for unauthenticated attackers to upload malicious SVG files containing JavaScript that executes when an administrator views the uploaded file in the WordPress admin interface, leading to potential full site compromise.
+
+
+- [MooseLoveti/Flo-Forms-CVE-Report](https://github.com/MooseLoveti/Flo-Forms-CVE-Report)
+
### CVE-2025-13315 (2025-11-19)
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.
@@ -4617,20 +5519,57 @@
- [0xBlackash/CVE-2025-13315](https://github.com/0xBlackash/CVE-2025-13315)
+### CVE-2025-13339 (2025-12-10)
+
+The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
+
+
+- [MooseLoveti/Hippoo-Mobile-App-For-WooCommerce-CVE-Report](https://github.com/MooseLoveti/Hippoo-Mobile-App-For-WooCommerce-CVE-Report)
+
### CVE-2025-13342 (2025-12-03)
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This is due to insufficient capability checks and input validation in the ActionOptions::run() save handler. This makes it possible for unauthenticated attackers to modify critical WordPress options such as users_can_register, default_role, and admin_email via submitting crafted form data to public frontend forms.
+- [Altelus1/CVE-2025-13342](https://github.com/Altelus1/CVE-2025-13342)
- [Nxploited/CVE-2025-13342](https://github.com/Nxploited/CVE-2025-13342)
+### CVE-2025-13374 (2026-01-24)
+
+The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-13374](https://github.com/d0n601/CVE-2025-13374)
+
+### CVE-2025-13380 (2025-11-25)
+
+The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1. This is due to insufficient validation of user-supplied file paths in the 'lqdai_update_post' AJAX endpoint and the use of file_get_contents() with user-controlled URLs without protocol restrictions in the insert_image() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
+
+
+- [d0n601/CVE-2025-13380](https://github.com/d0n601/CVE-2025-13380)
+
### CVE-2025-13390 (2025-12-03)
The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the feature using a cryptographically weak token generation mechanism. This makes it possible for unauthenticated attackers to gain administrative access and achieve full site takeover via the auto-login endpoint with a predictable token.
+- [d0n601/CVE-2025-13390](https://github.com/d0n601/CVE-2025-13390)
- [Nxploited/CVE-2025-13390](https://github.com/Nxploited/CVE-2025-13390)
+### CVE-2025-13401 (2025-12-03)
+
+The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including, 3.1.13 due to insufficient input sanitization and output escaping on user-supplied image attributes in the "create_img_preload_tag" function. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
+
+
+- [ciscocamelo/CVE-2025-13401-XSS-Stored](https://github.com/ciscocamelo/CVE-2025-13401-XSS-Stored)
+
+### CVE-2025-13425 (2025-11-20)
+
+A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.
+
+
+- [0xXA/google-poc](https://github.com/0xXA/google-poc)
+
### CVE-2025-13465 (2026-01-21)
Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.\n\nThe issue permits deletion of properties but does not allow overwriting their original behavior.\n\nThis issue is patched on 4.17.23
@@ -4638,13 +5577,40 @@
- [jaytarr-geo/nextjs-lodash-cve-2025-13465-repro](https://github.com/jaytarr-geo/nextjs-lodash-cve-2025-13465-repro)
+### CVE-2025-13486 (2025-12-03)
+
+The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function. This is due to the function accepting user input and then passing that through call_user_func_array(). This makes it possible for unauthenticated attackers to execute arbitrary code on the server, which can be leveraged to inject backdoors or create new administrative user accounts.
+
+
+- [0xnemian/CVE-2025-13486.-CVE-2025-13486](https://github.com/0xnemian/CVE-2025-13486.-CVE-2025-13486)
+- [0xanis/CVE-2025-13486-POC](https://github.com/0xanis/CVE-2025-13486-POC)
+- [KrE80r/cve-2025-13486-vuln-setup](https://github.com/KrE80r/cve-2025-13486-vuln-setup)
+- [MataKucing-OFC/CVE-2025-13486](https://github.com/MataKucing-OFC/CVE-2025-13486)
+- [0xgh057r3c0n/CVE-2025-13486](https://github.com/0xgh057r3c0n/CVE-2025-13486)
+- [whattheslime/CVE-2025-13486](https://github.com/whattheslime/CVE-2025-13486)
+
### CVE-2025-13543 (2025-12-04)
The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions in all versions up to, and including, 1.12.5. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.
+- [MooseLoveti/PostGallery-CVE-Report](https://github.com/MooseLoveti/PostGallery-CVE-Report)
- [Sudo-WP/sudowp-postgallery](https://github.com/Sudo-WP/sudowp-postgallery)
+### CVE-2025-13595 (2025-11-25)
+
+The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-13595](https://github.com/d0n601/CVE-2025-13595)
+
+### CVE-2025-13597 (2025-11-25)
+
+The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affected site's server which may make remote code execution possible.
+
+
+- [d0n601/CVE-2025-13597](https://github.com/d0n601/CVE-2025-13597)
+
### CVE-2025-13673 (2026-02-28)
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to SQL Injection via the 'coupon_code' parameter in all versions up to, and including, 3.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. NOTE: This vulnerability was partially mitigated in versions 3.9.4 and 3.9.6.
@@ -4652,6 +5618,22 @@
- [dinosn/CVE-2025-13673](https://github.com/dinosn/CVE-2025-13673)
+### CVE-2025-13780 (2025-12-11)
+
+pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
+
+
+- [zeropwn/pgadmin4-9.10-CVE-2025-13780](https://github.com/zeropwn/pgadmin4-9.10-CVE-2025-13780)
+- [meenakshisl/PoC-CVE-2025-13780](https://github.com/meenakshisl/PoC-CVE-2025-13780)
+- [ThemeHackers/CVE-2025-13780](https://github.com/ThemeHackers/CVE-2025-13780)
+
+### CVE-2025-13796 (2025-11-30)
+
+A security vulnerability has been detected in deco-cx apps up to 0.120.1. Affected by this vulnerability is the function AnalyticsScript of the file website/loaders/analyticsScript.ts of the component Parameter Handler. Such manipulation of the argument url leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.120.2 addresses this issue. It is suggested to upgrade the affected component.
+
+
+- [0xcucumbersalad/CVE-2025-13796-PoC](https://github.com/0xcucumbersalad/CVE-2025-13796-PoC)
+
### CVE-2025-13834
- [sastraadiwiguna-purpleeliteteaming/CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices](https://github.com/sastraadiwiguna-purpleeliteteaming/CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices)
@@ -4669,6 +5651,13 @@
- [hyunchiya/CVE-2025-14124](https://github.com/hyunchiya/CVE-2025-14124)
+### CVE-2025-14156 (2025-12-15)
+
+The Fox LMS – WordPress LMS Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.5.1. This is due to the plugin not properly validating the 'role' parameter when creating new users via the `/fox-lms/v1/payments/create-order` REST API endpoint. This makes it possible for unauthenticated attackers to create new user accounts with arbitrary roles, including administrator, leading to complete site compromise.
+
+
+- [Nxploited/CVE-2025-14156](https://github.com/Nxploited/CVE-2025-14156)
+
### CVE-2025-14172 (2026-01-09)
The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.4. This is due to missing authorization checks on the `cwpp_trigger_flush_rewrite_rules` function hooked to `wp_ajax_cwpp_trigger_flush_rewrite_rules`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to flush the site's rewrite rules via the `action` parameter.
@@ -4681,6 +5670,7 @@
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
+- [Satirush/CVE-2025-14174-Poc](https://github.com/Satirush/CVE-2025-14174-Poc)
- [typeconfused/CVE-2025-14174-analysis](https://github.com/typeconfused/CVE-2025-14174-analysis)
- [George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day](https://github.com/George0Papasotiriou/CVE-2025-14174-Chrome-Zero-Day)
@@ -4699,6 +5689,16 @@
- [gl1tch0x1/PHP_8.1.x_Exploit](https://github.com/gl1tch0x1/PHP_8.1.x_Exploit)
- [34zY/CVE-2025-14177](https://github.com/34zY/CVE-2025-14177)
+### CVE-2025-14221 (2025-12-08)
+
+A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
+
+
+- [fatmatrabelsi17/CVE-2025-14221](https://github.com/fatmatrabelsi17/CVE-2025-14221)
+
+### CVE-2025-14269
+- [r0binak/CVE-2025-14269](https://github.com/r0binak/CVE-2025-14269)
+
### CVE-2025-14321 (2025-12-09)
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
@@ -4727,6 +5727,13 @@
- [Nxploited/CVE-2025-14364](https://github.com/Nxploited/CVE-2025-14364)
+### CVE-2025-14440 (2025-12-13)
+
+The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id.
+
+
+- [Nxploited/CVE-2025-14440](https://github.com/Nxploited/CVE-2025-14440)
+
### CVE-2025-14502 (2026-01-14)
The News and Blog Designer Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1 via the template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
@@ -4740,6 +5747,7 @@
- [JohannesLks/CVE-2025-14558](https://github.com/JohannesLks/CVE-2025-14558)
+- [rockmelodies/Blackash-CVE-2025-14558](https://github.com/rockmelodies/Blackash-CVE-2025-14558)
### CVE-2025-14598 (2026-01-09)
@@ -4748,6 +5756,28 @@
- [Afnaan-Ahmed/CVE-2025-14598](https://github.com/Afnaan-Ahmed/CVE-2025-14598)
+### CVE-2025-14611 (2025-12-12)
+
+Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise.
+
+
+- [pl4tyz/CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit](https://github.com/pl4tyz/CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit)
+
+### CVE-2025-14700 (2025-12-17)
+
+An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
+
+
+- [Nosiume/CVE-2025-14700-poc](https://github.com/Nosiume/CVE-2025-14700-poc)
+- [secdongle/POC_CVE-2025-14700](https://github.com/secdongle/POC_CVE-2025-14700)
+
+### CVE-2025-14733 (2025-12-19)
+
+An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.
+
+
+- [machevalia/CVE-2025-14733](https://github.com/machevalia/CVE-2025-14733)
+
### CVE-2025-14736 (2026-01-09)
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. This is due to insufficient validation of user-supplied role values in the 'validate_value', 'pre_update_value', and 'get_fields_display' functions. This makes it possible for unauthenticated attackers to register as administrators and gain complete control of the site, granted they can access a user registration form containing a Role field.
@@ -4755,6 +5785,13 @@
- [hyunchiya/CVE-2025-14736](https://github.com/hyunchiya/CVE-2025-14736)
+### CVE-2025-14765 (2025-12-16)
+
+Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
+
+
+- [InfoSecAntara/CVE-2025-14765-and-CVE-2025-14766](https://github.com/InfoSecAntara/CVE-2025-14765-and-CVE-2025-14766)
+
### CVE-2025-14783 (2025-12-31)
The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action.
@@ -4768,11 +5805,27 @@
- [sakthivel10q/CVE-2025-14847](https://github.com/sakthivel10q/CVE-2025-14847)
+- [onewinner/CVE-2025-14847](https://github.com/onewinner/CVE-2025-14847)
+- [ProbiusOfficial/CVE-2025-14847](https://github.com/ProbiusOfficial/CVE-2025-14847)
+- [cybertechajju/CVE-2025-14847_Expolit](https://github.com/cybertechajju/CVE-2025-14847_Expolit)
+- [KingHacker353/CVE-2025-14847_Expolit](https://github.com/KingHacker353/CVE-2025-14847_Expolit)
+- [Black1hp/mongobleed-scanner](https://github.com/Black1hp/mongobleed-scanner)
+- [nma-io/mongobleed](https://github.com/nma-io/mongobleed)
+- [saereya/CVE-2025-14847---MongoBleed](https://github.com/saereya/CVE-2025-14847---MongoBleed)
+- [JemHadar/MongoBleed-DFIR-Triage-Script-CVE-2025-14847](https://github.com/JemHadar/MongoBleed-DFIR-Triage-Script-CVE-2025-14847)
- [franksec42/mongobleed-exploit-CVE-2025-14847](https://github.com/franksec42/mongobleed-exploit-CVE-2025-14847)
+- [lincemorado97/CVE-2025-14847](https://github.com/lincemorado97/CVE-2025-14847)
- [Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847](https://github.com/Security-Phoenix-demo/mongobleed-exploit-CVE-2025-14847)
+- [chinaxploiter/CVE-2025-14847-PoC](https://github.com/chinaxploiter/CVE-2025-14847-PoC)
+- [14mb1v45h/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026](https://github.com/14mb1v45h/CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026)
- [kuyrathdaro/cve-2025-14847](https://github.com/kuyrathdaro/cve-2025-14847)
+- [joshuavanderpoll/CVE-2025-14847](https://github.com/joshuavanderpoll/CVE-2025-14847)
+- [tunahantekeoglu/MongoDeepDive](https://github.com/tunahantekeoglu/MongoDeepDive)
+- [vfa-tuannt/CVE-2025-14847](https://github.com/vfa-tuannt/CVE-2025-14847)
- [j0lt-github/mongobleedburp](https://github.com/j0lt-github/mongobleedburp)
- [FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-Exploit](https://github.com/FurkanKAYAPINAR/CVE-2025-14847-MongoBleed-Exploit)
+- [NoNameError/MongoBLEED---CVE-2025-14847-POC-](https://github.com/NoNameError/MongoBLEED---CVE-2025-14847-POC-)
+- [Rishi-kaul/CVE-2025-14847-MongoBleed](https://github.com/Rishi-kaul/CVE-2025-14847-MongoBleed)
- [Systemhaus-Schulz/MongoBleed-CVE-2025-14847](https://github.com/Systemhaus-Schulz/MongoBleed-CVE-2025-14847)
- [ElJoamy/MongoBleed-exploit](https://github.com/ElJoamy/MongoBleed-exploit)
- [keraattin/Mongobleed-Detector-CVE-2025-14847](https://github.com/keraattin/Mongobleed-Detector-CVE-2025-14847)
@@ -4867,6 +5920,13 @@
- [materaj2/cve-2025-15467](https://github.com/materaj2/cve-2025-15467)
- [WostGit/cve-2025-15467-crash](https://github.com/WostGit/cve-2025-15467-crash)
+### CVE-2025-15474 (2026-01-07)
+
+AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy (BLE) range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad authentication input and repeatedly force the device into lockout states, preventing legitimate users from unlocking the device.
+
+
+- [NSM-Barii/CVE-2025-15474](https://github.com/NSM-Barii/CVE-2025-15474)
+
### CVE-2025-15495 (2026-01-09)
A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
@@ -4911,12 +5971,29 @@
- [mbadanoiu/CVE-2025-20029](https://github.com/mbadanoiu/CVE-2025-20029)
- [schoi1337/CVE-2025-20029-simulation](https://github.com/schoi1337/CVE-2025-20029-simulation)
+### CVE-2025-20124 (2025-02-05)
+
+A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as the root user on an affected device.\r\n\r\nThis vulnerability is due to insecure deserialization of user-supplied Java byte streams by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object to an affected API. A successful exploit could allow the attacker to execute arbitrary commands on the device and elevate privileges.\r\nNote: To successfully exploit this vulnerability, the attacker must have valid read-only administrative credentials. In a single-node deployment, new devices will not be able to authenticate during the reload time.
+
+
+- [ftz7/Cisco-ISE-3.0---Remote-Code-Execution-RCE-](https://github.com/ftz7/Cisco-ISE-3.0---Remote-Code-Execution-RCE-)
+
### CVE-2025-20260 (2025-06-18)
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device.\r\n\r\nThis vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process.
- [Alex-Acero-Security/CVE-2025-20260-POC](https://github.com/Alex-Acero-Security/CVE-2025-20260-POC)
+- [keyuraghao/CVE-2025-20260](https://github.com/keyuraghao/CVE-2025-20260)
+
+### CVE-2025-20265 (2025-08-14)
+
+A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. \r\n\r\nThis vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high privilege level.\r\nNote: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.
+
+
+- [jordan922/cve2025-20265](https://github.com/jordan922/cve2025-20265)
+- [saruman9/cve_2025_20265](https://github.com/saruman9/cve_2025_20265)
+- [amalpvatayam67/day08-CISCO-fmc-sim](https://github.com/amalpvatayam67/day08-CISCO-fmc-sim)
### CVE-2025-20281 (2025-06-25)
@@ -4924,6 +6001,8 @@
- [abrewer251/CVE-2025-20281-2-Cisco-ISE-RCE](https://github.com/abrewer251/CVE-2025-20281-2-Cisco-ISE-RCE)
+- [grupooruss/CVE-2025-20281-Cisco](https://github.com/grupooruss/CVE-2025-20281-Cisco)
+- [ill-deed/Cisco-CVE-2025-20281-illdeed](https://github.com/ill-deed/Cisco-CVE-2025-20281-illdeed)
### CVE-2025-20282 (2025-06-25)
@@ -4940,6 +6019,20 @@
- [curtishoughton/Cisco-ASA-CVE-2025-20333-Scanner](https://github.com/curtishoughton/Cisco-ASA-CVE-2025-20333-Scanner)
+### CVE-2025-20343 (2025-11-05)
+
+A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly.\r\n\r\nThis vulnerability is due to a logic error when processing a RADIUS access request for a MAC address that is already a rejected endpoint. An attacker could exploit this vulnerability by sending a specific sequence of multiple crafted RADIUS access request messages to Cisco ISE. A successful exploit could allow the attacker to cause a denial of service (DoS) condition when Cisco ISE restarts.
+
+
+- [fevar54/Blackash-CVE-2025-20343](https://github.com/fevar54/Blackash-CVE-2025-20343)
+
+### CVE-2025-20352 (2025-09-24)
+
+A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:\r\n\r \r An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. \r An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. \r \r An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. \r\n\r This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.\r\n\r Note: This vulnerability affects all versions of SNMP.
+
+
+- [scadastrangelove/CVE-2025-20352](https://github.com/scadastrangelove/CVE-2025-20352)
+
### CVE-2025-20362 (2025-09-25)
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisory.\r\n\r A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.
@@ -4947,13 +6040,31 @@
- [curtishoughton/CVE-2025-20362-Cisco-Scanner](https://github.com/curtishoughton/CVE-2025-20362-Cisco-Scanner)
+### CVE-2025-20384 (2025-12-03)
+
+In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate sensitive log data through specially crafted HTTP requests, potentially impacting log integrity and detection capabilities.
+
+
+- [Axselll/CVE-2025-20384](https://github.com/Axselll/CVE-2025-20384)
+
### CVE-2025-20393 (2025-12-17)
A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges.\r\n\r\nThis vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
+- [cyberleelawat/CVE-2025-20393](https://github.com/cyberleelawat/CVE-2025-20393)
+- [KingHacker353/CVE-2025-20393](https://github.com/KingHacker353/CVE-2025-20393)
+- [StasonJatham/cisco-sa-sma-attack-N9bf4](https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4)
+- [redpack-kr/Blackash-CVE-2025-20393](https://github.com/redpack-kr/Blackash-CVE-2025-20393)
- [cyberdudebivash/CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner](https://github.com/cyberdudebivash/CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner)
+### CVE-2025-21042 (2025-09-12)
+
+Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
+
+
+- [patricnilackshan/Samsung-CVE-2025-21042](https://github.com/patricnilackshan/Samsung-CVE-2025-21042)
+
### CVE-2025-21082 (2025-06-08)
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
@@ -4982,6 +6093,7 @@
- [ynwarcs/CVE-2025-21298](https://github.com/ynwarcs/CVE-2025-21298)
- [Dit-Developers/CVE-2025-21298](https://github.com/Dit-Developers/CVE-2025-21298)
+- [fy-poc/full-poc-CVE-2025_21298](https://github.com/fy-poc/full-poc-CVE-2025_21298)
- [tarunbharathe/Zero-Click-RCE-Incident-Response-CVE-2025-21298](https://github.com/tarunbharathe/Zero-Click-RCE-Incident-Response-CVE-2025-21298)
- [C-G-creator/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298](https://github.com/C-G-creator/LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298)
- [abc1230940/SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298](https://github.com/abc1230940/SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298)
@@ -5017,6 +6129,28 @@
- [zhuowei/cheese](https://github.com/zhuowei/cheese)
+- [sarabpal-dev/cheese-cake](https://github.com/sarabpal-dev/cheese-cake)
+
+### CVE-2025-21574 (2025-04-15)
+
+Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
+
+
+- [mdriaz009/CVE-2025-21574-Exploit](https://github.com/mdriaz009/CVE-2025-21574-Exploit)
+
+### CVE-2025-21628 (2025-01-09)
+
+Chatwoot is a customer engagement suite. Prior to 3.16.0, conversation and contact filters endpoints did not sanitize the input of query_operator passed from the frontend or the API. This provided any actor who is authenticated, an attack vector to run arbitrary SQL within the filter query by adding a tautological WHERE clause. This issue is patched with v3.16.0.
+
+
+- [elahehasanpour/chatwoot-cve-2025-21628](https://github.com/elahehasanpour/chatwoot-cve-2025-21628)
+
+### CVE-2025-21692 (2025-02-10)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ets qdisc OOB Indexing\n\nHaowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can\nindex an Out-Of-Bound class in ets_class_from_arg() when passed clid of\n0. The overflow may cause local privilege escalation.\n\n [ 18.852298] ------------[ cut here ]------------\n [ 18.853271] UBSAN: array-index-out-of-bounds in net/sched/sch_ets.c:93:20\n [ 18.853743] index 18446744073709551615 is out of range for type 'ets_class [16]'\n [ 18.854254] CPU: 0 UID: 0 PID: 1275 Comm: poc Not tainted 6.12.6-dirty #17\n [ 18.854821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n [ 18.856532] Call Trace:\n [ 18.857441] <TASK>\n [ 18.858227] dump_stack_lvl+0xc2/0xf0\n [ 18.859607] dump_stack+0x10/0x20\n [ 18.860908] __ubsan_handle_out_of_bounds+0xa7/0xf0\n [ 18.864022] ets_class_change+0x3d6/0x3f0\n [ 18.864322] tc_ctl_tclass+0x251/0x910\n [ 18.864587] ? lock_acquire+0x5e/0x140\n [ 18.865113] ? __mutex_lock+0x9c/0xe70\n [ 18.866009] ? __mutex_lock+0xa34/0xe70\n [ 18.866401] rtnetlink_rcv_msg+0x170/0x6f0\n [ 18.866806] ? __lock_acquire+0x578/0xc10\n [ 18.867184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10\n [ 18.867503] netlink_rcv_skb+0x59/0x110\n [ 18.867776] rtnetlink_rcv+0x15/0x30\n [ 18.868159] netlink_unicast+0x1c3/0x2b0\n [ 18.868440] netlink_sendmsg+0x239/0x4b0\n [ 18.868721] ____sys_sendmsg+0x3e2/0x410\n [ 18.869012] ___sys_sendmsg+0x88/0xe0\n [ 18.869276] ? rseq_ip_fixup+0x198/0x260\n [ 18.869563] ? rseq_update_cpu_node_id+0x10a/0x190\n [ 18.869900] ? trace_hardirqs_off+0x5a/0xd0\n [ 18.870196] ? syscall_exit_to_user_mode+0xcc/0x220\n [ 18.870547] ? do_syscall_64+0x93/0x150\n [ 18.870821] ? __memcg_slab_free_hook+0x69/0x290\n [ 18.871157] __sys_sendmsg+0x69/0xd0\n [ 18.871416] __x64_sys_sendmsg+0x1d/0x30\n [ 18.871699] x64_sys_call+0x9e2/0x2670\n [ 18.871979] do_syscall_64+0x87/0x150\n [ 18.873280] ? do_syscall_64+0x93/0x150\n [ 18.874742] ? lock_release+0x7b/0x160\n [ 18.876157] ? do_user_addr_fault+0x5ce/0x8f0\n [ 18.877833] ? irqentry_exit_to_user_mode+0xc2/0x210\n [ 18.879608] ? irqentry_exit+0x77/0xb0\n [ 18.879808] ? clear_bhb_loop+0x15/0x70\n [ 18.880023] ? clear_bhb_loop+0x15/0x70\n [ 18.880223] ? clear_bhb_loop+0x15/0x70\n [ 18.880426] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n [ 18.880683] RIP: 0033:0x44a957\n [ 18.880851] Code: ff ff e8 fc 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 8974 24 10\n [ 18.881766] RSP: 002b:00007ffcdd00fad8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n [ 18.882149] RAX: ffffffffffffffda RBX: 00007ffcdd010db8 RCX: 000000000044a957\n [ 18.882507] RDX: 0000000000000000 RSI: 00007ffcdd00fb70 RDI: 0000000000000003\n [ 18.885037] RBP: 00007ffcdd010bc0 R08: 000000000703c770 R09: 000000000703c7c0\n [ 18.887203] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001\n [ 18.888026] R13: 00007ffcdd010da8 R14: 00000000004ca7d0 R15: 0000000000000001\n [ 18.888395] </TASK>\n [ 18.888610] ---[ end trace ]---
+
+
+- [volticks/CVE-2025-21692-poc](https://github.com/volticks/CVE-2025-21692-poc)
### CVE-2025-21756 (2025-02-27)
@@ -5028,6 +6162,14 @@
- [khoatran107/cve-2025-21756](https://github.com/khoatran107/cve-2025-21756)
- [h3raklez/CVE-2025-21756](https://github.com/h3raklez/CVE-2025-21756)
+### CVE-2025-22131 (2025-01-20)
+
+PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Cross-Site Scripting (XSS) vulnerability in the code which translates the XLSX file into a HTML representation and displays it in the response.
+
+
+- [ZzN1NJ4/CVE-2025-22131-PoC](https://github.com/ZzN1NJ4/CVE-2025-22131-PoC)
+- [s0ck37/CVE-2025-22131-POC](https://github.com/s0ck37/CVE-2025-22131-POC)
+
### CVE-2025-22223 (2025-03-24)
Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods
@@ -5035,6 +6177,20 @@
- [1ucky7/cve-2025-22223-demo-1.0.0](https://github.com/1ucky7/cve-2025-22223-demo-1.0.0)
+### CVE-2025-22235 (2025-04-28)
+
+EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed.\n\nYour application may be affected by this if all the following conditions are met:\n\n * You use Spring Security\n * EndpointRequest.to() has been used in a Spring Security chain configuration\n * The endpoint which EndpointRequest references is disabled or not exposed via web\n * Your application handles requests to /null and this path needs protection\n\n\nYou are not affected if any of the following is true:\n\n * You don't use Spring Security\n * You don't use EndpointRequest.to()\n * The endpoint which EndpointRequest.to() refers to is enabled and is exposed\n * Your application does not handle requests to /null or this path does not need protection
+
+
+- [idealzh/cve-2025-22235-demo](https://github.com/idealzh/cve-2025-22235-demo)
+
+### CVE-2025-22294 (2025-01-07)
+
+Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Custom Field For WP Job Manager: from n/a through <= 1.3.
+
+
+- [mirmeweu/cve-2025-22294](https://github.com/mirmeweu/cve-2025-22294)
+
### CVE-2025-22352 (2025-01-07)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows Blind SQL Injection.This issue affects ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: from n/a through <= 1.4.9.
@@ -5158,6 +6314,14 @@
- [RandomRobbieBF/CVE-2025-22954](https://github.com/RandomRobbieBF/CVE-2025-22954)
+### CVE-2025-22963 (2025-01-13)
+
+Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
+
+
+- [gmh5225/CVE-2025-22963](https://github.com/gmh5225/CVE-2025-22963)
+- [samplev45/CVE-2025-22963](https://github.com/samplev45/CVE-2025-22963)
+
### CVE-2025-22964 (2025-01-15)
DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied input into database queries without proper escaping or validation. Exploiting this issue enables unauthorized access, manipulation of data, or exposure of sensitive information, posing significant risks to the integrity and confidentiality of the application.
@@ -5184,16 +6348,41 @@
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.
+- [open-flaw/CVE-2025-23061](https://github.com/open-flaw/CVE-2025-23061)
- [amikanev/CVE-2025-23061-LAB](https://github.com/amikanev/CVE-2025-23061-LAB)
+### CVE-2025-23167 (2025-05-19)
+
+A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`.\nThis inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.\n\nThe issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.\n\nImpact:\n* This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.
+
+
+- [abhisek3122/CVE-2025-23167](https://github.com/abhisek3122/CVE-2025-23167)
+
+### CVE-2025-23247 (2025-05-27)
+
+NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.
+
+
+- [SpiralBL0CK/CVE-2025-23247](https://github.com/SpiralBL0CK/CVE-2025-23247)
+
### CVE-2025-23266 (2025-07-17)
NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.
+- [jpts/cve-2025-23266-poc](https://github.com/jpts/cve-2025-23266-poc)
- [r0binak/CVE-2025-23266](https://github.com/r0binak/CVE-2025-23266)
+- [Mindasy/cve-2025-23266-migration-bypass](https://github.com/Mindasy/cve-2025-23266-migration-bypass)
+- [mrk336/CVE-2025-23266](https://github.com/mrk336/CVE-2025-23266)
- [ForeverLX/security-research](https://github.com/ForeverLX/security-research)
+### CVE-2025-23339 (2025-09-24)
+
+NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running \ncuobjdump.
+
+
+- [SpiralBL0CK/ce-for-CVE-2025-23339](https://github.com/SpiralBL0CK/ce-for-CVE-2025-23339)
+
### CVE-2025-23369 (2025-01-21)
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12.14, 3.13.10, 3.14.7, 3.15.2, and 3.16.0. This vulnerability was reported via the GitHub Bug Bounty program.
@@ -5257,6 +6446,7 @@
- [celsius026/poc_CVE-2025-24016](https://github.com/celsius026/poc_CVE-2025-24016)
- [cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC](https://github.com/cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC)
- [rxerium/CVE-2025-24016](https://github.com/rxerium/CVE-2025-24016)
+- [guinea-offensive-security/Wazuh-RCE](https://github.com/guinea-offensive-security/Wazuh-RCE)
### CVE-2025-24035 (2025-03-11)
@@ -5274,6 +6464,8 @@
- [helidem/CVE-2025-24054_CVE-2025-24071-PoC](https://github.com/helidem/CVE-2025-24054_CVE-2025-24071-PoC)
- [S4mma3l/CVE-2025-24054](https://github.com/S4mma3l/CVE-2025-24054)
- [moften/CVE-2025-24054](https://github.com/moften/CVE-2025-24054)
+- [Wind010/CVE-2025-24054_PoC](https://github.com/Wind010/CVE-2025-24054_PoC)
+- [Untouchable17/CVE-2025-24054](https://github.com/Untouchable17/CVE-2025-24054)
- [SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module](https://github.com/SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module)
- [simantchaudhari/CVE-2025-24054-PoC](https://github.com/simantchaudhari/CVE-2025-24054-PoC)
@@ -5297,6 +6489,11 @@
- [TH-SecForge/CVE-2025-24071](https://github.com/TH-SecForge/CVE-2025-24071)
- [zbs54/Blackash-CVE-2025-24071](https://github.com/zbs54/Blackash-CVE-2025-24071)
- [DeshanFer94/CVE-2025-24071-POC-NTLMHashDisclosure-](https://github.com/DeshanFer94/CVE-2025-24071-POC-NTLMHashDisclosure-)
+- [Royall-Researchers/CVE-2025-24071](https://github.com/Royall-Researchers/CVE-2025-24071)
+- [ephunter/CVE-2025-24071-Exploit](https://github.com/ephunter/CVE-2025-24071-Exploit)
+- [AC8999/CVE-2025-24071](https://github.com/AC8999/CVE-2025-24071)
+- [Abdelrahman0Sayed/CVE-2025-24071](https://github.com/Abdelrahman0Sayed/CVE-2025-24071)
+- [fsoc-ghost-0x/Fsociety-CVE-2025-24071-NTLM-Coercion](https://github.com/fsoc-ghost-0x/Fsociety-CVE-2025-24071-NTLM-Coercion)
- [hyperchk/CVE-2025-24071-POC](https://github.com/hyperchk/CVE-2025-24071-POC)
### CVE-2025-24076 (2025-03-11)
@@ -5313,6 +6510,13 @@
- [JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201](https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201)
+### CVE-2025-24091 (2025-04-30)
+
+An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.3. An app may be able to cause a denial-of-service.
+
+
+- [rooootdev/evilnotify](https://github.com/rooootdev/evilnotify)
+
### CVE-2025-24104 (2025-01-27)
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.
@@ -5336,6 +6540,14 @@
- [Feralthedogg/CVE-2025-24132-Scanner](https://github.com/Feralthedogg/CVE-2025-24132-Scanner)
- [TheGamingGallifreyan/LiberationPlay-CVE-2025-24132-AirBourne-POC](https://github.com/TheGamingGallifreyan/LiberationPlay-CVE-2025-24132-AirBourne-POC)
+### CVE-2025-24201 (2025-03-11)
+
+An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 18.3.2 and iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Maliciously crafted web content may be able to break out of Web Content sandbox. This is a supplementary fix for an attack that was blocked in iOS 17.2. (Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 17.2.).
+
+
+- [The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-](https://github.com/The-Maxu/CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-)
+- [5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201](https://github.com/5ky9uy/glass-cage-i18-2025-24085-and-cve-2025-24201)
+
### CVE-2025-24203 (2025-03-31)
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.
@@ -5350,6 +6562,7 @@
- [FFRI/CVE-2025-24204](https://github.com/FFRI/CVE-2025-24204)
+- [34306/decrypted](https://github.com/34306/decrypted)
### CVE-2025-24252 (2025-04-29)
@@ -5380,11 +6593,21 @@
- [usutani/study-turbolinks-link](https://github.com/usutani/study-turbolinks-link)
+### CVE-2025-24354 (2025-01-27)
+
+imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.
+
+
+- [Admin9961/CVE-2025-24354-PoC](https://github.com/Admin9961/CVE-2025-24354-PoC)
+
### CVE-2025-24367 (2025-01-27)
Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.
+- [TheCyberGeek/CVE-2025-24367-Cacti-PoC](https://github.com/TheCyberGeek/CVE-2025-24367-Cacti-PoC)
+- [r3vpwnx/CVE-2025-24367](https://github.com/r3vpwnx/CVE-2025-24367)
+- [SoftAndoWetto/CVE-2025-24367-PoC-Cacti](https://github.com/SoftAndoWetto/CVE-2025-24367-PoC-Cacti)
- [matesz44/CVE-2025-24367](https://github.com/matesz44/CVE-2025-24367)
- [ShoshinMaster/CVE-2025-24367](https://github.com/ShoshinMaster/CVE-2025-24367)
- [dantedansh/CVE-2025-24367-Cacti-Exploit](https://github.com/dantedansh/CVE-2025-24367-Cacti-Exploit)
@@ -5432,6 +6655,7 @@
- [MuhammadWaseem29/CVE-2025-24799](https://github.com/MuhammadWaseem29/CVE-2025-24799)
- [MatheuZSecurity/Exploit-CVE-2025-24799](https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799)
+- [airbus-cert/CVE-2025-24799-scanner](https://github.com/airbus-cert/CVE-2025-24799-scanner)
### CVE-2025-24801 (2025-03-18)
@@ -5481,7 +6705,19 @@
- [fatkz/CVE-2025-24813](https://github.com/fatkz/CVE-2025-24813)
- [mbanyamer/Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-](https://github.com/mbanyamer/Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-)
- [x1ongsec/CVE-2025-24813](https://github.com/x1ongsec/CVE-2025-24813)
+- [yaleman/cve-2025-24813-poc](https://github.com/yaleman/cve-2025-24813-poc)
+- [GongWook/CVE-2025-24813](https://github.com/GongWook/CVE-2025-24813)
+- [sentilaso1/CVE-2025-24813-Apache-Tomcat-RCE-PoC](https://github.com/sentilaso1/CVE-2025-24813-Apache-Tomcat-RCE-PoC)
+- [x00byte/PutScanner](https://github.com/x00byte/PutScanner)
+- [Shivshantp/CVE-2025-24813](https://github.com/Shivshantp/CVE-2025-24813)
+- [cyglegit/CVE-2025-24813](https://github.com/cyglegit/CVE-2025-24813)
+- [ftz7/PoC-CVE-2025-24813](https://github.com/ftz7/PoC-CVE-2025-24813)
- [drcrypterdotru/Apache-GOExploiter](https://github.com/drcrypterdotru/Apache-GOExploiter)
+- [CEAlbez/CVE-2025-24813-PoC](https://github.com/CEAlbez/CVE-2025-24813-PoC)
+- [Makavellik/POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution](https://github.com/Makavellik/POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution)
+- [pirenga/CVE-2025-24813](https://github.com/pirenga/CVE-2025-24813)
+- [Arthurabriel/POC-CVE-2025-24813](https://github.com/Arthurabriel/POC-CVE-2025-24813)
+- [gunyakit/CVE-2025-24813-PoC-exploit](https://github.com/gunyakit/CVE-2025-24813-PoC-exploit)
- [seahcy/CVE-2025-24813](https://github.com/seahcy/CVE-2025-24813)
- [EQSTLab/CVE-2025-24813](https://github.com/EQSTLab/CVE-2025-24813)
- [suil12/CVE-2025-24813_presentation](https://github.com/suil12/CVE-2025-24813_presentation)
@@ -5494,9 +6730,37 @@
- [iSee857/CVE-2025-24893-PoC](https://github.com/iSee857/CVE-2025-24893-PoC)
- [Artemir7/CVE-2025-24893-EXP](https://github.com/Artemir7/CVE-2025-24893-EXP)
+- [nopgadget/CVE-2025-24893](https://github.com/nopgadget/CVE-2025-24893)
+- [AliElKhatteb/CVE-2024-32019-POC](https://github.com/AliElKhatteb/CVE-2024-32019-POC)
+- [dhiaZnaidi/CVE-2025-24893-PoC](https://github.com/dhiaZnaidi/CVE-2025-24893-PoC)
+- [hackersonsteroids/cve-2025-24893](https://github.com/hackersonsteroids/cve-2025-24893)
+- [Infinit3i/CVE-2025-24893](https://github.com/Infinit3i/CVE-2025-24893)
+- [AzureADTrent/CVE-2025-24893-Reverse-Shell](https://github.com/AzureADTrent/CVE-2025-24893-Reverse-Shell)
+- [gmh5225/CVE-2025-24893-RCE-PoC](https://github.com/gmh5225/CVE-2025-24893-RCE-PoC)
+- [gunzf0x/CVE-2025-24893](https://github.com/gunzf0x/CVE-2025-24893)
+- [dollarboysushil/CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC](https://github.com/dollarboysushil/CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC)
+- [zs1n/CVE-2025-24893](https://github.com/zs1n/CVE-2025-24893)
+- [investigato/cve-2025-24893-poc](https://github.com/investigato/cve-2025-24893-poc)
+- [570RMBR3AK3R/xwiki-cve-2025-24893-poc](https://github.com/570RMBR3AK3R/xwiki-cve-2025-24893-poc)
+- [IIIeJlyXaKapToIIIKu/CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch](https://github.com/IIIeJlyXaKapToIIIKu/CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch)
+- [mah4nzfr/CVE-2025-24893](https://github.com/mah4nzfr/CVE-2025-24893)
+- [Th3Gl0w/CVE-2025-24893-POC](https://github.com/Th3Gl0w/CVE-2025-24893-POC)
+- [Hex00-0x4/CVE-2025-24893-XWiki-RCE](https://github.com/Hex00-0x4/CVE-2025-24893-XWiki-RCE)
+- [The-Red-Serpent/CVE-2025-24893](https://github.com/The-Red-Serpent/CVE-2025-24893)
+- [alaxar/CVE-2025-24893](https://github.com/alaxar/CVE-2025-24893)
+- [D3Ext/CVE-2025-24893](https://github.com/D3Ext/CVE-2025-24893)
- [Retro023/CVE-2025-24893-POC](https://github.com/Retro023/CVE-2025-24893-POC)
+- [CMassa/CVE-2025-24893](https://github.com/CMassa/CVE-2025-24893)
+- [x0da6h/POC-for-CVE-2025-24893](https://github.com/x0da6h/POC-for-CVE-2025-24893)
- [ibadovulfat/CVE-2025-24893](https://github.com/ibadovulfat/CVE-2025-24893)
- [torjan0/xwiki_solrsearch-rce-exploit](https://github.com/torjan0/xwiki_solrsearch-rce-exploit)
+- [b0ySie7e/CVE-2025-24893](https://github.com/b0ySie7e/CVE-2025-24893)
+- [andwati/CVE-2025-24893](https://github.com/andwati/CVE-2025-24893)
+- [Bishben/xwiki-15.10.8-reverse-shell-cve-2025-24893](https://github.com/Bishben/xwiki-15.10.8-reverse-shell-cve-2025-24893)
+- [80Ottanta80/CVE-2025-24893-PoC](https://github.com/80Ottanta80/CVE-2025-24893-PoC)
+- [0xDTC/XWiki-Platform-RCE-CVE-2025-24893](https://github.com/0xDTC/XWiki-Platform-RCE-CVE-2025-24893)
+- [o0wo0o/CVE-2025-24893_Shell](https://github.com/o0wo0o/CVE-2025-24893_Shell)
+- [BreakingRohit/CVE-2025-24893-PoC](https://github.com/BreakingRohit/CVE-2025-24893-PoC)
- [TomKingori/xwiki-cve-2025-24893-exploit](https://github.com/TomKingori/xwiki-cve-2025-24893-exploit)
- [nohack1212/CVE-2025-24893-](https://github.com/nohack1212/CVE-2025-24893-)
- [rippsec/CVE-2025-24893-XWiki-SSTI-RCE](https://github.com/rippsec/CVE-2025-24893-XWiki-SSTI-RCE)
@@ -5587,12 +6851,29 @@
- [ashkan-pu/CVE-CVE-2025-25231](https://github.com/ashkan-pu/CVE-CVE-2025-25231)
+### CVE-2025-25256 (2025-08-12)
+
+An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.
+
+
+- [watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256](https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256)
+
### CVE-2025-25257 (2025-07-17)
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.
+- [watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257](https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257)
+- [0xbigshaq/CVE-2025-25257](https://github.com/0xbigshaq/CVE-2025-25257)
+- [aitorfirm/CVE-2025-25257](https://github.com/aitorfirm/CVE-2025-25257)
+- [adilburaksen/CVE-2025-25257-Exploit-Tool](https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool)
+- [imbas007/CVE-2025-25257](https://github.com/imbas007/CVE-2025-25257)
+- [0xgh057r3c0n/CVE-2025-25257](https://github.com/0xgh057r3c0n/CVE-2025-25257)
+- [mrmtwoj/CVE-2025-25257](https://github.com/mrmtwoj/CVE-2025-25257)
- [TheStingR/CVE-2025-25257](https://github.com/TheStingR/CVE-2025-25257)
+- [segfault-it/CVE-2025-25257](https://github.com/segfault-it/CVE-2025-25257)
+- [mr-r3b00t/CVE-2025-25257](https://github.com/mr-r3b00t/CVE-2025-25257)
+- [lytianahkone-boop/cve-2025-25257](https://github.com/lytianahkone-boop/cve-2025-25257)
- [GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection](https://github.com/GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection)
### CVE-2025-25279 (2025-02-24)
@@ -5922,12 +7203,22 @@
- [sandsoncosta/CVE-2025-26633](https://github.com/sandsoncosta/CVE-2025-26633)
+- [mbanyamer/MSC-EvilTwin-Local-Privilege-Escalation](https://github.com/mbanyamer/MSC-EvilTwin-Local-Privilege-Escalation)
+
+### CVE-2025-26686 (2025-04-08)
+
+Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
+
+
+- [mrk336/CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates](https://github.com/mrk336/CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates)
+- [cyghtinc/CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack](https://github.com/cyghtinc/CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack)
### CVE-2025-26788 (2025-02-14)
StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.
+- [EQSTLab/CVE-2025-26788](https://github.com/EQSTLab/CVE-2025-26788)
- [jun2e0/CVE-2025-26788](https://github.com/jun2e0/CVE-2025-26788)
### CVE-2025-26794 (2025-02-21)
@@ -5976,6 +7267,14 @@
- [davidblakecoe/axios-CVE-2025-27152-PoC](https://github.com/davidblakecoe/axios-CVE-2025-27152-PoC)
- [WillFortMadeTech/axiosVulnExample](https://github.com/WillFortMadeTech/axiosVulnExample)
+### CVE-2025-27210 (2025-07-18)
+
+An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. \r\n\r\nThis vulnerability affects Windows users of `path.join` API.
+
+
+- [absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit](https://github.com/absholi7ly/CVE-2025-27210_NodeJS_Path_Traversal_Exploit)
+- [mindeddu/Vulnerable-CVE-2025-27210](https://github.com/mindeddu/Vulnerable-CVE-2025-27210)
+
### CVE-2025-27237 (2025-10-03)
In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.
@@ -5990,6 +7289,7 @@
- [zhuowei/CVE-2025-27363-proof-of-concept](https://github.com/zhuowei/CVE-2025-27363-proof-of-concept)
- [ov3rf1ow/CVE-2025-27363](https://github.com/ov3rf1ow/CVE-2025-27363)
+- [tin-z/CVE-2025-27363](https://github.com/tin-z/CVE-2025-27363)
### CVE-2025-27407 (2025-03-12)
@@ -6005,6 +7305,21 @@
- [shreyas-malhotra/CVE-2025-27410](https://github.com/shreyas-malhotra/CVE-2025-27410)
+### CVE-2025-27415 (2025-03-19)
+
+Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as https://mysite.com/?/_payload.json which will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cache a route, then this JSON response could be served to future visitors to the site. An attacker can perform this attack to a vulnerable site in order to make a site unavailable indefinitely. It is also possible in the case where the cache will be reset to make a small script to send a request each X seconds (=caching duration) so that the cache is permanently poisoned making the site completely unavailable. This vulnerability is fixed in 3.16.0.
+
+
+- [jiseoung/CVE-2025-27415-PoC](https://github.com/jiseoung/CVE-2025-27415-PoC)
+
+### CVE-2025-27480 (2025-04-08)
+
+Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
+
+
+- [mrk336/CVE-2025-27480-The-Silent-Gateway-Risk](https://github.com/mrk336/CVE-2025-27480-The-Silent-Gateway-Risk)
+- [mrk336/CVE-2025-27480](https://github.com/mrk336/CVE-2025-27480)
+
### CVE-2025-27515 (2025-03-05)
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
@@ -6012,11 +7327,19 @@
- [joaovicdev/EXPLOIT-CVE-2025-27515](https://github.com/joaovicdev/EXPLOIT-CVE-2025-27515)
+### CVE-2025-27519 (2025-03-07)
+
+Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setup using Docker. Because the docker environment sets up the backend uvicorn server with auto reload enabled, when an attacker overwrites the /app/backend/__init__.py file, the file will automatically be reloaded and executed. This allows an attacker to get remote code execution in the context of the Docker container. This vulnerability is fixed in commit a78bd065e05a1b30a53a3386cc02e08c317d2243.
+
+
+- [Diabl0xE/CVE-2025-27519](https://github.com/Diabl0xE/CVE-2025-27519)
+
### CVE-2025-27520 (2025-04-04)
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in the latest version (v1.4.2) of BentoML. It allows any unauthenticated user to execute arbitrary code on the server. It exists an unsafe code segment in serde.py. This vulnerability is fixed in 1.4.3.
+- [amalpvatayam67/day09-bentoml-deser-lab](https://github.com/amalpvatayam67/day09-bentoml-deser-lab)
- [Evillm/CVE-2025-27520-PoC](https://github.com/Evillm/CVE-2025-27520-PoC)
### CVE-2025-27533 (2025-05-07)
@@ -6040,6 +7363,13 @@
- [TrustStackSecurity/CVE-2025-27580](https://github.com/TrustStackSecurity/CVE-2025-27580)
+### CVE-2025-27581 (2025-04-23)
+
+NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.
+
+
+- [Henryisnotavailable/CVE-2025-27581](https://github.com/Henryisnotavailable/CVE-2025-27581)
+
### CVE-2025-27590 (2025-03-03)
In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
@@ -6052,8 +7382,20 @@
A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.
+- [obamalaolu/CVE-2025-27591](https://github.com/obamalaolu/CVE-2025-27591)
- [rvzsec/CVE-2025-27591](https://github.com/rvzsec/CVE-2025-27591)
+- [BridgerAlderson/CVE-2025-27591-PoC](https://github.com/BridgerAlderson/CVE-2025-27591-PoC)
+- [dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591](https://github.com/dollarboysushil/Linux-Privilege-Escalation-CVE-2025-27591)
+- [alialucas7/CVE-2025-27591_PoC](https://github.com/alialucas7/CVE-2025-27591_PoC)
+- [incommatose/CVE-2025-27591-PoC](https://github.com/incommatose/CVE-2025-27591-PoC)
+- [00xCanelo/CVE-2025-27591](https://github.com/00xCanelo/CVE-2025-27591)
+- [Thekin-ctrl/CVE-2025-27591-Below](https://github.com/Thekin-ctrl/CVE-2025-27591-Below)
+- [Cythonic1/CVE-2025-27591](https://github.com/Cythonic1/CVE-2025-27591)
- [umutcamliyurt/CVE-2025-27591](https://github.com/umutcamliyurt/CVE-2025-27591)
+- [danil-koltsov/below-log-race-poc](https://github.com/danil-koltsov/below-log-race-poc)
+- [VisaiCyber/CVE-2025-27591-below-](https://github.com/VisaiCyber/CVE-2025-27591-below-)
+- [0xDTC/Below-Logger-Symlink-Attack_CVE-2025-27591](https://github.com/0xDTC/Below-Logger-Symlink-Attack_CVE-2025-27591)
+- [0x00Jeff/CVE-2025-27591](https://github.com/0x00Jeff/CVE-2025-27591)
- [Stp1t/CVE-2025-27591](https://github.com/Stp1t/CVE-2025-27591)
- [rippsec/CVE-2025-27591-Meta-below-LPE](https://github.com/rippsec/CVE-2025-27591-Meta-below-LPE)
@@ -6078,6 +7420,7 @@
- [kk12-30/CVE-2025-27817](https://github.com/kk12-30/CVE-2025-27817)
+- [iSee857/CVE-2025-27817](https://github.com/iSee857/CVE-2025-27817)
### CVE-2025-27840 (2025-03-08)
@@ -6215,6 +7558,7 @@
- [inok009/FOXCMS-CVE-2025-29306-POC](https://github.com/inok009/FOXCMS-CVE-2025-29306-POC)
- [Mattb709/CVE-2025-29306-PoC-FoxCMS-RCE](https://github.com/Mattb709/CVE-2025-29306-PoC-FoxCMS-RCE)
- [congdong007/CVE-2025-29306_poc](https://github.com/congdong007/CVE-2025-29306_poc)
+- [amalpvatayam67/day06-foxcms-rce](https://github.com/amalpvatayam67/day06-foxcms-rce)
- [mantanhacker/Mass-CVE-2025-29306](https://github.com/mantanhacker/Mass-CVE-2025-29306)
### CVE-2025-29338 (2026-05-13)
@@ -6252,6 +7596,20 @@
- [Yoshik0xF6/CVE-2025-29529](https://github.com/Yoshik0xF6/CVE-2025-29529)
+### CVE-2025-29556 (2025-07-31)
+
+ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an attacker to bypass these restrictions via API request manipulation. An attacker with an Admin access can intercept and modify the API request during user creation, altering the parameters to assign the new account to the ExaGrid Security Officers group without the required approval.
+
+
+- [0xsu3ks/CVE-2025-29556](https://github.com/0xsu3ks/CVE-2025-29556)
+
+### CVE-2025-29557 (2025-07-31)
+
+ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords.
+
+
+- [0xsu3ks/CVE-2025-29557](https://github.com/0xsu3ks/CVE-2025-29557)
+
### CVE-2025-29602 (2025-05-07)
flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.
@@ -6259,6 +7617,14 @@
- [harish0x/CVE-2025-29602](https://github.com/harish0x/CVE-2025-29602)
+### CVE-2025-29628 (2025-07-25)
+
+A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 leaving the string vulnerable to interception and modification through a Man-in-the-Middle attack. This may result in the attacker capturing device credentials or taking control of vulnerable home kits.
+
+
+- [mselbrede/gardyn](https://github.com/mselbrede/gardyn)
+- [kristof-mattei/gardyn-hack](https://github.com/kristof-mattei/gardyn-hack)
+
### CVE-2025-29632 (2025-05-29)
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components
@@ -6285,6 +7651,7 @@
xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker with a valid account to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively.
+- [demining/Digital-Signature-Forgery-Attack](https://github.com/demining/Digital-Signature-Forgery-Attack)
- [demining/Phantom-Signature-Attack](https://github.com/demining/Phantom-Signature-Attack)
- [Mrrishuyt/mrrishuyt.github.io](https://github.com/Mrrishuyt/mrrishuyt.github.io)
@@ -6308,6 +7675,7 @@
- [encrypter15/CVE-2025-29824](https://github.com/encrypter15/CVE-2025-29824)
+- [AfanPan/CVE-2025-29824-Exploit](https://github.com/AfanPan/CVE-2025-29824-Exploit)
- [uname1able/CVE-2025-29824](https://github.com/uname1able/CVE-2025-29824)
### CVE-2025-29927 (2025-03-21)
@@ -6405,7 +7773,23 @@
- [sagsooz/CVE-2025-29927](https://github.com/sagsooz/CVE-2025-29927)
- [SugiB3o/vulnerable-nextjs-14-CVE-2025-29927](https://github.com/SugiB3o/vulnerable-nextjs-14-CVE-2025-29927)
- [amitlttwo/Next.JS-CVE-2025-29927](https://github.com/amitlttwo/Next.JS-CVE-2025-29927)
+- [kazuya256/next-js-auth-bypass](https://github.com/kazuya256/next-js-auth-bypass)
+- [mickhacking/Thank-u-Next](https://github.com/mickhacking/Thank-u-Next)
+- [sahbaazansari/CVE-2025-29927](https://github.com/sahbaazansari/CVE-2025-29927)
+- [b4sh0xf/PoC-CVE-2025-29927](https://github.com/b4sh0xf/PoC-CVE-2025-29927)
+- [rgvillanueva28/vulnbox-easy-CVE-2025-29927](https://github.com/rgvillanueva28/vulnbox-easy-CVE-2025-29927)
- [s11s11/CVE-2025-29927](https://github.com/s11s11/CVE-2025-29927)
+- [R3verseIN/Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927](https://github.com/R3verseIN/Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927)
+- [zs1n/CVE-2025-29927](https://github.com/zs1n/CVE-2025-29927)
+- [MKIRAHMET/CVE-2025-29927-PoC](https://github.com/MKIRAHMET/CVE-2025-29927-PoC)
+- [adjscent/vulnerable-nextjs-14-CVE-2025-29927](https://github.com/adjscent/vulnerable-nextjs-14-CVE-2025-29927)
+- [sdrtba/CVE-2025-29927](https://github.com/sdrtba/CVE-2025-29927)
+- [iteride/CVE-2025-29927](https://github.com/iteride/CVE-2025-29927)
+- [sermikr0/nextjs-middleware-auth-bypass](https://github.com/sermikr0/nextjs-middleware-auth-bypass)
+- [amalpvatayam67/day10-nextjs-middleware-lab](https://github.com/amalpvatayam67/day10-nextjs-middleware-lab)
+- [kuyrathdaro/cve-2025-29927](https://github.com/kuyrathdaro/cve-2025-29927)
+- [Bongni/CVE-2025-29927](https://github.com/Bongni/CVE-2025-29927)
+- [liamromanis101/CVE-2025-29927-NextJS](https://github.com/liamromanis101/CVE-2025-29927-NextJS)
- [DanielHallbro/CVE-2025-29927-Nextjs-Bypass-PoC](https://github.com/DanielHallbro/CVE-2025-29927-Nextjs-Bypass-PoC)
- [Si-Ni/CVE-2025-29927-Proof-of-Concept](https://github.com/Si-Ni/CVE-2025-29927-Proof-of-Concept)
- [sangrok-jeon/CVE-2025-29927-Nextjs-Analysis](https://github.com/sangrok-jeon/CVE-2025-29927-Nextjs-Analysis)
@@ -6531,6 +7915,7 @@
- [W01fh4cker/CVE-2025-30406](https://github.com/W01fh4cker/CVE-2025-30406)
+- [mchklt/CVE-2025-30406](https://github.com/mchklt/CVE-2025-30406)
### CVE-2025-30567 (2025-03-25)
@@ -6546,6 +7931,13 @@
- [jamesb5959/CVE-2025-30712-_PoC](https://github.com/jamesb5959/CVE-2025-30712-_PoC)
+### CVE-2025-30749 (2025-07-15)
+
+Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
+
+
+- [rashedhasan090/AegisJava](https://github.com/rashedhasan090/AegisJava)
+
### CVE-2025-30772 (2025-03-27)
Missing Authorization vulnerability in WPClever WPC Smart Upsell Funnel for WooCommerce wpc-smart-upsell-funnel allows Privilege Escalation.This issue affects WPC Smart Upsell Funnel for WooCommerce: from n/a through <= 3.0.4.
@@ -6596,6 +7988,7 @@
- [sunhuiHi666/CVE-2025-31125](https://github.com/sunhuiHi666/CVE-2025-31125)
- [MuhammadWaseem29/Vitejs-exploit](https://github.com/MuhammadWaseem29/Vitejs-exploit)
- [0xgh057r3c0n/CVE-2025-31125](https://github.com/0xgh057r3c0n/CVE-2025-31125)
+- [harshgupptaa/Path-Transversal-CVE-2025-31125-](https://github.com/harshgupptaa/Path-Transversal-CVE-2025-31125-)
### CVE-2025-31129 (2025-03-31)
@@ -6617,6 +8010,8 @@
runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.
+- [sahar042/CVE-2025-31133](https://github.com/sahar042/CVE-2025-31133)
+- [skynet-f-nvidia/CVE-2025-31133](https://github.com/skynet-f-nvidia/CVE-2025-31133)
- [scherepiuk/container-escape-ebpf](https://github.com/scherepiuk/container-escape-ebpf)
- [C-h4ck-0/Learn-about-cve-2025-31133-poc](https://github.com/C-h4ck-0/Learn-about-cve-2025-31133-poc)
@@ -6639,7 +8034,12 @@
- [0xgh057r3c0n/CVE-2025-31161](https://github.com/0xgh057r3c0n/CVE-2025-31161)
- [Drelinss/Blackash-CVE-2025-31161](https://github.com/Drelinss/Blackash-CVE-2025-31161)
- [ibrahmsql/CVE-2025-31161](https://github.com/ibrahmsql/CVE-2025-31161)
+- [r0otk3r/CVE-2025-31161](https://github.com/r0otk3r/CVE-2025-31161)
+- [f4dee-backup/CVE-2025-31161](https://github.com/f4dee-backup/CVE-2025-31161)
+- [acan0007/CVE-2025-31161](https://github.com/acan0007/CVE-2025-31161)
+- [tdawg506/CVE-2025-31161](https://github.com/tdawg506/CVE-2025-31161)
- [0xDTC/CrushFTP-auth-bypass-CVE-2025-31161](https://github.com/0xDTC/CrushFTP-auth-bypass-CVE-2025-31161)
+- [ch3m1cl/CVE-2025-31161](https://github.com/ch3m1cl/CVE-2025-31161)
- [Dairrow/CVE-2025-31161](https://github.com/Dairrow/CVE-2025-31161)
- [Shisones/CVE-2025-31161](https://github.com/Shisones/CVE-2025-31161)
- [eserror/CVE-2025-31161](https://github.com/eserror/CVE-2025-31161)
@@ -6653,6 +8053,7 @@
- [zhuowei/apple-positional-audio-codec-invalid-header](https://github.com/zhuowei/apple-positional-audio-codec-invalid-header)
- [JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201](https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201)
- [serundengsapi/CVE-2025-31200-iOS-AudioConverter-RCE](https://github.com/serundengsapi/CVE-2025-31200-iOS-AudioConverter-RCE)
+- [hunters-sec/CVE-2025-31200](https://github.com/hunters-sec/CVE-2025-31200)
### CVE-2025-31207 (2025-05-12)
@@ -6698,6 +8099,8 @@
- [NULLTRACE0X/CVE-2025-31324](https://github.com/NULLTRACE0X/CVE-2025-31324)
- [nairuzabulhul/nuclei-template-cve-2025-31324-check](https://github.com/nairuzabulhul/nuclei-template-cve-2025-31324-check)
- [sug4r-wr41th/CVE-2025-31324](https://github.com/sug4r-wr41th/CVE-2025-31324)
+- [antichainalysis/sap-netweaver-0day-CVE-2025-31324](https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324)
+- [harshitvarma05/CVE-2025-31324-Exploits](https://github.com/harshitvarma05/CVE-2025-31324-Exploits)
- [aristois913/CVE-2025-31324](https://github.com/aristois913/CVE-2025-31324)
### CVE-2025-31336
@@ -6713,6 +8116,7 @@
- [iSee857/CVE-2025-31486-PoC](https://github.com/iSee857/CVE-2025-31486-PoC)
- [ll104567/CVE-2025-31486](https://github.com/ll104567/CVE-2025-31486)
+- [hackmelocal/CVE-2025-31486-Simulation](https://github.com/hackmelocal/CVE-2025-31486-Simulation)
### CVE-2025-31644 (2025-05-07)
@@ -6732,6 +8136,7 @@
- [assad12341/DOS-exploit](https://github.com/assad12341/DOS-exploit)
- [assad12341/Dos-exploit-](https://github.com/assad12341/Dos-exploit-)
- [obscura-cert/CVE-2025-31650](https://github.com/obscura-cert/CVE-2025-31650)
+- [B1gN0Se/Tomcat-CVE-2025-31650](https://github.com/B1gN0Se/Tomcat-CVE-2025-31650)
### CVE-2025-31651 (2025-04-28)
@@ -6748,6 +8153,13 @@
- [umair-aziz025/dahua-cve-research](https://github.com/umair-aziz025/dahua-cve-research)
+### CVE-2025-31702 (2025-10-15)
+
+A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may cause tampering with admin password, leading to privilege escalation. Systems with only admin account are not affected.
+
+
+- [itres-labs/CVE-2025-31702](https://github.com/itres-labs/CVE-2025-31702)
+
### CVE-2025-31710 (2025-06-03)
In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
@@ -6770,6 +8182,13 @@
- [DoTTak/CVE-2025-31864](https://github.com/DoTTak/CVE-2025-31864)
+### CVE-2025-31931 (2025-11-11)
+
+Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
+
+
+- [yohanes/POC-CVE-2025-31931](https://github.com/yohanes/POC-CVE-2025-31931)
+
### CVE-2025-32013 (2025-04-06)
LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits' LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn't properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.
@@ -6777,6 +8196,22 @@
- [Mohith-T/CVE-2025-32013](https://github.com/Mohith-T/CVE-2025-32013)
+### CVE-2025-32023 (2025-07-07)
+
+Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially leading to remote code execution. The bug likely affects all Redis versions with hyperloglog operations implemented. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing hyperloglog operations. This can be done using ACL to restrict HLL commands.
+
+
+- [leesh3288/CVE-2025-32023](https://github.com/leesh3288/CVE-2025-32023)
+- [LordBheem/CVE-2025-32023](https://github.com/LordBheem/CVE-2025-32023)
+- [44528zja/Blackash-CVE-2025-32023](https://github.com/44528zja/Blackash-CVE-2025-32023)
+
+### CVE-2025-32094 (2025-08-07)
+
+An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstances, a client making an HTTP/1.x OPTIONS request with an "Expect: 100-continue" header, and using obsolete line folding, can lead to a discrepancy in how two in-path Akamai servers interpret the request, allowing an attacker to smuggle a second request in the original request body.
+
+
+- [perplext/echteeteepee](https://github.com/perplext/echteeteepee)
+
### CVE-2025-32118 (2025-04-04)
Unrestricted Upload of File with Dangerous Type vulnerability in NiteoThemes CMP – Coming Soon & Maintenance cmp-coming-soon-maintenance allows Using Malicious Files.This issue affects CMP – Coming Soon & Maintenance: from n/a through <= 4.1.14.
@@ -6826,6 +8261,22 @@
- [diegovargasj/CVE-2025-32407](https://github.com/diegovargasj/CVE-2025-32407)
+### CVE-2025-32421 (2025-05-14)
+
+Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageProps` data instead of standard HTML. This issue was patched in versions 15.1.6 and 14.2.24 by stripping the `x-now-route-matches` header from incoming requests. Applications hosted on Vercel's platform are not affected by this issue, as the platform does not cache responses based solely on `200 OK` status without explicit `cache-control` headers. Those who self-host Next.js deployments and are unable to upgrade immediately can mitigate this vulnerability by stripping the `x-now-route-matches` header from all incoming requests at the content development network and setting `cache-control: no-store` for all responses under risk. The maintainers of Next.js strongly recommend only caching responses with explicit cache-control headers.
+
+
+- [Delfaster/CVE-2025-32421---Race-Condition-Vulnerability---Next.js](https://github.com/Delfaster/CVE-2025-32421---Race-Condition-Vulnerability---Next.js)
+
+### CVE-2025-32429 (2025-07-24)
+
+XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.
+
+
+- [byteReaper77/CVE-2025-32429](https://github.com/byteReaper77/CVE-2025-32429)
+- [amir-othman/CVE-2025-32429](https://github.com/amir-othman/CVE-2025-32429)
+- [imbas007/CVE-2025-32429-Checker](https://github.com/imbas007/CVE-2025-32429-Checker)
+
### CVE-2025-32432 (2025-04-25)
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.
@@ -6834,6 +8285,7 @@
- [Chocapikk/CVE-2025-32432](https://github.com/Chocapikk/CVE-2025-32432)
- [Sachinart/CVE-2025-32432](https://github.com/Sachinart/CVE-2025-32432)
- [CTY-Research-1/CVE-2025-32432-PoC](https://github.com/CTY-Research-1/CVE-2025-32432-PoC)
+- [bambooqj/CVE-2025-32432](https://github.com/bambooqj/CVE-2025-32432)
- [TheMursalin/CVE-2025-32432](https://github.com/TheMursalin/CVE-2025-32432)
- [cd-ratel/CVE-2025-32432](https://github.com/cd-ratel/CVE-2025-32432)
@@ -6863,6 +8315,15 @@
- [C9b3rD3vi1/Erlang-OTP-SSH-CVE-2025-32433](https://github.com/C9b3rD3vi1/Erlang-OTP-SSH-CVE-2025-32433)
- [bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433](https://github.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433)
- [vigilante-1337/CVE-2025-32433](https://github.com/vigilante-1337/CVE-2025-32433)
+- [NiteeshPujari/CVE-2025-32433-PoC](https://github.com/NiteeshPujari/CVE-2025-32433-PoC)
+- [te0rwx/CVE-2025-32433-Detection](https://github.com/te0rwx/CVE-2025-32433-Detection)
+- [Mdusmandasthaheer/CVE-2025-32433](https://github.com/Mdusmandasthaheer/CVE-2025-32433)
+- [dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE](https://github.com/dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE)
+- [iteride/CVE-2025-32433](https://github.com/iteride/CVE-2025-32433)
+- [mirmeweu/cve-2025-32433](https://github.com/mirmeweu/cve-2025-32433)
+- [l1nuxkid/CVE-2025-32433-exploit](https://github.com/l1nuxkid/CVE-2025-32433-exploit)
+- [soltanali0/CVE-2025-32433-Eploit](https://github.com/soltanali0/CVE-2025-32433-Eploit)
+- [giriaryan694-a11y/cve-2025-32433_rce_exploit](https://github.com/giriaryan694-a11y/cve-2025-32433_rce_exploit)
- [AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433](https://github.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433)
- [blackcat4347/CVE-2025-32433-available-for-windows](https://github.com/blackcat4347/CVE-2025-32433-available-for-windows)
- [carlosalbertotuma/CVE-2025-32433](https://github.com/carlosalbertotuma/CVE-2025-32433)
@@ -6876,6 +8337,7 @@
PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.
+- [cyhe50/cve-2025-32434-poc](https://github.com/cyhe50/cve-2025-32434-poc)
- [B1tBit/CVE-2025-32434-exploit](https://github.com/B1tBit/CVE-2025-32434-exploit)
- [Soildworks/Agentic-CLIP-Benchmark](https://github.com/Soildworks/Agentic-CLIP-Benchmark)
@@ -6884,8 +8346,16 @@
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
+- [Hacksparo/CVE-2025-32462](https://github.com/Hacksparo/CVE-2025-32462)
- [CryingN/CVE-2025-32462](https://github.com/CryingN/CVE-2025-32462)
+- [cybersentinelx1/CVE-2025-32462-Exploit](https://github.com/cybersentinelx1/CVE-2025-32462-Exploit)
+- [mylovem313/CVE-2025-32462](https://github.com/mylovem313/CVE-2025-32462)
- [0p5cur/CVE-2025-32462-POC](https://github.com/0p5cur/CVE-2025-32462-POC)
+- [SpongeBob-369/cve-2025-32462](https://github.com/SpongeBob-369/cve-2025-32462)
+- [MAAYTHM/CVE-2025-32462_32463-Lab](https://github.com/MAAYTHM/CVE-2025-32462_32463-Lab)
+- [toohau/CVE-2025-32462-32463-Detection-Script-](https://github.com/toohau/CVE-2025-32462-32463-Detection-Script-)
+- [j3r1ch0123/CVE-2025-32462](https://github.com/j3r1ch0123/CVE-2025-32462)
+- [OffSecPlaybook/CVE-2025-32462-](https://github.com/OffSecPlaybook/CVE-2025-32462-)
- [lakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities](https://github.com/lakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities)
- [yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab](https://github.com/yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab)
@@ -6895,14 +8365,60 @@
- [pr0v3rbs/CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot)
+- [4f-kira/CVE-2025-32463](https://github.com/4f-kira/CVE-2025-32463)
+- [K1tt3h/CVE-2025-32463-POC](https://github.com/K1tt3h/CVE-2025-32463-POC)
+- [IC3-512/linux-root-kit](https://github.com/IC3-512/linux-root-kit)
+- [7r00t/cve-2025-32463-lab](https://github.com/7r00t/cve-2025-32463-lab)
+- [SysMancer/CVE-2025-32463](https://github.com/SysMancer/CVE-2025-32463)
+- [kh4sh3i/CVE-2025-32463](https://github.com/kh4sh3i/CVE-2025-32463)
+- [neko205-mx/CVE-2025-32463_Exploit](https://github.com/neko205-mx/CVE-2025-32463_Exploit)
+- [pevinkumar10/CVE-2025-32463](https://github.com/pevinkumar10/CVE-2025-32463)
+- [zhaduchanhzz/CVE-2025-32463_POC](https://github.com/zhaduchanhzz/CVE-2025-32463_POC)
+- [robbert1978/CVE-2025-32463_POC](https://github.com/robbert1978/CVE-2025-32463_POC)
+- [Mikivirus0/sudoinjection](https://github.com/Mikivirus0/sudoinjection)
+- [san8383/CVE-2025-32463](https://github.com/san8383/CVE-2025-32463)
+- [0xAkarii/CVE-2025-32463](https://github.com/0xAkarii/CVE-2025-32463)
+- [CIA911/sudo_patch_CVE-2025-32463](https://github.com/CIA911/sudo_patch_CVE-2025-32463)
+- [mirchr/CVE-2025-32463-sudo-chwoot](https://github.com/mirchr/CVE-2025-32463-sudo-chwoot)
+- [ill-deed/CVE-2025-32463_illdeed](https://github.com/ill-deed/CVE-2025-32463_illdeed)
+- [zinzloun/CVE-2025-32463](https://github.com/zinzloun/CVE-2025-32463)
- [yeremeu/CVE-2025-32463_chwoot](https://github.com/yeremeu/CVE-2025-32463_chwoot)
- [0p5cur/CVE-2025-32463-POC](https://github.com/0p5cur/CVE-2025-32463-POC)
+- [gmh5225/Blackash-CVE-2025-32463](https://github.com/gmh5225/Blackash-CVE-2025-32463)
+- [FreeDurok/CVE-2025-32463-PoC](https://github.com/FreeDurok/CVE-2025-32463-PoC)
+- [Chocapikk/CVE-2025-32463-lab](https://github.com/Chocapikk/CVE-2025-32463-lab)
+- [K3ysTr0K3R/CVE-2025-32463-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT)
+- [SpongeBob-369/cve-2025-32463](https://github.com/SpongeBob-369/cve-2025-32463)
- [lowercasenumbers/CVE-2025-32463_sudo_chroot](https://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot)
+- [abrewer251/CVE-2025-32463_Sudo_PoC](https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC)
- [0xb0rn3/CVE-2025-32463-EXPLOIT](https://github.com/0xb0rn3/CVE-2025-32463-EXPLOIT)
+- [morgenm/sudo-chroot-CVE-2025-32463](https://github.com/morgenm/sudo-chroot-CVE-2025-32463)
- [MohamedKarrab/CVE-2025-32463](https://github.com/MohamedKarrab/CVE-2025-32463)
+- [krypton-0x00/CVE-2025-32463-Chwoot-POC](https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC)
+- [Floodnut/CVE-2025-32463](https://github.com/Floodnut/CVE-2025-32463)
+- [Rajneeshkarya/CVE-2025-32463](https://github.com/Rajneeshkarya/CVE-2025-32463)
+- [MGunturG/CVE-2025-32463](https://github.com/MGunturG/CVE-2025-32463)
+- [Maalfer/Sudo-CVE-2021-3156](https://github.com/Maalfer/Sudo-CVE-2021-3156)
+- [daryllundy/CVE-2025-32463](https://github.com/daryllundy/CVE-2025-32463)
+- [AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462](https://github.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462)
+- [ChetanKomal/sudo_exploit](https://github.com/ChetanKomal/sudo_exploit)
+- [KaiHT-Ladiant/CVE-2025-32463](https://github.com/KaiHT-Ladiant/CVE-2025-32463)
+- [y4ney/CVE-2025-32463-lab](https://github.com/y4ney/CVE-2025-32463-lab)
+- [aldoClau98/CVE-2025-32463](https://github.com/aldoClau98/CVE-2025-32463)
+- [painoob/CVE-2025-32463](https://github.com/painoob/CVE-2025-32463)
- [Nowafen/CVE-2025-32463](https://github.com/Nowafen/CVE-2025-32463)
+- [Yuy0ung/CVE-2025-32463_chwoot](https://github.com/Yuy0ung/CVE-2025-32463_chwoot)
+- [hacieda/CVE-2025-32463](https://github.com/hacieda/CVE-2025-32463)
+- [blackcat4347/CVE-2025-32463_PoC](https://github.com/blackcat4347/CVE-2025-32463_PoC)
- [ashardev002/CVE-2025-32463_chwoot](https://github.com/ashardev002/CVE-2025-32463_chwoot)
- [mihnasdsad/CVE-2025-32463](https://github.com/mihnasdsad/CVE-2025-32463)
+- [D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape](https://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape)
+- [AC8999/CVE-2025-32463](https://github.com/AC8999/CVE-2025-32463)
+- [dr4xp/sudo-chroot](https://github.com/dr4xp/sudo-chroot)
+- [Ghstxz/CVE-2025-32463](https://github.com/Ghstxz/CVE-2025-32463)
+- [ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation](https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation)
+- [justjoeyking/CVE-2025-32463](https://github.com/justjoeyking/CVE-2025-32463)
+- [Mr-Alperen/CVE-2025-32463](https://github.com/Mr-Alperen/CVE-2025-32463)
- [aexdyhaxor/CVE-2025-32463](https://github.com/aexdyhaxor/CVE-2025-32463)
- [SpycioKon/CVE-2025-32463](https://github.com/SpycioKon/CVE-2025-32463)
- [vpr-labs/CVE-2025-32463](https://github.com/vpr-labs/CVE-2025-32463)
@@ -6939,6 +8455,13 @@
- [Nxploited/CVE-2025-32682](https://github.com/Nxploited/CVE-2025-32682)
+### CVE-2025-32709 (2025-05-13)
+
+Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
+
+
+- [AdnanSiyat/How-to-Patch-CVE-2025-32709](https://github.com/AdnanSiyat/How-to-Patch-CVE-2025-32709)
+
### CVE-2025-32710 (2025-06-10)
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
@@ -6963,6 +8486,14 @@
- [kn0x0x/CVE-2025-32756-POC](https://github.com/kn0x0x/CVE-2025-32756-POC)
- [alm6no5/CVE-2025-32756-POC](https://github.com/alm6no5/CVE-2025-32756-POC)
- [becrevex/CVE-2025-32756](https://github.com/becrevex/CVE-2025-32756)
+- [shan0ar/cve-2025-32756](https://github.com/shan0ar/cve-2025-32756)
+
+### CVE-2025-32778 (2025-04-15)
+
+Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulnerability exists in the screenshot API of the Web Check project (Lissy93/web-check). The issue stems from user-controlled input (url) being passed unsanitized into a shell command using exec(), allowing attackers to execute arbitrary system commands on the underlying host. This could be exploited by sending crafted url parameters to extract files or even establish remote access. The vulnerability has been patched by replacing exec() with execFile(), which avoids using a shell and properly isolates arguments.
+
+
+- [00xCanelo/CVE-2025-32778](https://github.com/00xCanelo/CVE-2025-32778)
### CVE-2025-32873 (2025-05-08)
@@ -6986,6 +8517,8 @@
- [DevBuiHieu/CVE-2025-33053-Proof-Of-Concept](https://github.com/DevBuiHieu/CVE-2025-33053-Proof-Of-Concept)
- [TheTorjanCaptain/CVE-2025-33053-Checker-PoC](https://github.com/TheTorjanCaptain/CVE-2025-33053-Checker-PoC)
- [kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept](https://github.com/kra1t0/CVE-2025-33053-WebDAV-RCE-PoC-and-C2-Concept)
+- [4n4s4zi/CVE-2025-33053_PoC](https://github.com/4n4s4zi/CVE-2025-33053_PoC)
+- [Cyberw1ng/CVE-2025-33053-POC](https://github.com/Cyberw1ng/CVE-2025-33053-POC)
### CVE-2025-33073 (2025-06-10)
@@ -6994,6 +8527,10 @@
- [mverschu/CVE-2025-33073](https://github.com/mverschu/CVE-2025-33073)
- [obscura-cert/CVE-2025-33073](https://github.com/obscura-cert/CVE-2025-33073)
+- [matejsmycka/CVE-2025-33073-checker](https://github.com/matejsmycka/CVE-2025-33073-checker)
+- [cve-2025-33073/cve-2025-33073](https://github.com/cve-2025-33073/cve-2025-33073)
+- [uziii2208/CVE-2025-33073](https://github.com/uziii2208/CVE-2025-33073)
+- [irjfifndn-prog/Blackash-CVE-2025-33073](https://github.com/irjfifndn-prog/Blackash-CVE-2025-33073)
- [EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-](https://github.com/EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-)
- [IyarGross/SMB-CVE-2025-33073](https://github.com/IyarGross/SMB-CVE-2025-33073)
@@ -7007,6 +8544,13 @@
- [becrevex/Commvault-CVE-2025-34028](https://github.com/becrevex/Commvault-CVE-2025-34028)
- [Mattb709/CVE-2025-34028-PoC-Commvault-RCE](https://github.com/Mattb709/CVE-2025-34028-PoC-Commvault-RCE)
+### CVE-2025-34030 (2025-06-20)
+
+An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to the plot parameter (e.g., ?plot=;id) in a crafted GET request. The output of the command is displayed in the application's interface after interacting with the host selection UI. Successful exploitation leads to arbitrary command execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.
+
+
+- [HackerTyperAbuser/CVE-2025-34030-PoC](https://github.com/HackerTyperAbuser/CVE-2025-34030-PoC)
+
### CVE-2025-34037 (2025-06-24)
An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.
@@ -7014,6 +8558,13 @@
- [Taxanehh/CVE-2025-34037](https://github.com/Taxanehh/CVE-2025-34037)
+### CVE-2025-34040 (2025-06-24)
+
+An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal. Successful exploitation enables remote code execution as the uploaded file can be accessed and executed through the web server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-01 UTC.
+
+
+- [jisi-001/CVE-2025-34040Exp](https://github.com/jisi-001/CVE-2025-34040Exp)
+
### CVE-2025-34065 (2025-07-01)
An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr() function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls.
@@ -7026,9 +8577,15 @@
An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.
+- [MrjHaxcore/CVE-2025-34077](https://github.com/MrjHaxcore/CVE-2025-34077)
+- [0xgh057r3c0n/CVE-2025-34077](https://github.com/0xgh057r3c0n/CVE-2025-34077)
- [salimelh94/Web-Penetration-Test](https://github.com/salimelh94/Web-Penetration-Test)
### CVE-2025-34085
+- [MrjHaxcore/CVE-2025-34085](https://github.com/MrjHaxcore/CVE-2025-34085)
+- [ill-deed/CVE-2025-34085-Multi-target](https://github.com/ill-deed/CVE-2025-34085-Multi-target)
+- [0xgh057r3c0n/CVE-2025-34085](https://github.com/0xgh057r3c0n/CVE-2025-34085)
+- [yukinime/CVE-2025-34085](https://github.com/yukinime/CVE-2025-34085)
- [0xGunrunner/CVE-2025-34085](https://github.com/0xGunrunner/CVE-2025-34085)
### CVE-2025-34096 (2025-07-10)
@@ -7038,6 +8595,36 @@
- [TheMalwareGuardian/CVE-2025-34096](https://github.com/TheMalwareGuardian/CVE-2025-34096)
+### CVE-2025-34100 (2025-07-10)
+
+An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file manager and its use of the jQuery File Upload plugin. The plugin fails to properly validate or restrict file types or locations during upload operations, allowing an attacker to upload a malicious .php file and subsequently execute arbitrary PHP code on the server under the context of the web server process. While the root vulnerability lies within the jQuery File Upload component, BuilderEngine’s improper integration and lack of access controls expose this functionality to unauthenticated users, resulting in full remote code execution.
+
+
+- [RyanJohnJames/CVE-2025-34100-demo](https://github.com/RyanJohnJames/CVE-2025-34100-demo)
+- [hyeonyeonglee/CVE-2025-34100](https://github.com/hyeonyeonglee/CVE-2025-34100)
+
+### CVE-2025-34152 (2025-08-07)
+
+An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.
+
+
+- [Chocapikk/CVE-2025-34152](https://github.com/Chocapikk/CVE-2025-34152)
+- [kh4sh3i/CVE-2025-34152](https://github.com/kh4sh3i/CVE-2025-34152)
+
+### CVE-2025-34157 (2025-08-27)
+
+Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to delete the project or its associated resource, the payload executes in the admin’s browser context. This results in full compromise of the Coolify instance, including theft of API tokens, session cookies, and access to WebSocket-based terminal sessions on managed servers.
+
+
+- [Eyodav/CVE-2025-34157](https://github.com/Eyodav/CVE-2025-34157)
+
+### CVE-2025-34159 (2025-08-27)
+
+Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting a malicious service definition that mounts the host root filesystem, an attacker can gain full root access to the underlying server.
+
+
+- [Eyodav/CVE-2025-34159](https://github.com/Eyodav/CVE-2025-34159)
+
### CVE-2025-34161 (2025-08-27)
Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Repository field during project creation. By submitting a crafted repository string containing command injection syntax, an attacker can execute arbitrary commands on the underlying host system, resulting in full server compromise.
@@ -7059,6 +8646,13 @@
- [Eyodav/CVE-2025-34226](https://github.com/Eyodav/CVE-2025-34226)
+### CVE-2025-34227 (2025-09-25)
+
+Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system commands on the underlying host as the `nagios` user.
+
+
+- [mcorybillington/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard](https://github.com/mcorybillington/CVE-2025-34227_Nagios-XI-Command-Injection-Configuration-Wizard)
+
### CVE-2025-34282 (2025-10-17)
ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources.
@@ -7074,6 +8668,36 @@
- [amnnrth/CVE-2025-34291_cors_security_scanner](https://github.com/amnnrth/CVE-2025-34291_cors_security_scanner)
- [ridhinva/CVE-2025-34291-Langflow-Scanner](https://github.com/ridhinva/CVE-2025-34291-Langflow-Scanner)
+### CVE-2025-34299 (2025-11-07)
+
+Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.
+
+
+- [rxerium/CVE-2025-34299](https://github.com/rxerium/CVE-2025-34299)
+- [Chocapikk/CVE-2025-34299](https://github.com/Chocapikk/CVE-2025-34299)
+- [KrE80r/CVE-2025-34299-lab](https://github.com/KrE80r/CVE-2025-34299-lab)
+
+### CVE-2025-34300 (2025-07-16)
+
+A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.
+
+
+- [jisi-001/CVE-2025-34300POC](https://github.com/jisi-001/CVE-2025-34300POC)
+
+### CVE-2025-34322 (2025-11-17)
+
+Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimental 'Natural Language Queries' feature. When this feature is configured, certain user-controlled settings—including model selection and connection parameters—are read from the global configuration and concatenated into a shell command that is executed via shell_exec() without proper input handling or command-line argument sanitation. An authenticated user with access to the 'Global Settings' page can supply crafted values in these fields to inject additional shell commands, resulting in arbitrary command execution as the 'www-data' user and compromise of the Log Server host.
+
+
+- [mcorybillington/CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server](https://github.com/mcorybillington/CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server)
+
+### CVE-2025-34324 (2025-11-18)
+
+GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate validation can be disabled when a proxy is configured, allowing an attacker who can intercept network traffic to supply a malicious update manifest and corresponding package with a matching hash. This can cause the client to download and install a tampered update, resulting in arbitrary code execution with the privileges of the GoSign Desktop user on Windows and macOS, or with elevated privileges on some Linux deployments. A local attacker who can modify proxy settings may also abuse this behavior to escalate privileges by forcing installation of a crafted update.
+
+
+- [siddolo/gosign-desktop-exploit-poc](https://github.com/siddolo/gosign-desktop-exploit-poc)
+
### CVE-2025-36041 (2025-06-15)
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose sensitive information or allow the attacker to perform unauthorized actions.
@@ -7081,6 +8705,13 @@
- [byteReaper77/CVE-2025-36041](https://github.com/byteReaper77/CVE-2025-36041)
+### CVE-2025-36604 (2025-08-04)
+
+Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.
+
+
+- [watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604](https://github.com/watchtowrlabs/watchTowr-vs-Dell-UnityVSA-PreAuth-CVE-2025-36604)
+
### CVE-2025-36911 (2026-01-15)
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.
@@ -7104,6 +8735,8 @@
A remote code execution issue exists in HPE OneView.
+- [rxerium/CVE-2025-37164](https://github.com/rxerium/CVE-2025-37164)
+- [g0vguy/CVE-2025-37164-PoC](https://github.com/g0vguy/CVE-2025-37164-PoC)
- [LACHHAB-Anas/Exploit_CVE-2025-37164](https://github.com/LACHHAB-Anas/Exploit_CVE-2025-37164)
### CVE-2025-37899 (2025-05-20)
@@ -7120,9 +8753,19 @@
In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: hfsc: Address reentrant enqueue adding class to eltree twice\n\nSavino says:\n "We are writing to report that this recent patch\n (141d34391abbb315d68556b7c67ad97885407547) [1]\n can be bypassed, and a UAF can still occur when HFSC is utilized with\n NETEM.\n\n The patch only checks the cl->cl_nactive field to determine whether\n it is the first insertion or not [2], but this field is only\n incremented by init_vf [3].\n\n By using HFSC_RSC (which uses init_ed) [4], it is possible to bypass the\n check and insert the class twice in the eltree.\n Under normal conditions, this would lead to an infinite loop in\n hfsc_dequeue for the reasons we already explained in this report [5].\n\n However, if TBF is added as root qdisc and it is configured with a\n very low rate,\n it can be utilized to prevent packets from being dequeued.\n This behavior can be exploited to perform subsequent insertions in the\n HFSC eltree and cause a UAF."\n\nTo fix both the UAF and the infinite loop, with netem as an hfsc child,\ncheck explicitly in hfsc_enqueue whether the class is already in the eltree\nwhenever the HFSC_RSC flag is set.\n\n[1] https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=141d34391abbb315d68556b7c67ad97885407547\n[2] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1572\n[3] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L677\n[4] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1574\n[5] https://lore.kernel.org/netdev/8DuRWwfqjoRDLDmBMlIfbrsZg9Gx50DHJc1ilxsEBNe2D6NMoigR_eIRIG0LOjMc3r10nUUZtArXx4oZBIdUfZQrwjcQhdinnMis_0G7VEk=@willsroot.io/T/#u
+- [0xdevil/CVE-2025-38001](https://github.com/0xdevil/CVE-2025-38001)
+- [khoatran107/cve-2025-38001](https://github.com/khoatran107/cve-2025-38001)
- [ngobao2002/CVE-2025-38001-test](https://github.com/ngobao2002/CVE-2025-38001-test)
+- [boeseejykbtanke348/CVE-2025-38001](https://github.com/boeseejykbtanke348/CVE-2025-38001)
- [aexdyhaxor/CVE-2025-38001](https://github.com/aexdyhaxor/CVE-2025-38001)
+### CVE-2025-38089 (2025-06-30)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: handle SVC_GARBAGE during svc auth processing as auth error\n\ntianshuo han reported a remotely-triggerable crash if the client sends a\nkernel RPC server a specially crafted packet. If decoding the RPC reply\nfails in such a way that SVC_GARBAGE is returned without setting the\nrq_accept_statp pointer, then that pointer can be dereferenced and a\nvalue stored there.\n\nIf it's the first time the thread has processed an RPC, then that\npointer will be set to NULL and the kernel will crash. In other cases,\nit could create a memory scribble.\n\nThe server sunrpc code treats a SVC_GARBAGE return from svc_authenticate\nor pg_authenticate as if it should send a GARBAGE_ARGS reply. RFC 5531\nsays that if authentication fails that the RPC should be rejected\ninstead with a status of AUTH_ERR.\n\nHandle a SVC_GARBAGE return as an AUTH_ERROR, with a reason of\nAUTH_BADCRED instead of returning GARBAGE_ARGS in that case. This\nsidesteps the whole problem of touching the rpc_accept_statp pointer in\nthis situation and avoids the crash.
+
+
+- [keymaker-arch/NFSundown](https://github.com/keymaker-arch/NFSundown)
+
### CVE-2025-38248 (2025-07-09)
In the Linux kernel, the following vulnerability has been resolved:\n\nbridge: mcast: Fix use-after-free during router port configuration\n\nThe bridge maintains a global list of ports behind which a multicast\nrouter resides. The list is consulted during forwarding to ensure\nmulticast packets are forwarded to these ports even if the ports are not\nmember in the matching MDB entry.\n\nWhen per-VLAN multicast snooping is enabled, the per-port multicast\ncontext is disabled on each port and the port is removed from the global\nrouter port list:\n\n # ip link add name br1 up type bridge vlan_filtering 1 mcast_snooping 1\n # ip link add name dummy1 up master br1 type dummy\n # ip link set dev dummy1 type bridge_slave mcast_router 2\n $ bridge -d mdb show | grep router\n router ports on br1: dummy1\n # ip link set dev br1 type bridge mcast_vlan_snooping 1\n $ bridge -d mdb show | grep router\n\nHowever, the port can be re-added to the global list even when per-VLAN\nmulticast snooping is enabled:\n\n # ip link set dev dummy1 type bridge_slave mcast_router 0\n # ip link set dev dummy1 type bridge_slave mcast_router 2\n $ bridge -d mdb show | grep router\n router ports on br1: dummy1\n\nSince commit 4b30ae9adb04 ("net: bridge: mcast: re-implement\nbr_multicast_{enable, disable}_port functions"), when per-VLAN multicast\nsnooping is enabled, multicast disablement on a port will disable the\nper-{port, VLAN} multicast contexts and not the per-port one. As a\nresult, a port will remain in the global router port list even after it\nis deleted. This will lead to a use-after-free [1] when the list is\ntraversed (when adding a new port to the list, for example):\n\n # ip link del dev dummy1\n # ip link add name dummy2 up master br1 type dummy\n # ip link set dev dummy2 type bridge_slave mcast_router 2\n\nSimilarly, stale entries can also be found in the per-VLAN router port\nlist. When per-VLAN multicast snooping is disabled, the per-{port, VLAN}\ncontexts are disabled on each port and the port is removed from the\nper-VLAN router port list:\n\n # ip link add name br1 up type bridge vlan_filtering 1 mcast_snooping 1 mcast_vlan_snooping 1\n # ip link add name dummy1 up master br1 type dummy\n # bridge vlan add vid 2 dev dummy1\n # bridge vlan global set vid 2 dev br1 mcast_snooping 1\n # bridge vlan set vid 2 dev dummy1 mcast_router 2\n $ bridge vlan global show dev br1 vid 2 | grep router\n router ports: dummy1\n # ip link set dev br1 type bridge mcast_vlan_snooping 0\n $ bridge vlan global show dev br1 vid 2 | grep router\n\nHowever, the port can be re-added to the per-VLAN list even when\nper-VLAN multicast snooping is disabled:\n\n # bridge vlan set vid 2 dev dummy1 mcast_router 0\n # bridge vlan set vid 2 dev dummy1 mcast_router 2\n $ bridge vlan global show dev br1 vid 2 | grep router\n router ports: dummy1\n\nWhen the VLAN is deleted from the port, the per-{port, VLAN} multicast\ncontext will not be disabled since multicast snooping is not enabled\non the VLAN. As a result, the port will remain in the per-VLAN router\nport list even after it is no longer member in the VLAN. This will lead\nto a use-after-free [2] when the list is traversed (when adding a new\nport to the list, for example):\n\n # ip link add name dummy2 up master br1 type dummy\n # bridge vlan add vid 2 dev dummy2\n # bridge vlan del vid 2 dev dummy1\n # bridge vlan set vid 2 dev dummy2 mcast_router 2\n\nFix these issues by removing the port from the relevant (global or\nper-VLAN) router port list in br_multicast_port_ctx_deinit(). The\nfunction is invoked during port deletion with the per-port multicast\ncontext and during VLAN deletion with the per-{port, VLAN} multicast\ncontext.\n\nNote that deleting the multicast router timer is not enough as it only\ntakes care of the temporary multicast router states (1 or 3) and not the\npermanent one (2).\n\n[1]\nBUG: KASAN: slab-out-of-bounds in br_multicast_add_router.part.0+0x3f1/0x560\nWrite of size 8 at addr ffff888004a67328 by task ip/384\n[...]\nCall Trace:\n <TASK>\n dump_stack\n---truncated---
@@ -7141,6 +8784,20 @@
- [jordelmir/Elysium-Vanguard-Sentinel-Audit](https://github.com/jordelmir/Elysium-Vanguard-Sentinel-Audit)
- [AnalyticETH/chronomaly-webos](https://github.com/AnalyticETH/chronomaly-webos)
+### CVE-2025-38501 (2025-08-16)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: limit repeated connections from clients with the same IP\n\nRepeated connections from clients with the same IP address may exhaust\nthe max connections and prevent other normal client connections.\nThis patch limit repeated connections from clients with the same IP.
+
+
+- [keymaker-arch/KSMBDrain](https://github.com/keymaker-arch/KSMBDrain)
+
+### CVE-2025-38676 (2025-08-26)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\niommu/amd: Avoid stack buffer overflow from kernel cmdline\n\nWhile the kernel command line is considered trusted in most environments,\navoid writing 1 byte past the end of "acpiid" if the "str" argument is\nmaximum length.
+
+
+- [14mb1v45h/CVE-2025-38676](https://github.com/14mb1v45h/CVE-2025-38676)
+
### CVE-2025-38678 (2025-09-03)
In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: reject duplicate device on updates\n\nA chain/flowtable update with duplicated devices in the same batch is\npossible. Unfortunately, netdev event path only removes the first\ndevice that is found, leaving unregistered the hook of the duplicated\ndevice.\n\nCheck if a duplicated device exists in the transaction batch, bail out\nwith EEXIST in such case.\n\nWARNING is hit when unregistering the hook:\n\n [49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150\n [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full)\n [...]\n [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150
@@ -7155,6 +8812,13 @@
- [Sita-Technologies/CVE-2025-39247](https://github.com/Sita-Technologies/CVE-2025-39247)
+### CVE-2025-39401 (2025-05-19)
+
+Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through <= 44.0 (17-08-2023).
+
+
+- [Nxploited/CVE-2025-39401](https://github.com/Nxploited/CVE-2025-39401)
+
### CVE-2025-39436 (2025-04-17)
Unrestricted Upload of File with Dangerous Type vulnerability in aidraw I Draw idraw allows Using Malicious Files.This issue affects I Draw: from n/a through <= 1.0.
@@ -7185,6 +8849,13 @@
- [Nxploited/CVE-2025-39538](https://github.com/Nxploited/CVE-2025-39538)
+### CVE-2025-39596 (2025-04-17)
+
+Weak Authentication vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows Privilege Escalation.This issue affects Quentn WP: from n/a through <= 1.2.8.
+
+
+- [Nxploited/CVE-2025-39596](https://github.com/Nxploited/CVE-2025-39596)
+
### CVE-2025-39601 (2025-04-16)
Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.
@@ -7192,6 +8863,20 @@
- [Nxploited/CVE-2025-39601](https://github.com/Nxploited/CVE-2025-39601)
+### CVE-2025-39866 (2025-09-19)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nfs: writeback: fix use-after-free in __mark_inode_dirty()\n\nAn use-after-free issue occurred when __mark_inode_dirty() get the\nbdi_writeback that was in the progress of switching.\n\nCPU: 1 PID: 562 Comm: systemd-random- Not tainted 6.6.56-gb4403bd46a8e #1\n......\npstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __mark_inode_dirty+0x124/0x418\nlr : __mark_inode_dirty+0x118/0x418\nsp : ffffffc08c9dbbc0\n........\nCall trace:\n __mark_inode_dirty+0x124/0x418\n generic_update_time+0x4c/0x60\n file_modified+0xcc/0xd0\n ext4_buffered_write_iter+0x58/0x124\n ext4_file_write_iter+0x54/0x704\n vfs_write+0x1c0/0x308\n ksys_write+0x74/0x10c\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x114\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x40/0xe4\n el0t_64_sync_handler+0x120/0x12c\n el0t_64_sync+0x194/0x198\n\nRoot cause is:\n\nsystemd-random-seed kworker\n----------------------------------------------------------------------\n___mark_inode_dirty inode_switch_wbs_work_fn\n\n spin_lock(&inode->i_lock);\n inode_attach_wb\n locked_inode_to_wb_and_lock_list\n get inode->i_wb\n spin_unlock(&inode->i_lock);\n spin_lock(&wb->list_lock)\n spin_lock(&inode->i_lock)\n inode_io_list_move_locked\n spin_unlock(&wb->list_lock)\n spin_unlock(&inode->i_lock)\n spin_lock(&old_wb->list_lock)\n inode_do_switch_wbs\n spin_lock(&inode->i_lock)\n inode->i_wb = new_wb\n spin_unlock(&inode->i_lock)\n spin_unlock(&old_wb->list_lock)\n wb_put_many(old_wb, nr_switched)\n cgwb_release\n old wb released\n wb_wakeup_delayed() accesses wb,\n then trigger the use-after-free\n issue\n\nFix this race condition by holding inode spinlock until\nwb_wakeup_delayed() finished.
+
+
+- [byteReaper77/CVE-2025-39866](https://github.com/byteReaper77/CVE-2025-39866)
+
+### CVE-2025-39964 (2025-10-13)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: af_alg - Disallow concurrent writes in af_alg_sendmsg\n\nIssuing two writes to the same af_alg socket is bogus as the\ndata will be interleaved in an unpredictable fashion. Furthermore,\nconcurrent writes may create inconsistencies in the internal\nsocket state.\n\nDisallow this by adding a new ctx->write field that indiciates\nexclusive ownership for writing.
+
+
+- [n1k0oowang/CVE-2025-39964_EXP](https://github.com/n1k0oowang/CVE-2025-39964_EXP)
+
### CVE-2025-40019 (2025-10-24)
In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: essiv - Check ssize for decryption and in-place encryption\n\nMove the ssize check to the start in essiv_aead_crypt so that\nit's also checked for decryption and in-place encryption.
@@ -7200,6 +8885,13 @@
- [xooxo/CVE-2025-40019-Essiv](https://github.com/xooxo/CVE-2025-40019-Essiv)
- [0xAtharv/CVE-2025-40019-POC](https://github.com/0xAtharv/CVE-2025-40019-POC)
+### CVE-2025-40040 (2025-10-28)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nmm/ksm: fix flag-dropping behavior in ksm_madvise\n\nsyzkaller discovered the following crash: (kernel BUG)\n\n[ 44.607039] ------------[ cut here ]------------\n[ 44.607422] kernel BUG at mm/userfaultfd.c:2067!\n[ 44.608148] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI\n[ 44.608814] CPU: 1 UID: 0 PID: 2475 Comm: reproducer Not tainted 6.16.0-rc6 #1 PREEMPT(none)\n[ 44.609635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[ 44.610695] RIP: 0010:userfaultfd_release_all+0x3a8/0x460\n\n<snip other registers, drop unreliable trace>\n\n[ 44.617726] Call Trace:\n[ 44.617926] <TASK>\n[ 44.619284] userfaultfd_release+0xef/0x1b0\n[ 44.620976] __fput+0x3f9/0xb60\n[ 44.621240] fput_close_sync+0x110/0x210\n[ 44.622222] __x64_sys_close+0x8f/0x120\n[ 44.622530] do_syscall_64+0x5b/0x2f0\n[ 44.622840] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 44.623244] RIP: 0033:0x7f365bb3f227\n\nKernel panics because it detects UFFD inconsistency during\nuserfaultfd_release_all(). Specifically, a VMA which has a valid pointer\nto vma->vm_userfaultfd_ctx, but no UFFD flags in vma->vm_flags.\n\nThe inconsistency is caused in ksm_madvise(): when user calls madvise()\nwith MADV_UNMEARGEABLE on a VMA that is registered for UFFD in MINOR mode,\nit accidentally clears all flags stored in the upper 32 bits of\nvma->vm_flags.\n\nAssuming x86_64 kernel build, unsigned long is 64-bit and unsigned int and\nint are 32-bit wide. This setup causes the following mishap during the &=\n~VM_MERGEABLE assignment.\n\nVM_MERGEABLE is a 32-bit constant of type unsigned int, 0x8000'0000. \nAfter ~ is applied, it becomes 0x7fff'ffff unsigned int, which is then\npromoted to unsigned long before the & operation. This promotion fills\nupper 32 bits with leading 0s, as we're doing unsigned conversion (and\neven for a signed conversion, this wouldn't help as the leading bit is 0).\n& operation thus ends up AND-ing vm_flags with 0x0000'0000'7fff'ffff\ninstead of intended 0xffff'ffff'7fff'ffff and hence accidentally clears\nthe upper 32-bits of its value.\n\nFix it by changing `VM_MERGEABLE` constant to unsigned long, using the\nBIT() macro.\n\nNote: other VM_* flags are not affected: This only happens to the\nVM_MERGEABLE flag, as the other VM_* flags are all constants of type int\nand after ~ operation, they end up with leading 1 and are thus converted\nto unsigned long with leading 1s.\n\nNote 2:\nAfter commit 31defc3b01d9 ("userfaultfd: remove (VM_)BUG_ON()s"), this is\nno longer a kernel BUG, but a WARNING at the same place:\n\n[ 45.595973] WARNING: CPU: 1 PID: 2474 at mm/userfaultfd.c:2067\n\nbut the root-cause (flag-drop) remains the same.\n\n[akpm@linux-foundation.org: rust bindgen wasn't able to handle BIT(), from Miguel]
+
+
+- [SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882](https://github.com/SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882)
+
### CVE-2025-40271 (2025-12-06)
In the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc: fix uaf in proc_readdir_de()\n\nPde is erased from subdir rbtree through rb_erase(), but not set the node\nto EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE()\nset the erased node to EMPTY, then pde_subdir_next() will return NULL to\navoid uaf access.\n\nWe found an uaf issue while using stress-ng testing, need to run testcase\ngetdent and tun in the same time. The steps of the issue is as follows:\n\n1) use getdent to traverse dir /proc/pid/net/dev_snmp6/, and current\n pde is tun3;\n\n2) in the [time windows] unregister netdevice tun3 and tun2, and erase\n them from rbtree. erase tun3 first, and then erase tun2. the\n pde(tun2) will be released to slab;\n\n3) continue to getdent process, then pde_subdir_next() will return\n pde(tun2) which is released, it will case uaf access.\n\nCPU 0 | CPU 1\n-------------------------------------------------------------------------\ntraverse dir /proc/pid/net/dev_snmp6/ | unregister_netdevice(tun->dev) //tun3 tun2\nsys_getdents64() |\n iterate_dir() |\n proc_readdir() |\n proc_readdir_de() | snmp6_unregister_dev()\n pde_get(de); | proc_remove()\n read_unlock(&proc_subdir_lock); | remove_proc_subtree()\n | write_lock(&proc_subdir_lock);\n [time window] | rb_erase(&root->subdir_node, &parent->subdir);\n | write_unlock(&proc_subdir_lock);\n read_lock(&proc_subdir_lock); |\n next = pde_subdir_next(de); |\n pde_put(de); |\n de = next; //UAF |\n\nrbtree of dev_snmp6\n |\n pde(tun3)\n / \\n NULL pde(tun2)
@@ -7229,6 +8921,21 @@
- [imbas007/auth-bypass-CVE-2025-40554](https://github.com/imbas007/auth-bypass-CVE-2025-40554)
- [Skynoxk/CVE-2025-40554](https://github.com/Skynoxk/CVE-2025-40554)
+### CVE-2025-40602 (2025-12-18)
+
+A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
+
+
+- [rxerium/CVE-2025-40602](https://github.com/rxerium/CVE-2025-40602)
+- [cyberleelawat/CVE-2025-40602](https://github.com/cyberleelawat/CVE-2025-40602)
+
+### CVE-2025-40629 (2025-05-16)
+
+PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory.
+
+
+- [omr00t/CVE-2025-40629](https://github.com/omr00t/CVE-2025-40629)
+
### CVE-2025-40634 (2025-05-20)
Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks.
@@ -7236,6 +8943,20 @@
- [hacefresko/CVE-2025-40634](https://github.com/hacefresko/CVE-2025-40634)
+### CVE-2025-40677 (2025-09-18)
+
+SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”.
+
+
+- [PeterGabaldon/CVE-2025-40677](https://github.com/PeterGabaldon/CVE-2025-40677)
+
+### CVE-2025-40766 (2025-08-12)
+
+A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application runs docker containers without adequate resource and security limitations. This could allow an attacker to perform a denial-of-service (DoS) attack.
+
+
+- [FurkanKAYAPINAR/ecs_checker](https://github.com/FurkanKAYAPINAR/ecs_checker)
+
### CVE-2025-40775 (2025-05-21)
When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7.
@@ -7258,6 +8979,13 @@
- [xvk1t1/Open5GS-CVE-2025-41067-CVE-2025-41068-PoC](https://github.com/xvk1t1/Open5GS-CVE-2025-41067-CVE-2025-41068-PoC)
+### CVE-2025-41088 (2025-10-10)
+
+Stored Cross-Site Scripting (XSS) in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add a text element in the 'Global Elements' section, and finally modify the 'Text' field in the section with the malicious payload.
+
+
+- [Marinafabregat/CVE-2025-41088](https://github.com/Marinafabregat/CVE-2025-41088)
+
### CVE-2025-41090 (2025-10-28)
microCLAUDIA in v3.2.0 and prior has an improper access control vulnerability.\n\nThis flaw allows an authenticated user to perform unauthorized actions on other organizations' systems by sending direct API requests. To do so, the attacker can use organization identifiers obtained through a compromised endpoint or deduced manually.\n\nThis vulnerability allows access between tenants, enabling an attacker to list and manage remote assets, uninstall agents, and even delete vaccines configurations.
@@ -7265,6 +8993,14 @@
- [TheMalwareGuardian/brokeCLAUDIA](https://github.com/TheMalwareGuardian/brokeCLAUDIA)
+### CVE-2025-41115 (2025-11-21)
+
+SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management.\n\nIn Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user identity handling allows a malicious or compromised SCIM client to provision a user with a numeric externalId, which in turn could allow to override internal user IDs and lead to impersonation or privilege escalation.\n\nThis vulnerability applies only if all of the following conditions are met:\n- `enableSCIM` feature flag set to true\n- `user_sync_enabled` config option in the `[auth.scim]` block set to true
+
+
+- [rockmelodies/Blackash-CVE-2025-41115](https://github.com/rockmelodies/Blackash-CVE-2025-41115)
+- [I3r1h0n/GrafanaSCIMalform](https://github.com/I3r1h0n/GrafanaSCIMalform)
+
### CVE-2025-41242 (2025-08-18)
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.\n\nAn application can be vulnerable when all the following are true:\n\n * the application is deployed as a WAR or with an embedded Servlet container\n * the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization \n * the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling\n\n\nWe have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application.
@@ -7285,6 +9021,22 @@
- [rxerium/CVE-2025-41244](https://github.com/rxerium/CVE-2025-41244)
+- [NULL200OK/CVE-2025-41244](https://github.com/NULL200OK/CVE-2025-41244)
+
+### CVE-2025-41373 (2025-08-01)
+
+A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php.
+
+
+- [byteReaper77/CVE-2025-41373](https://github.com/byteReaper77/CVE-2025-41373)
+
+### CVE-2025-41646 (2025-06-06)
+
+An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device
+
+
+- [GreenForceNetworks/CVE-2025-41646---Critical-Authentication-Bypass-](https://github.com/GreenForceNetworks/CVE-2025-41646---Critical-Authentication-Bypass-)
+- [r0otk3r/CVE-2025-41646](https://github.com/r0otk3r/CVE-2025-41646)
### CVE-2025-41656 (2025-07-01)
@@ -7300,6 +9052,32 @@
- [rxerium/CVE-2025-42944](https://github.com/rxerium/CVE-2025-42944)
+### CVE-2025-42957 (2025-08-12)
+
+SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
+
+
+- [mrk336/CVE-2025-42957-SAP-S-4HANA-Under-Siege](https://github.com/mrk336/CVE-2025-42957-SAP-S-4HANA-Under-Siege)
+
+### CVE-2025-43300 (2025-08-21)
+
+An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
+
+
+- [AR-DEV-1/CVE-2025-43300-exp](https://github.com/AR-DEV-1/CVE-2025-43300-exp)
+- [hunters-sec/CVE-2025-43300](https://github.com/hunters-sec/CVE-2025-43300)
+- [PwnToday/CVE-2025-43300](https://github.com/PwnToday/CVE-2025-43300)
+- [veniversum/cve-2025-43300](https://github.com/veniversum/cve-2025-43300)
+- [ticofookfook/CVE-2025-43300](https://github.com/ticofookfook/CVE-2025-43300)
+- [Dark-life944/CVE-2025](https://github.com/Dark-life944/CVE-2025)
+
+### CVE-2025-43400 (2025-09-29)
+
+An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
+
+
+- [csrXamfi/CVE-2025-43400](https://github.com/csrXamfi/CVE-2025-43400)
+
### CVE-2025-43407 (2025-11-04)
This issue was addressed with improved entitlements. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox.
@@ -7307,6 +9085,20 @@
- [mranonymous234/Sandbox-Escape-iOS-18.0-26.0](https://github.com/mranonymous234/Sandbox-Escape-iOS-18.0-26.0)
+### CVE-2025-43426 (2025-11-04)
+
+A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. An app may be able to access sensitive user data.
+
+
+- [csrXamfi/CVE-2025-43426](https://github.com/csrXamfi/CVE-2025-43426)
+
+### CVE-2025-43504 (2025-11-04)
+
+A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service.
+
+
+- [calysteon/CVE-2025-43504](https://github.com/calysteon/CVE-2025-43504)
+
### CVE-2025-43529 (2025-12-17)
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.
@@ -7320,6 +9112,13 @@
- [bjrjk/CVE-2025-43529](https://github.com/bjrjk/CVE-2025-43529)
- [kmeps4/bugtest](https://github.com/kmeps4/bugtest)
+### CVE-2025-43541 (2025-12-17)
+
+A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
+
+
+- [crypt0bit/CVE-2025-43541](https://github.com/crypt0bit/CVE-2025-43541)
+
### CVE-2025-43864 (2025-04-25)
React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2.
@@ -7429,6 +9228,13 @@
- [mr-xmen786/CVE-2025-44608](https://github.com/mr-xmen786/CVE-2025-44608)
+### CVE-2025-44823 (2025-10-07)
+
+Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.
+
+
+- [skraft9/CVE-2025-44823](https://github.com/skraft9/CVE-2025-44823)
+
### CVE-2025-44998 (2025-05-23)
A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecting a crafted payload into the js-theme-3 parameter.
@@ -7444,6 +9250,16 @@
- [xp3s/CVE-2025-45250](https://github.com/xp3s/CVE-2025-45250)
- [Anike-x/CVE-2025-45250](https://github.com/Anike-x/CVE-2025-45250)
+### CVE-2025-45346 (2025-07-29)
+
+SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.
+
+
+- [0xsu3ks/CVE-2025-45346](https://github.com/0xsu3ks/CVE-2025-45346)
+
+### CVE-2025-45407
+- [yallasec/CVE-2025-45407](https://github.com/yallasec/CVE-2025-45407)
+
### CVE-2025-45466 (2025-07-25)
Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext.
@@ -7482,6 +9298,20 @@
### CVE-2025-45710
- [partywavesec/CVE-2025-45710](https://github.com/partywavesec/CVE-2025-45710)
+### CVE-2025-45778 (2025-08-01)
+
+A stored cross-site scripting (XSS) vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field.
+
+
+- [Smarttfoxx/CVE-2025-45778](https://github.com/Smarttfoxx/CVE-2025-45778)
+
+### CVE-2025-45805 (2025-09-03)
+
+In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.
+
+
+- [mohammed-alsaqqaf/CVE-2025-45805](https://github.com/mohammed-alsaqqaf/CVE-2025-45805)
+
### CVE-2025-45809 (2025-07-03)
SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.
@@ -7499,6 +9329,13 @@
- [pracharapol/CVE-2025-45960](https://github.com/pracharapol/CVE-2025-45960)
+### CVE-2025-46018 (2025-08-01)
+
+CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss.
+
+
+- [niranjangaire1995/CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass](https://github.com/niranjangaire1995/CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass)
+
### CVE-2025-46041 (2025-06-09)
A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add).
@@ -7527,6 +9364,13 @@
- [yggcwhat/CVE-2025-46080](https://github.com/yggcwhat/CVE-2025-46080)
+### CVE-2025-46099 (2025-07-23)
+
+In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module directory and access it via the module routing logic in albums.site.php, resulting in arbitrary command execution through a GET parameter.
+
+
+- [0xC4J/CVE-Lists](https://github.com/0xC4J/CVE-Lists)
+
### CVE-2025-46157 (2025-06-18)
An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form
@@ -7586,6 +9430,20 @@
- [1Altruist/CVE-2025-46271-Reverse-Shell-PoC](https://github.com/1Altruist/CVE-2025-46271-Reverse-Shell-PoC)
+### CVE-2025-46295 (2025-12-16)
+
+Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Because some interpolators could trigger actions like executing commands or accessing external resources, an attacker could potentially achieve remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4.
+
+
+- [soliantconsulting/CVE-2025-46295-fix-fms](https://github.com/soliantconsulting/CVE-2025-46295-fix-fms)
+
+### CVE-2025-46408 (2025-09-15)
+
+An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.
+
+
+- [shinyColumn/CVE-2025-46408](https://github.com/shinyColumn/CVE-2025-46408)
+
### CVE-2025-46657 (2025-04-27)
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
@@ -7614,6 +9472,13 @@
- [singetu0096/CVE-2025-46731](https://github.com/singetu0096/CVE-2025-46731)
+### CVE-2025-46811 (2025-07-30)
+
+A Missing Authorization vulnerability in SUSE Linux Manager allows anyone with the ability to connect to port 443 of SUSE Manager is able to run any command as root on any client. This issue affects Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.27-150600.3.33.1; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.87-150400.3.110.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.87-150400.3.110.2; SUSE Manager Server Module 4.3: from ? before 4.3.87-150400.3.110.2.
+
+
+- [b-L-x/CVE-2025-46811](https://github.com/b-L-x/CVE-2025-46811)
+
### CVE-2025-46822 (2025-05-21)
OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized access to sensitive internal files. Commit c835c6f7799eacada4c0fc77e0816f250af01ad2 contains a patch for the issue.
@@ -7622,6 +9487,27 @@
- [d3sca/CVE-2025-46822](https://github.com/d3sca/CVE-2025-46822)
- [HORKimhab/CVE-2025-46822](https://github.com/HORKimhab/CVE-2025-46822)
+### CVE-2025-47175 (2025-06-10)
+
+Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
+
+
+- [mbanyamer/mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE](https://github.com/mbanyamer/mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE)
+
+### CVE-2025-47176 (2025-06-10)
+
+'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.
+
+
+- [mahyarx/CVE-2025-47176](https://github.com/mahyarx/CVE-2025-47176)
+
+### CVE-2025-47178 (2025-07-08)
+
+Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.
+
+
+- [synacktiv/CVE-2025-47178](https://github.com/synacktiv/CVE-2025-47178)
+
### CVE-2025-47181 (2025-05-22)
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
@@ -7673,6 +9559,13 @@
- [inverterad/CVE-2025-47445-PoC](https://github.com/inverterad/CVE-2025-47445-PoC)
+### CVE-2025-47533 (2025-05-07)
+
+Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design Graphina graphina-elementor-charts-and-graphs allows PHP Local File Inclusion.This issue affects Graphina: from n/a through <= 3.0.4.
+
+
+- [zs1n/CVE-2024-47533](https://github.com/zs1n/CVE-2024-47533)
+
### CVE-2025-47539 (2025-05-23)
Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.
@@ -7718,7 +9611,16 @@
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.
+- [4m3rr0r/CVE-2025-47812-poc](https://github.com/4m3rr0r/CVE-2025-47812-poc)
+- [0xcan1337/CVE-2025-47812-poC](https://github.com/0xcan1337/CVE-2025-47812-poC)
+- [0xgh057r3c0n/CVE-2025-47812](https://github.com/0xgh057r3c0n/CVE-2025-47812)
+- [ill-deed/WingFTP-CVE-2025-47812-illdeed](https://github.com/ill-deed/WingFTP-CVE-2025-47812-illdeed)
+- [pevinkumar10/CVE-2025-47812](https://github.com/pevinkumar10/CVE-2025-47812)
- [rxerium/CVE-2025-47812](https://github.com/rxerium/CVE-2025-47812)
+- [blindma1den/CVE-2025-47812](https://github.com/blindma1den/CVE-2025-47812)
+- [r0otk3r/CVE-2025-47812](https://github.com/r0otk3r/CVE-2025-47812)
+- [CTY-Research-1/CVE-2025-47812_Lab_environment](https://github.com/CTY-Research-1/CVE-2025-47812_Lab_environment)
+- [dkstar11q/Blackash-CVE-2025-47812](https://github.com/dkstar11q/Blackash-CVE-2025-47812)
- [matesz44/CVE-2025-47812](https://github.com/matesz44/CVE-2025-47812)
- [shadowgit30/CVE-2025-47812](https://github.com/shadowgit30/CVE-2025-47812)
- [havbay/CVE-2025-47812-PoC](https://github.com/havbay/CVE-2025-47812-PoC)
@@ -7736,13 +9638,42 @@
- [Zedeldi/CVE-2025-47827](https://github.com/Zedeldi/CVE-2025-47827)
+### CVE-2025-47916 (2025-05-16)
+
+Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller (file: /applications/core/modules/front/system/themeeditor.php), where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content parameter to the Theme::makeProcessFunction() method; hence it is evaluated by the template engine. Accordingly, this can be exploited by unauthenticated attackers to inject and execute arbitrary PHP code by providing crafted template strings.
+
+
+- [Web3-Serializer/CVE-2025-47916](https://github.com/Web3-Serializer/CVE-2025-47916)
+
+### CVE-2025-47917 (2025-07-20)
+
+Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtls_x509_string_to_names() takes a head argument that is documented as an output argument. The documentation does not suggest that the function will free that pointer; however, the function does call mbedtls_asn1_free_named_data_list() on that argument, which performs a deep free(). As a result, application code that uses this function (relying only on documented behavior) is likely to still hold pointers to the memory blocks that were freed, resulting in a high risk of use-after-free or double-free. In particular, the two sample programs x509/cert_write and x509/cert_req are affected (use-after-free if the san string contains more than one DN).
+
+
+- [byteReaper77/CVE-2025-47917](https://github.com/byteReaper77/CVE-2025-47917)
+
+### CVE-2025-47962 (2025-06-10)
+
+Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.
+
+
+- [q1uf3ng/CVE-2025-47962-POC](https://github.com/q1uf3ng/CVE-2025-47962-POC)
+
### CVE-2025-47987 (2025-07-08)
Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges locally.
+- [Kryptoenix/CVE-2025-47987_PoC](https://github.com/Kryptoenix/CVE-2025-47987_PoC)
- [kaleth4/CVE-2025-47987](https://github.com/kaleth4/CVE-2025-47987)
+### CVE-2025-48060 (2025-05-21)
+
+jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happens on file jv.c, line 1456 `void* p = malloc(sz);`. As of time of publication, no patched versions are available.
+
+
+- [leorivass/jq-els-backport-cve-2025-48060](https://github.com/leorivass/jq-els-backport-cve-2025-48060)
+
### CVE-2025-48129 (2025-06-09)
Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light excel-like-price-change-for-woocommerce-and-wp-e-commerce-light allows Privilege Escalation.This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through <= 2.4.37.
@@ -7755,8 +9686,46 @@
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
+- [acheong08/CVE-2025-48384](https://github.com/acheong08/CVE-2025-48384)
+- [fishyyh/CVE-2025-48384](https://github.com/fishyyh/CVE-2025-48384)
+- [kallydev/cve-2025-48384-hook](https://github.com/kallydev/cve-2025-48384-hook)
+- [fishyyh/CVE-2025-48384-POC](https://github.com/fishyyh/CVE-2025-48384-POC)
+- [liamg/CVE-2025-48384-submodule](https://github.com/liamg/CVE-2025-48384-submodule)
+- [liamg/CVE-2025-48384](https://github.com/liamg/CVE-2025-48384)
+- [ppd520/CVE-2025-48384](https://github.com/ppd520/CVE-2025-48384)
+- [NigelX/CVE-2025-48384](https://github.com/NigelX/CVE-2025-48384)
+- [greatyy/CVE-2025-48384-p](https://github.com/greatyy/CVE-2025-48384-p)
+- [testdjshan/CVE-2025-48384](https://github.com/testdjshan/CVE-2025-48384)
+- [altm4n/cve-2025-48384](https://github.com/altm4n/cve-2025-48384)
+- [altm4n/cve-2025-48384-hub](https://github.com/altm4n/cve-2025-48384-hub)
+- [p1026/CVE-2025-48384](https://github.com/p1026/CVE-2025-48384)
+- [vinieger/vinieger-CVE-2025-48384-Dockerfile](https://github.com/vinieger/vinieger-CVE-2025-48384-Dockerfile)
+- [ECHO6789/CVE-2025-48384-submodule](https://github.com/ECHO6789/CVE-2025-48384-submodule)
+- [nguyentranbaotran/cve-2025-48384-poc](https://github.com/nguyentranbaotran/cve-2025-48384-poc)
+- [admin-ping/CVE-2025-48384-RCE](https://github.com/admin-ping/CVE-2025-48384-RCE)
+- [simplyfurious/CVE-2025-48384-submodule_test](https://github.com/simplyfurious/CVE-2025-48384-submodule_test)
+- [Anezatraa/CVE-2025-48384-submodule](https://github.com/Anezatraa/CVE-2025-48384-submodule)
+- [IK-20211125/CVE-2025-48384](https://github.com/IK-20211125/CVE-2025-48384)
+- [elprogramadorgt/CVE-2025-48384](https://github.com/elprogramadorgt/CVE-2025-48384)
+- [f1shh/CVE-2025-48384](https://github.com/f1shh/CVE-2025-48384)
+- [fluoworite/CVE-2025-48384](https://github.com/fluoworite/CVE-2025-48384)
+- [fluoworite/CVE-2025-48384-sub](https://github.com/fluoworite/CVE-2025-48384-sub)
+- [beishanxueyuan/CVE-2025-48384](https://github.com/beishanxueyuan/CVE-2025-48384)
+- [beishanxueyuan/CVE-2025-48384-test](https://github.com/beishanxueyuan/CVE-2025-48384-test)
+- [replicatorbot/CVE-2025-48384](https://github.com/replicatorbot/CVE-2025-48384)
+- [replicatorbot/CVE-2025-48384-POC](https://github.com/replicatorbot/CVE-2025-48384-POC)
+- [eliox01/CVE-2025-48384](https://github.com/eliox01/CVE-2025-48384)
+- [jacobholtz/CVE-2025-48384-poc](https://github.com/jacobholtz/CVE-2025-48384-poc)
+- [jacobholtz/CVE-2025-48384-submodule](https://github.com/jacobholtz/CVE-2025-48384-submodule)
+- [butyraldehyde/CVE-2025-48384-PoC-Part2](https://github.com/butyraldehyde/CVE-2025-48384-PoC-Part2)
+- [butyraldehyde/CVE-2025-48384-PoC](https://github.com/butyraldehyde/CVE-2025-48384-PoC)
+- [arun1033/CVE-2025-48384](https://github.com/arun1033/CVE-2025-48384)
- [s41r4j/CVE-2025-48384](https://github.com/s41r4j/CVE-2025-48384)
- [s41r4j/CVE-2025-48384-submodule](https://github.com/s41r4j/CVE-2025-48384-submodule)
+- [zr0n/CVE-2025-48384-sub](https://github.com/zr0n/CVE-2025-48384-sub)
+- [zr0n/CVE-2025-48384-main](https://github.com/zr0n/CVE-2025-48384-main)
+- [vignesh21-git/CVE-2025-48384](https://github.com/vignesh21-git/CVE-2025-48384)
+- [vignesh21-git/CVE-2025-48384-submodule](https://github.com/vignesh21-git/CVE-2025-48384-submodule)
- [DayDayDayDreaming/backup-exec-cve-48384](https://github.com/DayDayDayDreaming/backup-exec-cve-48384)
- [sathish46-lab/CVE-2025-48384-submodule](https://github.com/sathish46-lab/CVE-2025-48384-submodule)
@@ -7794,6 +9763,8 @@
- [logesh-GIT001/CVE-2025-48593](https://github.com/logesh-GIT001/CVE-2025-48593)
+- [zhuowei/blueshrimp](https://github.com/zhuowei/blueshrimp)
+- [ranasen-rat/CVE-2025-48593](https://github.com/ranasen-rat/CVE-2025-48593)
### CVE-2025-48703 (2025-09-19)
@@ -7801,6 +9772,8 @@
- [Skynoxk/CVE-2025-48703](https://github.com/Skynoxk/CVE-2025-48703)
+- [itstarsec/CVE-2025-48703](https://github.com/itstarsec/CVE-2025-48703)
+- [ftz7/PoC-CVE-2025-48703](https://github.com/ftz7/PoC-CVE-2025-48703)
### CVE-2025-48708 (2025-05-23)
@@ -7824,6 +9797,15 @@
- [Farenhytee/database-sentinel](https://github.com/Farenhytee/database-sentinel)
- [git-akki/cso-vibecheck](https://github.com/git-akki/cso-vibecheck)
+### CVE-2025-48799 (2025-07-08)
+
+Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.
+
+
+- [Wh04m1001/CVE-2025-48799](https://github.com/Wh04m1001/CVE-2025-48799)
+- [painoob/CVE-2025-48799](https://github.com/painoob/CVE-2025-48799)
+- [gmh5225/CVE-2025-48799-](https://github.com/gmh5225/CVE-2025-48799-)
+
### CVE-2025-48804 (2025-07-08)
Acceptance of extraneous untrusted data with trusted data in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
@@ -7838,6 +9820,7 @@
- [0xgh057r3c0n/CVE-2025-48827](https://github.com/0xgh057r3c0n/CVE-2025-48827)
- [wiseep/CVE-2025-48827](https://github.com/wiseep/CVE-2025-48827)
+- [SystemVll/CVE-2025-48827](https://github.com/SystemVll/CVE-2025-48827)
### CVE-2025-48828 (2025-05-27)
@@ -7846,6 +9829,9 @@
- [ill-deed/vBulletin-CVE-2025-48828-Multi-target](https://github.com/ill-deed/vBulletin-CVE-2025-48828-Multi-target)
+### CVE-2025-48932
+- [XploitGh0st/CVE-2025-48932---exploit](https://github.com/XploitGh0st/CVE-2025-48932---exploit)
+
### CVE-2025-48976 (2025-06-16)
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.\n\nThis issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.\n\nUsers are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.
@@ -7860,6 +9846,13 @@
- [Samb102/POC-CVE-2025-48988-CVE-2025-48976](https://github.com/Samb102/POC-CVE-2025-48988-CVE-2025-48976)
+### CVE-2025-49029 (2025-07-01)
+
+Improper Control of Generation of Code ('Code Injection') vulnerability in bitto.kazi Custom Login And Signup Widget custom-login-and-signup-widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through <= 1.0.
+
+
+- [Nxploited/CVE-2025-49029](https://github.com/Nxploited/CVE-2025-49029)
+
### CVE-2025-49071 (2025-06-17)
Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1.
@@ -7881,6 +9874,17 @@
- [BiiTts/Roundcube-CVE-2025-49113](https://github.com/BiiTts/Roundcube-CVE-2025-49113)
- [5kr1pt/Roundcube_CVE-2025-49113](https://github.com/5kr1pt/Roundcube_CVE-2025-49113)
- [punitdarji/roundcube-cve-2025-49113](https://github.com/punitdarji/roundcube-cve-2025-49113)
+- [hackmelocal/CVE-2025-49113-Simulation](https://github.com/hackmelocal/CVE-2025-49113-Simulation)
+- [Joelp03/CVE-2025-49113](https://github.com/Joelp03/CVE-2025-49113)
+- [00xCanelo/CVE-2025-49113](https://github.com/00xCanelo/CVE-2025-49113)
+- [CyberQuestor-infosec/CVE-2025-49113-Roundcube_1.6.10](https://github.com/CyberQuestor-infosec/CVE-2025-49113-Roundcube_1.6.10)
+- [SteamPunk424/CVE-2025-49113-Roundcube-RCE-PHP](https://github.com/SteamPunk424/CVE-2025-49113-Roundcube-RCE-PHP)
+- [Zwique/CVE-2025-49113](https://github.com/Zwique/CVE-2025-49113)
+- [AC8999/CVE-2025-49113](https://github.com/AC8999/CVE-2025-49113)
+- [LeakForge/CVE-2025-49113](https://github.com/LeakForge/CVE-2025-49113)
+- [Zuack55/Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-](https://github.com/Zuack55/Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-)
+- [l4f2s4/CVE-2025-49113_exploit_cookies](https://github.com/l4f2s4/CVE-2025-49113_exploit_cookies)
+- [ankitpandey383/roundcube-cve-2025-49113-lab](https://github.com/ankitpandey383/roundcube-cve-2025-49113-lab)
- [Evillm/CVE-2025-49113-PoC](https://github.com/Evillm/CVE-2025-49113-PoC)
- [mooder1/CVE-2025-49113](https://github.com/mooder1/CVE-2025-49113)
- [rippsec/CVE-2025-49113-Roundcube-RCE](https://github.com/rippsec/CVE-2025-49113-Roundcube-RCE)
@@ -7892,6 +9896,13 @@
- [gregk4sec/CVE-2025-49125](https://github.com/gregk4sec/CVE-2025-49125)
+### CVE-2025-49131 (2025-06-09)
+
+FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated code in isolation. The sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overly permissive syscalls, which allows attackers to escape the intended sandbox boundaries. Attackers could exploit this to read and overwrite arbitrary files and bypass Python module import restrictions. This is patched in version 4.9.11 by restricting the allowed system calls to a safer subset and additional descriptive error messaging.
+
+
+- [Wenura17125/cve-2025-49131-poc](https://github.com/Wenura17125/cve-2025-49131-poc)
+
### CVE-2025-49132 (2025-06-20)
Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack.
@@ -7904,6 +9915,8 @@
- [63square/CVE-2025-49132](https://github.com/63square/CVE-2025-49132)
- [melonlonmeo/CVE-2025-49132](https://github.com/melonlonmeo/CVE-2025-49132)
- [0xtensho/CVE-2025-49132-poc](https://github.com/0xtensho/CVE-2025-49132-poc)
+- [GRodolphe/CVE-2025-49132_poc](https://github.com/GRodolphe/CVE-2025-49132_poc)
+- [WebSafety-2tina/CVE-2025-49132](https://github.com/WebSafety-2tina/CVE-2025-49132)
- [str1keboo/CVE-2025-49132](https://github.com/str1keboo/CVE-2025-49132)
- [malw0re/CVE-2025-49132-Mods](https://github.com/malw0re/CVE-2025-49132-Mods)
- [YoyoChaud/CVE-2025-49132](https://github.com/YoyoChaud/CVE-2025-49132)
@@ -7920,7 +9933,6 @@
- [nik123-py/CVE-2025-49132_HTB_SEASON10](https://github.com/nik123-py/CVE-2025-49132_HTB_SEASON10)
- [popyue/CVE-2025-49132](https://github.com/popyue/CVE-2025-49132)
- [4nuxd/CVE-2025-49132](https://github.com/4nuxd/CVE-2025-49132)
-- [unixskid/CVE-2025-49132-Pterodactyl-RCE](https://github.com/unixskid/CVE-2025-49132-Pterodactyl-RCE)
- [V0idW1re/HTB-Pterodactyl-Writeup](https://github.com/V0idW1re/HTB-Pterodactyl-Writeup)
- [karimelsheikh1/HTB-Pterodactyl-Writeup](https://github.com/karimelsheikh1/HTB-Pterodactyl-Writeup)
@@ -7933,7 +9945,9 @@
- [TheTorjanCaptain/CVE-2025-49144_PoC](https://github.com/TheTorjanCaptain/CVE-2025-49144_PoC)
- [assad12341/notepad-v8.8.1-LPE-CVE-](https://github.com/assad12341/notepad-v8.8.1-LPE-CVE-)
- [b0ySie7e/Notepad-8.8.1_CVE-2025-49144](https://github.com/b0ySie7e/Notepad-8.8.1_CVE-2025-49144)
+- [timsonner/CVE-2025-49144-Research](https://github.com/timsonner/CVE-2025-49144-Research)
- [0xCZR1/cve-2025-49144](https://github.com/0xCZR1/cve-2025-49144)
+- [onniio/CVE-2025-49144](https://github.com/onniio/CVE-2025-49144)
- [ammarm0010/CVE-2025-49144_PoC](https://github.com/ammarm0010/CVE-2025-49144_PoC)
- [havertz2110/CVE-2025-49144-PoC](https://github.com/havertz2110/CVE-2025-49144-PoC)
@@ -7944,11 +9958,26 @@
- [louay-075/CVE-2025-49223-BillboardJS-PoC](https://github.com/louay-075/CVE-2025-49223-BillboardJS-PoC)
+### CVE-2025-49388 (2025-08-28)
+
+Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through <= 2.0.7.
+
+
+- [Nxploited/CVE-2025-49388](https://github.com/Nxploited/CVE-2025-49388)
+
+### CVE-2025-49493 (2025-06-30)
+
+Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.
+
+
+- [SystemVll/CVE-2025-49493](https://github.com/SystemVll/CVE-2025-49493)
+
### CVE-2025-49596 (2025-06-13)
The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. Users should immediately upgrade to version 0.14.1 or later to address these vulnerabilities.
+- [ashiqrehan-21/MCP-Inspector-CVE-2025-49596](https://github.com/ashiqrehan-21/MCP-Inspector-CVE-2025-49596)
- [pppxo/CVE-2025-49596-PoC](https://github.com/pppxo/CVE-2025-49596-PoC)
- [acseguin21/trust-boundary-ctf](https://github.com/acseguin21/trust-boundary-ctf)
@@ -7966,6 +9995,13 @@
- [17patmaks/My-Sigma-Rule-Collection](https://github.com/17patmaks/My-Sigma-Rule-Collection)
+### CVE-2025-49706 (2025-07-08)
+
+Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
+
+
+- [AdityaBhatt3010/CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation](https://github.com/AdityaBhatt3010/CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation)
+
### CVE-2025-49844 (2025-10-03)
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2. To workaround this issue without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.
@@ -7973,6 +10009,8 @@
- [ksnnd32/redis_exploit](https://github.com/ksnnd32/redis_exploit)
- [Zain3311/CVE-2025-49844](https://github.com/Zain3311/CVE-2025-49844)
+- [saneki/cve-2025-49844](https://github.com/saneki/cve-2025-49844)
+- [zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell](https://github.com/zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell)
- [0xBlackash/CVE-2025-49844](https://github.com/0xBlackash/CVE-2025-49844)
- [Cilectiy/CVE-2025-49844](https://github.com/Cilectiy/CVE-2025-49844)
- [open-flaw/CVE-2025-49844](https://github.com/open-flaw/CVE-2025-49844)
@@ -7984,18 +10022,28 @@
- [Nxploited/CVE-2025-49901](https://github.com/Nxploited/CVE-2025-49901)
+### CVE-2025-50110 (2025-09-15)
+
+An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and device tokens - as plaintext query parameters over HTTPS
+
+
+- [shinyColumn/CVE-2025-50110](https://github.com/shinyColumn/CVE-2025-50110)
+
### CVE-2025-50154 (2025-08-12)
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
+- [zenzue/CVE-2025-50154](https://github.com/zenzue/CVE-2025-50154)
- [rubenformation/CVE-2025-50154](https://github.com/rubenformation/CVE-2025-50154)
+- [Ash1996x/CVE-2025-50154-Aggressor-Script](https://github.com/Ash1996x/CVE-2025-50154-Aggressor-Script)
### CVE-2025-50165 (2025-08-12)
Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
+- [encrypter15/CVE-2025-50165-x64-Exploit](https://github.com/encrypter15/CVE-2025-50165-x64-Exploit)
- [FelineKeeper/CVE-2025-50165-Windows-Graphics-Component-RCE](https://github.com/FelineKeeper/CVE-2025-50165-Windows-Graphics-Component-RCE)
### CVE-2025-50286 (2025-08-06)
@@ -8003,8 +10051,37 @@
A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access.
+- [binneko/CVE-2025-50286](https://github.com/binneko/CVE-2025-50286)
- [x1o3/CVE-2025-50286](https://github.com/x1o3/CVE-2025-50286)
+### CVE-2025-50340 (2025-08-04)
+
+An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated user is authorized to use the specified sender identity, resulting in unauthorized message delivery as another user. This can lead to impersonation, phishing, or unauthorized communication within the system. NOTE: this is disputed by the Supplier because the only effective way to prevent this sender spoofing is on the SMTP server, not within a client such as SOGo.
+
+
+- [millad7/SOGo_web_mail-vulnerability-CVE-2025-50340](https://github.com/millad7/SOGo_web_mail-vulnerability-CVE-2025-50340)
+
+### CVE-2025-50341 (2025-08-04)
+
+A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation.
+
+
+- [millad7/Axelor-vulnerability-CVE-2025-50341](https://github.com/millad7/Axelor-vulnerability-CVE-2025-50341)
+
+### CVE-2025-50360 (2025-12-03)
+
+A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2bb7. Malicious execution of a pepper source file(.pr) could lead to arbitrary code execution or Denial of Service.
+
+
+- [Ch1keen/CVE-2025-50360](https://github.com/Ch1keen/CVE-2025-50360)
+
+### CVE-2025-50361 (2025-12-03)
+
+Buffer Overflow was found in SmallBASIC community SmallBASIC with SDL Before v12_28, and commit sha:298a1d495355959db36451e90a0ac74bcc5593fe in the function main.cpp, which can lead to potential information leakage and crash.
+
+
+- [Ch1keen/CVE-2025-50361](https://github.com/Ch1keen/CVE-2025-50361)
+
### CVE-2025-50363 (2025-11-03)
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.
@@ -8018,6 +10095,13 @@
### CVE-2025-50365
- [1h3ll/CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE](https://github.com/1h3ll/CVE-2025-50365_CSRF_DELETE_CATEGORY-phpgurukul-CVE)
+### CVE-2025-50383 (2025-08-25)
+
+alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter.
+
+
+- [Abdullah4eb/CVE-2025-50383](https://github.com/Abdullah4eb/CVE-2025-50383)
+
### CVE-2025-50420 (2025-08-04)
An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
@@ -8032,6 +10116,48 @@
- [Landw-hub/CVE-2025-50422](https://github.com/Landw-hub/CVE-2025-50422)
+### CVE-2025-50428 (2025-08-27)
+
+In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter.
+
+
+- [security-smarttecs/cve-2025-50428](https://github.com/security-smarttecs/cve-2025-50428)
+
+### CVE-2025-50433 (2025-11-26)
+
+An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.
+
+
+- [0xMandor/CVE-2025-50433](https://github.com/0xMandor/CVE-2025-50433)
+
+### CVE-2025-50460 (2025-08-01)
+
+A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of the YAML configuration file passed to the --run_config parameter, arbitrary code can be executed during deserialization. This can lead to full system compromise. The vulnerability is triggered when a malicious YAML file is loaded, allowing the execution of arbitrary Python commands such as os.system(). It is recommended to upgrade PyYAML to version 5.4 or higher, and to use yaml.safe_load() to mitigate the issue.
+
+
+- [Anchor0221/CVE-2025-50460](https://github.com/Anchor0221/CVE-2025-50460)
+
+### CVE-2025-50461 (2025-08-19)
+
+A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp" backend. The script calls torch.load() with weights_only=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted model file is loaded. An attacker can exploit this by convincing a victim to download and place a malicious model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execution with the privileges of the user running the script.
+
+
+- [Anchor0221/CVE-2025-50461](https://github.com/Anchor0221/CVE-2025-50461)
+
+### CVE-2025-50472 (2025-08-01)
+
+The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_model_meta()` function of the `ModelFileSystemCache()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized `.mdl` payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. Note that the payload file is a hidden file, making it difficult for the victim to detect tampering. More importantly, during the model training process, after the `.mdl` file is loaded and executes arbitrary code, the normal training process remains unaffected'meaning the user remains unaware of the arbitrary code execution.
+
+
+- [Before-Rain/CVE-2025-50472](https://github.com/Before-Rain/CVE-2025-50472)
+
+### CVE-2025-50481 (2025-07-23)
+
+A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post.
+
+
+- [kevinpdicks/Mezzanine-CMS-6.1.0-XSS](https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS)
+
### CVE-2025-50505 (2025-10-07)
Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default and exposes key functions through the unauthorized HTTP API `/start_clash`, allowing local users to submit arbitrary bin_path parameters and pass them directly to the service process for execution, resulting in local privilege escalation.
@@ -8039,6 +10165,27 @@
- [a0yami/CVE-2025-50505](https://github.com/a0yami/CVE-2025-50505)
+### CVE-2025-50565 (2025-09-02)
+
+Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker.
+
+
+- [m0b1u3/CVE-2025-50565](https://github.com/m0b1u3/CVE-2025-50565)
+
+### CVE-2025-50592 (2025-08-05)
+
+Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.
+
+
+- [1515601525/CVE-2025-50592](https://github.com/1515601525/CVE-2025-50592)
+
+### CVE-2025-50675 (2025-08-07)
+
+GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory. The directory is accessible with full read, write, and execute permissions for all users, allowing unprivileged users to manipulate files within the directory, including executable files like GPMAW3.exe, Fragment.exe, and the uninstaller GPsetup64_17028.exe. An attacker with user-level access can exploit this misconfiguration by replacing or modifying the uninstaller (GPsetup64_17028.exe) with a malicious version. While the application itself runs in the user's context, the uninstaller is typically executed with administrative privileges when an administrator attempts to uninstall the software. By exploiting this flaw, an attacker could gain administrative privileges and execute arbitrary code in the context of the admin, resulting in privilege escalation.
+
+
+- [LukeSec/CVE-2025-50675-GPMAW-Permissions](https://github.com/LukeSec/CVE-2025-50675-GPMAW-Permissions)
+
### CVE-2025-50738 (2025-07-29)
The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking.
@@ -8046,6 +10193,34 @@
- [tiemio/CVE-2025-50738-PoC](https://github.com/tiemio/CVE-2025-50738-PoC)
+### CVE-2025-50754 (2025-08-04)
+
+Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the template editor, upload and execute a PHP web shell on the server, leading to full remote code execution.
+
+
+- [furk4nyildiz/CVE-2025-50754-PoC](https://github.com/furk4nyildiz/CVE-2025-50754-PoC)
+
+### CVE-2025-50777 (2025-07-30)
+
+The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems.
+
+
+- [veereshgadige/aziot-cctv-cve-2025-50777](https://github.com/veereshgadige/aziot-cctv-cve-2025-50777)
+
+### CVE-2025-50866 (2025-07-31)
+
+CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading to session hijacking or phishing attacks.
+
+
+- [SacX-7/CVE-2025-50866](https://github.com/SacX-7/CVE-2025-50866)
+
+### CVE-2025-50867 (2025-07-31)
+
+A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization.
+
+
+- [SacX-7/CVE-2025-50867](https://github.com/SacX-7/CVE-2025-50867)
+
### CVE-2025-50881 (2026-03-16)
The `flow/admin/moniteur.php` script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution. When handling GET requests, the script takes user-supplied input from the `action` URL parameter, performs insufficient validation, and incorporates this input into a string that is subsequently executed by the `eval()` function. Although a `method_exists()` check is performed, it only validates the part of the user input *before* the first parenthesis `(`, allowing an attacker to append arbitrary PHP code after a valid method call structure. Successful exploitation allows an unauthenticated or trivially authenticated attacker to execute arbitrary PHP code on the server with the privileges of the web server process.
@@ -8053,6 +10228,13 @@
- [0xdeadbit/CVE-2025-50881](https://github.com/0xdeadbit/CVE-2025-50881)
+### CVE-2025-50944 (2025-09-15)
+
+An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation.
+
+
+- [shinyColumn/CVE-2025-50944](https://github.com/shinyColumn/CVE-2025-50944)
+
### CVE-2025-50946 (2025-08-13)
OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.
@@ -8060,6 +10242,20 @@
- [runt1me/cve-2025-50946](https://github.com/runt1me/cve-2025-50946)
+### CVE-2025-51005 (2025-09-23)
+
+A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at do_checksum_math_liveplay in tcpliveplay.c, leading to a possible denial of service.
+
+
+- [sy460129/CVE-2025-51005](https://github.com/sy460129/CVE-2025-51005)
+
+### CVE-2025-51006 (2025-09-22)
+
+Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binary, a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.
+
+
+- [sy460129/CVE-2025-51006](https://github.com/sy460129/CVE-2025-51006)
+
### CVE-2025-51040 (2025-08-06)
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2.
@@ -8067,6 +10263,62 @@
- [p0et08/Electrolink-FM-DAB-TV](https://github.com/p0et08/Electrolink-FM-DAB-TV)
+### CVE-2025-51385 (2025-07-31)
+
+D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxz_dlink_asp function via the id parameter.
+
+
+- [saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC](https://github.com/saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC)
+
+### CVE-2025-51396 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username parameter.
+
+
+- [Thewhiteevil/CVE-2025-51396](https://github.com/Thewhiteevil/CVE-2025-51396)
+
+### CVE-2025-51397 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Surname parameter under the Recipient' Lists.
+
+
+- [Thewhiteevil/CVE-2025-51397](https://github.com/Thewhiteevil/CVE-2025-51397)
+
+### CVE-2025-51398 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
+
+
+- [Thewhiteevil/CVE-2025-51398](https://github.com/Thewhiteevil/CVE-2025-51398)
+
+### CVE-2025-51400 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
+
+
+- [Thewhiteevil/CVE-2025-51400](https://github.com/Thewhiteevil/CVE-2025-51400)
+
+### CVE-2025-51401 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the operator name parameter.
+
+
+- [Thewhiteevil/CVE-2025-51401](https://github.com/Thewhiteevil/CVE-2025-51401)
+
+### CVE-2025-51403 (2025-07-21)
+
+A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter.
+
+
+- [Thewhiteevil/CVE-2025-51403](https://github.com/Thewhiteevil/CVE-2025-51403)
+
+### CVE-2025-51411 (2025-07-25)
+
+A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to inject and execute arbitrary JavaScript code in the context of the victim's browser by tricking them into visiting a crafted URL or submitting a malicious form. Successful exploitation may lead to session hijacking, credential theft, or other client-side attacks.
+
+
+- [tansique-17/CVE-2025-51411](https://github.com/tansique-17/CVE-2025-51411)
+
### CVE-2025-51458 (2025-07-22)
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex.
@@ -8074,6 +10326,34 @@
- [q1uf3ng/CVE-2025-51458-exp](https://github.com/q1uf3ng/CVE-2025-51458-exp)
+### CVE-2025-51471 (2025-07-22)
+
+Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.
+
+
+- [ajtazer/CVE-2025-51471-POC](https://github.com/ajtazer/CVE-2025-51471-POC)
+
+### CVE-2025-51482 (2025-07-22)
+
+Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_source in letta-ai Letta 0.7.12 allows remote attackers to execute arbitrary Python code and system commands via crafted payloads to the /v1/tools/run endpoint, bypassing intended sandbox restrictions.
+
+
+- [Kai-One001/Letta-CVE-2025-51482-RCE](https://github.com/Kai-One001/Letta-CVE-2025-51482-RCE)
+
+### CVE-2025-51495 (2025-09-29)
+
+An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
+
+
+- [cainiao159357/CVE-2025-51495](https://github.com/cainiao159357/CVE-2025-51495)
+
+### CVE-2025-51529 (2025-08-19)
+
+Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service (database server resource exhaustion) via unlimited database write operations to the wp_ajax_nopriv_cacsp_insert_consent_data endpoint.
+
+
+- [piotrmaciejbednarski/CVE-2025-51529](https://github.com/piotrmaciejbednarski/CVE-2025-51529)
+
### CVE-2025-51591 (2025-07-11)
A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf.
@@ -8081,6 +10361,13 @@
- [Malayke/CVE-2025-51591-Pandoc-SSRF-POC](https://github.com/Malayke/CVE-2025-51591-Pandoc-SSRF-POC)
+### CVE-2025-51643 (2025-08-28)
+
+Meitrack T366G-L GPS Tracker devices contain an SPI flash chip (Winbond 25Q64JVSIQ) that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of sensitive configuration data such as APN credentials, backend server information, and network parameter
+
+
+- [NastyCrow/CVE-2025-51643](https://github.com/NastyCrow/CVE-2025-51643)
+
### CVE-2025-51726 (2025-08-04)
CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification mechanisms, particularly on systems without strict SmartScreen or trust policy enforcement. Additionally, the installer lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeated WinDbg analysis. The binary consistently loads into predictable memory ranges, increasing the success rate of memory corruption exploits. These two misconfigurations, when combined, significantly lower the bar for successful supply-chain style attacks or privilege escalation through fake installers.
@@ -8088,6 +10375,9 @@
- [meisterlos/CVE-2025-51726](https://github.com/meisterlos/CVE-2025-51726)
+### CVE-2025-51820
+- [shk-mubashshir/CVE-2025-51820](https://github.com/shk-mubashshir/CVE-2025-51820)
+
### CVE-2025-51846 (2026-04-30)
CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2.
@@ -8095,6 +10385,83 @@
- [JohnPerifanis/cryptpad-cve-2025-51846-advisory](https://github.com/JohnPerifanis/cryptpad-cve-2025-51846-advisory)
+### CVE-2025-51858 (2025-07-22)
+
+Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive information via a crafted SVG file contents sent through the chat component.
+
+
+- [Secsys-FDU/CVE-2025-51858](https://github.com/Secsys-FDU/CVE-2025-51858)
+
+### CVE-2025-51859 (2025-07-22)
+
+Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model (LLM) to embed malicious script payloads (e.g., SVG-based XSS) into its chat responses. When a user interacts with such a malicious agent or accesses a direct link to a conversation containing an XSS payload, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as JWT session tokens, potentially resulting in account hijacking.
+
+
+- [Secsys-FDU/CVE-2025-51859](https://github.com/Secsys-FDU/CVE-2025-51859)
+
+### CVE-2025-51860 (2025-07-22)
+
+Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system prompt(instructing the LLM to embed XSS payload in its chat response). When a user interacts with such a malicious AI Character or just browse its profile, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as session tokens, potentially resulting in account hijacking.
+
+
+- [Secsys-FDU/CVE-2025-51860](https://github.com/Secsys-FDU/CVE-2025-51860)
+
+### CVE-2025-51862 (2025-07-22)
+
+Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and account hijacking via XSS.
+
+
+- [Secsys-FDU/CVE-2025-51862](https://github.com/Secsys-FDU/CVE-2025-51862)
+
+### CVE-2025-51863 (2025-07-22)
+
+Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG file to the chat interface.
+
+
+- [Secsys-FDU/CVE-2025-51863](https://github.com/Secsys-FDU/CVE-2025-51863)
+
+### CVE-2025-51864 (2025-07-22)
+
+A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens.
+
+
+- [Secsys-FDU/CVE-2025-51864](https://github.com/Secsys-FDU/CVE-2025-51864)
+
+### CVE-2025-51865 (2025-07-22)
+
+Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), allowing attackers to gain sensitvie information via enumerating thread keys in the URL.
+
+
+- [Secsys-FDU/CVE-2025-51865](https://github.com/Secsys-FDU/CVE-2025-51865)
+
+### CVE-2025-51867 (2025-07-22)
+
+Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint.
+
+
+- [Secsys-FDU/CVE-2025-51867](https://github.com/Secsys-FDU/CVE-2025-51867)
+
+### CVE-2025-51868 (2025-07-21)
+
+Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the conversation_id parameter to the conversation_history endpoint.
+
+
+- [Secsys-FDU/CVE-2025-51868](https://github.com/Secsys-FDU/CVE-2025-51868)
+
+### CVE-2025-51869 (2025-07-21)
+
+Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted space_id, thread_id, and message_id parameters to the v1/space/{space_id}/thread/{thread_id}/message/{message_id} endpoint.
+
+
+- [Secsys-FDU/CVE-2025-51869](https://github.com/Secsys-FDU/CVE-2025-51869)
+
+### CVE-2025-51970 (2025-07-29)
+
+A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter.
+
+
+- [M4xIq/CVE-2025-51970](https://github.com/M4xIq/CVE-2025-51970)
+
### CVE-2025-52078 (2025-08-05)
File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to gain escalated privileges via a crafted POST request to the /file-upload endpoint.
@@ -8102,6 +10469,12 @@
- [Yucaerin/CVE-2025-52078](https://github.com/Yucaerin/CVE-2025-52078)
+### CVE-2025-52097
+- [rwilsonecs/CVE-2025-52097](https://github.com/rwilsonecs/CVE-2025-52097)
+
+### CVE-2025-52100
+- [changyaoyou/CVE-2025-52100](https://github.com/changyaoyou/CVE-2025-52100)
+
### CVE-2025-52122 (2025-08-27)
Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection (SSTI) vulnerability, resulting in arbitrary code injection for all users that have access to editing a form (submission title).
@@ -8116,6 +10489,17 @@
- [j0qq3r/CVE-2025-52204](https://github.com/j0qq3r/CVE-2025-52204)
+### CVE-2025-52216
+- [Arbatinis1/coolermaster-masterctrl-vuln](https://github.com/Arbatinis1/coolermaster-masterctrl-vuln)
+
+### CVE-2025-52289 (2025-07-31)
+
+A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
+
+
+- [Whit3-d3viL-hacker/CVE-2025-52289](https://github.com/Whit3-d3viL-hacker/CVE-2025-52289)
+- [Madhav-Bhardwaj/CVE-2025-52289](https://github.com/Madhav-Bhardwaj/CVE-2025-52289)
+
### CVE-2025-52357 (2025-07-09)
Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (firmware V2.2.14), allowing an authenticated attacker to execute arbitrary JavaScript code in the context of the router s web interface. The vulnerability is triggered via user-supplied input in the ping form field, which fails to sanitize special characters. This can be exploited to hijack sessions or escalate privileges through social engineering or browser-based attacks.
@@ -8123,6 +10507,34 @@
- [wrathfulDiety/CVE-2025-52357](https://github.com/wrathfulDiety/CVE-2025-52357)
+### CVE-2025-52385 (2025-08-13)
+
+An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the child_process module
+
+
+- [Kov404/CVE-2025-52385](https://github.com/Kov404/CVE-2025-52385)
+
+### CVE-2025-52389 (2025-09-08)
+
+An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.
+
+
+- [milamrk/CVE-2025-52389](https://github.com/milamrk/CVE-2025-52389)
+
+### CVE-2025-52392 (2025-08-13)
+
+Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to CWE-307: Improper Restriction of Excessive Authentication Attempts.
+
+
+- [ftz7/Soosyze-CMS-2.0---CVE-2025-52392](https://github.com/ftz7/Soosyze-CMS-2.0---CVE-2025-52392)
+
+### CVE-2025-52399
+- [Userr404/CVE-2025-52399-SQLi-Institute-of-Current-Students](https://github.com/Userr404/CVE-2025-52399-SQLi-Institute-of-Current-Students)
+- [gmh5225/CVE-2025-52399-SQLi-Institute-of-Current-Students](https://github.com/gmh5225/CVE-2025-52399-SQLi-Institute-of-Current-Students)
+
+### CVE-2025-52413
+- [GoldenTicketLabs/CVE-2025-52413](https://github.com/GoldenTicketLabs/CVE-2025-52413)
+
### CVE-2025-52488 (2025-06-21)
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.
@@ -8130,11 +10542,29 @@
- [SystemVll/CVE-2025-52488](https://github.com/SystemVll/CVE-2025-52488)
+### CVE-2025-52688 (2025-07-16)
+
+Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.
+
+
+- [joelczk/CVE-2025-52688](https://github.com/joelczk/CVE-2025-52688)
+
+### CVE-2025-52689 (2025-07-16)
+
+Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
+
+
+- [UltimateHG/CVE-2025-52689-PoC](https://github.com/UltimateHG/CVE-2025-52689-PoC)
+
### CVE-2025-52691 (2025-12-29)
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.
+- [yt2w/CVE-2025-52691](https://github.com/yt2w/CVE-2025-52691)
+- [rxerium/CVE-2025-52691](https://github.com/rxerium/CVE-2025-52691)
+- [you-ssef9/CVE-2025-52691](https://github.com/you-ssef9/CVE-2025-52691)
+- [DeathShotXD/CVE-2025-52691-APT-PoC](https://github.com/DeathShotXD/CVE-2025-52691-APT-PoC)
- [mohammadzarnian1357/Ashwesker-CVE-2025-52691](https://github.com/mohammadzarnian1357/Ashwesker-CVE-2025-52691)
- [nxgn-kd01/smartermail-cve-scanner](https://github.com/nxgn-kd01/smartermail-cve-scanner)
- [watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691](https://github.com/watchtowrlabs/watchTowr-vs-SmarterMail-CVE-2025-52691)
@@ -8148,6 +10578,13 @@
- [Winz18/CVE-2025-52694-POC](https://github.com/Winz18/CVE-2025-52694-POC)
+### CVE-2025-52881 (2025-11-06)
+
+runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts (we have also verified this attack is possible to exploit using a standard Dockerfile with docker buildx build as that also permits triggering parallel execution of containers with custom shared mounts configured). This redirect could be through symbolic links in a tmpfs or theoretically other methods such as regular bind-mounts. While similar, the mitigation applied for the related CVE, CVE-2019-19921, was fairly limited and effectively only caused runc to verify that when LSM labels are written they are actually procfs files. This issue is fixed in versions 1.2.8, 1.3.3, and 1.4.0-rc.3.
+
+
+- [jq6l43d1/proxmox-lxc-docker-fix](https://github.com/jq6l43d1/proxmox-lxc-docker-fix)
+
### CVE-2025-52913 (2025-08-08)
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP2 (9.8.2.12) could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.
@@ -8169,6 +10606,14 @@
- [BlackSnufkin/BYOVD](https://github.com/BlackSnufkin/BYOVD)
+### CVE-2025-52970 (2025-08-12)
+
+A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.
+
+
+- [Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass](https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass)
+- [34zY/CVE-2025-52970](https://github.com/34zY/CVE-2025-52970)
+
### CVE-2025-52999 (2025-06-25)
jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.
@@ -8190,6 +10635,14 @@
- [nu1lptr0/CVE-2025-53136](https://github.com/nu1lptr0/CVE-2025-53136)
+### CVE-2025-53367 (2025-07-03)
+
+DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.
+
+
+- [kevinbackhouse/DjVuLibre-poc-CVE-2025-53367](https://github.com/kevinbackhouse/DjVuLibre-poc-CVE-2025-53367)
+- [ThePhykon/CVE-2025-53367-POC](https://github.com/ThePhykon/CVE-2025-53367-POC)
+
### CVE-2025-53392 (2025-06-28)
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.
@@ -8197,6 +10650,20 @@
- [skraft9/pfsense-security-research](https://github.com/skraft9/pfsense-security-research)
+### CVE-2025-53547 (2025-07-08)
+
+Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execution when dependencies are updated. Fields in a Chart.yaml file, that are carried over to a Chart.lock file when dependencies are updated and this file is written, can be crafted in a way that can cause execution if that same content were in a file that is executed (e.g., a bash.rc file or shell script). If the Chart.lock file is symlinked to one of these files updating dependencies will write the lock file content to the symlinked file. This can lead to unwanted execution. Helm warns of the symlinked file but did not stop execution due to symlinking. This issue has been resolved in Helm v3.18.4.
+
+
+- [DVKunion/CVE-2025-53547-POC](https://github.com/DVKunion/CVE-2025-53547-POC)
+
+### CVE-2025-53558 (2025-07-31)
+
+ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge of the credential, an attacker may log in to the affected devices.
+
+
+- [houqe/POC_CVE-2025-53558](https://github.com/houqe/POC_CVE-2025-53558)
+
### CVE-2025-53580 (2025-08-20)
Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through < 15.6.9.
@@ -8204,6 +10671,13 @@
- [Nxploited/CVE-2025-53580](https://github.com/Nxploited/CVE-2025-53580)
+### CVE-2025-53632 (2025-07-10)
+
+Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly recommended to bury Chall-Manager deep within the infrastructure due to its large capabilities, so no users could reach the system. Patch has been implemented by commit 47d188f and shipped in v0.1.4.
+
+
+- [pandatix/CVE-2025-53632](https://github.com/pandatix/CVE-2025-53632)
+
### CVE-2025-53640 (2025-07-14)
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Starting in version 2.2 and prior to version 3.3.7, an endpoint used to display details of users listed in certain fields (such as ACLs) could be misused to dump basic user details (such as name, affiliation and email) in bulk. Version 3.3.7 fixes the issue. Owners of instances that allow everyone to create a user account, who wish to truly restrict access to these user details, should consider restricting user search to managers. As a workaround, it is possible to restrict access to the affected endpoints (e.g. in the webserver config), but doing so would break certain form fields which could no longer show the details of the users listed in those fields, so upgrading instead is highly recommended.
@@ -8211,29 +10685,108 @@
- [rafaelcorvino1/CVE-2025-53640](https://github.com/rafaelcorvino1/CVE-2025-53640)
+### CVE-2025-53652 (2025-07-09)
+
+Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.
+
+
+- [pl4tyz/CVE-2025-53652-Jenkins-Git-Parameter-Analysis](https://github.com/pl4tyz/CVE-2025-53652-Jenkins-Git-Parameter-Analysis)
+
### CVE-2025-53690 (2025-09-03)
Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
- [rxerium/CVE-2025-53690](https://github.com/rxerium/CVE-2025-53690)
+- [m0d0ri205/CVE-2025-53690-Analysis](https://github.com/m0d0ri205/CVE-2025-53690-Analysis)
+
+### CVE-2025-53691 (2025-09-03)
+
+Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
+
+
+- [blueisbeautiful/CVE-2025-53691](https://github.com/blueisbeautiful/CVE-2025-53691)
+
+### CVE-2025-53693 (2025-09-03)
+
+Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
+
+
+- [blueisbeautiful/CVE-2025-53693](https://github.com/blueisbeautiful/CVE-2025-53693)
+
+### CVE-2025-53694 (2025-09-03)
+
+Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from 9.2 through 10.4.
+
+
+- [blueisbeautiful/CVE-2025-53694](https://github.com/blueisbeautiful/CVE-2025-53694)
+- [blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691](https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691)
### CVE-2025-53770 (2025-07-20)
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.\nMicrosoft is aware that an exploit for CVE-2025-53770 exists in the wild.\nMicrosoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
+- [RukshanaAlikhan/CVE-2025-53770](https://github.com/RukshanaAlikhan/CVE-2025-53770)
+- [Bluefire-Redteam-Cybersecurity/bluefire-sharepoint-cve-2025-53770](https://github.com/Bluefire-Redteam-Cybersecurity/bluefire-sharepoint-cve-2025-53770)
+- [kaizensecurity/CVE-2025-53770](https://github.com/kaizensecurity/CVE-2025-53770)
+- [yosasasutsut/Blackash-CVE-2025-53770](https://github.com/yosasasutsut/Blackash-CVE-2025-53770)
+- [paolokappa/SharePointSecurityMonitor](https://github.com/paolokappa/SharePointSecurityMonitor)
+- [gmh5225/ZeroPoint](https://github.com/gmh5225/ZeroPoint)
- [soltanali0/CVE-2025-53770-Exploit](https://github.com/soltanali0/CVE-2025-53770-Exploit)
- [hazcod/CVE-2025-53770](https://github.com/hazcod/CVE-2025-53770)
- [ZephrFish/CVE-2025-53770-Scanner](https://github.com/ZephrFish/CVE-2025-53770-Scanner)
+- [siag-itsec/CVE-2025-53770-Hunting](https://github.com/siag-itsec/CVE-2025-53770-Hunting)
+- [grupooruss/CVE-2025-53770-Checker](https://github.com/grupooruss/CVE-2025-53770-Checker)
+- [tripoloski1337/CVE-2025-53770-scanner](https://github.com/tripoloski1337/CVE-2025-53770-scanner)
+- [AdityaBhatt3010/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE](https://github.com/AdityaBhatt3010/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE)
+- [GreenForceNetworks/Toolshell_CVE-2025-53770](https://github.com/GreenForceNetworks/Toolshell_CVE-2025-53770)
+- [imbas007/CVE-2025-53770-Vulnerable-Scanner](https://github.com/imbas007/CVE-2025-53770-Vulnerable-Scanner)
+- [Sec-Dan/CVE-2025-53770-Scanner](https://github.com/Sec-Dan/CVE-2025-53770-Scanner)
+- [MuhammadWaseem29/CVE-2025-53770](https://github.com/MuhammadWaseem29/CVE-2025-53770)
+- [0xray5c68616e37/cve-2025-53770](https://github.com/0xray5c68616e37/cve-2025-53770)
+- [exfil0/CVE-2025-53770](https://github.com/exfil0/CVE-2025-53770)
- [zach115th/ToolShellFinder](https://github.com/zach115th/ToolShellFinder)
+- [nisargsuthar/suricata-rule-CVE-2025-53770](https://github.com/nisargsuthar/suricata-rule-CVE-2025-53770)
+- [bharath-cyber-root/sharepoint-toolshell-cve-2025-53770](https://github.com/bharath-cyber-root/sharepoint-toolshell-cve-2025-53770)
- [Rabbitbong/OurSharePoint-CVE-2025-53770](https://github.com/Rabbitbong/OurSharePoint-CVE-2025-53770)
+- [Udyz/CVE-2025-53770-Exploit](https://github.com/Udyz/CVE-2025-53770-Exploit)
+- [bitsalv/ToolShell-Honeypot](https://github.com/bitsalv/ToolShell-Honeypot)
+- [BirdsAreFlyingCameras/CVE-2025-53770_Raw-HTTP-Request-Generator](https://github.com/BirdsAreFlyingCameras/CVE-2025-53770_Raw-HTTP-Request-Generator)
+- [bossnick98/-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE](https://github.com/bossnick98/-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE)
+- [3a7/CVE-2025-53770](https://github.com/3a7/CVE-2025-53770)
+- [r3xbugbounty/CVE-2025-53770](https://github.com/r3xbugbounty/CVE-2025-53770)
+- [daryllundy/CVE-2025-53770](https://github.com/daryllundy/CVE-2025-53770)
+- [0xisfet/CVE-2025-53770-Scanner](https://github.com/0xisfet/CVE-2025-53770-Scanner)
+- [Immersive-Labs-Sec/SharePoint-CVE-2025-53770-POC](https://github.com/Immersive-Labs-Sec/SharePoint-CVE-2025-53770-POC)
+- [harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC](https://github.com/harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC)
+- [Agampreet-Singh/CVE-2025-53770](https://github.com/Agampreet-Singh/CVE-2025-53770)
+- [CyprianAtsyor/ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend](https://github.com/CyprianAtsyor/ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend)
+- [ghostn4444/CVE-2025-53770](https://github.com/ghostn4444/CVE-2025-53770)
+- [saladin0x1/CVE-2025-53770](https://github.com/saladin0x1/CVE-2025-53770)
+- [Michaael01/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell](https://github.com/Michaael01/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell)
- [victormbogu1/LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320](https://github.com/victormbogu1/LetsDefend-SOC342-CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-andRCE-EventID-320)
+- [Cameloo1/sharepoint-toolshell-micro-postmortem](https://github.com/Cameloo1/sharepoint-toolshell-micro-postmortem)
- [rbctee/CVE-2025-53770](https://github.com/rbctee/CVE-2025-53770)
- [J4ck3LSyN-Gen2/CVE-2025-53770](https://github.com/J4ck3LSyN-Gen2/CVE-2025-53770)
- [Zedocun/SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis](https://github.com/Zedocun/SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis)
- [doerrdan/it-sec-toolshell](https://github.com/doerrdan/it-sec-toolshell)
+### CVE-2025-53772 (2025-08-12)
+
+Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network.
+
+
+- [Momollax/CVE-2025-53772-IIS-WebDeploy-RCE](https://github.com/Momollax/CVE-2025-53772-IIS-WebDeploy-RCE)
+- [sailay1996/CVE-2025-53772](https://github.com/sailay1996/CVE-2025-53772)
+
+### CVE-2025-53779 (2025-08-12)
+
+Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
+
+
+- [b5null/Invoke-BadSuccessor.ps1](https://github.com/b5null/Invoke-BadSuccessor.ps1)
+
### CVE-2025-53783 (2025-08-12)
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.
@@ -8241,6 +10794,20 @@
- [ksgassama-lab/MSTeams---Vulnerability---Remediation](https://github.com/ksgassama-lab/MSTeams---Vulnerability---Remediation)
+### CVE-2025-53786 (2025-08-06)
+
+On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.
+
+
+- [vincentdthe/CVE-2025-53786](https://github.com/vincentdthe/CVE-2025-53786)
+
+### CVE-2025-53833 (2025-07-14)
+
+LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations. Attackers could execute arbitrary commands on the server, access sensitive environment variables, and/or escalate access depending on server configuration. Users are strongly advised to upgrade to version v2.8.1 or later to receive a patch.
+
+
+- [iQingshan/Blackash-CVE-2025-53833](https://github.com/iQingshan/Blackash-CVE-2025-53833)
+
### CVE-2025-53964 (2025-07-17)
GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary.
@@ -8265,6 +10832,7 @@
- [osman1337-security/CVE-2025-54100](https://github.com/osman1337-security/CVE-2025-54100)
+- [ThemeHackers/CVE-2025-54100](https://github.com/ThemeHackers/CVE-2025-54100)
- [xiaoLvChen/CVE-2025-54100](https://github.com/xiaoLvChen/CVE-2025-54100)
- [R3lva/CVE-2025-54100-BYPASS-](https://github.com/R3lva/CVE-2025-54100-BYPASS-)
@@ -8287,6 +10855,14 @@
- [davidzzo23/CVE-2025-54123](https://github.com/davidzzo23/CVE-2025-54123)
- [0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit](https://github.com/0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit)
+### CVE-2025-54135 (2025-08-05)
+
+Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive MCP files, such as the .cursor/mcp.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.
+
+
+- [anntsmart/CVE-2025-54135](https://github.com/anntsmart/CVE-2025-54135)
+- [hn1e13/test-mcp](https://github.com/hn1e13/test-mcp)
+
### CVE-2025-54136 (2025-08-01)
Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a collaborator accepts a harmless MCP, the attacker can silently swap it for a malicious command (e.g., calc.exe) without triggering any warning or re-prompt. If an attacker has write permissions on a user's active branches of a source repository that contains existing MCP servers the user has previously approved, or allows an attacker has arbitrary file-write locally, the attacker can achieve arbitrary code execution. This is fixed in version 1.3.
@@ -8299,6 +10875,8 @@
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.
+- [amalpvatayam67/day01-sessionreaper-lab](https://github.com/amalpvatayam67/day01-sessionreaper-lab)
+- [wubinworks/magento2-session-reaper-patch](https://github.com/wubinworks/magento2-session-reaper-patch)
- [Baba01hacker666/cve-2025-54236](https://github.com/Baba01hacker666/cve-2025-54236)
- [alexb616/SessionReaper-CVE-2025-54236](https://github.com/alexb616/SessionReaper-CVE-2025-54236)
- [Jenderal92/magento-upload-auto-submit-zoneh](https://github.com/Jenderal92/magento-upload-auto-submit-zoneh)
@@ -8309,6 +10887,7 @@
Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed.
+- [Shivshantp/CVE-2025-54253-Exploit-Demo](https://github.com/Shivshantp/CVE-2025-54253-Exploit-Demo)
- [jm7knz/CVE-2025-54253-Exploit-Demo](https://github.com/jm7knz/CVE-2025-54253-Exploit-Demo)
- [zoomdbz/AEMPWN](https://github.com/zoomdbz/AEMPWN)
@@ -8317,6 +10896,11 @@
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as exploited in the wild in July 2025.
+- [watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309](https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309)
+- [blueisbeautiful/CVE-2025-54309](https://github.com/blueisbeautiful/CVE-2025-54309)
+- [foregenix/CVE-2025-54309](https://github.com/foregenix/CVE-2025-54309)
+- [whisperer1290/CVE-2025-54309__Enhanced_exploit](https://github.com/whisperer1290/CVE-2025-54309__Enhanced_exploit)
+- [chin-tech/CrushFTP_CVE-2025-54309](https://github.com/chin-tech/CrushFTP_CVE-2025-54309)
- [0xLittleSpidy/CVE-2025-54309](https://github.com/0xLittleSpidy/CVE-2025-54309)
### CVE-2025-54313 (2025-07-19)
@@ -8324,13 +10908,29 @@
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
+- [nihilor/cve-2025-54313](https://github.com/nihilor/cve-2025-54313)
- [Paspke/scavenger_scanner](https://github.com/Paspke/scavenger_scanner)
+### CVE-2025-54320 (2025-11-18)
+
+In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.
+
+
+- [saykino/CVE-2025-54320](https://github.com/saykino/CVE-2025-54320)
+
+### CVE-2025-54321 (2025-11-18)
+
+In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.
+
+
+- [saykino/CVE-2025-54321](https://github.com/saykino/CVE-2025-54321)
+
### CVE-2025-54322 (2025-12-27)
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.
+- [Sachinart/CVE-2025-54322](https://github.com/Sachinart/CVE-2025-54322)
- [nkuty/CVE-2025-54322-exploit](https://github.com/nkuty/CVE-2025-54322-exploit)
### CVE-2025-54328 (2026-04-06)
@@ -8340,6 +10940,22 @@
- [Hunt-Benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce](https://github.com/Hunt-Benito/samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce)
+### CVE-2025-54352 (2025-07-21)
+
+WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not changing this behavior.
+
+
+- [yohannslm/CVE-2025-54352](https://github.com/yohannslm/CVE-2025-54352)
+- [mufasa4o4/XML-RPC-Pingback-Vulnerability](https://github.com/mufasa4o4/XML-RPC-Pingback-Vulnerability)
+
+### CVE-2025-54381 (2025-07-29)
+
+BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests. The vulnerability stems from the multipart form data and JSON request handlers, which automatically download files from user-provided URLs without validating whether those URLs point to internal network addresses, cloud metadata endpoints, or other restricted resources. The documentation explicitly promotes this URL-based file upload feature, making it an intended design that exposes all deployed services to SSRF attacks by default. Version 1.4.19 contains a patch for the issue.
+
+
+- [rockmelodies/bentoml_CVE-2025-54381](https://github.com/rockmelodies/bentoml_CVE-2025-54381)
+- [IS8123/CVE-2025-54381](https://github.com/IS8123/CVE-2025-54381)
+
### CVE-2025-54416 (2025-07-26)
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary command execution in downstream workflows. This issue arises due to inconsistent input sanitization and unescaped output, enabling malicious actors to exploit specially crafted branch names or tags. While internal sanitization mechanisms have been implemented, the action outputs remain vulnerable, exposing consuming workflows to significant security risks. This is fixed in version 9.0.0
@@ -8352,7 +10968,9 @@
1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.
+- [Mr-xn/CVE-2025-54424](https://github.com/Mr-xn/CVE-2025-54424)
- [hophtien/CVE-2025-54424](https://github.com/hophtien/CVE-2025-54424)
+- [anonnymous5/1Panel-CVE-2025-54424-](https://github.com/anonnymous5/1Panel-CVE-2025-54424-)
### CVE-2025-54505 (2026-04-27)
@@ -8361,13 +10979,56 @@
- [siltyy/cve-2025-54505-fix](https://github.com/siltyy/cve-2025-54505-fix)
+### CVE-2025-54554 (2025-08-04)
+
+tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure.
+
+
+- [Aman-Parmar/CVE-2025-54554](https://github.com/Aman-Parmar/CVE-2025-54554)
+
### CVE-2025-54574 (2025-08-01)
Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions.
+- [gmh5225/Blackash-CVE-2025-54574](https://github.com/gmh5225/Blackash-CVE-2025-54574)
- [starrynightsecurity/CVE-2025-54574-Squid-Heap-Buffer-Overflow](https://github.com/starrynightsecurity/CVE-2025-54574-Squid-Heap-Buffer-Overflow)
+### CVE-2025-54589 (2025-07-31)
+
+Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value directly into a `<script>` block without proper escaping, allowing for reflected Cross-Site Scripting (XSS) and can be exploited against both authenticated and unauthenticated users. This is fixed in version 1.18.7.
+
+
+- [byteReaper77/CVE-2025-54589](https://github.com/byteReaper77/CVE-2025-54589)
+
+### CVE-2025-54726 (2025-08-20)
+
+Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows SQL Injection.This issue affects JS Archive List: from n/a through < 6.1.6.
+
+
+- [RandomRobbieBF/CVE-2025-54726](https://github.com/RandomRobbieBF/CVE-2025-54726)
+
+### CVE-2025-54769 (2025-07-28)
+
+An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
+
+
+- [byteReaper77/CVE-2025-54769](https://github.com/byteReaper77/CVE-2025-54769)
+
+### CVE-2025-54782 (2025-08-01)
+
+Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox. This is fixed in version 0.2.1.
+
+
+- [DDestinys/CVE-2025-54782](https://github.com/DDestinys/CVE-2025-54782)
+
+### CVE-2025-54794 (2025-08-05)
+
+Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of (or ability to create) a directory with the same prefix as the CWD and the ability to add untrusted content into a Claude Code context window. This is fixed in version 0.2.111.
+
+
+- [AdityaBhatt3010/CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back](https://github.com/AdityaBhatt3010/CVE-2025-54794-Hijacking-Claude-AI-with-a-Prompt-Injection-The-Jailbreak-That-Talked-Back)
+
### CVE-2025-54795 (2025-08-05)
Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. This is fixed in version 1.0.20.
@@ -8375,13 +11036,51 @@
- [alonisser/ralph](https://github.com/alonisser/ralph)
+### CVE-2025-54887 (2025-08-08)
+
+jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption (JWE) standard. In versions 1.1.0 and below, authentication tags of encrypted JWEs can be brute forced, which may result in loss of confidentiality for those JWEs and provide ways to craft arbitrary JWEs. This puts users at risk because JWEs can be modified to decrypt to an arbitrary value, decrypted by observing parsing differences and the GCM internal GHASH key can be recovered. Users are affected by this vulnerability even if they do not use an AES-GCM encryption algorithm for their JWEs. As the GHASH key may have been leaked, users must rotate the encryption keys after upgrading. This issue is fixed in version 1.1.1.
+
+
+- [shinigami-777/PoC_CVE-2025-54887](https://github.com/shinigami-777/PoC_CVE-2025-54887)
+
+### CVE-2025-54914 (2025-09-04)
+
+Azure Networking Elevation of Privilege Vulnerability
+
+
+- [mrk336/Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914](https://github.com/mrk336/Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914)
+- [Ash1996x/CVE-2025-54914-PoC](https://github.com/Ash1996x/CVE-2025-54914-PoC)
+
### CVE-2025-54918 (2025-09-09)
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
+- [mrk336/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps](https://github.com/mrk336/From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps)
- [Wh0am123/CVE-2025-54918-POC](https://github.com/Wh0am123/CVE-2025-54918-POC)
+### CVE-2025-54939 (2025-08-01)
+
+LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.
+
+
+- [yohannslm/CVE-2025-54939](https://github.com/yohannslm/CVE-2025-54939)
+
+### CVE-2025-54962 (2025-08-04)
+
+/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible under the /static URI.
+
+
+- [Eyodav/CVE-2025-54962](https://github.com/Eyodav/CVE-2025-54962)
+
+### CVE-2025-54988 (2025-08-20)
+
+Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to internal resources or third-party servers. Note that the tika-parser-pdf-module is used as a dependency in several Tika packages including at least: tika-parsers-standard-modules, tika-parsers-standard-package, tika-app, tika-grpc and tika-server-standard.\n\nUsers are recommended to upgrade to version 3.2.2, which fixes this issue.
+
+
+- [mgthuramoemyint/POC-CVE-2025-54988](https://github.com/mgthuramoemyint/POC-CVE-2025-54988)
+- [galoryber/cve-2025-54988-VulnTikaProject](https://github.com/galoryber/cve-2025-54988-VulnTikaProject)
+
### CVE-2025-55130 (2026-01-20)
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.\nThis vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
@@ -8412,38 +11111,363 @@
- [Mayca369/CVE-2025-55182](https://github.com/Mayca369/CVE-2025-55182)
- [ahmed-dev-op/CVE-2025-55182](https://github.com/ahmed-dev-op/CVE-2025-55182)
- [vick333-peniel/vick333-peniel.github.io](https://github.com/vick333-peniel/vick333-peniel.github.io)
+- [BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js](https://github.com/BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js)
+- [ejpir/CVE-2025-55182-research](https://github.com/ejpir/CVE-2025-55182-research)
+- [sickwell/CVE-2025-55182](https://github.com/sickwell/CVE-2025-55182)
+- [fatguru/CVE-2025-55182-scanner](https://github.com/fatguru/CVE-2025-55182-scanner)
+- [atastycookie/CVE-2025-55182](https://github.com/atastycookie/CVE-2025-55182)
+- [santihabib/CVE-2025-55182-analysis](https://github.com/santihabib/CVE-2025-55182-analysis)
+- [xkillbit/cve-2025-55182-scanner](https://github.com/xkillbit/cve-2025-55182-scanner)
- [whiteov3rflow/CVE-2025-55182-poc](https://github.com/whiteov3rflow/CVE-2025-55182-poc)
+- [shen771/Blackash-CVE-2025-55182](https://github.com/shen771/Blackash-CVE-2025-55182)
+- [Pa2sw0rd/exploit-CVE-2025-55182-poc](https://github.com/Pa2sw0rd/exploit-CVE-2025-55182-poc)
+- [kk12-30/CVE-2025-55182](https://github.com/kk12-30/CVE-2025-55182)
+- [heiheishushu/rsc_detect_CVE-2025-55182](https://github.com/heiheishushu/rsc_detect_CVE-2025-55182)
+- [songsanggggg/CVE-2025-55182](https://github.com/songsanggggg/CVE-2025-55182)
+- [M0onPu15e/next.js-scanner](https://github.com/M0onPu15e/next.js-scanner)
+- [ducducuc111/CVE-2025-55182-poc](https://github.com/ducducuc111/CVE-2025-55182-poc)
- [ThemeHackers/CVE-2025-55182](https://github.com/ThemeHackers/CVE-2025-55182)
+- [joshterrill/CVE-2025-55182-realistic-poc](https://github.com/joshterrill/CVE-2025-55182-realistic-poc)
+- [mingyisecurity-lab/CVE-2025-55182-TOOLS](https://github.com/mingyisecurity-lab/CVE-2025-55182-TOOLS)
+- [gensecaihq/react2shell-scanner](https://github.com/gensecaihq/react2shell-scanner)
+- [sudo-Yangziran/CVE-2025-55182POC](https://github.com/sudo-Yangziran/CVE-2025-55182POC)
+- [Rsatan/Next.js-Exploit-Tool](https://github.com/Rsatan/Next.js-Exploit-Tool)
+- [assetnote/react2shell-scanner](https://github.com/assetnote/react2shell-scanner)
+- [jf0x3a/CVE-2025-55182-exploit](https://github.com/jf0x3a/CVE-2025-55182-exploit)
+- [aspen-labs/CVE-2025-55182-checker](https://github.com/aspen-labs/CVE-2025-55182-checker)
+- [dissy123/cve-2025-55182](https://github.com/dissy123/cve-2025-55182)
+- [dwisiswant0/CVE-2025-55182](https://github.com/dwisiswant0/CVE-2025-55182)
+- [Chelsea486MHz/CVE-2025-55182-test](https://github.com/Chelsea486MHz/CVE-2025-55182-test)
+- [oways/React2shell-CVE-2025-55182-checker](https://github.com/oways/React2shell-CVE-2025-55182-checker)
+- [msanft/CVE-2025-55182](https://github.com/msanft/CVE-2025-55182)
+- [ivaavimusic/React19-fix-vibecoders](https://github.com/ivaavimusic/React19-fix-vibecoders)
+- [carlosaruy/CVE-2025-55182](https://github.com/carlosaruy/CVE-2025-55182)
- [Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478](https://github.com/Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478)
+- [c0rydoras/CVE-2025-55182](https://github.com/c0rydoras/CVE-2025-55182)
+- [CymulateResearch/React2Shell-Scanner](https://github.com/CymulateResearch/React2Shell-Scanner)
+- [0xPThree/cve-2025-55182](https://github.com/0xPThree/cve-2025-55182)
+- [acheong08/CVE-2025-55182-poc](https://github.com/acheong08/CVE-2025-55182-poc)
+- [jctommasi/react2shellVulnApp](https://github.com/jctommasi/react2shellVulnApp)
+- [shamo0/react2shell-PoC](https://github.com/shamo0/react2shell-PoC)
+- [EynaExp/CVE-2025-55182-POC](https://github.com/EynaExp/CVE-2025-55182-POC)
+- [im-hanzou/CVE-2025-55182-POC-SCANNER](https://github.com/im-hanzou/CVE-2025-55182-POC-SCANNER)
+- [klassiker/CVE-2025-55182](https://github.com/klassiker/CVE-2025-55182)
+- [MrR0b0t19/CVE-2025-55182-shellinteractive](https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive)
+- [ps-interactive/cve-2025-55182](https://github.com/ps-interactive/cve-2025-55182)
+- [tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension](https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension)
+- [aquinn-r7/CVE-2025-55182-VulnCheckPOC](https://github.com/aquinn-r7/CVE-2025-55182-VulnCheckPOC)
+- [MedusaSH/POC-CVE-2025-55182](https://github.com/MedusaSH/POC-CVE-2025-55182)
- [nxgn-kd01/react2shell-scanner](https://github.com/nxgn-kd01/react2shell-scanner)
- [clevernyyyy/CVE-2025-55182-Dockerized](https://github.com/clevernyyyy/CVE-2025-55182-Dockerized)
+- [Cillian-Collins/CVE-2025-55182](https://github.com/Cillian-Collins/CVE-2025-55182)
+- [ZihxS/check-react-rce-cve-2025-55182](https://github.com/ZihxS/check-react-rce-cve-2025-55182)
+- [ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner](https://github.com/ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner)
+- [sherlocksecurity/CVE-2025-55182-Exploit-scanner](https://github.com/sherlocksecurity/CVE-2025-55182-Exploit-scanner)
+- [Darker-Ink/react-ssr-vulnerability](https://github.com/Darker-Ink/react-ssr-vulnerability)
+- [emadshanab/POC-for-CVE-2025-55182](https://github.com/emadshanab/POC-for-CVE-2025-55182)
+- [topstar88/CVE-2025-55182](https://github.com/topstar88/CVE-2025-55182)
+- [selectarget/CVE-2025-55182-Exploit](https://github.com/selectarget/CVE-2025-55182-Exploit)
+- [pyroxenites/Nextjs_RCE_Exploit_Tool](https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool)
+- [Chocapikk/CVE-2025-55182](https://github.com/Chocapikk/CVE-2025-55182)
+- [mrknow001/RSC_Detector](https://github.com/mrknow001/RSC_Detector)
+- [Spritualkb/CVE-2025-55182-exp](https://github.com/Spritualkb/CVE-2025-55182-exp)
+- [younesZdDz/CVE-2025-55182](https://github.com/younesZdDz/CVE-2025-55182)
+- [lachlan2k/React2Shell-CVE-2025-55182-original-poc](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc)
+- [hualy13/CVE-2025-55182](https://github.com/hualy13/CVE-2025-55182)
+- [RuoJi6/CVE-2025-55182-RCE-shell](https://github.com/RuoJi6/CVE-2025-55182-RCE-shell)
+- [Saturate/CVE-2025-55182-Scanner](https://github.com/Saturate/CVE-2025-55182-Scanner)
+- [hoosin/CVE-2025-55182](https://github.com/hoosin/CVE-2025-55182)
+- [Pizz33/CVE-2025-55182-burpscanner](https://github.com/Pizz33/CVE-2025-55182-burpscanner)
- [Y3B3L4Y3/CVE-2025-55182-test](https://github.com/Y3B3L4Y3/CVE-2025-55182-test)
+- [ngvcanh/CVE-2025-55182-Attack-Analysis](https://github.com/ngvcanh/CVE-2025-55182-Attack-Analysis)
+- [aliclub0x00/CVE-2025-55182-POC-NEXTJS](https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS)
- [logesh-GIT001/CVE-2025-55182](https://github.com/logesh-GIT001/CVE-2025-55182)
+- [freeqaz/react2shell](https://github.com/freeqaz/react2shell)
+- [ABCFabian/React2Shell-CVE-2025-55182-Testing-Environment](https://github.com/ABCFabian/React2Shell-CVE-2025-55182-Testing-Environment)
+- [l4rm4nd/CVE-2025-55182](https://github.com/l4rm4nd/CVE-2025-55182)
- [Airis101/CVE-2025-55182-analysis](https://github.com/Airis101/CVE-2025-55182-analysis)
+- [GelukCrab/React-Server-Components-RCE](https://github.com/GelukCrab/React-Server-Components-RCE)
+- [Golden-Secure/CVE-2025-55182](https://github.com/Golden-Secure/CVE-2025-55182)
+- [grp-ops/react2shell](https://github.com/grp-ops/react2shell)
+- [alexandre-briongos-wavestone/react-cve-2025-55182-lab](https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab)
+- [Rat5ak/CVE-2025-55182-React2Shell-RCE-POC](https://github.com/Rat5ak/CVE-2025-55182-React2Shell-RCE-POC)
+- [imbas007/POC-CVE-2025-55182](https://github.com/imbas007/POC-CVE-2025-55182)
+- [RajChowdhury240/React2Shell-CVE-2025-55182](https://github.com/RajChowdhury240/React2Shell-CVE-2025-55182)
+- [nehkark/CVE-2025-55182](https://github.com/nehkark/CVE-2025-55182)
+- [prestonhashworth/cve-2025-55182](https://github.com/prestonhashworth/cve-2025-55182)
+- [nomorebreach/POC-CVE-2025-55182](https://github.com/nomorebreach/POC-CVE-2025-55182)
+- [nerium-security/CVE-2025-55182](https://github.com/nerium-security/CVE-2025-55182)
+- [zzhorc/CVE-2025-55182](https://github.com/zzhorc/CVE-2025-55182)
+- [Atlantis02-sec/Vulnerability-assessment](https://github.com/Atlantis02-sec/Vulnerability-assessment)
+- [rl0x01/CVE-2025-55182_PoC](https://github.com/rl0x01/CVE-2025-55182_PoC)
+- [subzer0x0/React2Shell](https://github.com/subzer0x0/React2Shell)
+- [f0xyx/CVE-2025-55182-Scanner](https://github.com/f0xyx/CVE-2025-55182-Scanner)
+- [Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-](https://github.com/Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-)
+- [ceortiz33/CVE-2025-55182](https://github.com/ceortiz33/CVE-2025-55182)
+- [xkey8/react2shell](https://github.com/xkey8/react2shell)
+- [zessu/CVE-2025-55182-Typescript](https://github.com/zessu/CVE-2025-55182-Typescript)
+- [mxm0z/r2s](https://github.com/mxm0z/r2s)
+- [NathanJ60/react2shell-interactive](https://github.com/NathanJ60/react2shell-interactive)
+- [GarethMSheldon/React2Shell-CVE-2025-55182-Detector](https://github.com/GarethMSheldon/React2Shell-CVE-2025-55182-Detector)
+- [kindone09/CVE-2025-55182](https://github.com/kindone09/CVE-2025-55182)
+- [alsaut1/react2shell-lab](https://github.com/alsaut1/react2shell-lab)
+- [pax-k/react2shell-CVE-2025-55182-full-rce-script](https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script)
- [kOaDT/poc-cve-2025-55182](https://github.com/kOaDT/poc-cve-2025-55182)
+- [mohit121312/CVE-2025-55182_full_exploit](https://github.com/mohit121312/CVE-2025-55182_full_exploit)
+- [ejpir/CVE-2025-55182-bypass](https://github.com/ejpir/CVE-2025-55182-bypass)
+- [StealthMoud/CVE-2025-55182-Scanner](https://github.com/StealthMoud/CVE-2025-55182-Scanner)
- [yanoshercohen/React2Shell_CVE-2025-55182](https://github.com/yanoshercohen/React2Shell_CVE-2025-55182)
+- [emredavut/CVE-2025-55182](https://github.com/emredavut/CVE-2025-55182)
- [rapticore/ore_react2shell_scanner](https://github.com/rapticore/ore_react2shell_scanner)
+- [fankh/cve-2025-55182-test-lab-windows](https://github.com/fankh/cve-2025-55182-test-lab-windows)
+- [cypholab/evilact](https://github.com/cypholab/evilact)
+- [greenheadHQ/CVE-2025-55182](https://github.com/greenheadHQ/CVE-2025-55182)
+- [sumanrox/rschunter](https://github.com/sumanrox/rschunter)
+- [I3r1h0n/React2Shell](https://github.com/I3r1h0n/React2Shell)
+- [zorejt/Rust_CVE-2025-55182](https://github.com/zorejt/Rust_CVE-2025-55182)
+- [Dread1ess/CVE-2025-55182](https://github.com/Dread1ess/CVE-2025-55182)
+- [MaxK9999/CVE-2025-55182](https://github.com/MaxK9999/CVE-2025-55182)
+- [Archerkong/CVE-2025-55182](https://github.com/Archerkong/CVE-2025-55182)
+- [philparzer/nextjs-react2shell-detect](https://github.com/philparzer/nextjs-react2shell-detect)
+- [yunaranyancat/CVE-2025-55182-NSE](https://github.com/yunaranyancat/CVE-2025-55182-NSE)
+- [MrSol0/CVE-2025-55182-Terminal](https://github.com/MrSol0/CVE-2025-55182-Terminal)
+- [fullhunt/react2shell-test-server](https://github.com/fullhunt/react2shell-test-server)
- [zack0x01/vuln-app-CVE-2025-55182](https://github.com/zack0x01/vuln-app-CVE-2025-55182)
+- [zack0x01/CVE-2025-55182-advanced-scanner-](https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-)
+- [rocklambros/React2Shell_Hunter](https://github.com/rocklambros/React2Shell_Hunter)
+- [alessiodos/react2shell-scanner](https://github.com/alessiodos/react2shell-scanner)
+- [Bashamega/react-CVE-2025-55182-fixer](https://github.com/Bashamega/react-CVE-2025-55182-fixer)
+- [orgito1015/CVE-2025-55182-RCE-Exploit](https://github.com/orgito1015/CVE-2025-55182-RCE-Exploit)
+- [keklick1337/CVE-2025-55182-golang-PoC](https://github.com/keklick1337/CVE-2025-55182-golang-PoC)
+- [rubensuxo-eh/react2shell-exploit](https://github.com/rubensuxo-eh/react2shell-exploit)
+- [CirqueiraDev/MassExploit-CVE-2025-55182](https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182)
+- [aastikgakhar/CVE-2025-55182-react2shell](https://github.com/aastikgakhar/CVE-2025-55182-react2shell)
+- [zamdevio/r2s](https://github.com/zamdevio/r2s)
+- [AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web](https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web)
+- [ogpourya/CVE-2025-55182](https://github.com/ogpourya/CVE-2025-55182)
+- [0xN7y/CVE-2025-55182](https://github.com/0xN7y/CVE-2025-55182)
+- [MuhammadWaseem29/React2Shell_Rce-cve-2025-55182](https://github.com/MuhammadWaseem29/React2Shell_Rce-cve-2025-55182)
+- [l0n3m4n/CVE-2025-55182-Waf](https://github.com/l0n3m4n/CVE-2025-55182-Waf)
+- [ynsmroztas/NextRce](https://github.com/ynsmroztas/NextRce)
+- [shreyas-malhotra/React2Shell-CVE-2025-55182](https://github.com/shreyas-malhotra/React2Shell-CVE-2025-55182)
+- [sohaibeb/CVE-2025-55182](https://github.com/sohaibeb/CVE-2025-55182)
+- [vyvivekyadav04/RSC-Infra-Scanner](https://github.com/vyvivekyadav04/RSC-Infra-Scanner)
+- [MikeTheHash/CVE-2025-55182](https://github.com/MikeTheHash/CVE-2025-55182)
+- [Qixinlee/CVE-2025-55182-Scanner](https://github.com/Qixinlee/CVE-2025-55182-Scanner)
+- [DelvyGonzalez/react2shell-security-toolkit](https://github.com/DelvyGonzalez/react2shell-security-toolkit)
+- [jumodada/react-cve-2025-55182-demo](https://github.com/jumodada/react-cve-2025-55182-demo)
+- [ahmedshamsddin/CVE-2025-55182](https://github.com/ahmedshamsddin/CVE-2025-55182)
+- [LemonTeatw1/CVE-2025-55182-exploit](https://github.com/LemonTeatw1/CVE-2025-55182-exploit)
+- [ethicalrohitt/React2Shell_cve-2025-55182](https://github.com/ethicalrohitt/React2Shell_cve-2025-55182)
+- [ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell](https://github.com/ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-Shell)
+- [shakilkhatri/scanner-for-CVE-2025-55182-vulnerability](https://github.com/shakilkhatri/scanner-for-CVE-2025-55182-vulnerability)
+- [UmmItKin/CVE-2025-55182-PoC](https://github.com/UmmItKin/CVE-2025-55182-PoC)
+- [robbin0919/CVE-2025-55182](https://github.com/robbin0919/CVE-2025-55182)
+- [zxz3650/CVE-2025-55182-POC](https://github.com/zxz3650/CVE-2025-55182-POC)
+- [AliHzSec/CVE-2025-55182](https://github.com/AliHzSec/CVE-2025-55182)
+- [zr0n/react2shell](https://github.com/zr0n/react2shell)
+- [hunter24x24/CVE-2025-55182-mass](https://github.com/hunter24x24/CVE-2025-55182-mass)
+- [andressuarezmonk/CVE-2025-55182](https://github.com/andressuarezmonk/CVE-2025-55182)
+- [cybertechajju/R2C-CVE-2025-55182-66478](https://github.com/cybertechajju/R2C-CVE-2025-55182-66478)
+- [Dh4v4l8/CVE-2025-55182-poc-tool](https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool)
+- [M4xSec/CVE-2025-55182-React2Shell-RCE-Shell](https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell)
+- [SainiONHacks/CVE-2025-55182-Scanner](https://github.com/SainiONHacks/CVE-2025-55182-Scanner)
+- [umairahmadh/react-vuln-scanner](https://github.com/umairahmadh/react-vuln-scanner)
+- [ToritoIO/Torito-R2S](https://github.com/ToritoIO/Torito-R2S)
+- [surajhacx/react2shellpoc](https://github.com/surajhacx/react2shellpoc)
+- [kavienanj/CVE-2025-55182](https://github.com/kavienanj/CVE-2025-55182)
+- [websecuritylabs/React2Shell-Library](https://github.com/websecuritylabs/React2Shell-Library)
+- [cyberleelawat/CVE-2025-55182](https://github.com/cyberleelawat/CVE-2025-55182)
+- [satriarizka/CVE-2025-55182-Simple-Scanner](https://github.com/satriarizka/CVE-2025-55182-Simple-Scanner)
+- [xcanwin/CVE-2025-55182-React-RCE](https://github.com/xcanwin/CVE-2025-55182-React-RCE)
+- [DoobTheGoober/CVE-2025-55182-Test-Server](https://github.com/DoobTheGoober/CVE-2025-55182-Test-Server)
+- [timsonner/React2Shell-CVE-2025-55182](https://github.com/timsonner/React2Shell-CVE-2025-55182)
+- [theman001/CVE-2025-55182](https://github.com/theman001/CVE-2025-55182)
+- [lalaterry/CVE-2025-55182-React2Shell-lab](https://github.com/lalaterry/CVE-2025-55182-React2Shell-lab)
+- [arashiyans/CVE-2025-55182-CVE-2025-66478](https://github.com/arashiyans/CVE-2025-55182-CVE-2025-66478)
+- [faizdotid/rust-cve-2025-55182](https://github.com/faizdotid/rust-cve-2025-55182)
+- [muthaiyanmani/react2shell-checker](https://github.com/muthaiyanmani/react2shell-checker)
+- [lincemorado97/CVE-2025-55182_CVE-2025-66478](https://github.com/lincemorado97/CVE-2025-55182_CVE-2025-66478)
+- [LucasPDiniz/CVE-2025-55182](https://github.com/LucasPDiniz/CVE-2025-55182)
+- [wangzhengquan/CVE-2025-55182](https://github.com/wangzhengquan/CVE-2025-55182)
+- [TH-SecForge/CVE-2025-55182](https://github.com/TH-SecForge/CVE-2025-55182)
+- [chitoz1300/React2Shell-CVE-2025-55182](https://github.com/chitoz1300/React2Shell-CVE-2025-55182)
+- [Night-have-dreams/CVE-2025-55182-PoC](https://github.com/Night-have-dreams/CVE-2025-55182-PoC)
+- [thekamran/CVE-2025-55182-Proof-of-Concept](https://github.com/thekamran/CVE-2025-55182-Proof-of-Concept)
+- [Syrins/CVE-2025-55182-React2Shell-RCE](https://github.com/Syrins/CVE-2025-55182-React2Shell-RCE)
- [0xsj/CVE-2025-55182](https://github.com/0xsj/CVE-2025-55182)
+- [Security-Phoenix-demo/react2shell-scanner-CVE-2025-55182](https://github.com/Security-Phoenix-demo/react2shell-scanner-CVE-2025-55182)
+- [Benrich127N/react2shell_analyzer](https://github.com/Benrich127N/react2shell_analyzer)
+- [randarts/react-rce](https://github.com/randarts/react-rce)
+- [hamm0nz/react2shell-audit](https://github.com/hamm0nz/react2shell-audit)
+- [0xSalm0n/CVE-2025-55182](https://github.com/0xSalm0n/CVE-2025-55182)
+- [Macaroniwdcheese/CVE-2025-55182-Lab](https://github.com/Macaroniwdcheese/CVE-2025-55182-Lab)
+- [LvMalware/CVE-2025-55182](https://github.com/LvMalware/CVE-2025-55182)
+- [HUAHUAI23/CVE-2025-55182-POC](https://github.com/HUAHUAI23/CVE-2025-55182-POC)
+- [cahyod/react2shell](https://github.com/cahyod/react2shell)
+- [yaupunal/CVE-2025-55182-scanner](https://github.com/yaupunal/CVE-2025-55182-scanner)
+- [jandelima/cve-2025-55182-poc-test](https://github.com/jandelima/cve-2025-55182-poc-test)
+- [im-ezboy/CVE-2025-55182-zoomeye](https://github.com/im-ezboy/CVE-2025-55182-zoomeye)
+- [FurkanKAYAPINAR/React-Next-Scanner](https://github.com/FurkanKAYAPINAR/React-Next-Scanner)
+- [lowercasenumbers/CVE-2025-55182](https://github.com/lowercasenumbers/CVE-2025-55182)
+- [AggressiveUser/React2Hell](https://github.com/AggressiveUser/React2Hell)
+- [racall/cve-2025-55182-node](https://github.com/racall/cve-2025-55182-node)
+- [FurkanKAYAPINAR/ReactNext2Shell](https://github.com/FurkanKAYAPINAR/ReactNext2Shell)
+- [LQTjim/next-bug-CVE-2025-55182](https://github.com/LQTjim/next-bug-CVE-2025-55182)
+- [AliAbdollahiii/react2shell_detector](https://github.com/AliAbdollahiii/react2shell_detector)
+- [jan0x190/CVE-2025-55182-Simple-Scanner-main](https://github.com/jan0x190/CVE-2025-55182-Simple-Scanner-main)
+- [xiaopeng-ye/react2shell-detector](https://github.com/xiaopeng-ye/react2shell-detector)
+- [vulncheck-oss/cve-2025-55182](https://github.com/vulncheck-oss/cve-2025-55182)
+- [Shield-Cyber/react2shell-scanner](https://github.com/Shield-Cyber/react2shell-scanner)
+- [foodmen2111/test-cve-2025-55182](https://github.com/foodmen2111/test-cve-2025-55182)
+- [sun977/CVE-2025-55182](https://github.com/sun977/CVE-2025-55182)
- [garux-sec/PoC-react2shell-CVE-2025-55182](https://github.com/garux-sec/PoC-react2shell-CVE-2025-55182)
+- [ancs21/react2shell-scanner-rust](https://github.com/ancs21/react2shell-scanner-rust)
+- [MoisesTapia/http-react2shell](https://github.com/MoisesTapia/http-react2shell)
+- [solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182](https://github.com/solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182)
+- [techgaun/cve-2025-55182-scanner](https://github.com/techgaun/cve-2025-55182-scanner)
+- [rsch-io/CVE-2025-55182-React2Shell](https://github.com/rsch-io/CVE-2025-55182-React2Shell)
+- [ilixm/PoC-RCE-CVE-2025-55182](https://github.com/ilixm/PoC-RCE-CVE-2025-55182)
+- [iamblacksolo2-BugBounty/POC-CVE-2025-55182](https://github.com/iamblacksolo2-BugBounty/POC-CVE-2025-55182)
+- [joelvaiju/react2shell-CVE-2025-55182-poc](https://github.com/joelvaiju/react2shell-CVE-2025-55182-poc)
+- [DevVaibhav07/POC-CVE-2025-55182](https://github.com/DevVaibhav07/POC-CVE-2025-55182)
+- [liamromanis101/cve-2025-55182](https://github.com/liamromanis101/cve-2025-55182)
+- [ysfcndgr/React2Shell-CVE-2025-55182-Advanced-Scanner](https://github.com/ysfcndgr/React2Shell-CVE-2025-55182-Advanced-Scanner)
+- [alfazhossain/CVE-2025-55182-Exploiter](https://github.com/alfazhossain/CVE-2025-55182-Exploiter)
+- [keshavyaduvans/cve-2025-55182](https://github.com/keshavyaduvans/cve-2025-55182)
+- [byte16384/CVE-2025-55182](https://github.com/byte16384/CVE-2025-55182)
- [kondukto-io/vulnerable-next-js-poc](https://github.com/kondukto-io/vulnerable-next-js-poc)
+- [eytannatye/R2S_CVE-2025-55182](https://github.com/eytannatye/R2S_CVE-2025-55182)
+- [Jaycelation/CVE-2025-55182](https://github.com/Jaycelation/CVE-2025-55182)
+- [shyambhanushali/React2Shell](https://github.com/shyambhanushali/React2Shell)
+- [amir-malek/react-cve-2025-55182](https://github.com/amir-malek/react-cve-2025-55182)
+- [Yyax13/CVE-2025-55182](https://github.com/Yyax13/CVE-2025-55182)
+- [Ankitspandey07/React2Shell](https://github.com/Ankitspandey07/React2Shell)
+- [Stonelinks/react-cve-2025-55182](https://github.com/Stonelinks/react-cve-2025-55182)
+- [ihsansencan/React2Shell-CVE-2025-55182](https://github.com/ihsansencan/React2Shell-CVE-2025-55182)
+- [dr4xp/react2shell](https://github.com/dr4xp/react2shell)
+- [trax69/cve-2025-55182-poc](https://github.com/trax69/cve-2025-55182-poc)
+- [osman-butt/CVE-2025-55182-demo](https://github.com/osman-butt/CVE-2025-55182-demo)
+- [notkittenn/poc_react2shell](https://github.com/notkittenn/poc_react2shell)
+- [theori-io/reactguard](https://github.com/theori-io/reactguard)
+- [iamblacksolo2-BugBounty/POC2-CVE-2025-55182](https://github.com/iamblacksolo2-BugBounty/POC2-CVE-2025-55182)
+- [bakhod1r/CVE-2025-55182](https://github.com/bakhod1r/CVE-2025-55182)
+- [theman001/CVE-2025-55182_PoC-Test-Server](https://github.com/theman001/CVE-2025-55182_PoC-Test-Server)
+- [gunyakit/CVE-2025-55182-PoC-exploit](https://github.com/gunyakit/CVE-2025-55182-PoC-exploit)
+- [Sotatek-KhaiNguyen3/CVE-2025-55182](https://github.com/Sotatek-KhaiNguyen3/CVE-2025-55182)
- [rix4uni/CVE-2025-55182](https://github.com/rix4uni/CVE-2025-55182)
+- [gonaumov/cve-2025-55182-checker](https://github.com/gonaumov/cve-2025-55182-checker)
+- [BeichenDream/CVE-2025-55182-GodzillaMemoryShell](https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell)
+- [Legus-Yeung/CVE-2025-55182-exploit](https://github.com/Legus-Yeung/CVE-2025-55182-exploit)
+- [DanielXavierJob/-CVE-2025-55182](https://github.com/DanielXavierJob/-CVE-2025-55182)
+- [sponte/nextjs-cve-version-confusion](https://github.com/sponte/nextjs-cve-version-confusion)
- [CrazyloveforWeb/Golang-CVE-2025-55182-POC](https://github.com/CrazyloveforWeb/Golang-CVE-2025-55182-POC)
+- [JahazielLem/NSE_CVE-2025-55182](https://github.com/JahazielLem/NSE_CVE-2025-55182)
+- [CerberusMrX/Cerberus-React2Shell-Scanner-Exploit](https://github.com/CerberusMrX/Cerberus-React2Shell-Scanner-Exploit)
+- [Saad-Ayady/react2shellNSE](https://github.com/Saad-Ayady/react2shellNSE)
+- [VeilVulp/RscScan-cve-2025-55182](https://github.com/VeilVulp/RscScan-cve-2025-55182)
+- [yz9yt/React2Shell-CTF](https://github.com/yz9yt/React2Shell-CTF)
+- [Gymnott1/CVE-2025-55182](https://github.com/Gymnott1/CVE-2025-55182)
- [J4ck3LSyN-Gen2/CVE-2025-55182](https://github.com/J4ck3LSyN-Gen2/CVE-2025-55182)
+- [pkrasulia/CVE-2025-55182-NextJS-RCE-PoC](https://github.com/pkrasulia/CVE-2025-55182-NextJS-RCE-PoC)
+- [min8282/CVE-2025-55182](https://github.com/min8282/CVE-2025-55182)
+- [Machine-farmer/PunchingBag-for-React2Shell](https://github.com/Machine-farmer/PunchingBag-for-React2Shell)
+- [exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC](https://github.com/exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC)
+- [mrmtwoj/React2Shell-CVE-2025-55182](https://github.com/mrmtwoj/React2Shell-CVE-2025-55182)
+- [LC-pro/CVE-2025-55182-EXP](https://github.com/LC-pro/CVE-2025-55182-EXP)
+- [Tiger-Foxx/exploit-react-CVE-2025-55182](https://github.com/Tiger-Foxx/exploit-react-CVE-2025-55182)
+- [trilogy-group/react2shell-scan](https://github.com/trilogy-group/react2shell-scan)
+- [VolksRat71/react2shellexploitvisualized](https://github.com/VolksRat71/react2shellexploitvisualized)
- [anuththara2007-W/CVE-2025-55182-Exploit-extension](https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension)
+- [andrei2308/react2shell](https://github.com/andrei2308/react2shell)
+- [Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182](https://github.com/Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182)
+- [aseemyash/krle](https://github.com/aseemyash/krle)
+- [4nuxd/React2Shell](https://github.com/4nuxd/React2Shell)
+- [j0lt-github/react2shell-burp](https://github.com/j0lt-github/react2shell-burp)
+- [IrsyadSEC/CVE-2025-55182-MassPayloadAttack](https://github.com/IrsyadSEC/CVE-2025-55182-MassPayloadAttack)
+- [Shadowroot97/React2Shell-CVE-2025-55182](https://github.com/Shadowroot97/React2Shell-CVE-2025-55182)
+- [yuta3003/CVE-2025-55182](https://github.com/yuta3003/CVE-2025-55182)
+- [rahul-securify/React2Shell-CVE-2025-55182](https://github.com/rahul-securify/React2Shell-CVE-2025-55182)
- [raivenLockdown/WEB-CLI_RCE_React2Shell](https://github.com/raivenLockdown/WEB-CLI_RCE_React2Shell)
+- [oguri-souhei/CVE-2025-55182](https://github.com/oguri-souhei/CVE-2025-55182)
+- [xalgord/React2Shell](https://github.com/xalgord/React2Shell)
+- [ryanhafid/PoC_CVE-2025-55182](https://github.com/ryanhafid/PoC_CVE-2025-55182)
+- [ryanhafid/Scan_CVE-2025-55182](https://github.com/ryanhafid/Scan_CVE-2025-55182)
- [gagaltotal/tot-react-rce-CVE-2025-55182](https://github.com/gagaltotal/tot-react-rce-CVE-2025-55182)
+- [sho-luv/React2Shell](https://github.com/sho-luv/React2Shell)
+- [h0tak88r/next88](https://github.com/h0tak88r/next88)
+- [TheStingR/ReactOOPS-WriteUp](https://github.com/TheStingR/ReactOOPS-WriteUp)
+- [mantvmass/react2shell](https://github.com/mantvmass/react2shell)
+- [MoLeft/React2Shell-Toolbox](https://github.com/MoLeft/React2Shell-Toolbox)
- [Ya0h4cker/CVE-2025-55182](https://github.com/Ya0h4cker/CVE-2025-55182)
+- [Kugelbyte/React2Shell-Analysis](https://github.com/Kugelbyte/React2Shell-Analysis)
+- [dhananjayakumarn/CVE-2025-55182-Lab](https://github.com/dhananjayakumarn/CVE-2025-55182-Lab)
+- [ZorvithonLeo-Null/CVE-2025-55182-exploit](https://github.com/ZorvithonLeo-Null/CVE-2025-55182-exploit)
+- [sangleshubham/React-Security-CVE-2025-55182-Exploit](https://github.com/sangleshubham/React-Security-CVE-2025-55182-Exploit)
+- [TrixSec/CVE-2025-55182-Scanner](https://github.com/TrixSec/CVE-2025-55182-Scanner)
+- [mounta11n/CHECK-CVE-2025-55182-AND-CVE-2025-66478](https://github.com/mounta11n/CHECK-CVE-2025-55182-AND-CVE-2025-66478)
+- [grejh0t/CVE-2025-55182](https://github.com/grejh0t/CVE-2025-55182)
+- [hidden-investigations/react2shell-vulnlab](https://github.com/hidden-investigations/react2shell-vulnlab)
+- [MammaniNelsonD/React2P4IM0Nshell](https://github.com/MammaniNelsonD/React2P4IM0Nshell)
+- [tinashelorenzi/CVE-2025-55182](https://github.com/tinashelorenzi/CVE-2025-55182)
+- [ProwlSec/React2Shell](https://github.com/ProwlSec/React2Shell)
+- [VVVI5HNU/CVE-2025-55182](https://github.com/VVVI5HNU/CVE-2025-55182)
+- [CyberPrince-hub/React2shell-ultimate-scanner](https://github.com/CyberPrince-hub/React2shell-ultimate-scanner)
- [hidden-investigations/react2shell-scanner](https://github.com/hidden-investigations/react2shell-scanner)
+- [mivmi/CVE-2025-55182](https://github.com/mivmi/CVE-2025-55182)
+- [subhdotsol/CVE-2025-55182](https://github.com/subhdotsol/CVE-2025-55182)
+- [Call123X/-cve-2025-55182](https://github.com/Call123X/-cve-2025-55182)
+- [hulh122/CVE-2025-55182](https://github.com/hulh122/CVE-2025-55182)
+- [simantchaudhari/CVE-2025-55182](https://github.com/simantchaudhari/CVE-2025-55182)
+- [premdanav/react2shelldemo](https://github.com/premdanav/react2shelldemo)
+- [S-Mughal/NextJS-app-CVE-2025-55182](https://github.com/S-Mughal/NextJS-app-CVE-2025-55182)
- [itumo-arigatone/study-CVE-2025-55182](https://github.com/itumo-arigatone/study-CVE-2025-55182)
+- [EQSTLab/CVE-2025-55182](https://github.com/EQSTLab/CVE-2025-55182)
+- [scumfrog/FiberBreak](https://github.com/scumfrog/FiberBreak)
+- [d0cnull/nextjs-CVE-2025-55182](https://github.com/d0cnull/nextjs-CVE-2025-55182)
+- [Mustafa1p/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478](https://github.com/Mustafa1p/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478)
+- [M4rgs/CVE-2025-55182-React2Shell-Exploit](https://github.com/M4rgs/CVE-2025-55182-React2Shell-Exploit)
+- [nulltrace1336/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-](https://github.com/nulltrace1336/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-)
+- [pwnxpl0it/react2shell-lab](https://github.com/pwnxpl0it/react2shell-lab)
+- [ceh-aditya-raj/CVE-2025-55182](https://github.com/ceh-aditya-raj/CVE-2025-55182)
+- [r4j3sh-com/CVE-2025-55182](https://github.com/r4j3sh-com/CVE-2025-55182)
+- [degenwithheart/React2Shell-Vulnerability-Verification-Script](https://github.com/degenwithheart/React2Shell-Vulnerability-Verification-Script)
+- [rashedhasan090/cve-2025-55182-mitigator](https://github.com/rashedhasan090/cve-2025-55182-mitigator)
+- [RavinduRathnayaka/CVE-2025-55182-PoC](https://github.com/RavinduRathnayaka/CVE-2025-55182-PoC)
+- [open-flaw/CVE-2025-55182](https://github.com/open-flaw/CVE-2025-55182)
+- [chrahman/react2shell-CVE-2025-55182-full-rce-script](https://github.com/chrahman/react2shell-CVE-2025-55182-full-rce-script)
+- [lamaper/CVE-2025-55182-Toolbox](https://github.com/lamaper/CVE-2025-55182-Toolbox)
+- [mahaveer-choudhary/CVE-2025-55182](https://github.com/mahaveer-choudhary/CVE-2025-55182)
+- [MeGaNeKoS/secure-by-default-rce-demo](https://github.com/MeGaNeKoS/secure-by-default-rce-demo)
+- [tamagorengs/react2shell-poc-CVE-2025-55182](https://github.com/tamagorengs/react2shell-poc-CVE-2025-55182)
+- [xxxTectationxxx/React2Shell-CVE-Lab](https://github.com/xxxTectationxxx/React2Shell-CVE-Lab)
+- [vijay-shirhatti/RSC-Detect-CVE-2025-55182](https://github.com/vijay-shirhatti/RSC-Detect-CVE-2025-55182)
- [p3ta00/react2shell-poc](https://github.com/p3ta00/react2shell-poc)
- [vonuyvicoo/nextploiter](https://github.com/vonuyvicoo/nextploiter)
+- [niokagi/react-cve-2025-55182](https://github.com/niokagi/react-cve-2025-55182)
+- [knightwolf01/React2Shell](https://github.com/knightwolf01/React2Shell)
+- [BlackTechX011/React2Shell](https://github.com/BlackTechX011/React2Shell)
+- [S3cr3t-SDN/React4Shell](https://github.com/S3cr3t-SDN/React4Shell)
+- [ckex/test-vuln](https://github.com/ckex/test-vuln)
- [jensnesten/React2Shell-PoC](https://github.com/jensnesten/React2Shell-PoC)
- [Farhan9488/CVE-2025-55182-research](https://github.com/Farhan9488/CVE-2025-55182-research)
+- [bigbluewhale111/CVE-2025-55182-LAB](https://github.com/bigbluewhale111/CVE-2025-55182-LAB)
- [Ghost121111/Blackash-CVE-2025-55182](https://github.com/Ghost121111/Blackash-CVE-2025-55182)
- [slreaperking/CVE-2025-55182-poc](https://github.com/slreaperking/CVE-2025-55182-poc)
+- [guiimoraes/react2shell-evolved](https://github.com/guiimoraes/react2shell-evolved)
- [sobuj0007/Nextjs_RCE_Exploit_Tool](https://github.com/sobuj0007/Nextjs_RCE_Exploit_Tool)
+- [Jakelife/HACKVISER-CVE-2025-55182-LAB](https://github.com/Jakelife/HACKVISER-CVE-2025-55182-LAB)
+- [thqxploit666/CVE-2025-55182](https://github.com/thqxploit666/CVE-2025-55182)
+- [itsismarcos/Bot-exploit-CVE-2025-55182](https://github.com/itsismarcos/Bot-exploit-CVE-2025-55182)
+- [0xROI/CVE-2025-55182](https://github.com/0xROI/CVE-2025-55182)
+- [Updatelap/CVE-2025-55182](https://github.com/Updatelap/CVE-2025-55182)
- [9988700/CVE-2025-55182-POC-NEXTJS](https://github.com/9988700/CVE-2025-55182-POC-NEXTJS)
+- [kanyokoo/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-](https://github.com/kanyokoo/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-)
+- [KingHacker353/R2C-CVE-2025-55182-66478](https://github.com/KingHacker353/R2C-CVE-2025-55182-66478)
+- [amirali-ramezani/react2shell-CVE-2025-55182-](https://github.com/amirali-ramezani/react2shell-CVE-2025-55182-)
+- [git0xLai/React2ShellPoC](https://github.com/git0xLai/React2ShellPoC)
+- [hndko/react2shell-rce-autobot](https://github.com/hndko/react2shell-rce-autobot)
+- [Goultarde/CVE-2025-55182-React2Shell-Lab](https://github.com/Goultarde/CVE-2025-55182-React2Shell-Lab)
- [xiaoLvChen/CVE-2025-55182](https://github.com/xiaoLvChen/CVE-2025-55182)
- [captain4554/CVE-2025-55182-Scanner](https://github.com/captain4554/CVE-2025-55182-Scanner)
- [captain4554/captain4554.github.io](https://github.com/captain4554/captain4554.github.io)
@@ -8488,7 +11512,6 @@
- [orgito1015/CVE-2025-55182-Researching-process](https://github.com/orgito1015/CVE-2025-55182-Researching-process)
- [0xBlackash/CVE-2025-55182](https://github.com/0xBlackash/CVE-2025-55182)
- [alptexans/RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182)
-- [unixskid/CVE-2025-55182-React2Shell](https://github.com/unixskid/CVE-2025-55182-React2Shell)
- [MrMahile/MassScanning-CVE-2025-55182](https://github.com/MrMahile/MassScanning-CVE-2025-55182)
- [androidteacher/REACT-CVE-2025-55182-Lab](https://github.com/androidteacher/REACT-CVE-2025-55182-Lab)
- [InferiorAK/CVE-2025-55182-React2Shell-Async-Scanner](https://github.com/InferiorAK/CVE-2025-55182-React2Shell-Async-Scanner)
@@ -8532,11 +11555,31 @@
- [LuizHenz/PoC-CVE-2025-55182](https://github.com/LuizHenz/PoC-CVE-2025-55182)
- [hakkuri01/r2rs](https://github.com/hakkuri01/r2rs)
+### CVE-2025-55183 (2025-12-11)
+
+An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.
+
+
+- [Saturate/CVE-2025-55183](https://github.com/Saturate/CVE-2025-55183)
+- [kimtruth/CVE-2025-55183-poc](https://github.com/kimtruth/CVE-2025-55183-poc)
+- [williavs/nextjs-security-update](https://github.com/williavs/nextjs-security-update)
+- [X-Cotang/CVE-2025-55183_POC](https://github.com/X-Cotang/CVE-2025-55183_POC)
+- [omaidnebari/RSC-Scanner-POC](https://github.com/omaidnebari/RSC-Scanner-POC)
+- [StealthMoud/react-server-cve-lab](https://github.com/StealthMoud/react-server-cve-lab)
+
### CVE-2025-55184 (2025-12-11)
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints, which can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
+- [hans362/CVE-2025-55184-poc](https://github.com/hans362/CVE-2025-55184-poc)
+- [ejpir/CVE-2025-55184](https://github.com/ejpir/CVE-2025-55184)
+- [bakhod1r/CVE-2025-55184](https://github.com/bakhod1r/CVE-2025-55184)
+- [cybertechajju/CVE-2025-55184-POC-Expolit](https://github.com/cybertechajju/CVE-2025-55184-POC-Expolit)
+- [KkHackingLearning/CVE-2025-55184_Testing](https://github.com/KkHackingLearning/CVE-2025-55184_Testing)
+- [KingHacker353/CVE-2025-55184](https://github.com/KingHacker353/CVE-2025-55184)
+- [Tarekhshaikh13/CVE-2025-55184](https://github.com/Tarekhshaikh13/CVE-2025-55184)
+- [shubham-01-star/OpsGuard-simulation](https://github.com/shubham-01-star/OpsGuard-simulation)
- [yogeshkumar09/CVE-2025-55184_Testing](https://github.com/yogeshkumar09/CVE-2025-55184_Testing)
- [yogeshkumar09/yogeshkumar09.github.io](https://github.com/yogeshkumar09/yogeshkumar09.github.io)
- [JSH-data/CVE-2025-55184_CVE-2025-67779](https://github.com/JSH-data/CVE-2025-55184_CVE-2025-67779)
@@ -8546,14 +11589,32 @@
7-Zip before 25.01 does not always properly handle symbolic links during extraction.
+- [hunters-sec/CVE-2025-55188-7z-exploit](https://github.com/hunters-sec/CVE-2025-55188-7z-exploit)
- [lunbun/CVE-2025-55188](https://github.com/lunbun/CVE-2025-55188)
+### CVE-2025-55234 (2025-09-09)
+
+SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks.\nThe SMB Server already supports mechanisms for hardening against relay attacks:\n\nSMB Server signing\nSMB Server Extended Protection for Authentication (EPA)\n\nMicrosoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks.\nIf you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:\n\nAssess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates. See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing & SMB Server EPA.\nAdopt appropriate SMB Server hardening measures.
+
+
+- [mrk336/CVE-2025-55234](https://github.com/mrk336/CVE-2025-55234)
+- [mrk336/Patch-the-Path-CVE-2025-55234-Detection-Defense](https://github.com/mrk336/Patch-the-Path-CVE-2025-55234-Detection-Defense)
+
+### CVE-2025-55287 (2025-08-18)
+
+Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI manipulation. This vulnerability is fixed in 4.4.0.
+
+
+- [Eternalvalhalla/CVE-2025-55287-POC](https://github.com/Eternalvalhalla/CVE-2025-55287-POC)
+
### CVE-2025-55315 (2025-10-14)
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
- [sirredbeard/CVE-2025-55315-repro](https://github.com/sirredbeard/CVE-2025-55315-repro)
+- [ZemarKhos/CVE-2025-55315-PoC-Exploit](https://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit)
+- [MartinFabianIonut/CVE-2025-55315](https://github.com/MartinFabianIonut/CVE-2025-55315)
- [NetVanguard-cmd/CVE-2025-55315](https://github.com/NetVanguard-cmd/CVE-2025-55315)
### CVE-2025-55320 (2025-10-14)
@@ -8563,6 +11624,9 @@
- [synacktiv/CVE-2025-55320](https://github.com/synacktiv/CVE-2025-55320)
+### CVE-2025-55349
+- [GoldenTicketLabs/CVE-2025-55349](https://github.com/GoldenTicketLabs/CVE-2025-55349)
+
### CVE-2025-55423 (2026-01-20)
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.
@@ -8570,6 +11634,14 @@
- [logis11/CVE-2025-55423-analysis-and-reproduction](https://github.com/logis11/CVE-2025-55423-analysis-and-reproduction)
+### CVE-2025-55449 (2026-05-08)
+
+AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key used to sign a JWT.
+
+
+- [Marven11/CVE-2025-55449-AstrBot-RCE](https://github.com/Marven11/CVE-2025-55449-AstrBot-RCE)
+- [xhh1h/CVE-2025-55449](https://github.com/xhh1h/CVE-2025-55449)
+
### CVE-2025-55462 (2026-01-13)
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticated cross-origin requests against the Eramba API, including endpoints like /system-api/login and /system-api/user/me. The response includes sensitive user session data (ID, name, email, access groups), which is accessible to the attacker's JavaScript. This flaw enables full session hijack and data exfiltration without user interaction. Eramba versions 3.23.3 and earlier were tested and appear unaffected. The vulnerability is present in default installations, requiring no custom configuration.
@@ -8577,6 +11649,41 @@
- [sibikrish001/CVE-2025-55462](https://github.com/sibikrish001/CVE-2025-55462)
+### CVE-2025-55575 (2025-08-25)
+
+SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP request with action=service_detail.
+
+
+- [Aether-0/CVE-2025-55575](https://github.com/Aether-0/CVE-2025-55575)
+
+### CVE-2025-55579 (2025-08-29)
+
+SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3.8.
+
+
+- [ddobrev25/CVE-2025-55579](https://github.com/ddobrev25/CVE-2025-55579)
+
+### CVE-2025-55580 (2025-08-29)
+
+SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript that executes in other users' browsers when the Clients page is viewed. The vulnerability is fixed in version 2.3.8.
+
+
+- [ddobrev25/CVE-2025-55580](https://github.com/ddobrev25/CVE-2025-55580)
+
+### CVE-2025-55668 (2025-08-13)
+
+Session Fixation vulnerability in Apache Tomcat via rewrite valve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nOlder, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
+
+
+- [gregk4sec/CVE-2025-55668](https://github.com/gregk4sec/CVE-2025-55668)
+
+### CVE-2025-55746 (2025-08-20)
+
+Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without changes being applied to the files' database-resident metadata) and / or upload new files, with arbitrary content and extensions, which won't show up in the Directus UI. This vulnerability is fixed in 11.9.3.
+
+
+- [r4bbit-r4/directus-preso](https://github.com/r4bbit-r4/directus-preso)
+
### CVE-2025-55752 (2025-10-27)
Relative Path Traversal vulnerability in Apache Tomcat.\n\nThe fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could be uploaded leading to remote code execution. PUT requests are normally limited to trusted users and it is considered unlikely that PUT requests would be enabled in conjunction with a rewrite that manipulated the URI.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.0.M11 through 9.0.108.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.6 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue.
@@ -8591,6 +11698,23 @@
- [krispybyte/CVE-2025-55763](https://github.com/krispybyte/CVE-2025-55763)
+### CVE-2025-55780 (2025-09-23)
+
+A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fz_html_split_flow() to split a FLOW_WORD node, but does not check if node->next is valid before accessing node->next->overflow_wrap, resulting in a crash if the split fails or returns a partial node chain.
+
+
+- [ISH2YU/CVE-2025-55780](https://github.com/ISH2YU/CVE-2025-55780)
+
+### CVE-2025-55816 (2025-12-11)
+
+HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
+
+
+- [partywavesec/CVE-2025-55816](https://github.com/partywavesec/CVE-2025-55816)
+
+### CVE-2025-55817
+- [5qu1n7/CVE-2025-55817](https://github.com/5qu1n7/CVE-2025-55817)
+
### CVE-2025-55853 (2026-02-19)
SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTML file in the application, which when rendered to a PDF allows for internal port scanning and Local File Inclusion (LFI).
@@ -8598,9 +11722,51 @@
- [Vivz13/CVE-2025-55853](https://github.com/Vivz13/CVE-2025-55853)
+### CVE-2025-55885 (2025-09-22)
+
+SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php
+
+
+- [0xZeroSec/CVE-2025-55885](https://github.com/0xZeroSec/CVE-2025-55885)
+
+### CVE-2025-55886 (2025-09-22)
+
+An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization.
+
+
+- [0xZeroSec/CVE-2025-55886](https://github.com/0xZeroSec/CVE-2025-55886)
+
+### CVE-2025-55887 (2025-09-22)
+
+Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.
+
+
+- [0xZeroSec/CVE-2025-55887](https://github.com/0xZeroSec/CVE-2025-55887)
+
+### CVE-2025-55888 (2025-09-22)
+
+Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered, allowing script execution in the context of users browsers. This flaw could lead to session hijacking, cookie theft, and other malicious actions.
+
+
+- [0xZeroSec/CVE-2025-55888](https://github.com/0xZeroSec/CVE-2025-55888)
+
### CVE-2025-55891
- [terribledactyl/CVE-2025-55891](https://github.com/terribledactyl/CVE-2025-55891)
+### CVE-2025-55996 (2025-09-12)
+
+Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
+
+
+- [thawkhant/viber-desktop-html-injection](https://github.com/thawkhant/viber-desktop-html-injection)
+
+### CVE-2025-55998 (2025-09-08)
+
+A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter
+
+
+- [Ocmenog/CVE-2025-55998](https://github.com/Ocmenog/CVE-2025-55998)
+
### CVE-2025-56005 (2026-01-20)
An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.
@@ -8616,6 +11782,27 @@
- [e1st/CVE-2025-56015](https://github.com/e1st/CVE-2025-56015)
+### CVE-2025-56019 (2025-10-02)
+
+An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location.
+
+
+- [Yashodhanvivek/Agatsa-EasyTouch-Plus---CVE-2025-56019](https://github.com/Yashodhanvivek/Agatsa-EasyTouch-Plus---CVE-2025-56019)
+
+### CVE-2025-56311 (2025-09-23)
+
+In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware v2.2.14), the web management interface contains an authenticated CSRF vulnerability on the reboot endpoint (/boaform/admin/formReboot). An attacker can craft a malicious webpage that, when visited by an authenticated administrator, causes the router to reboot without explicit user consent. This lack of CSRF protection on a sensitive administrative function can lead to denial of service by disrupting network availability.
+
+
+- [wrathfulDiety/CVE-2025-56311](https://github.com/wrathfulDiety/CVE-2025-56311)
+
+### CVE-2025-56383 (2025-09-26)
+
+Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parties because the behavior only occurs when a user installs the product into a directory tree that allows write access by arbitrary unprivileged users.
+
+
+- [zer0t0/CVE-2025-56383-Proof-of-Concept](https://github.com/zer0t0/CVE-2025-56383-Proof-of-Concept)
+
### CVE-2025-56399 (2025-10-28)
alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted file upload. A file with a '.png` extension containing PHP code can be uploaded via the file manager interface. Although the upload appears to fail client-side validation, the file is still saved on the server. The attacker can then use the rename API to change the file extension to `.php`, and upon accessing it via a public URL, the server executes the embedded code.
@@ -8624,6 +11811,55 @@
- [Theethat-Thamwasin/CVE-2025-56399](https://github.com/Theethat-Thamwasin/CVE-2025-56399)
- [im-hanzou/CVE-2025-56399](https://github.com/im-hanzou/CVE-2025-56399)
+### CVE-2025-56450 (2025-10-21)
+
+Log2Space Subscriber Management Software 1.1 is vulnerable to unauthenticated SQL injection via the `lead_id` parameter in the `/l2s/api/selfcareLeadHistory` endpoint. A remote attacker can exploit this by sending a specially crafted POST request, resulting in the execution of arbitrary SQL queries. The backend fails to sanitize the user input, allowing enumeration of database schemas, table names, and potentially leading to full database compromise.
+
+
+- [apboss123/CVE-2025-56450](https://github.com/apboss123/CVE-2025-56450)
+
+### CVE-2025-56499 (2025-11-18)
+
+Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.
+
+
+- [Cherrling/CVE-2025-56499](https://github.com/Cherrling/CVE-2025-56499)
+
+### CVE-2025-56503 (2025-11-10)
+
+An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the uninstall file requires administrator permissions, i.e., there is no privilege escalation.
+
+
+- [secxplorers/CVE-2025-56503](https://github.com/secxplorers/CVE-2025-56503)
+
+### CVE-2025-56513 (2025-09-30)
+
+NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed, resulting in full remote code execution. This constitutes a critical supply chain attack vector. NOTE: the Supplier reports that the existence of an http://update.nicehash.com URL is a fabrication, and that there is no other use of HTTP (rather than HTTPS).
+
+
+- [psycho-prince/CVE-2025-56513-NiceHash-Update-Chain-Compromise](https://github.com/psycho-prince/CVE-2025-56513-NiceHash-Update-Chain-Compromise)
+
+### CVE-2025-56514 (2025-10-01)
+
+Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users.
+
+
+- [Kov404/CVE-2025-56514](https://github.com/Kov404/CVE-2025-56514)
+
+### CVE-2025-56515 (2025-10-01)
+
+File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers (onmouseover) to be uploaded and stored. When rendered, these SVG files execute arbitrary JavaScript, enabling attackers to steal user sessions, cookies, and perform unauthorized actions in the context of users viewing affected profiles.
+
+
+- [Kov404/CVE-2025-56515](https://github.com/Kov404/CVE-2025-56515)
+
+### CVE-2025-56526 (2025-11-18)
+
+Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.
+
+
+- [HanTul/Kotaemon-CVE-2025-56526-56527-disclosure](https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure)
+
### CVE-2025-56534 (2026-04-29)
A cross-site scripting (XSS) vulnerability in the custom authenticator driver of opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
@@ -8652,6 +11888,64 @@
- [MarkArtamonov/OpenNebula-CVE-2025-56537](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56537)
+### CVE-2025-56605 (2026-02-26)
+
+A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute arbitrary JavaScript code in the victim's browser.
+
+
+- [Userr404/CVE-2025-56605](https://github.com/Userr404/CVE-2025-56605)
+
+### CVE-2025-56608 (2025-09-03)
+
+The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`. The `handleDigest()` function employs `MessageDigest.getInstance("MD5")` to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions. This makes the authentication mechanism vulnerable to replay, spoofing, or brute-force attacks, potentially leading to unauthorized access. The vulnerability corresponds to CWE-327 and aligns with OWASP M5: Insufficient Cryptography and MASVS MSTG-CRYPTO-4.
+
+
+- [anonaninda/Aninda-security-advisories](https://github.com/anonaninda/Aninda-security-advisories)
+
+### CVE-2025-56643 (2025-11-18)
+
+Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.
+
+
+- [0xBS0D27/CVE-2025-56643](https://github.com/0xBS0D27/CVE-2025-56643)
+
+### CVE-2025-56708
+- [xkaneiki/rtty_CVE-2025-56708-CVE-2025-56709](https://github.com/xkaneiki/rtty_CVE-2025-56708-CVE-2025-56709)
+
+### CVE-2025-56762 (2025-09-19)
+
+Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting (XSS) in error.php.
+
+
+- [Shaunak-Chatterjee/CVE-2025-56762](https://github.com/Shaunak-Chatterjee/CVE-2025-56762)
+
+### CVE-2025-56764 (2025-09-29)
+
+Trivision NC-227WF firmware 5.80 (build 20141010) login mechanism reveals whether a username exists or not by returning different error messages ("Unknown user" vs. "Wrong password"), allowing an attacker to enumerate valid usernames.
+
+
+- [Remenis/CVE-2025-56764](https://github.com/Remenis/CVE-2025-56764)
+
+### CVE-2025-56771
+- [RRespxwnss/CVE-2025-56771](https://github.com/RRespxwnss/CVE-2025-56771)
+
+### CVE-2025-56772
+- [RRespxwnss/CVE-2025-56772](https://github.com/RRespxwnss/CVE-2025-56772)
+
+### CVE-2025-56795 (2025-09-29)
+
+Mealie 3.0.1 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) in the recipe creation functionality. Unsanitized user input in the "note" and "text" fields of the "/api/recipes/{recipe_name}" endpoint is rendered in the frontend without proper escaping leading to persistent XSS.
+
+
+- [B1tBreaker/CVE-2025-56795](https://github.com/B1tBreaker/CVE-2025-56795)
+
+### CVE-2025-56803 (2025-09-03)
+
+Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process.exec without validation, leading to possible RCE. NOTE: this is disputed by the Supplier because the behavior only allows a local user to attack himself via a local plugin. The local build procedure, which is essential to the attack, is not executed for plugins shared to the Figma Community.
+
+
+- [yosasasutsut/CVE-2025-56803](https://github.com/yosasasutsut/CVE-2025-56803)
+
### CVE-2025-56807 (2025-09-29)
A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.
@@ -8659,9 +11953,73 @@
- [aqwainfosec/CVE-2025-56807](https://github.com/aqwainfosec/CVE-2025-56807)
+### CVE-2025-56815 (2025-09-24)
+
+Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name.
+
+
+- [xiaoxiaoranxxx/CVE-2025-56815](https://github.com/xiaoxiaoranxxx/CVE-2025-56815)
+
+### CVE-2025-56819 (2025-09-24)
+
+An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
+
+
+- [xyyzxc/CVE-2025-56819](https://github.com/xyyzxc/CVE-2025-56819)
+
+### CVE-2025-57055 (2025-09-17)
+
+WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An authenticated administrator can supply a malicious URL via the pluginThemeUrl POST parameter. The server fetches the provided URL using curl_exec() without sufficient validation, allowing the attacker to force internal or external HTTP requests.
+
+
+- [thawphone/CVE-2025-57055](https://github.com/thawphone/CVE-2025-57055)
+
+### CVE-2025-57174 (2025-09-15)
+
+An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication. This is a failed patch for CVE-2017-7318. This issue may affect other Etherhaul series devices with shared firmware.
+
+
+- [semaja22/CVE-2025-57174](https://github.com/semaja22/CVE-2025-57174)
+
+### CVE-2025-57176 (2025-09-15)
+
+On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption (metadata only) with file contents transmitted in cleartext. No authentication or path validation is performed.
+
+
+- [semaja22/CVE-2025-57176](https://github.com/semaja22/CVE-2025-57176)
+
+### CVE-2025-57199 (2025-12-03)
+
+AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input.
+
+
+- [xchg-rax-rax/AvTech-PoCs](https://github.com/xchg-rax-rax/AvTech-PoCs)
+
### CVE-2025-57298
- [minnggyuu/CVE-2025-57298](https://github.com/minnggyuu/CVE-2025-57298)
+### CVE-2025-57310 (2025-11-12)
+
+A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code.
+
+
+- [MMAKINGDOM/CVE-2025-57310](https://github.com/MMAKINGDOM/CVE-2025-57310)
+- [hossainshadat/CVE-2025-57310](https://github.com/hossainshadat/CVE-2025-57310)
+
+### CVE-2025-57389 (2025-10-01)
+
+A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0.
+
+
+- [amalcew/CVE-2025-57389](https://github.com/amalcew/CVE-2025-57389)
+
+### CVE-2025-57392 (2025-09-10)
+
+BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILE_ALL_ACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon launch by another user or elevated context.
+
+
+- [meisterlos/CVE-2025-57392](https://github.com/meisterlos/CVE-2025-57392)
+
### CVE-2025-57428 (2025-09-29)
Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands.
@@ -8669,6 +12027,41 @@
- [5ulfur/CVE-2025-57428](https://github.com/5ulfur/CVE-2025-57428)
+### CVE-2025-57460 (2025-12-29)
+
+File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.
+
+
+- [aljoharasubaie/CVE-2025-57460](https://github.com/aljoharasubaie/CVE-2025-57460)
+
+### CVE-2025-57462 (2025-12-29)
+
+Stored cross-site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML via a crafted PDF file.
+
+
+- [aljoharasubaie/CVE-2025-57462](https://github.com/aljoharasubaie/CVE-2025-57462)
+
+### CVE-2025-57483 (2025-09-29)
+
+A reflected cross-site scripting (XSS) vulnerability in tawk.to chatbox widget v4 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the vulnerable parameter.
+
+
+- [Jainil-89/CVE](https://github.com/Jainil-89/CVE)
+
+### CVE-2025-57489 (2025-12-01)
+
+Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.
+
+
+- [graypixel2121/CVE-2025-57489](https://github.com/graypixel2121/CVE-2025-57489)
+
+### CVE-2025-57515 (2025-10-06)
+
+A SQL injection vulnerability has been identified in Uniclare Student Portal v2. This flaw allows remote attackers to inject arbitrary SQL commands via vulnerable input fields, enabling the execution of time-delay functions to infer database responses.
+
+
+- [sanchitsahni/CVE-2025-57515](https://github.com/sanchitsahni/CVE-2025-57515)
+
### CVE-2025-57529 (2026-02-03)
YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access
@@ -8676,12 +12069,37 @@
- [songqb-xx/CVE-2025-57529](https://github.com/songqb-xx/CVE-2025-57529)
+### CVE-2025-57576 (2025-09-04)
+
+PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.
+
+
+- [p0et08/DWrwq](https://github.com/p0et08/DWrwq)
+
### CVE-2025-57819 (2025-08-28)
FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.
- [rxerium/CVE-2025-57819](https://github.com/rxerium/CVE-2025-57819)
+- [Sucuri-Labs/CVE-2025-57819-ioc-check](https://github.com/Sucuri-Labs/CVE-2025-57819-ioc-check)
+- [cybertechajju/cve-2025-57819](https://github.com/cybertechajju/cve-2025-57819)
+- [blueisbeautiful/CVE-2025-57819](https://github.com/blueisbeautiful/CVE-2025-57819)
+- [ImBIOS/lab-cve-2025-57819](https://github.com/ImBIOS/lab-cve-2025-57819)
+- [watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819](https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819)
+- [MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-57819](https://github.com/MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-57819)
+- [xV4nd3Rx/CVE-2025-57819_FreePBX-PoC](https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC)
+- [orange0Mint/CVE-2025-57819_FreePBX](https://github.com/orange0Mint/CVE-2025-57819_FreePBX)
+
+### CVE-2025-57833 (2025-09-03)
+
+An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().
+
+
+- [Mkway/CVE-2025-57833](https://github.com/Mkway/CVE-2025-57833)
+- [loic-houchi/Django-faille-CVE-2025-57833_test](https://github.com/loic-houchi/Django-faille-CVE-2025-57833_test)
+- [sw0rd1ight/CVE-2025-57833](https://github.com/sw0rd1ight/CVE-2025-57833)
+- [Gayang2902/CVE-2025-57833](https://github.com/Gayang2902/CVE-2025-57833)
### CVE-2025-58060 (2025-09-11)
@@ -8697,11 +12115,30 @@
- [dhmosfunk/CVE-2025-58098](https://github.com/dhmosfunk/CVE-2025-58098)
+### CVE-2025-58179 (2025-09-04)
+
+Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URLs it receives, allowing content from unauthorized third-party domains to be served. a A bug in impacted versions of the @astrojs/cloudflare adapter for deployment on Cloudflare’s infrastructure, allows an attacker to bypass the third-party domain restrictions and serve any content from the vulnerable origin. This issue is fixed in version 12.6.6.
+
+
+- [shitodcy/CVE-2025-58179-Check](https://github.com/shitodcy/CVE-2025-58179-Check)
+
+### CVE-2025-58180 (2025-09-09)
+
+OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename becomes included in a command defined in a system event handler and said event gets triggered. If no event handlers executing system commands with uploaded filenames as parameters have been configured, this vulnerability does not have an impact. The vulnerability is patched in version 1.11.3. As a workaround, OctoPrint administrators who have event handlers configured that include any kind of filename based placeholders should disable those by setting their `enabled` property to `False` or unchecking the "Enabled" checkbox in the GUI based Event Manager. Alternatively, OctoPrint administrators should set `feature.enforceReallyUniversalFilenames` to `true` in `config.yaml` and restart OctoPrint, then vet the existing uploads and make sure to delete any suspicious looking files. As always, OctoPrint administrators are advised to not expose OctoPrint on hostile networks like the public internet, and to vet who has access to their instance.
+
+
+- [prabhatverma47/CVE-2025-58180](https://github.com/prabhatverma47/CVE-2025-58180)
+
### CVE-2025-58360 (2025-11-25)
GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0.
+- [carlzhang123/Blackash-CVE-2025-58360](https://github.com/carlzhang123/Blackash-CVE-2025-58360)
+- [quyenheu/CVE-2025-58360](https://github.com/quyenheu/CVE-2025-58360)
+- [rxerium/CVE-2025-58360](https://github.com/rxerium/CVE-2025-58360)
+- [Joker-Wiggin/CVE-2025-58360-GeoServer-XXE](https://github.com/Joker-Wiggin/CVE-2025-58360-GeoServer-XXE)
+- [quyenheu/Bypass-CVE-2025-58360](https://github.com/quyenheu/Bypass-CVE-2025-58360)
- [thomas-osgood/cve-2025-58360](https://github.com/thomas-osgood/cve-2025-58360)
### CVE-2025-58434 (2025-09-12)
@@ -8726,6 +12163,16 @@
- [vincent-vbg/CVE-2025-58434-PoC](https://github.com/vincent-vbg/CVE-2025-58434-PoC)
- [SuriyaBoon/HackTheBox-Silentium](https://github.com/SuriyaBoon/HackTheBox-Silentium)
+### CVE-2025-58440
+- [ph-hitachi/CVE-2025-58440](https://github.com/ph-hitachi/CVE-2025-58440)
+
+### CVE-2025-58443 (2025-09-06)
+
+FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is expected to be released 9/15/2025. To address this vulnerability immediately, upgrade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned about immediate exposure. See the FOG Project documentation for step-by-step upgrade instructions: https://docs.fogproject.org/en/latest/install-fog-server#choosing-a-fog-version.
+
+
+- [casp3r0x0/CVE-2025-58443](https://github.com/casp3r0x0/CVE-2025-58443)
+
### CVE-2025-58726 (2025-10-14)
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
@@ -8733,6 +12180,13 @@
- [jonaslejon/ad-autopwn](https://github.com/jonaslejon/ad-autopwn)
+### CVE-2025-58780 (2025-09-05)
+
+index.em7 in ScienceLogic SL1 before 12.1.1 allows SQL Injection via a parameter in a request. NOTE: this is disputed by the Supplier because it "inaccurately describes the vulnerability."
+
+
+- [SexyShoelessGodofWar/CVE-2025-58780](https://github.com/SexyShoelessGodofWar/CVE-2025-58780)
+
### CVE-2025-59057 (2026-01-10)
React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. There is no impact if the application is being used in Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been patched in @remix-run/react version 2.17.1 and react-router version 7.9.0.
@@ -8780,11 +12234,53 @@
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
+- [Twodimensionalitylevelcrossing817/CVE-2025-59287](https://github.com/Twodimensionalitylevelcrossing817/CVE-2025-59287)
+- [M507/CVE-2025-59287-PoC](https://github.com/M507/CVE-2025-59287-PoC)
+- [Adel-kaka-dz/cve-2025-59287](https://github.com/Adel-kaka-dz/cve-2025-59287)
+- [gud425/gud425.github.io](https://github.com/gud425/gud425.github.io)
- [LuemmelSec/CVE-2025-59287---WSUS-SCCM-RCE](https://github.com/LuemmelSec/CVE-2025-59287---WSUS-SCCM-RCE)
- [salman5230/CVE-2025-59287](https://github.com/salman5230/CVE-2025-59287)
- [ross-ns/WSUS-CVE-2025-59287](https://github.com/ross-ns/WSUS-CVE-2025-59287)
- [swoon69/CVE-2025-59287-Exercise-Use](https://github.com/swoon69/CVE-2025-59287-Exercise-Use)
+### CVE-2025-59342 (2025-09-17)
+
+esm.sh is a nobuild content delivery network(CDN) for modern web development. In 136 and earlier, a path-traversal flaw in the handling of the X-Zone-Id HTTP header allows an attacker to cause the application to write files outside the intended storage location. The header value is used to build a filesystem path but is not properly canonicalized or restricted to the application’s storage base directory. As a result, supplying ../ sequences in X-Zone-Id causes files to be written to arbitrary directories. Version 136.1 contains a patch.
+
+
+- [byteReaper77/CVE-2025-59342](https://github.com/byteReaper77/CVE-2025-59342)
+
+### CVE-2025-59359 (2025-09-15)
+
+The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.
+
+
+- [mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover](https://github.com/mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover)
+
+### CVE-2025-59376 (2025-09-15)
+
+feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version; kubectl delete pod" command because the first word (i.e., "version") is not a write or delete operation.
+
+
+- [william31212/CVE-Requests-1896609](https://github.com/william31212/CVE-Requests-1896609)
+
+### CVE-2025-59390 (2025-11-26)
+
+Apache Druid’s Kerberos authenticator uses a weak fallback secret when the `druid.auth.authenticator.kerberos.cookieSignatureSecret` configuration is not explicitly set. In this case, the secret is generated using `ThreadLocalRandom`,\n which is not a crypto-graphically secure random number generator. This \nmay allow an attacker to predict or brute force the secret used to sign \nauthentication cookies, potentially enabling token forgery or \nauthentication bypass. Additionally, each process generates its own \nfallback secret, resulting in inconsistent secrets across nodes. This \ncauses authentication failures in distributed or multi-broker \ndeployments, effectively leading to a incorrectly configured clusters. Users are \nadvised to configure a strong `druid.auth.authenticator.kerberos.cookieSignatureSecret`\n\n\n\nThis issue affects Apache Druid: through 34.0.0.\n\nUsers are recommended to upgrade to version 35.0.0, which fixes the issue making it mandatory to set `druid.auth.authenticator.kerberos.cookieSignatureSecret` when using the Kerberos authenticator. Services will fail to come up if the secret is not set.
+
+
+- [Daeda1usUK/CVE-2025-59390-](https://github.com/Daeda1usUK/CVE-2025-59390-)
+
+### CVE-2025-59396
+- [cyberbyte000/CVE-2025-59396](https://github.com/cyberbyte000/CVE-2025-59396)
+
+### CVE-2025-59424 (2025-09-18)
+
+LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting (XSS) vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker can set a malicious JavaScript payload as their username. When an action performed by this user is recorded (e.g., generate or revoke an API token), the payload is stored in the database. The script is then executed in the browser of any user, particularly administrators, who views the /system/audit page. This vulnerability is fixed in 2.3.1.
+
+
+- [JOOJIII/CVE-2025-59424](https://github.com/JOOJIII/CVE-2025-59424)
+
### CVE-2025-59470 (2026-01-08)
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.
@@ -8792,6 +12288,13 @@
- [George0Papasotiriou/CVE-2025-59470-PostgreSQL-Command-Injection](https://github.com/George0Papasotiriou/CVE-2025-59470-PostgreSQL-Command-Injection)
+### CVE-2025-59501 (2025-10-31)
+
+Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
+
+
+- [garrettfoster13/CVE-2025-59501](https://github.com/garrettfoster13/CVE-2025-59501)
+
### CVE-2025-59528 (2025-09-22)
Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.
@@ -8805,6 +12308,13 @@
- [im-nymii/CVE-2025-59528](https://github.com/im-nymii/CVE-2025-59528)
- [corey-farley/CVE-2025-59528-Flowise-RCE](https://github.com/corey-farley/CVE-2025-59528-Flowise-RCE)
+### CVE-2025-59532 (2025-09-22)
+
+Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the user started their session. This logic bypassed the intended workspace boundary and enables arbitrary file writes and command execution where the Codex process has permissions - this did not impact the network-disabled sandbox restriction. This issue has been patched in Codex CLI 0.39.0 that canonicalizes and validates that the boundary used for sandbox policy is based on where the user started the session, and not the one generated by the model. Users running 0.38.0 or earlier should update immediately via their package manager or by reinstalling the latest Codex CLI to ensure sandbox boundaries are enforced. If using the Codex IDE extension, users should immediately update to 0.4.12 for a fix of the sandbox issue.
+
+
+- [baktistr/cve-2025-59532-poc](https://github.com/baktistr/cve-2025-59532-poc)
+
### CVE-2025-59536 (2025-10-03)
Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.
@@ -8816,6 +12326,21 @@
- [TreRB/ai-ide-config-guard](https://github.com/TreRB/ai-ide-config-guard)
- [Razi-Interactive/claude-project-scanner](https://github.com/Razi-Interactive/claude-project-scanner)
+### CVE-2025-59718 (2025-12-09)
+
+A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.
+
+
+- [exfil0/CVE-2025-59718-PoC](https://github.com/exfil0/CVE-2025-59718-PoC)
+- [moften/CVE-2025-59718-Fortinet-Poc](https://github.com/moften/CVE-2025-59718-Fortinet-Poc)
+
+### CVE-2025-59843 (2025-09-26)
+
+Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[username] returns user email addresses in its JSON response. The fix, intended for release in 2.3.1 but only available starting in version 2.3.2, removes email addresses from public API responses while keeping the endpoint publicly accessible. Users should upgrade to version 2.3.2 or later to eliminate exposure. There are no workarounds for this vulnerability.
+
+
+- [At0mXploit/CVE-2025-59843-CVE-2025-59932](https://github.com/At0mXploit/CVE-2025-59843-CVE-2025-59932)
+
### CVE-2025-59886 (2025-12-23)
Improper input validation at one of the endpoints of Eaton xComfort ECI's \n\nweb interface, could lead into an attacker with network access to the device executing privileged user commands. As cybersecurity\nstandards continue to evolve and to meet our requirements today, Eaton has decided to discontinue the\nproduct. Upon retirement or end of support, there will be no new security updates, non-security\nupdates, or paid assisted support options, or online technical content updates.
@@ -8830,6 +12355,14 @@
- [sid6224/CVE-2025-60012-POC](https://github.com/sid6224/CVE-2025-60012-POC)
+### CVE-2025-60013 (2025-10-15)
+
+When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may be executed, and the FIPS hardware security module (HSM) may fail to initialize. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
+
+
+- [demining/Scalar-Venom-Attack](https://github.com/demining/Scalar-Venom-Attack)
+- [Mwete404/Scalar-Venom-Attack](https://github.com/Mwete404/Scalar-Venom-Attack)
+
### CVE-2025-60021 (2026-01-16)
Remote command injection vulnerability in heap profiler builtin service in Apache bRPC ((all versions < 1.15.0)) on all platforms allows attacker to inject remote command.\n\n\n\nRoot Cause: The bRPC heap profiler built-in service (/pprof/heap) does not validate the user-provided extra_options parameter and executes it as a command-line argument. Attackers can execute remote commands using the extra_options parameter..\n\nAffected scenarios: Use the built-in bRPC heap profiler service to perform jemalloc memory profiling.\n\nHow to Fix: we provide two methods, you can choose one of them:\n\n1. Upgrade bRPC to version 1.15.0.\n2. Apply this patch ( https://github.com/apache/brpc/pull/3101 ) manually.
@@ -8858,6 +12391,13 @@
- [aakashtyal/Session-Persistence-After-Enabling-2FA-CVE-2025-60425](https://github.com/aakashtyal/Session-Persistence-After-Enabling-2FA-CVE-2025-60425)
+### CVE-2025-60458 (2025-12-29)
+
+UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free() on the same memory address, potentially causing a Denial of Service.
+
+
+- [0pepsi/CVE-2025-60458](https://github.com/0pepsi/CVE-2025-60458)
+
### CVE-2025-60503 (2025-11-03)
A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is reflected without proper escaping in the admin log panel page in the 'reference No.' field. This flaw allows an authenticated attacker to execute arbitrary JavaScript in the context of an administrator's browser session, which could lead to session hijacking or other malicious actions.
@@ -8865,6 +12405,13 @@
- [H4zaz/CVE-2025-60503](https://github.com/H4zaz/CVE-2025-60503)
+### CVE-2025-60574 (2025-11-07)
+
+A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system.
+
+
+- [jacopoaugelli/CVE-2025-60574](https://github.com/jacopoaugelli/CVE-2025-60574)
+
### CVE-2025-60654
- [DotAdrien/CVE-2025-60654](https://github.com/DotAdrien/CVE-2025-60654)
@@ -8881,6 +12428,21 @@
- [KONDORDEVSECURITYCORP/CVE-2025-60709](https://github.com/KONDORDEVSECURITYCORP/CVE-2025-60709)
+### CVE-2025-60710 (2025-11-11)
+
+Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
+
+
+- [Wh04m1001/CVE-2025-60710](https://github.com/Wh04m1001/CVE-2025-60710)
+- [redpack-kr/CVE-2025-60710](https://github.com/redpack-kr/CVE-2025-60710)
+
+### CVE-2025-60719 (2025-11-11)
+
+Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
+
+
+- [akamai/CVE-2025-60719-AFD.SYS](https://github.com/akamai/CVE-2025-60719-AFD.SYS)
+
### CVE-2025-60739 (2025-11-25)
Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 2025_07_21 allows a remote attacker to execute arbitrary code via the /bh_web_backend component
@@ -8919,6 +12481,20 @@
- [valeriocassoni/CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC](https://github.com/valeriocassoni/CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC)
+### CVE-2025-60854 (2025-12-02)
+
+A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd.
+
+
+- [K0n9-log/CVE-2025-60854](https://github.com/K0n9-log/CVE-2025-60854)
+
+### CVE-2025-61148 (2025-12-04)
+
+An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint.
+
+
+- [sharma19d/CVE-2025-61148](https://github.com/sharma19d/CVE-2025-61148)
+
### CVE-2025-61155 (2025-10-28)
The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context without proper authentication or access validation, allowing the attacker to terminate arbitrary processes, including critical system and security services, without requiring administrative privileges.
@@ -8933,6 +12509,20 @@
- [thawphone/CVE-2025-61183](https://github.com/thawphone/CVE-2025-61183)
+### CVE-2025-61228 (2025-12-01)
+
+An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism
+
+
+- [graypixel2121/CVE-2025-61228](https://github.com/graypixel2121/CVE-2025-61228)
+
+### CVE-2025-61229 (2025-12-01)
+
+An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
+
+
+- [graypixel2121/CVE-2025-61229](https://github.com/graypixel2121/CVE-2025-61229)
+
### CVE-2025-61246 (2026-01-08)
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.
@@ -8940,6 +12530,23 @@
- [hackergovind/CVE-2025-61246](https://github.com/hackergovind/CVE-2025-61246)
+### CVE-2025-61299
+- [GovindPalakkal/CVE-2025-61299_POC](https://github.com/GovindPalakkal/CVE-2025-61299_POC)
+
+### CVE-2025-61301 (2025-10-20)
+
+Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits or orjson recursion errors when the sample executes in the sandbox.
+
+
+- [eGkritsis/CVE-2025-61301](https://github.com/eGkritsis/CVE-2025-61301)
+
+### CVE-2025-61303 (2025-10-20)
+
+Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources. As a result, key malicious behavior, including PowerShell execution and reverse shell activity, may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandboxed analysis results.
+
+
+- [eGkritsis/CVE-2025-61303](https://github.com/eGkritsis/CVE-2025-61303)
+
### CVE-2025-61505 (2025-10-10)
e107 CMS thru 2.3.3 are vulnerable to insecure deserialization in the `install.php` script. The script processes user-controlled input in the `previous_steps` POST parameter using `unserialize(base64_decode())` without validation, allowing attackers to craft malicious serialized data. This could lead to remote code execution, arbitrary file operations, or denial of service, depending on available PHP object gadgets in the codebase.
@@ -8961,6 +12568,13 @@
- [gui-ying233/CVE-2025-61638](https://github.com/gui-ying233/CVE-2025-61638)
+### CVE-2025-61675 (2025-10-14)
+
+FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities affecting multiple parameters in the basestation, model, firmware, and custom extension configuration functionality areas. Authentication with a known username is required to exploit these vulnerabilities. Successful exploitation allows authenticated users to execute arbitrary SQL queries against the database, potentially enabling access to sensitive data or modification of database contents. This issue has been patched in version 16.0.92 for FreePBX 16 and version 17.0.6 for FreePBX 17.
+
+
+- [rxerium/FreePBX-Vulns-December-25](https://github.com/rxerium/FreePBX-Vulns-December-25)
+
### CVE-2025-61686 (2026-01-10)
React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to version 2.17.2, if createFileSessionStorage() is being used from @react-router/node (or @remix-run/node/@remix-run/deno in Remix v2) with an unsigned cookie, it is possible for an attacker to cause the session to try to read/write from a location outside the specified session file directory. The success of the attack would depend on the permissions of the web server process to access those files. Read files cannot be returned directly to the attacker. Session file reads would only succeed if the file matched the expected session file format. If the file matched the session file format, the data would be populated into the server side session but not directly returned to the attacker unless the application logic returned specific session information. This issue has been patched in @react-router/node version 7.9.4, @remix-run/deno version 2.17.2, and @remix-run/node version 2.17.2.
@@ -8970,12 +12584,28 @@
- [Kai-One001/React-Router-CVE-2025-61686-](https://github.com/Kai-One001/React-Router-CVE-2025-61686-)
- [boroeurnprach/CVE-2025-61686-PoC](https://github.com/boroeurnprach/CVE-2025-61686-PoC)
+### CVE-2025-61757 (2025-10-21)
+
+Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
+
+
+- [Jinxia62/Oracle-Identity-Manager-CVE-2025-61757](https://github.com/Jinxia62/Oracle-Identity-Manager-CVE-2025-61757)
+- [ngominhquocngu/Blackash-CVE-2025-61757](https://github.com/ngominhquocngu/Blackash-CVE-2025-61757)
+
+### CVE-2025-61765 (2025-10-06)
+
+python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use for internal communications. When Socket.IO servers are configured to use a message queue backend such as Redis for inter-server communication, messages sent between the servers are encoded using the `pickle` Python module. When a server receives one of these messages through the message queue, it assumes it is trusted and immediately deserializes it. The vulnerability stems from deserialization of messages using Python's `pickle.loads()` function. Having previously obtained access to the message queue, the attacker can send a python-socketio server a crafted pickle payload that executes arbitrary code during deserialization via Python's `__reduce__` method. This vulnerability only affects deployments with a compromised message queue. The attack can lead to the attacker executing random code in the context of, and with the privileges of a Socket.IO server process. Single-server systems that do not use a message queue, and multi-server systems with a secure message queue are not vulnerable. In addition to making sure standard security practices are followed in the deployment of the message queue, users of the python-socketio package can upgrade to version 5.14.0 or newer, which remove the `pickle` module and use the much safer JSON encoding for inter-server messaging.
+
+
+- [locus-x64/CVE-2025-61765_PoC](https://github.com/locus-x64/CVE-2025-61765_PoC)
+
### CVE-2025-61882 (2025-10-05)
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- [siddu7575/CVE-2025-61882-CVE-2025-61884](https://github.com/siddu7575/CVE-2025-61882-CVE-2025-61884)
+- [Zhert-lab/CVE-2025-61882-CVE-2025-61884](https://github.com/Zhert-lab/CVE-2025-61882-CVE-2025-61884)
- [George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE](https://github.com/George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE)
- [sid-203/Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study](https://github.com/sid-203/Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study)
- [NetVanguard-cmd/CVE-2025-61882](https://github.com/NetVanguard-cmd/CVE-2025-61882)
@@ -8985,13 +12615,25 @@
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via email. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
+- [captaincookie34/Vulnerability-Playground-CVE-2025-61922](https://github.com/captaincookie34/Vulnerability-Playground-CVE-2025-61922)
- [g0vguy/CVE-2025-61922-PoC](https://github.com/g0vguy/CVE-2025-61922-PoC)
+### CVE-2025-62168 (2025-10-17)
+
+Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.
+
+
+- [nehkark/CVE-2025-62168](https://github.com/nehkark/CVE-2025-62168)
+
### CVE-2025-62215 (2025-11-11)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
+- [dexterm300/CVE-2025-62215-exploit-poc](https://github.com/dexterm300/CVE-2025-62215-exploit-poc)
+- [mrk336/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation](https://github.com/mrk336/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation)
+- [abrewer251/CVE-2025-62215_Windows_Kernel_PE](https://github.com/abrewer251/CVE-2025-62215_Windows_Kernel_PE)
+- [theman001/CVE-2025-62215](https://github.com/theman001/CVE-2025-62215)
- [uky007/CVE-2025-62215_analysis](https://github.com/uky007/CVE-2025-62215_analysis)
- [gowonisgood/CVE-2025-62215-POC](https://github.com/gowonisgood/CVE-2025-62215-POC)
@@ -9023,6 +12665,20 @@
- [drkim-dev/CVE-2025-62429](https://github.com/drkim-dev/CVE-2025-62429)
+### CVE-2025-62454 (2025-12-09)
+
+Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
+
+
+- [96613686/CVE-2025-62454](https://github.com/96613686/CVE-2025-62454)
+
+### CVE-2025-62470 (2025-12-09)
+
+Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
+
+
+- [96613686/CVE-2025-62470](https://github.com/96613686/CVE-2025-62470)
+
### CVE-2025-62507 (2025-11-04)
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.
@@ -9038,6 +12694,21 @@
- [edera-dev/cve-tarmageddon](https://github.com/edera-dev/cve-tarmageddon)
- [AirineiAndrei/Tarmageddon-CVE-2025-62518-](https://github.com/AirineiAndrei/Tarmageddon-CVE-2025-62518-)
+### CVE-2025-62641 (2025-10-21)
+
+Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
+
+
+- [Al-Lord0x/CVE-2025-62641](https://github.com/Al-Lord0x/CVE-2025-62641)
+
+### CVE-2025-62726 (2025-10-30)
+
+n8n is an open source workflow automation platform. Prior to 1.113.0, a remote code execution vulnerability exists in the Git Node component available in both Cloud and Self-Hosted versions of n8n. When a malicious actor clones a remote repository containing a pre-commit hook, the subsequent use of the Commit operation in the Git Node can inadvertently trigger the hook’s execution. This allows attackers to execute arbitrary code within the n8n environment, potentially compromising the system and any connected credentials or workflows. This vulnerability is fixed in 1.113.0.
+
+
+- [baktistr/cve-2025-62726-poc](https://github.com/baktistr/cve-2025-62726-poc)
+- [Muzyli/cve-2025-62726-malicious-repo](https://github.com/Muzyli/cve-2025-62726-malicious-repo)
+
### CVE-2025-62878 (2026-02-25)
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.
@@ -9052,6 +12723,20 @@
- [lorenzocamilli/CVE-2025-62950-PoC](https://github.com/lorenzocamilli/CVE-2025-62950-PoC)
+### CVE-2025-63296 (2025-11-10)
+
+KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root.
+
+
+- [t4e-3/CVE-2025-63296](https://github.com/t4e-3/CVE-2025-63296)
+
+### CVE-2025-63307 (2025-11-06)
+
+alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization.
+
+
+- [Theethat-Thamwasin/CVE-2025-63307](https://github.com/Theethat-Thamwasin/CVE-2025-63307)
+
### CVE-2025-63314 (2026-01-12)
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.
@@ -9064,15 +12749,185 @@
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.
+- [hanianis/CVE-2025-63353](https://github.com/hanianis/CVE-2025-63353)
+- [0xA1M/CVE-2025-63353](https://github.com/0xA1M/CVE-2025-63353)
- [r0otk3r/CVE-2025-63353](https://github.com/r0otk3r/CVE-2025-63353)
- [Zvckster/CVE-2025-63353](https://github.com/Zvckster/CVE-2025-63353)
+### CVE-2025-63406 (2025-11-13)
+
+An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php
+
+
+- [Nxvh1337/CVE-2025-63406-PoC](https://github.com/Nxvh1337/CVE-2025-63406-PoC)
+- [richard-natan/PoC-CVE-2025-63406](https://github.com/richard-natan/PoC-CVE-2025-63406)
+
+### CVE-2025-63419 (2025-11-12)
+
+Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection.
+
+
+- [MMAKINGDOM/CVE-2025-63419](https://github.com/MMAKINGDOM/CVE-2025-63419)
+- [hossainshadat/CVE-2025-63419](https://github.com/hossainshadat/CVE-2025-63419)
+
+### CVE-2025-63420 (2025-11-07)
+
+CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / "Who Created Folder"), enabling persistent HTML execution in admin sessions.
+
+
+- [MMAKINGDOM/CVE-2025-63420](https://github.com/MMAKINGDOM/CVE-2025-63420)
+- [hossainshadat/CVE-2025-63420](https://github.com/hossainshadat/CVE-2025-63420)
+
+### CVE-2025-63441 (2025-11-03)
+
+Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.
+
+
+- [Kgan0509/CVE-2025-63441](https://github.com/Kgan0509/CVE-2025-63441)
+
+### CVE-2025-63498 (2025-11-24)
+
+alinto SOGo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter.
+
+
+- [xryptoh/CVE-2025-63498](https://github.com/xryptoh/CVE-2025-63498)
+
+### CVE-2025-63499 (2025-12-04)
+
+Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
+
+
+- [poblaguev-tot/CVE-2025-63499](https://github.com/poblaguev-tot/CVE-2025-63499)
+
### CVE-2025-63571
- [RRespxwnss/CVE-2025-63571](https://github.com/RRespxwnss/CVE-2025-63571)
+### CVE-2025-63572
+- [RRespxwnss/CVE-2025-63572](https://github.com/RRespxwnss/CVE-2025-63572)
+
+### CVE-2025-63585 (2025-11-05)
+
+OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.
+
+
+- [Kgan0509/CVE-2025-63585](https://github.com/Kgan0509/CVE-2025-63585)
+
### CVE-2025-63587
- [NRTLOX/CVE-2025-63587](https://github.com/NRTLOX/CVE-2025-63587)
+### CVE-2025-63588 (2025-11-06)
+
+An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attackers to inject and execute arbitrary JavaScript in a victim's browser via a crafted request (e.g., a maliciously crafted POST login). Successful exploitation may lead to theft of session cookies, credential disclosure, or other client-side impacts.
+
+
+- [cybercrewinc/CVE-2025-63588](https://github.com/cybercrewinc/CVE-2025-63588)
+
+### CVE-2025-63589 (2025-11-06)
+
+A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are not sanitized or encoded before being inserted into the generated HTML (navigation links, breadcrumbs, search form action, footer links). An attacker-controlled string placed in the URL path is reflected into multiple HTML elements, allowing execution of arbitrary JavaScript in victims' browsers visiting a crafted URL.
+
+
+- [cybercrewinc/CVE-2025-63589](https://github.com/cybercrewinc/CVE-2025-63589)
+
+### CVE-2025-63602 (2025-11-18)
+
+A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs (such as LSTAR) as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 (1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys) that lacks a properly secured DACL, allowing unprivileged users to interact with the driver and, as a result, the kernel. This can result in local privilege escalation, information disclosure, denial of service, and other unspecified impacts.
+
+
+- [D7EAD/CVE-2025-63602](https://github.com/D7EAD/CVE-2025-63602)
+
+### CVE-2025-63666 (2025-11-12)
+
+Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.
+
+
+- [Remenis/CVE-2025-63666](https://github.com/Remenis/CVE-2025-63666)
+
+### CVE-2025-63667 (2025-11-12)
+
+Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints without authentication.
+
+
+- [Remenis/CVE-2025-63667](https://github.com/Remenis/CVE-2025-63667)
+
+### CVE-2025-63700
+- [itsnishat08/CVE-2025-63700](https://github.com/itsnishat08/CVE-2025-63700)
+
+### CVE-2025-63708 (2025-11-17)
+
+Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary JavaScript in victims' browsers. The vulnerability occurs in the webfonts API handling mechanism where font family names are not properly sanitized. An attacker can intercept fetch requests to the webfonts endpoint and inject malicious JavaScript payloads through font family names, resulting in session cookie theft, account hijacking, and unauthorized actions performed on behalf of authenticated users. The vulnerability can be exploited by injecting a fetch hook that returns controlled font data containing malicious scripts.
+
+
+- [DylanDavis1/CVE-2025-63708](https://github.com/DylanDavis1/CVE-2025-63708)
+
+### CVE-2025-63729 (2025-11-25)
+
+An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder.
+
+
+- [Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-](https://github.com/Yashodhanvivek/CVE-2025-63729-Syrotech-SY-GPON-1110-)
+
+### CVE-2025-63735 (2025-11-25)
+
+A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.
+
+
+- [huthx/CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS](https://github.com/huthx/CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS)
+
+### CVE-2025-63820
+- [Xernary/CVE-2025-63820](https://github.com/Xernary/CVE-2025-63820)
+
+### CVE-2025-63821
+- [Xernary/CVE-2025-63821](https://github.com/Xernary/CVE-2025-63821)
+
+### CVE-2025-63830 (2025-11-14)
+
+CKFinder 1.4.3 is vulnerable to Cross Site Scripting (XSS) in the File Upload function. An attacker can upload a crafted SVG containing active content.
+
+
+- [Shubham03007/CVE-2025-63830](https://github.com/Shubham03007/CVE-2025-63830)
+
+### CVE-2025-63848 (2025-11-20)
+
+Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook.
+
+
+- [coderMohammed1/CVE-2025-63848](https://github.com/coderMohammed1/CVE-2025-63848)
+
+### CVE-2025-63888 (2025-11-20)
+
+The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
+
+
+- [AN5I/cve-2025-63888-exploit](https://github.com/AN5I/cve-2025-63888-exploit)
+
+### CVE-2025-63892 (2025-11-18)
+
+A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.
+
+
+- [minhajultaivin/security-advisories](https://github.com/minhajultaivin/security-advisories)
+
+### CVE-2025-63895 (2025-12-10)
+
+An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted Link Manager Protocol (LMP) packet.
+
+
+- [thorat-shubham/JXL_Infotainment_CVE-2025-63895](https://github.com/thorat-shubham/JXL_Infotainment_CVE-2025-63895)
+
+### CVE-2025-63914 (2025-11-24)
+
+An issue was discovered in Cinnamon kotaemon 0.11.0. The _may_extract_zip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploading a ZIP bomb could still cause the server to consume excessive resources during decompression. Moreover, if no further files are uploaded afterward, the extracted data could occupy disk space and potentially render the system unavailable. Anyone with permission to upload files can carry out this attack.
+
+
+- [WxDou/CVE-2025-63914](https://github.com/WxDou/CVE-2025-63914)
+
+### CVE-2025-63915
+- [zero-day348/CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS](https://github.com/zero-day348/CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS)
+
+### CVE-2025-63943
+- [RedOpsX/CVE-2025-63943](https://github.com/RedOpsX/CVE-2025-63943)
+
### CVE-2025-63945 (2026-02-23)
A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.
@@ -9087,6 +12942,13 @@
- [alexlee820/CVE-2025-63946-Tencent-PC-Manager-EoP](https://github.com/alexlee820/CVE-2025-63946-Tencent-PC-Manager-EoP)
+### CVE-2025-64027 (2025-11-20)
+
+Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface. An attacker can intercept and modify the POST /livewire/update request to inject arbitrary HTML or JavaScript into the progress_message. Because the server accepts the modified input without sanitization and reflects it back to the user, arbitrary JavaScript executes in the browser of any authenticated admin who views the import page. NOTE: this is disputed by the Supplier because the report only demonstrates that an authenticated user can choose to conduct a man-in-the-middle attack against himself.
+
+
+- [cybercrewinc/CVE-2025-64027](https://github.com/cybercrewinc/CVE-2025-64027)
+
### CVE-2025-64087 (2026-01-20)
A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attackers to execute arbitrary code via injecting crafted template expressions.
@@ -9111,6 +12973,13 @@
- [cyberdudebivash/CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner](https://github.com/cyberdudebivash/CYBERDUDEBIVASH-FortiSIEM-CVE-2025-64155-Scanner)
- [Mefhika120/Ashwesker-CVE-2025-64155](https://github.com/Mefhika120/Ashwesker-CVE-2025-64155)
+### CVE-2025-64328 (2025-11-07)
+
+FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to obtain remote access to the system as an asterisk user. This issue is fixed in version 17.0.3.
+
+
+- [mcorybillington/CVE-2025-64328_FreePBX-framework-Command-Injection](https://github.com/mcorybillington/CVE-2025-64328_FreePBX-framework-Command-Injection)
+
### CVE-2025-64424 (2026-01-05)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low privileged user (member) to execute system commands as root on the Coolify instance. As of time of publication, it is unclear if a patch is available.
@@ -9123,18 +12992,47 @@
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
+- [fevar54/CVE-2025-64446-PoC---FortiWeb-Path-Traversal](https://github.com/fevar54/CVE-2025-64446-PoC---FortiWeb-Path-Traversal)
+- [sxyrxyy/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC](https://github.com/sxyrxyy/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC)
+- [soltanali0/CVE-2025-64446-Exploit](https://github.com/soltanali0/CVE-2025-64446-Exploit)
+- [sensepost/CVE-2025-64446](https://github.com/sensepost/CVE-2025-64446)
+- [D3crypT0r/CVE-2025-64446](https://github.com/D3crypT0r/CVE-2025-64446)
+- [verylazytech/CVE-2025-64446](https://github.com/verylazytech/CVE-2025-64446)
+- [lincemorado97/CVE-2025-64446_CVE-2025-58034](https://github.com/lincemorado97/CVE-2025-64446_CVE-2025-58034)
+- [Death112233/CVE-2025-64446-](https://github.com/Death112233/CVE-2025-64446-)
+- [AN5I/cve-2025-64446-fortiweb-exploit](https://github.com/AN5I/cve-2025-64446-fortiweb-exploit)
+- [lequoca/fortinet-fortiweb-cve-2025-64446-58034](https://github.com/lequoca/fortinet-fortiweb-cve-2025-64446-58034)
- [eagle-nett/FORTIWEB_CVE-2025-64446-58034](https://github.com/eagle-nett/FORTIWEB_CVE-2025-64446-58034)
- [0xBlackash/CVE-2025-64446](https://github.com/0xBlackash/CVE-2025-64446)
+### CVE-2025-64458 (2025-11-05)
+
+An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.\nNFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `django.shortcuts.redirect` were subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Seokchan Yoon for reporting this issue.
+
+
+- [ch4n3-yoon/CVE-2025-64458-Demo](https://github.com/ch4n3-yoon/CVE-2025-64458-Demo)
+
### CVE-2025-64459 (2025-11-05)
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.\nThe methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the `_connector` argument.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank cyberstan for reporting this issue.
+- [rockmelodies/django_sqli_target_CVE-2025-64459](https://github.com/rockmelodies/django_sqli_target_CVE-2025-64459)
+- [nunpa/CVE-2025-64459](https://github.com/nunpa/CVE-2025-64459)
+- [omarkurt/django-connector-CVE-2025-64459-testbed](https://github.com/omarkurt/django-connector-CVE-2025-64459-testbed)
+- [0xCyberstan/CVE-2025-64459-Poc](https://github.com/0xCyberstan/CVE-2025-64459-Poc)
+- [Z3YR0xX/CVE-2025-64459](https://github.com/Z3YR0xX/CVE-2025-64459)
- [alxsourin/Helpdesk-Telecom-CVE-2025-64459](https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459)
- [purehate/CVE-2025-64459-hunter](https://github.com/purehate/CVE-2025-64459-hunter)
- [joshualent/django-cve-2025-64459](https://github.com/joshualent/django-cve-2025-64459)
+### CVE-2025-64495 (2025-11-08)
+
+Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to the DOM sink .innerHtml without sanitisation. Any user with permissions to create prompts can abuse this to plant a payload that could be triggered by other users if they run the corresponding / command to insert the prompt. This issue is fixed in version 0.6.35.
+
+
+- [AlphabugX/CVE-2025-64495-POC](https://github.com/AlphabugX/CVE-2025-64495-POC)
+
### CVE-2025-64512 (2025-11-10)
Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The `CMapDB._load_data()` function in pdfminer.six uses `pickle.loads()` to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in the `cmap/` directory, but a malicious PDF can specify an alternative directory and filename as long as the filename ends in `.pickle.gz`. A malicious, zipped pickle file can then contain code which will automatically execute when the PDF is processed. Version 20251107 fixes the issue.
@@ -9142,6 +13040,13 @@
- [luigigubello/CVE-2025-64512-Polyglot-PoC](https://github.com/luigigubello/CVE-2025-64512-Polyglot-PoC)
+### CVE-2025-64513 (2025-11-10)
+
+Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior.
+
+
+- [shinyseam/CVE-2025-64513](https://github.com/shinyseam/CVE-2025-64513)
+
### CVE-2025-64516 (2026-01-15)
GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item (ticket, asset, ...). If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed in 10.0.21 and 11.0.3.
@@ -9156,6 +13061,21 @@
- [Medaz-Sploit/CVE-2025-64714-privatebin-2.0.2-PoC](https://github.com/Medaz-Sploit/CVE-2025-64714-privatebin-2.0.2-PoC)
+### CVE-2025-64720 (2025-11-24)
+
+LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The palette compositing code in png_init_read_transformations incorrectly applies background compositing during premultiplication, violating the invariant component ≤ alpha × 257 required by the simplified PNG API. This issue has been patched in version 1.6.51.
+
+
+- [dantsco/CVE-2025-64720-PoC](https://github.com/dantsco/CVE-2025-64720-PoC)
+
+### CVE-2025-65018 (2025-11-24)
+
+LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.
+
+
+- [Neo-Neo6/CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-](https://github.com/Neo-Neo6/CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-)
+- [bohemian-miser/CVE-2025-65018_Exploit_Challenge](https://github.com/bohemian-miser/CVE-2025-65018_Exploit_Challenge)
+
### CVE-2025-65094 (2025-11-19)
WBCE CMS is a content management system. Prior to version 1.6.4, a low-privileged user in WBCE CMS can escalate their privileges to the Administrators group by manipulating the groups[] parameter in the /admin/users/save.php request. The UI restricts users to assigning only their existing group, but server-side validation is missing, allowing attackers to overwrite their group membership and obtain full administrative access. This results in a complete compromise of the CMS. This issue has been patched in version 1.6.4.
@@ -9177,20 +13097,144 @@
- [cwjchoi01/CVE-2025-65264](https://github.com/cwjchoi01/CVE-2025-65264)
+### CVE-2025-65270 (2025-12-22)
+
+Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser.
+
+
+- [xh4vm/CVE-2025-65270](https://github.com/xh4vm/CVE-2025-65270)
+
+### CVE-2025-65271 (2025-12-08)
+
+Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.
+
+
+- [1337Skid/CVE-2025-65271](https://github.com/1337Skid/CVE-2025-65271)
+
+### CVE-2025-65300 (2025-12-09)
+
+A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 (2025-10-28) in the Account Settings module, where unsanitized user input in Address fields (City, State, Country/Region) is rendered back to the page. Attackers can inject arbitrary JavaScript code, which executes when the affected profile page is viewed. This can lead to session hijacking, cookie theft, or arbitrary script execution in the victim's browser.
+
+
+- [garux-sec/CVE-2025-65300](https://github.com/garux-sec/CVE-2025-65300)
+
+### CVE-2025-65318 (2025-12-16)
+
+When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.
+
+
+- [bbaboha/CVE-2025-65318-and-CVE-2025-65319](https://github.com/bbaboha/CVE-2025-65318-and-CVE-2025-65319)
+
### CVE-2025-65320 (2025-12-03)
Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt.
+- [Smarttfoxx/CVE-2025-65320](https://github.com/Smarttfoxx/CVE-2025-65320)
- [yonathanpy/CVE-2025-65320](https://github.com/yonathanpy/CVE-2025-65320)
+### CVE-2025-65321
+- [Smarttfoxx/CVE-2025-65321](https://github.com/Smarttfoxx/CVE-2025-65321)
+
+### CVE-2025-65345 (2025-12-03)
+
+alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
+
+
+- [tlekrean/CVE-2025-65345](https://github.com/tlekrean/CVE-2025-65345)
+
+### CVE-2025-65346 (2025-12-04)
+
+alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
+
+
+- [Theethat-Thamwasin/CVE-2025-65346](https://github.com/Theethat-Thamwasin/CVE-2025-65346)
+
### CVE-2025-65354 (2025-12-23)
Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.
+- [amaansiddd787/CVE-2025-65354](https://github.com/amaansiddd787/CVE-2025-65354)
- [EarthAngel666/CVE-2025-65354](https://github.com/EarthAngel666/CVE-2025-65354)
+### CVE-2025-65427 (2025-12-16)
+
+An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations.
+
+
+- [kirubel-cve/CVE-2025-65427](https://github.com/kirubel-cve/CVE-2025-65427)
+
+### CVE-2025-65442 (2025-12-29)
+
+DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information (e.g., user session cookies) via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage. The vulnerability arises from insufficient validation and encoding of user-controllable data in the book comment module: unfiltered user input is stored in the backend database (book_comment table, commentContent field) and returned via API, then rendered directly into the page DOM via Vue 3's v-html directive without sanitization. Even if modern browsers' built-in XSS filters block pop-up alerts, attackers can use concealed payloads to bypass interception and achieve actual harm.
+
+
+- [zero-day348/CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-](https://github.com/zero-day348/CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-)
+
+### CVE-2025-65482 (2026-01-20)
+
+An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file.
+
+
+- [AT190510-Cuong/CVE-2025-65482-XXE-](https://github.com/AT190510-Cuong/CVE-2025-65482-XXE-)
+
+### CVE-2025-65518 (2026-01-08)
+
+Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability exists in the get_password.php endpoint, where a crafted request containing a malicious payload can cause the affected web interface to continuously reload, rendering the service unavailable to legitimate users. An attacker can exploit this issue remotely without authentication, resulting in a persistent availability impact on the affected Plesk Obsidian instance.
+
+
+- [Jainil-89/CVE-2025-65518](https://github.com/Jainil-89/CVE-2025-65518)
+
+### CVE-2025-65637 (2025-12-04)
+
+A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.
+
+
+- [mjuanxd/logrus-dos-poc](https://github.com/mjuanxd/logrus-dos-poc)
+
+### CVE-2025-65669 (2025-11-26)
+
+An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.
+
+
+- [Rivek619/CVE-2025-65669](https://github.com/Rivek619/CVE-2025-65669)
+
+### CVE-2025-65670 (2025-11-26)
+
+An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access.
+
+
+- [Rivek619/CVE-2025-65670](https://github.com/Rivek619/CVE-2025-65670)
+
+### CVE-2025-65672 (2025-11-26)
+
+Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.
+
+
+- [Rivek619/CVE-2025-65672](https://github.com/Rivek619/CVE-2025-65672)
+
+### CVE-2025-65675 (2025-11-26)
+
+Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures.
+
+
+- [Rivek619/CVE-2025-65675](https://github.com/Rivek619/CVE-2025-65675)
+
+### CVE-2025-65676 (2025-11-26)
+
+Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.
+
+
+- [Rivek619/CVE-2025-65676](https://github.com/Rivek619/CVE-2025-65676)
+
+### CVE-2025-65681 (2025-11-26)
+
+An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.
+
+
+- [Rivek619/CVE-2025-65681](https://github.com/Rivek619/CVE-2025-65681)
+
### CVE-2025-65717 (2026-02-16)
An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page.
@@ -9226,6 +13270,20 @@
- [diegovargasj/CVE-2025-65753](https://github.com/diegovargasj/CVE-2025-65753)
+### CVE-2025-65754 (2025-12-10)
+
+Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.
+
+
+- [Bnyt7/CVE-2025-65754](https://github.com/Bnyt7/CVE-2025-65754)
+
+### CVE-2025-65790 (2025-12-22)
+
+A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline <script> element, the browser executes the attacker-controlled JavaScript.
+
+
+- [hunterxxx/FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790](https://github.com/hunterxxx/FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790)
+
### CVE-2025-65791 (2026-02-18)
ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. NOTE: this is disputed by the Supplier because there is no unsanitized user input to web/views/image.php.
@@ -9233,13 +13291,66 @@
- [rishavand1/CVE-2025-65791](https://github.com/rishavand1/CVE-2025-65791)
+### CVE-2025-65817 (2025-12-22)
+
+LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in start_app.sh.
+
+
+- [Istaarkk/CVE-2025-65817](https://github.com/Istaarkk/CVE-2025-65817)
+
+### CVE-2025-65855 (2025-12-17)
+
+The OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware v18_178_221102_ASCII_PRO_1R5_50) uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mode (8-second button press), create a malicious WiFi AP using the known credentials, and serve malicious firmware via unauthenticated HTTP to achieve arbitrary code execution on this safety-critical emergency signaling device.
+
+
+- [LuisMirandaAcebedo/CVE-2025-65855](https://github.com/LuisMirandaAcebedo/CVE-2025-65855)
+
### CVE-2025-65856 (2025-12-22)
Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.
+- [LuisMirandaAcebedo/CVE-2025-65856](https://github.com/LuisMirandaAcebedo/CVE-2025-65856)
- [KostasEreksonas/XM_ONVIF_auth_bypass](https://github.com/KostasEreksonas/XM_ONVIF_auth_bypass)
+### CVE-2025-65857 (2025-12-22)
+
+An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.
+
+
+- [LuisMirandaAcebedo/CVE-2025-65857](https://github.com/LuisMirandaAcebedo/CVE-2025-65857)
+
+### CVE-2025-65858 (2025-12-02)
+
+A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed.
+
+
+- [KhanhDuy155/calibre-web-CVE-2025-65858](https://github.com/KhanhDuy155/calibre-web-CVE-2025-65858)
+
+### CVE-2025-65862
+- [rimbadirgantara/opac-fast-automation](https://github.com/rimbadirgantara/opac-fast-automation)
+
+### CVE-2025-65881 (2025-12-02)
+
+Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /classes/Login.php.
+
+
+- [MMAKINGDOM/CVE-2025-65881](https://github.com/MMAKINGDOM/CVE-2025-65881)
+
+### CVE-2025-65899 (2025-12-04)
+
+Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users (user_not_found) versus valid users with incorrect passwords (invalid_password). This observable response discrepancy allows unauthenticated attackers to enumerate valid usernames on the system.
+
+
+- [Noxurge/CVE-2025-65899](https://github.com/Noxurge/CVE-2025-65899)
+
+### CVE-2025-65900 (2025-12-04)
+
+Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all platform users.
+
+
+- [Noxurge/CVE-2025-65900](https://github.com/Noxurge/CVE-2025-65900)
+
### CVE-2025-65925 (2025-12-30)
An issue was discovered in Zeroheight (SaaS) prior to 2025-06-13. A legacy user creation API pathway allowed accounts to be created without completing the intended email verification step. While unverified accounts could not access product functionality, the behavior bypassed intended verification controls and allowed unintended account creation. This could have enabled spam/fake account creation or resource usage impact. No data exposure or unauthorized access to existing accounts was reported.
@@ -9247,6 +13358,13 @@
- [Sneden/zeroheight-account-verification-bypass-CVE-2025-65925](https://github.com/Sneden/zeroheight-account-verification-bypass-CVE-2025-65925)
+### CVE-2025-65945 (2025-12-04)
+
+auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature verification vulnerability when using the HS256 algorithm under specific conditions. Applications are affected when they use the jws.createVerify() function for HMAC algorithms and use user-provided data from the JSON Web Signature protected header or payload in HMAC secret lookup routines, which can allow attackers to bypass signature verification. This issue has been patched in versions 3.2.3 and 4.0.1.
+
+
+- [jedisct1/CVE-2025-65945-poc](https://github.com/jedisct1/CVE-2025-65945-poc)
+
### CVE-2025-65950 (2025-12-10)
WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter sent from the user edit form. This issue is fixed in version 1.6.5.
@@ -9259,8 +13377,20 @@
n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can point to a malicious Git hook that executes arbitrary commands on the n8n host during subsequent Git operations. Exploitation requires the ability to create or modify an n8n workflow using the Git node. This issue is fixed in version 1.119.2. Workarounds include excluding the Git Node (Docs) and avoiding cloning or interacting with untrusted repositories using the Git Node.
+- [Anthony558238/CVE-2025-65964-poc](https://github.com/Anthony558238/CVE-2025-65964-poc)
+- [Syzygy-K/CVE-2025-65964-Exploit](https://github.com/Syzygy-K/CVE-2025-65964-Exploit)
+- [Geekby/n8n-CVE-2025-65964](https://github.com/Geekby/n8n-CVE-2025-65964)
+- [Saboor-Hakimi-23/CVE-2025-65964](https://github.com/Saboor-Hakimi-23/CVE-2025-65964)
+- [Pinus97/CVE-2025-65964-POC](https://github.com/Pinus97/CVE-2025-65964-POC)
- [nn0nkey/repo](https://github.com/nn0nkey/repo)
+### CVE-2025-66022 (2025-11-26)
+
+FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1.
+
+
+- [wasfyelbaz/CVE-2025-66022](https://github.com/wasfyelbaz/CVE-2025-66022)
+
### CVE-2025-66024 (2026-03-04)
The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions prior to 9.15.7 are vulnerable to Stored Cross-Site Scripting (XSS) via the Blog Post Title. The vulnerability arises because the post title is injected directly into the HTML <title> tag without proper escaping. An attacker with permissions to create or edit blog posts can inject malicious JavaScript into the title field. This script will execute in the browser of any user (including administrators) who views the blog post. This leads to potential session hijacking or privilege escalation. The vulnerability has been patched in the blog application version 9.15.7 by adding missing escaping. No known workarounds are available.
@@ -9280,6 +13410,14 @@
- [4nuxd/CVE-2025-66034](https://github.com/4nuxd/CVE-2025-66034)
- [jwsly12/CVE-2025-66034-htb-ctf](https://github.com/jwsly12/CVE-2025-66034-htb-ctf)
+### CVE-2025-66039 (2025-12-09)
+
+FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.
+
+
+- [BimBoxH4/CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX](https://github.com/BimBoxH4/CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX)
+- [cyberleelawat/FreePBX-Multiple-CVEs-2025](https://github.com/cyberleelawat/FreePBX-Multiple-CVEs-2025)
+
### CVE-2025-66177 (2026-01-13)
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
@@ -9294,6 +13432,20 @@
- [lukasz-rybak/CVE-2025-66204](https://github.com/lukasz-rybak/CVE-2025-66204)
+### CVE-2025-66209 (2025-12-23)
+
+Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Database Backup functionality allows users with application/service management permissions to execute arbitrary commands as root on managed servers. Database names used in backup operations are passed directly to shell commands without sanitization, enabling full remote code execution. Version 4.0.0-beta.451 fixes the issue.
+
+
+- [0xrakan/coolify-cve-2025-66209-66213](https://github.com/0xrakan/coolify-cve-2025-66209-66213)
+
+### CVE-2025-66224 (2025-11-29)
+
+OrangeHRM is a comprehensive human resource management (HRM) system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these values are not sanitized or constrained before being incorporated into the command execution path, certain sendmail behaviors can be unintentionally invoked during email processing. This makes it possible for the application to write files on the server as part of the mail-handling routine, and in deployments where those files end up in web-accessible locations, the behavior can be leveraged to achieve execution of attacker-controlled content. The issue stems entirely from constructing OS-level command strings using unsanitized input within the mail-sending logic. This issue has been patched in version 5.8.
+
+
+- [richard-natan/PoC-CVE-2025-66224](https://github.com/richard-natan/PoC-CVE-2025-66224)
+
### CVE-2025-66249 (2026-03-13)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.\n\nThis issue affects Apache Livy: from 0.3.0 before 0.9.0.\n\nThe vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value "livy.file.local-dir-whitelist" is set to a non-default value, the directory checking can be bypassed.\n\nUsers are recommended to upgrade to version 0.9.0, which fixes the issue.
@@ -9316,13 +13468,59 @@
- [lem0naids/CVE-2025-66417-POC](https://github.com/lem0naids/CVE-2025-66417-POC)
+### CVE-2025-66470 (2025-12-09)
+
+NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are subject to a XSS vulnerability through the ui.interactive_image component of NiceGUI. The component renders SVG content using Vue's v-html directive without any sanitization. This allows attackers to inject malicious HTML or JavaScript via the SVG <foreignObject> tag whenever the image component is rendered or updated. This is particularly dangerous for dashboards or multi-user applications displaying user-generated content or annotations. This issue is fixed in version 3.4.0.
+
+
+- [Jmehta10/CVE-2025-66470](https://github.com/Jmehta10/CVE-2025-66470)
+
### CVE-2025-66478
- [Saied25/fix-react2shell-next](https://github.com/Saied25/fix-react2shell-next)
+- [abtonc/next-cve-2025-66478](https://github.com/abtonc/next-cve-2025-66478)
+- [wangxso/CVE-2025-66478-POC](https://github.com/wangxso/CVE-2025-66478-POC)
+- [Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478)
+- [mattcbarrett/check-cve-2025-66478](https://github.com/mattcbarrett/check-cve-2025-66478)
+- [hackersatyamrastogi/react2shell-ultimate](https://github.com/hackersatyamrastogi/react2shell-ultimate)
+- [vercel-labs/fix-react2shell-next](https://github.com/vercel-labs/fix-react2shell-next)
+- [namest504/CVE-2025-66478-Exploit-Poc](https://github.com/namest504/CVE-2025-66478-Exploit-Poc)
+- [aiexz/CVE-2025-66478-kinda-waf](https://github.com/aiexz/CVE-2025-66478-kinda-waf)
+- [Rhyru9/CVE-2025-66478](https://github.com/Rhyru9/CVE-2025-66478)
+- [Jibaru/CVE-2025-66478-github-patcher](https://github.com/Jibaru/CVE-2025-66478-github-patcher)
+- [ExpTechTW/CVE-2025-66478](https://github.com/ExpTechTW/CVE-2025-66478)
+- [abhirajranjan/cve-2025-66478](https://github.com/abhirajranjan/cve-2025-66478)
- [Letalandroid/cve-2025-66478_rce_vulnerable](https://github.com/Letalandroid/cve-2025-66478_rce_vulnerable)
+- [strainxx/react2shell-honeypot](https://github.com/strainxx/react2shell-honeypot)
+- [changgun-lee/Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/changgun-lee/Next.js-RSC-RCE-Scanner-CVE-2025-66478)
+- [Code42Cate/nexts-cve-2025-66478-exploit](https://github.com/Code42Cate/nexts-cve-2025-66478-exploit)
+- [viperh/poc-cve-next](https://github.com/viperh/poc-cve-next)
+- [abdozkaya/rsc-security-auditor](https://github.com/abdozkaya/rsc-security-auditor)
+- [DavionGowie/-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.](https://github.com/DavionGowie/-vercel-prod.yml-application-is-vulnerable-to-CVE-2025-66478.)
+- [DavionGowie/-vercel-application-is-vulnerable-to-CVE-2025-66478.](https://github.com/DavionGowie/-vercel-application-is-vulnerable-to-CVE-2025-66478.)
+- [zhixiangyao/CVE-2025-66478-Exploit-PoC](https://github.com/zhixiangyao/CVE-2025-66478-Exploit-PoC)
+- [thedarckpassenger/Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/thedarckpassenger/Next.js-RSC-RCE-Scanner-CVE-2025-66478)
- [khadafigans/React2Shell](https://github.com/khadafigans/React2Shell)
+- [Z3ROROOT3R/CVE-2025-66478](https://github.com/Z3ROROOT3R/CVE-2025-66478)
- [imad457/NextJS-RCE-Root-Takeover](https://github.com/imad457/NextJS-RCE-Root-Takeover)
- [nilfredb/CVE-2025-66478-Research-Proof-of-Concept](https://github.com/nilfredb/CVE-2025-66478-Research-Proof-of-Concept)
+### CVE-2025-66516 (2025-12-04)
+
+Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. \n\nThis CVE covers the same vulnerability as in CVE-2025-54988. However, this CVE expands the scope of affected packages in two ways. \n\nFirst, while the entrypoint for the vulnerability was the tika-parser-pdf-module as reported in CVE-2025-54988, the vulnerability and its fix were in tika-core. Users who upgraded the tika-parser-pdf-module but did not upgrade tika-core to >= 3.2.2 would still be vulnerable. \n\nSecond, the original report failed to mention that in the 1.x Tika releases, the PDFParser was in the "org.apache.tika:tika-parsers" module.
+
+
+- [yunatamos/Blackash-CVE-2025-66516](https://github.com/yunatamos/Blackash-CVE-2025-66516)
+- [chasingimpact/CVE-2025-66516-Writeup-POC](https://github.com/chasingimpact/CVE-2025-66516-Writeup-POC)
+- [sid6224/CVE-2025-66516-POC](https://github.com/sid6224/CVE-2025-66516-POC)
+- [intSheep/Tika-CVE-2025-66516-Lab](https://github.com/intSheep/Tika-CVE-2025-66516-Lab)
+
+### CVE-2025-66628 (2025-12-10)
+
+ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its ReadTIMImage function (coders/tim.c). The code reads width and height (16-bit values) from the file header and calculates image_size = 2 * width * height without checking for overflow. On 32-bit systems (or where size_t is 32-bit), this calculation can overflow if width and height are large (e.g., 65535), wrapping around to a small value. This results in a small heap allocation via AcquireQuantumMemory and later operations relying on the dimensions can trigger an out of bounds read. This issue is fixed in version 7.1.2-10.
+
+
+- [Sumitshah00/CVE-2025-66628](https://github.com/Sumitshah00/CVE-2025-66628)
+
### CVE-2025-66676 (2026-02-13)
An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request.
@@ -9388,6 +13586,13 @@
### CVE-2025-66850
- [joelatplay/CVE-2025-66850](https://github.com/joelatplay/CVE-2025-66850)
+### CVE-2025-66947 (2025-12-26)
+
+SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP() to infer database contents. Successful exploitation may lead to full database compromise, especially within an administrative module.
+
+
+- [kabir0104k/CVE-2025-66947](https://github.com/kabir0104k/CVE-2025-66947)
+
### CVE-2025-66954 (2026-04-20)
A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint.
@@ -9395,6 +13600,13 @@
- [DBmonster19/CVE-2025-66954](https://github.com/DBmonster19/CVE-2025-66954)
+### CVE-2025-66955 (2026-03-12)
+
+Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
+
+
+- [TheWoodenBench/CVE-2025-66955](https://github.com/TheWoodenBench/CVE-2025-66955)
+
### CVE-2025-66956 (2026-03-11)
Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL.
@@ -9472,6 +13684,9 @@
- [Smarttfoxx/CVE-2025-67263](https://github.com/Smarttfoxx/CVE-2025-67263)
+### CVE-2025-67294
+- [0xthem7/CVE-2025-67294](https://github.com/0xthem7/CVE-2025-67294)
+
### CVE-2025-67303 (2026-01-05)
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface
@@ -9503,6 +13718,7 @@
- [rupeshsurve04/CVE-2025-67399](https://github.com/rupeshsurve04/CVE-2025-67399)
### CVE-2025-67435
+- [RajChowdhury240/CVE-2025-67435](https://github.com/RajChowdhury240/CVE-2025-67435)
- [RajChowdhury240/CVE-2025-67435-PoC](https://github.com/RajChowdhury240/CVE-2025-67435-PoC)
### CVE-2025-67445 (2026-02-24)
@@ -9512,6 +13728,13 @@
- [DaRkSpOoOk/CVE-2025-67445](https://github.com/DaRkSpOoOk/CVE-2025-67445)
+### CVE-2025-67494 (2025-12-09)
+
+ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.
+
+
+- [Chocapikk/CVE-2025-67494](https://github.com/Chocapikk/CVE-2025-67494)
+
### CVE-2025-67586 (2025-12-09)
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through <= 5.2.0.
@@ -9540,6 +13763,13 @@
- [JYlab/CVE-2025-67733](https://github.com/JYlab/CVE-2025-67733)
+### CVE-2025-67780 (2025-12-11)
+
+SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation, and elevation data via gRPC can make it easier to infer the geographical location of the dish.
+
+
+- [SteveAkawLabs/MARMALADE-2-CVE-2025-67780-Exploit](https://github.com/SteveAkawLabs/MARMALADE-2-CVE-2025-67780-Exploit)
+
### CVE-2025-67875 (2025-12-17)
ChurchCRM is an open-source church management system. A privilege escalation vulnerability exists in ChurchCRM prior to version 6.5.3. An authenticated user with specific mid-level permissions ("Edit Records" and "Manage Properties and Classifications") can inject a persistent Cross-Site Scripting (XSS) payload into an administrator's profile. The payload executes when the administrator views their own profile page, allowing the attacker to hijack the administrator's session, perform administrative actions, and achieve a full account takeover. This vulnerability is a combination of two separate flaws: an Insecure Direct Object Reference (IDOR) that allows any user to view any other user's profile, and a Broken Access Control vulnerability that allows a user with general edit permissions to modify any other user's record properties. Version 6.5.3 fixes the issue.
@@ -9554,6 +13784,28 @@
- [lukasz-rybak/CVE-2025-67876](https://github.com/lukasz-rybak/CVE-2025-67876)
+### CVE-2025-67886 (2026-05-08)
+
+Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privileged users who can upload new translated pages to the website.
+
+
+- [reewardius/CVE-2025-67886](https://github.com/reewardius/CVE-2025-67886)
+
+### CVE-2025-67887 (2026-05-08)
+
+1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. NOTE: this is disputed by the Supplier because this is intended behavior for the high-privileged users who can upload new translated pages to the website.
+
+
+- [reewardius/CVE-2025-67887](https://github.com/reewardius/CVE-2025-67887)
+- [cyberok-org/CVE-2025-67887](https://github.com/cyberok-org/CVE-2025-67887)
+
+### CVE-2025-67888 (2026-05-08)
+
+An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed via the "key" GET parameter to /admin/index.php (when the "api" parameter is set) is not properly sanitized before being used to execute OS commands. This can be exploited by unauthenticated attackers to inject and execute arbitrary OS commands with the privileges of root on the web server. Softaculous or SitePad must be present.
+
+
+- [reewardius/CVE-2025-67888](https://github.com/reewardius/CVE-2025-67888)
+
### CVE-2025-67906 (2025-12-15)
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
@@ -9568,6 +13820,34 @@
- [Nxploited/CVE-2025-68001](https://github.com/Nxploited/CVE-2025-68001)
+### CVE-2025-68055 (2025-12-16)
+
+Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Hydra Booking hydra-booking allows SQL Injection.This issue affects Hydra Booking: from n/a through <= 1.1.32.
+
+
+- [Nosiume/CVE-2025-68055-poc](https://github.com/Nosiume/CVE-2025-68055-poc)
+
+### CVE-2025-68116 (2025-12-16)
+
+FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attacker who can get a crafted SVG (primary) or HTML (secondary) file stored in a FileRise instance can cause JavaScript execution when a victim opens a generated share link (and in some cases via the direct download endpoint). This impacts share links (`/api/file/share.php`) and direct file access / download path (`/api/file/download.php`), depending on browser/content-type behavior. Version 2.7.1 fixes the issue.
+
+
+- [x0root/CVE-2025-68116](https://github.com/x0root/CVE-2025-68116)
+
+### CVE-2025-68147 (2025-12-17)
+
+Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting (XSS) vulnerability exists in the "Return Policy" configuration field. The application does not properly sanitize user input before saving it to the database or displaying it on receipts. An attacker with access to the "Store Configuration" (such as a rogue administrator or an account compromised via the separate CSRF vulnerability) can inject malicious JavaScript payloads into this field. These payloads are executed in the browser of any user (including other administrators and sales staff) whenever they view a receipt or complete a transaction. This can lead to session hijacking, theft of sensitive data, or unauthorized actions performed on behalf of the victim. The vulnerability has been patched in version 3.4.2 by ensuring the output is escaped using the `esc()` function in the receipt template. As a temporary mitigation, administrators should ensure the "Return Policy" field contains only plain text and strictly avoid entering any HTML tags. There is no code-based workaround other than applying the patch.
+
+
+- [Nixon-H/CVE-2025-68147-OSPOS-Stored-XSS](https://github.com/Nixon-H/CVE-2025-68147-OSPOS-Stored-XSS)
+
+### CVE-2025-68325 (2025-12-18)
+
+In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_cake: Fix incorrect qlen reduction in cake_drop\n\nIn cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen\nand backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes\nthat the parent qdisc will enqueue the current packet. However, this\nassumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent\nqdisc stops enqueuing current packet, leaving the tree qlen/backlog\naccounting inconsistent. This mismatch can lead to a NULL dereference\n(e.g., when the parent Qdisc is qfq_qdisc).\n\nThis patch computes the qlen/backlog delta in a more robust way by\nobserving the difference before and after the series of cake_drop()\ncalls, and then compensates the qdisc tree accounting if cake_enqueue()\nreturns NET_XMIT_CN.\n\nTo ensure correct compensation when ACK thinning is enabled, a new\nvariable is introduced to keep qlen unchanged.
+
+
+- [n132/CVE-2025-68325](https://github.com/n132/CVE-2025-68325)
+
### CVE-2025-68400 (2025-12-17)
ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in the legacy endpoint `/Reports/ConfirmReportEmail.php` in ChurchCRM prior to version 6.5.3. Although the feature was removed from the UI, the file remains deployed and reachable directly via URL. This is a classic case of *dead but reachable code*. Any authenticated user - including one with zero assigned permissions - can exploit SQL injection through the `familyId` parameter. Version 6.5.3 fixes the issue.
@@ -9586,6 +13866,21 @@
- [12nio/CVE-2025-68428_PoC](https://github.com/12nio/CVE-2025-68428_PoC)
- [Nurjaman2004/jsPDF-Bulk-Detector-CVE-2025-68428-](https://github.com/Nurjaman2004/jsPDF-Bulk-Detector-CVE-2025-68428-)
+### CVE-2025-68434 (2025-12-17)
+
+Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests (POST) without verifying a valid CSRF token. An unauthenticated remote attacker can exploit this by hosting a malicious web page. If a logged-in administrator visits this page, their browser is forced to send unauthorized requests to the application. A successful exploit allows the attacker to silently create a new Administrator account with full privileges, leading to a complete takeover of the system and loss of confidentiality, integrity, and availability. The vulnerability has been patched in version 3.4.2. The fix re-enables the CSRF filter in `app/Config/Filters.php` and resolves associated AJAX race conditions by adjusting token regeneration settings. As a workaround, administrators can manually re-enable the CSRF filter in `app/Config/Filters.php` by uncommenting the protection line. However, this is not recommended without applying the full patch, as it may cause functionality breakage in the Sales module due to token synchronization issues.
+
+
+- [Nixon-H/CVE-2025-68434-OSPOS-CSRF](https://github.com/Nixon-H/CVE-2025-68434-OSPOS-CSRF)
+
+### CVE-2025-68461 (2025-12-18)
+
+Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
+
+
+- [rxerium/CVE-2025-68461](https://github.com/rxerium/CVE-2025-68461)
+- [gotr00t0day/CVE-2025-68461](https://github.com/gotr00t0day/CVE-2025-68461)
+
### CVE-2025-68472 (2026-01-12)
MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PUT handler in file.py directly joins user-controlled data into a filesystem path when the request body is JSON and source_type is not "url". Only multipart uploads and URL-sourced uploads receive sanitization; JSON uploads lack any call to clear_filename or equivalent checks. This vulnerability is fixed in 25.11.1.
@@ -9605,7 +13900,31 @@
n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations. This issue has been fixed in versions 1.120.4, 1.121.1, and 1.122.0. Users are strongly advised to upgrade to a patched version, which introduces additional safeguards to restrict expression evaluation. If upgrading is not immediately possible, administrators should consider the following temporary mitigations: Limit workflow creation and editing permissions to fully trusted users only; and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully eliminate the risk and should only be used as short-term measures.
+- [rxerium/CVE-2025-68613](https://github.com/rxerium/CVE-2025-68613)
+- [TheStingR/CVE-2025-68613-POC](https://github.com/TheStingR/CVE-2025-68613-POC)
+- [sahilccras/Blackash-CVE-2025-68613](https://github.com/sahilccras/Blackash-CVE-2025-68613)
+- [wioui/n8n-CVE-2025-68613-exploit](https://github.com/wioui/n8n-CVE-2025-68613-exploit)
+- [reem-012/poc_CVE-2025-68613](https://github.com/reem-012/poc_CVE-2025-68613)
+- [intbjw/CVE-2025-68613-poc-via-copilot](https://github.com/intbjw/CVE-2025-68613-poc-via-copilot)
+- [ali-py3/Exploit-CVE-2025-68613](https://github.com/ali-py3/Exploit-CVE-2025-68613)
+- [nehkark/CVE-2025-68613](https://github.com/nehkark/CVE-2025-68613)
+- [GnuTLam/POC-CVE-2025-68613](https://github.com/GnuTLam/POC-CVE-2025-68613)
+- [secjoker/CVE-2025-68613](https://github.com/secjoker/CVE-2025-68613)
+- [r4j3sh-com/CVE-2025-68613-n8n-lab](https://github.com/r4j3sh-com/CVE-2025-68613-n8n-lab)
+- [intelligent-ears/CVE-2025-68613](https://github.com/intelligent-ears/CVE-2025-68613)
+- [manyaigdtuw/CVE-2025-68613_Scanner](https://github.com/manyaigdtuw/CVE-2025-68613_Scanner)
+- [AbdulRKB/n8n-RCE](https://github.com/AbdulRKB/n8n-RCE)
- [JohannesLks/CVE-2025-68613-Python-Exploit](https://github.com/JohannesLks/CVE-2025-68613-Python-Exploit)
+- [hackersatyamrastogi/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate](https://github.com/hackersatyamrastogi/n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate)
+- [mbanyamer/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613](https://github.com/mbanyamer/n8n-Authenticated-Expression-Injection-RCE-CVE-2025-68613)
+- [releaseown/analysis-and-poc-n8n-CVE-2025-68613](https://github.com/releaseown/analysis-and-poc-n8n-CVE-2025-68613)
+- [Dlanang/homelab-CVE-2025-68613](https://github.com/Dlanang/homelab-CVE-2025-68613)
+- [Khin-96/n8n-cve-2025-68613-thm](https://github.com/Khin-96/n8n-cve-2025-68613-thm)
+- [J4ck3LSyN-Gen2/n8n-CVE-2025-68613-TryHackMe](https://github.com/J4ck3LSyN-Gen2/n8n-CVE-2025-68613-TryHackMe)
+- [Ak-cybe/CVE-2025-68613-n8n-rce-analysis](https://github.com/Ak-cybe/CVE-2025-68613-n8n-rce-analysis)
+- [LingerANR/n8n-CVE-2025-68613](https://github.com/LingerANR/n8n-CVE-2025-68613)
+- [gagaltotal/n8n-cve-2025-68613](https://github.com/gagaltotal/n8n-cve-2025-68613)
+- [cv-sai-kamesh/n8n-CVE-2025-68613](https://github.com/cv-sai-kamesh/n8n-CVE-2025-68613)
- [Rishi-kaul/n8n-CVE-2025-68613](https://github.com/Rishi-kaul/n8n-CVE-2025-68613)
- [ahmedshamsddin/n8n-RCE-CVE-2025-68613](https://github.com/ahmedshamsddin/n8n-RCE-CVE-2025-68613)
- [TheInterception/n8n_CVE-2025-68613_exploit_payloads](https://github.com/TheInterception/n8n_CVE-2025-68613_exploit_payloads)
@@ -9625,6 +13944,7 @@
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influence internal request dispatching, allowing inclusion of arbitrary files from the WebRoot directory.
+- [chinaxploiter/CVE-2025-68645-PoC](https://github.com/chinaxploiter/CVE-2025-68645-PoC)
- [MaxMnMl/zimbramail-CVE-2025-68645-poc](https://github.com/MaxMnMl/zimbramail-CVE-2025-68645-poc)
- [faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability](https://github.com/faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability)
- [its970/CVE-2025-68645](https://github.com/its970/CVE-2025-68645)
@@ -9636,6 +13956,7 @@
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
+- [Ak-cybe/CVE-2025-68664-LangGrinch-PoC](https://github.com/Ak-cybe/CVE-2025-68664-LangGrinch-PoC)
- [comerc/CVE-2025-68664](https://github.com/comerc/CVE-2025-68664)
- [Johnnyzhou666/langgrinch-cve-2025-68664-analysis](https://github.com/Johnnyzhou666/langgrinch-cve-2025-68664-analysis)
@@ -10082,6 +14403,9 @@
### CVE-2025-492030
- [ImTheCopilotNow/CVE-2025-492030](https://github.com/ImTheCopilotNow/CVE-2025-492030)
+### CVE-2025-505050
+- [aljoharasubaie/CVE-2025-505050](https://github.com/aljoharasubaie/CVE-2025-505050)
+
### CVE-2025-4102025
- [ImTheCopilotNow/CVE-2025-4102025](https://github.com/ImTheCopilotNow/CVE-2025-4102025)
@@ -12768,7 +17092,6 @@
- [RandomRobbieBF/CVE-2024-10124](https://github.com/RandomRobbieBF/CVE-2024-10124)
-- [Nxploited/CVE-2024-10124-Poc](https://github.com/Nxploited/CVE-2024-10124-Poc)
### CVE-2024-10140 (2024-10-19)
@@ -13693,6 +18016,7 @@
- [k4it0k1d/CVE-2024-21182](https://github.com/k4it0k1d/CVE-2024-21182)
- [kursadalsan/CVE-2024-21182](https://github.com/kursadalsan/CVE-2024-21182)
+- [dinosn/CVE-2024-21182](https://github.com/dinosn/CVE-2024-21182)
### CVE-2024-21262 (2024-10-15)
@@ -21491,13 +25815,6 @@
- [RandomRobbieBF/CVE-2023-1405](https://github.com/RandomRobbieBF/CVE-2023-1405)
-### CVE-2023-1415 (2023-03-15)
-
-In Simple Art Gallery 1.0 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Das betrifft die Funktion sliderPicSubmit der Datei adminHome.php. Mit der Manipulation mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden.
-
-
-- [0xxtoby/CVE-2023-1415](https://github.com/0xxtoby/CVE-2023-1415)
-
### CVE-2023-1430 (2023-06-09)
The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use of an MD5 hash without a salt to control subscriptions. This makes it possible for unauthenticated attackers to unsubscribe users from lists and manage subscriptions, granted they gain access to any targeted subscribers email address.
@@ -23506,6 +27823,7 @@
- [kw3h4/CVE-2023-21839-metasploit-scanner](https://github.com/kw3h4/CVE-2023-21839-metasploit-scanner)
- [Romanc9/Gui-poc-test](https://github.com/Romanc9/Gui-poc-test)
- [dinosn/CVE-2024-20931](https://github.com/dinosn/CVE-2024-20931)
+- [dinosn/CVE-2024-21182](https://github.com/dinosn/CVE-2024-21182)
### CVE-2023-21887 (2023-01-17)
@@ -32486,6 +36804,7 @@
- [shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6](https://github.com/shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6)
- [SanderSchepers1993/CyberSec2026](https://github.com/SanderSchepers1993/CyberSec2026)
- [ciri3/spring-cloud-gateway-cve-2022-22947-report](https://github.com/ciri3/spring-cloud-gateway-cve-2022-22947-report)
+- [entr0pie/demo-cve-2022-22947](https://github.com/entr0pie/demo-cve-2022-22947)
### CVE-2022-22948 (2022-03-29)
@@ -57812,7 +62131,6 @@
- [Nickguitar/Joomla-JCK-Editor-6.4.4-SQL-Injection](https://github.com/Nickguitar/Joomla-JCK-Editor-6.4.4-SQL-Injection)
- [MataKucing-OFC/CVE-2018-17254](https://github.com/MataKucing-OFC/CVE-2018-17254)
-- [7amzahard/script-python-to-detect-CVE-2018-17254](https://github.com/7amzahard/script-python-to-detect-CVE-2018-17254)
### CVE-2018-17297 (2018-09-21)
@@ -59325,13 +63643,6 @@
- [Rubytox/CVE-2017-6516-mcsiwrapper-](https://github.com/Rubytox/CVE-2017-6516-mcsiwrapper-)
-### CVE-2017-6558 (2017-03-09)
-
-iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
-
-
-- [GemGeorge/iBall-UTStar-CVEChecker](https://github.com/GemGeorge/iBall-UTStar-CVEChecker)
-
### CVE-2017-6640 (2017-06-08)
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346.
@@ -64339,6 +68650,7 @@
- [im2nerd/CVE-2014-6271](https://github.com/im2nerd/CVE-2014-6271)
- [HevenTafese/Penetration-Testing-Walkthrough-Hacksudo-Thor](https://github.com/HevenTafese/Penetration-Testing-Walkthrough-Hacksudo-Thor)
- [FacundoMfernandez/pentesting-obioba](https://github.com/FacundoMfernandez/pentesting-obioba)
+- [R3fr4kt/Shocker-TJNULL-OSCP-](https://github.com/R3fr4kt/Shocker-TJNULL-OSCP-)
### CVE-2014-6287 (2014-10-07)