nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/04 00:50:15

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-04 09:50:15 +09:00
1 parent 1e54e7bb31
commit dff91ba753
72 files changed
+410 -394
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-06-03T14:26:24Z",
"pushed_at": "2026-06-03T14:09:45Z",
"updated_at": "2026-06-03T23:17:06Z",
"pushed_at": "2026-06-03T23:17:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-1000253.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Demo-ing CVE-2017-1000253 in a container",
"fork": false,
"created_at": "2018-06-18T15:22:01Z",
"updated_at": "2025-11-28T02:53:25Z",
"updated_at": "2026-06-03T20:59:43Z",
"pushed_at": "2017-11-01T07:59:24Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
@@ -47,10 +47,10 @@
"description": "Linux Kernel 3.10.0-514.21.2.el7.x86_64 \/ 3.10.0-514.26.1.el7.x86_64 (CentOS 7) - SUID Position Independent Executable 'PIE' Local Privilege Escalation",
"fork": false,
"created_at": "2022-10-16T23:08:16Z",
"updated_at": "2022-11-03T15:16:30Z",
"updated_at": "2026-06-03T20:34:16Z",
"pushed_at": "2022-10-16T23:22:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -63,7 +63,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
2018/CVE-2018-14847.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 522,
"watchers_count": 522,
"has_discussions": false,
"forks_count": 462,
"forks_count": 461,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 462,
"forks": 461,
"watchers": 522,
"score": 0,
"subscribers_count": 0
2018/CVE-2018-19320.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "Unsigned driver loader using CVE-2018-19320",
"fork": false,
"created_at": "2022-11-12T05:48:13Z",
"updated_at": "2026-06-03T06:43:41Z",
"updated_at": "2026-06-03T20:03:22Z",
"pushed_at": "2026-03-16T09:42:55Z",
"stargazers_count": 357,
"watchers_count": 357,
"stargazers_count": 358,
"watchers_count": 358,
"has_discussions": false,
"forks_count": 87,
"forks_count": 86,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 87,
"watchers": 357,
"forks": 86,
"watchers": 358,
"score": 0,
"subscribers_count": 9
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-03T17:10:09Z",
"pushed_at": "2026-06-03T17:10:04Z",
"updated_at": "2026-06-03T22:37:44Z",
"pushed_at": "2026-06-03T22:37:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-06-03T14:17:36Z",
"pushed_at": "2026-06-03T14:09:36Z",
"updated_at": "2026-06-03T23:16:58Z",
"pushed_at": "2026-06-03T23:16:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-03T16:01:18Z",
"pushed_at": "2026-06-03T15:57:17Z",
"updated_at": "2026-06-04T00:00:51Z",
"pushed_at": "2026-06-04T00:00:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-17103.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback",
"fork": false,
"created_at": "2026-05-18T15:36:34Z",
"updated_at": "2026-06-02T04:53:51Z",
"updated_at": "2026-06-03T21:40:14Z",
"pushed_at": "2026-05-20T13:07:06Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-03T17:19:22Z",
"pushed_at": "2026-06-03T17:19:18Z",
"updated_at": "2026-06-04T00:21:05Z",
"pushed_at": "2026-06-04T00:21:02Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-06-03T14:37:26Z",
"pushed_at": "2026-06-03T14:17:38Z",
"updated_at": "2026-06-03T23:25:08Z",
"pushed_at": "2026-06-03T23:25:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2022/CVE-2022-38694.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 560,
"watchers_count": 560,
"has_discussions": true,
"forks_count": 74,
"forks_count": 73,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"unisoc"
],
"visibility": "public",
"forks": 74,
"forks": 73,
"watchers": 560,
"score": 0,
"subscribers_count": 13
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-03T14:11:28Z",
"pushed_at": "2026-06-03T14:05:09Z",
"updated_at": "2026-06-03T23:12:45Z",
"pushed_at": "2026-06-03T23:12:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-06-03T15:31:59Z",
"pushed_at": "2026-06-03T15:21:30Z",
"updated_at": "2026-06-04T00:20:22Z",
"pushed_at": "2026-06-04T00:20:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-03T15:35:27Z",
"pushed_at": "2026-06-03T15:21:57Z",
"updated_at": "2026-06-04T00:20:44Z",
"pushed_at": "2026-06-04T00:20:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-12558.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 912762940,
"name": "CVE-2024-12558",
"full_name": "RandomRobbieBF\/CVE-2024-12558",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-12558",
"description": "WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db",
"fork": false,
"created_at": "2025-01-06T10:45:29Z",
"updated_at": "2026-02-24T12:59:51Z",
"pushed_at": "2025-01-06T10:47:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 915119296,
"name": "CVE-2024-12558-exploit",
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-06-03T16:15:10Z",
"pushed_at": "2026-06-03T16:11:20Z",
"updated_at": "2026-06-03T20:42:29Z",
"pushed_at": "2026-06-03T20:42:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-30167.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC For CVE-2024-30167 (Atlona OME Authenticated Command Injection)",
"fork": false,
"created_at": "2025-12-27T07:18:38Z",
"updated_at": "2025-12-28T16:52:03Z",
"updated_at": "2026-06-03T23:36:57Z",
"pushed_at": "2025-12-28T16:52:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-37054.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "CVE-2024-37054 exploit and documentation",
"fork": false,
"created_at": "2026-05-19T21:15:25Z",
"updated_at": "2026-05-20T10:49:50Z",
"updated_at": "2026-06-03T22:59:05Z",
"pushed_at": "2026-05-19T22:00:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-46987.json
+33
View File
@@ -295,5 +295,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258822910,
"name": "HackTheBox-Facts",
"full_name": "SuriyaBoon\/HackTheBox-Facts",
"owner": {
"login": "SuriyaBoon",
"id": 277692345,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277692345?v=4",
"html_url": "https:\/\/github.com\/SuriyaBoon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SuriyaBoon\/HackTheBox-Facts",
"description": "HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then extract MinIO credentials from admin settings. Use CVE-2024-46987 path traversal to steal an SSH private key, crack its passphrase, and escalate to root by abusing sudo permissions on facter via GTFOBins.",
"fork": false,
"created_at": "2026-06-04T00:34:57Z",
"updated_at": "2026-06-04T00:39:15Z",
"pushed_at": "2026-06-04T00:39:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-48910.json
+5 -5
View File
@@ -67,8 +67,8 @@
},
{
"id": 1258543283,
"name": "CVE-2024-48910-dompurify-mxss-detector",
"full_name": "Galaxy-sc\/CVE-2024-48910-dompurify-mxss-detector",
"name": "CVE-2024-48910-dompurify-xss-detector",
"full_name": "Galaxy-sc\/CVE-2024-48910-dompurify-xss-detector",
"owner": {
"login": "Galaxy-sc",
"id": 94435150,
@@ -76,12 +76,12 @@
"html_url": "https:\/\/github.com\/Galaxy-sc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Galaxy-sc\/CVE-2024-48910-dompurify-mxss-detector",
"html_url": "https:\/\/github.com\/Galaxy-sc\/CVE-2024-48910-dompurify-xss-detector",
"description": null,
"fork": false,
"created_at": "2026-06-03T17:20:04Z",
"updated_at": "2026-06-03T17:32:43Z",
"pushed_at": "2026-06-03T17:32:38Z",
"updated_at": "2026-06-03T20:11:51Z",
"pushed_at": "2026-06-03T20:11:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-03T15:38:37Z",
"pushed_at": "2026-06-03T15:27:22Z",
"updated_at": "2026-06-04T00:27:25Z",
"pushed_at": "2026-06-04T00:27:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-03T15:35:22Z",
"pushed_at": "2026-06-03T15:26:18Z",
"updated_at": "2026-06-04T00:26:04Z",
"pushed_at": "2026-06-04T00:26:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-06-03T15:52:50Z",
"pushed_at": "2026-06-03T15:49:34Z",
"updated_at": "2026-06-03T20:21:26Z",
"pushed_at": "2026-06-03T20:21:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-03T16:26:59Z",
"pushed_at": "2026-06-03T16:24:45Z",
"updated_at": "2026-06-03T20:55:36Z",
"pushed_at": "2026-06-03T20:55:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-03T14:23:10Z",
"pushed_at": "2026-06-03T14:11:48Z",
"updated_at": "2026-06-03T23:19:05Z",
"pushed_at": "2026-06-03T23:19:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32433.json
+2 -2
View File
@@ -1282,8 +1282,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-03T05:14:18Z",
"updated_at": "2026-06-03T05:48:48Z",
"pushed_at": "2026-06-03T05:46:23Z",
"updated_at": "2026-06-03T23:28:11Z",
"pushed_at": "2026-06-03T23:28:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-06-03T18:41:51Z",
"pushed_at": "2026-06-03T18:41:46Z",
"updated_at": "2026-06-03T23:11:09Z",
"pushed_at": "2026-06-03T23:11:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-03T14:23:47Z",
"pushed_at": "2026-06-03T14:13:39Z",
"updated_at": "2026-06-03T23:20:30Z",
"pushed_at": "2026-06-03T23:20:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-06-03T14:30:50Z",
"pushed_at": "2026-06-03T14:13:05Z",
"updated_at": "2026-06-03T23:20:35Z",
"pushed_at": "2026-06-03T23:20:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+6 -6
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-06-03T15:51:56Z",
"pushed_at": "2026-06-03T15:38:40Z",
"updated_at": "2026-06-04T00:39:08Z",
"pushed_at": "2026-06-04T00:39:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -414,10 +414,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-06-03T09:11:15Z",
"updated_at": "2026-06-03T21:23:42Z",
"pushed_at": "2026-05-28T14:44:51Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -433,7 +433,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-40536.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE analysis of CVE-2025-40536, SolarWinds Web Help Desk security control bypass (CVSS 8.1). Covers vulnerability mechanics, attack chain with companion RCE CVEs, Storm-2603 threat actor attribution, MITRE ATT&CK mapping, and detection\/remediation guidance for DoD and government environments.",
"fork": false,
"created_at": "2026-06-01T18:38:24Z",
"updated_at": "2026-06-01T21:08:57Z",
"pushed_at": "2026-06-01T18:42:08Z",
"updated_at": "2026-06-03T21:10:06Z",
"pushed_at": "2026-06-03T21:10:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-06-03T14:30:34Z",
"pushed_at": "2026-06-03T14:12:58Z",
"updated_at": "2026-06-03T23:20:33Z",
"pushed_at": "2026-06-03T23:20:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-03T14:48:08Z",
"pushed_at": "2026-06-03T14:34:56Z",
"updated_at": "2026-06-03T23:40:09Z",
"pushed_at": "2026-06-03T23:40:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-03T14:48:28Z",
"pushed_at": "2026-06-03T14:35:43Z",
"updated_at": "2026-06-03T23:40:58Z",
"pushed_at": "2026-06-03T23:40:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-53770.json
+2 -2
View File
@@ -221,7 +221,7 @@
"stargazers_count": 311,
"watchers_count": 311,
"has_discussions": false,
"forks_count": 78,
"forks_count": 79,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -229,7 +229,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 78,
"forks": 79,
"watchers": 311,
"score": 0,
"subscribers_count": 5
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-06-03T15:54:25Z",
"pushed_at": "2026-06-03T15:47:44Z",
"updated_at": "2026-06-03T20:19:32Z",
"pushed_at": "2026-06-03T20:19:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-06-03T18:44:58Z",
"pushed_at": "2026-06-03T18:44:53Z",
"updated_at": "2026-06-03T23:14:02Z",
"pushed_at": "2026-06-03T23:13:58Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-03T18:44:25Z",
"pushed_at": "2026-06-03T18:44:22Z",
"updated_at": "2026-06-03T23:13:31Z",
"pushed_at": "2026-06-03T23:13:27Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+36 -36
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-06-03T15:26:33Z",
"pushed_at": "2026-06-03T15:11:03Z",
"updated_at": "2026-06-04T00:10:45Z",
"pushed_at": "2026-06-04T00:10:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-03T15:25:53Z",
"pushed_at": "2026-06-03T15:10:29Z",
"updated_at": "2026-06-04T00:10:18Z",
"pushed_at": "2026-06-04T00:10:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-06-03T15:26:16Z",
"pushed_at": "2026-06-03T15:10:41Z",
"updated_at": "2026-06-04T00:10:25Z",
"pushed_at": "2026-06-04T00:10:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-06-03T15:24:52Z",
"pushed_at": "2026-06-03T15:11:45Z",
"updated_at": "2026-06-04T00:11:31Z",
"pushed_at": "2026-06-04T00:11:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-06-03T15:23:02Z",
"pushed_at": "2026-06-03T15:10:03Z",
"updated_at": "2026-06-04T00:09:54Z",
"pushed_at": "2026-06-04T00:09:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-03T15:24:17Z",
"pushed_at": "2026-06-03T15:11:17Z",
"updated_at": "2026-06-04T00:11:05Z",
"pushed_at": "2026-06-04T00:11:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-06-03T15:28:41Z",
"pushed_at": "2026-06-03T15:14:39Z",
"updated_at": "2026-06-04T00:14:20Z",
"pushed_at": "2026-06-04T00:14:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-03T15:25:38Z",
"pushed_at": "2026-06-03T15:11:00Z",
"updated_at": "2026-06-04T00:10:36Z",
"pushed_at": "2026-06-04T00:10:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-06-03T15:24:41Z",
"pushed_at": "2026-06-03T15:11:48Z",
"updated_at": "2026-06-04T00:11:25Z",
"pushed_at": "2026-06-04T00:11:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1478,10 +1478,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-06-02T14:33:16Z",
"updated_at": "2026-06-03T19:21:03Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1415,
"watchers_count": 1415,
"stargazers_count": 1414,
"watchers_count": 1414,
"has_discussions": false,
"forks_count": 196,
"allow_forking": true,
@@ -1492,7 +1492,7 @@
"topics": [],
"visibility": "public",
"forks": 196,
"watchers": 1415,
"watchers": 1414,
"score": 0,
"subscribers_count": 10
},
@@ -12218,8 +12218,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-03T15:29:31Z",
"pushed_at": "2026-06-03T15:10:26Z",
"updated_at": "2026-06-04T00:10:27Z",
"pushed_at": "2026-06-04T00:10:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12303,8 +12303,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-06-03T15:23:15Z",
"pushed_at": "2026-06-03T15:09:36Z",
"updated_at": "2026-06-04T00:09:29Z",
"pushed_at": "2026-06-04T00:09:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12352,8 +12352,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-06-03T15:24:54Z",
"pushed_at": "2026-06-03T15:09:48Z",
"updated_at": "2026-06-04T00:09:32Z",
"pushed_at": "2026-06-04T00:09:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12437,8 +12437,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-06-03T15:25:15Z",
"pushed_at": "2026-06-03T15:11:22Z",
"updated_at": "2026-06-04T00:11:09Z",
"pushed_at": "2026-06-04T00:11:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12639,8 +12639,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-06-03T15:30:58Z",
"pushed_at": "2026-06-03T15:11:20Z",
"updated_at": "2026-06-04T00:11:04Z",
"pushed_at": "2026-06-04T00:11:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12909,8 +12909,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-03T15:29:45Z",
"pushed_at": "2026-06-03T15:16:46Z",
"updated_at": "2026-06-04T00:16:02Z",
"pushed_at": "2026-06-04T00:15:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13430,8 +13430,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-06-03T15:32:13Z",
"pushed_at": "2026-06-03T15:22:46Z",
"updated_at": "2026-06-04T00:21:44Z",
"pushed_at": "2026-06-04T00:21:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-06-03T15:31:01Z",
"pushed_at": "2026-06-03T15:17:24Z",
"updated_at": "2026-06-04T00:16:28Z",
"pushed_at": "2026-06-04T00:16:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-06-03T15:46:42Z",
"pushed_at": "2026-06-03T15:38:46Z",
"updated_at": "2026-06-04T00:39:11Z",
"pushed_at": "2026-06-04T00:39:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-06-03T14:45:59Z",
"pushed_at": "2026-06-03T14:33:10Z",
"updated_at": "2026-06-03T23:38:45Z",
"pushed_at": "2026-06-03T23:38:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-06-03T15:16:14Z",
"pushed_at": "2026-06-03T15:04:55Z",
"updated_at": "2026-06-04T00:05:09Z",
"pushed_at": "2026-06-04T00:05:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-03T16:20:17Z",
"pushed_at": "2026-06-03T16:17:13Z",
"updated_at": "2026-06-03T20:48:17Z",
"pushed_at": "2026-06-03T20:48:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-03T15:24:57Z",
"pushed_at": "2026-06-03T15:12:15Z",
"updated_at": "2026-06-04T00:11:49Z",
"pushed_at": "2026-06-04T00:11:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-03T15:46:09Z",
"pushed_at": "2026-06-03T15:35:28Z",
"updated_at": "2026-06-04T00:35:57Z",
"pushed_at": "2026-06-04T00:35:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-03T16:06:01Z",
"pushed_at": "2026-06-03T16:02:55Z",
"updated_at": "2026-06-03T20:34:21Z",
"pushed_at": "2026-06-03T20:34:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-03T16:02:29Z",
"pushed_at": "2026-06-03T15:58:13Z",
"updated_at": "2026-06-03T20:29:37Z",
"pushed_at": "2026-06-03T20:29:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-06-03T15:20:44Z",
"pushed_at": "2026-06-03T15:06:15Z",
"updated_at": "2026-06-04T00:06:36Z",
"pushed_at": "2026-06-04T00:06:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-06-03T15:28:31Z",
"pushed_at": "2026-06-03T15:16:14Z",
"updated_at": "2026-06-04T00:15:30Z",
"pushed_at": "2026-06-04T00:15:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-06-03T15:30:29Z",
"pushed_at": "2026-06-03T15:18:10Z",
"updated_at": "2026-06-04T00:17:04Z",
"pushed_at": "2026-06-04T00:17:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC",
"fork": false,
"created_at": "2026-05-06T17:44:38Z",
"updated_at": "2026-06-02T20:18:20Z",
"updated_at": "2026-06-04T00:35:04Z",
"pushed_at": "2026-05-06T17:53:25Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": true,
"forks_count": 11,
"allow_forking": true,
@@ -132,7 +132,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 36,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-03T16:02:29Z",
"pushed_at": "2026-06-03T15:58:13Z",
"updated_at": "2026-06-03T20:29:37Z",
"pushed_at": "2026-06-03T20:29:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-03T16:00:44Z",
"pushed_at": "2026-06-03T15:57:11Z",
"updated_at": "2026-06-03T20:28:56Z",
"pushed_at": "2026-06-03T20:28:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-03T15:58:15Z",
"pushed_at": "2026-06-03T15:56:20Z",
"updated_at": "2026-06-03T20:27:49Z",
"pushed_at": "2026-06-03T20:27:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-2256.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1258657983,
"name": "CVE-2026-2256-Threat-Model----ms-agent-Command-Injection",
"full_name": "melbratic\/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection",
"owner": {
"login": "melbratic",
"id": 122757054,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122757054?v=4",
"html_url": "https:\/\/github.com\/melbratic",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/melbratic\/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection",
"description": null,
"fork": false,
"created_at": "2026-06-03T19:43:46Z",
"updated_at": "2026-06-03T19:46:32Z",
"pushed_at": "2026-06-03T19:46:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23631.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-23631 (DarkReplica) Redis Exploit",
"fork": false,
"created_at": "2026-05-07T12:36:35Z",
"updated_at": "2026-06-03T18:16:49Z",
"updated_at": "2026-06-03T23:50:21Z",
"pushed_at": "2026-06-02T13:59:53Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 1,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 14,
"forks": 4,
"watchers": 18,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-23744.json
+2 -2
View File
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-31T12:10:47Z",
"updated_at": "2026-06-03T00:49:08Z",
"pushed_at": "2026-05-31T13:12:52Z",
"updated_at": "2026-06-03T22:07:11Z",
"pushed_at": "2026-06-03T22:07:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-06-03T15:50:26Z",
"pushed_at": "2026-06-03T15:47:11Z",
"updated_at": "2026-06-04T00:47:24Z",
"pushed_at": "2026-06-04T00:47:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-03T15:49:06Z",
"pushed_at": "2026-06-03T15:43:25Z",
"updated_at": "2026-06-04T00:43:51Z",
"pushed_at": "2026-06-04T00:43:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-03T16:21:02Z",
"pushed_at": "2026-06-03T16:19:34Z",
"updated_at": "2026-06-03T20:50:44Z",
"pushed_at": "2026-06-03T20:50:41Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-03T16:02:54Z",
"pushed_at": "2026-06-03T15:59:52Z",
"updated_at": "2026-06-03T20:31:39Z",
"pushed_at": "2026-06-03T20:31:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-03T16:09:46Z",
"pushed_at": "2026-06-03T16:05:54Z",
"updated_at": "2026-06-03T20:37:01Z",
"pushed_at": "2026-06-03T20:36:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-06-03T16:08:09Z",
"pushed_at": "2026-06-03T16:04:24Z",
"updated_at": "2026-06-03T20:35:45Z",
"pushed_at": "2026-06-03T20:35:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26897.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Public advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500",
"fork": false,
"created_at": "2026-06-03T18:31:31Z",
"updated_at": "2026-06-03T18:50:12Z",
"pushed_at": "2026-06-03T18:50:07Z",
"updated_at": "2026-06-03T18:58:49Z",
"pushed_at": "2026-06-03T18:58:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-26898.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1135183219,
"name": "CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection",
"full_name": "iwallplace\/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection",
"owner": {
"login": "iwallplace",
"id": 25619643,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25619643?v=4",
"html_url": "https:\/\/github.com\/iwallplace",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/iwallplace\/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection",
"description": "Unauthenticated SSRF in Xiaomi Mi Router 4A Gigabit Edition (firmware 3.0.24) via Host Header Injection — CVE-2026-26898",
"fork": false,
"created_at": "2026-01-15T18:51:42Z",
"updated_at": "2026-06-03T19:48:08Z",
"pushed_at": "2026-06-03T19:48:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-26899.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Proof of Concept exploit for CVE-2026-26899 in OpenWrt luci-app-https-dns-proxy",
"fork": false,
"created_at": "2026-01-16T18:27:55Z",
"updated_at": "2026-06-03T18:47:41Z",
"pushed_at": "2026-06-03T18:47:36Z",
"updated_at": "2026-06-03T18:59:22Z",
"pushed_at": "2026-06-03T18:59:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-06-03T16:26:32Z",
"pushed_at": "2026-06-03T16:24:18Z",
"updated_at": "2026-06-03T20:55:13Z",
"pushed_at": "2026-06-03T20:55:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+12 -111
View File
@@ -47,10 +47,10 @@
"description": "A Go implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-29T22:51:24Z",
"updated_at": "2026-06-01T09:37:00Z",
"updated_at": "2026-06-04T00:20:15Z",
"pushed_at": "2026-05-01T03:24:14Z",
"stargazers_count": 351,
"watchers_count": 351,
"stargazers_count": 352,
"watchers_count": 352,
"has_discussions": false,
"forks_count": 75,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 75,
"watchers": 351,
"watchers": 352,
"score": 0,
"subscribers_count": 1
},
@@ -438,72 +438,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225332828,
"name": "cve-2026-31431-fleet-remediator",
"full_name": "WavesMan\/cve-2026-31431-fleet-remediator",
"owner": {
"login": "WavesMan",
"id": 104572398,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104572398?v=4",
"html_url": "https:\/\/github.com\/WavesMan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WavesMan\/cve-2026-31431-fleet-remediator",
"description": "Fleet-scale CVE-2026-31431 audit and remediation orchestrator for Linux hosts via SSH, with strict host-key verification and multi-format reporting.",
"fork": false,
"created_at": "2026-04-30T07:11:44Z",
"updated_at": "2026-04-30T07:50:48Z",
"pushed_at": "2026-04-30T07:50:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225339348,
"name": "copy-fail-CVE-2026-31431",
"full_name": "wuzuowei\/copy-fail-CVE-2026-31431",
"owner": {
"login": "wuzuowei",
"id": 26717790,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26717790?v=4",
"html_url": "https:\/\/github.com\/wuzuowei",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wuzuowei\/copy-fail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T07:17:46Z",
"updated_at": "2026-04-30T07:29:42Z",
"pushed_at": "2026-04-30T07:29:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225342137,
"name": "RootRemover",
@@ -537,39 +471,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225355295,
"name": "copy-fail-mitigate-no-reboot",
"full_name": "mrowkoob\/copy-fail-mitigate-no-reboot",
"owner": {
"login": "mrowkoob",
"id": 217596923,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217596923?v=4",
"html_url": "https:\/\/github.com\/mrowkoob",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrowkoob\/copy-fail-mitigate-no-reboot",
"description": "Quick mitigation for copy-fail kernel bug CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T07:37:17Z",
"updated_at": "2026-04-30T07:55:24Z",
"pushed_at": "2026-04-30T07:55:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225358435,
"name": "cve-2026-31431",
@@ -7062,8 +6963,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-03T16:47:04Z",
"pushed_at": "2026-06-03T16:47:00Z",
"updated_at": "2026-06-03T21:19:11Z",
"pushed_at": "2026-06-03T21:19:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -7897,8 +7798,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-03T16:48:09Z",
"pushed_at": "2026-06-03T16:48:05Z",
"updated_at": "2026-06-03T21:20:13Z",
"pushed_at": "2026-06-03T21:20:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -10100,8 +10001,8 @@
"description": "More portable POC of copyfail LPE (CVE-2026-31431) that works on Alpine Linux",
"fork": false,
"created_at": "2026-05-21T22:24:45Z",
"updated_at": "2026-05-28T18:48:02Z",
"pushed_at": "2026-05-21T22:34:28Z",
"updated_at": "2026-06-04T00:14:45Z",
"pushed_at": "2026-06-04T00:14:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -10347,8 +10248,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-01T18:53:44Z",
"updated_at": "2026-06-02T11:14:45Z",
"pushed_at": "2026-06-02T20:17:21Z",
"updated_at": "2026-06-03T21:48:04Z",
"pushed_at": "2026-06-03T21:47:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-03T16:22:10Z",
"pushed_at": "2026-06-03T16:20:41Z",
"updated_at": "2026-06-03T20:51:58Z",
"pushed_at": "2026-06-03T20:51:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-39107.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-20T20:36:36Z",
"updated_at": "2026-05-24T17:08:45Z",
"pushed_at": "2026-05-21T00:21:56Z",
"updated_at": "2026-06-03T20:41:26Z",
"pushed_at": "2026-06-03T20:41:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41089.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
"updated_at": "2026-06-03T17:35:26Z",
"updated_at": "2026-06-03T23:03:44Z",
"pushed_at": "2026-06-02T08:30:55Z",
"stargazers_count": 143,
"watchers_count": 143,
"stargazers_count": 144,
"watchers_count": 144,
"has_discussions": false,
"forks_count": 52,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 52,
"watchers": 143,
"watchers": 144,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-41940.json
+6 -39
View File
@@ -1,37 +1,4 @@
[
{
"id": 1225360018,
"name": "CVE-2026-41940",
"full_name": "Wesuiliye\/CVE-2026-41940",
"owner": {
"login": "Wesuiliye",
"id": 78547908,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78547908?v=4",
"html_url": "https:\/\/github.com\/Wesuiliye",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Wesuiliye\/CVE-2026-41940",
"description": "CVE-2026-41940利用工具（go并发检测，python利用）",
"fork": false,
"created_at": "2026-04-30T07:43:32Z",
"updated_at": "2026-05-01T20:30:41Z",
"pushed_at": "2026-04-30T07:55:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225380769,
"name": "cpanel2shell-scanner",
@@ -47,10 +14,10 @@
"description": "High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)",
"fork": false,
"created_at": "2026-04-30T08:11:23Z",
"updated_at": "2026-06-02T08:22:22Z",
"updated_at": "2026-06-03T21:47:02Z",
"pushed_at": "2026-05-18T14:38:15Z",
"stargazers_count": 87,
"watchers_count": 87,
"stargazers_count": 88,
"watchers_count": 88,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -61,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 87,
"watchers": 88,
"score": 0,
"subscribers_count": 1
},
@@ -1680,8 +1647,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-03T16:48:34Z",
"pushed_at": "2026-06-03T16:48:28Z",
"updated_at": "2026-06-03T21:20:41Z",
"pushed_at": "2026-06-03T21:20:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42945.json
+33
View File
@@ -1239,5 +1239,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258633601,
"name": "CVE-2026-42945-NGINX-Rift-Check-Script",
"full_name": "lowilol\/CVE-2026-42945-NGINX-Rift-Check-Script",
"owner": {
"login": "lowilol",
"id": 153760101,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153760101?v=4",
"html_url": "https:\/\/github.com\/lowilol",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lowilol\/CVE-2026-42945-NGINX-Rift-Check-Script",
"description": null,
"fork": false,
"created_at": "2026-06-03T19:10:40Z",
"updated_at": "2026-06-03T19:23:29Z",
"pushed_at": "2026-06-03T19:23:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45585.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
"updated_at": "2026-06-03T17:41:11Z",
"updated_at": "2026-06-03T21:07:59Z",
"pushed_at": "2026-05-23T17:24:38Z",
"stargazers_count": 215,
"watchers_count": 215,
"stargazers_count": 219,
"watchers_count": 219,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -108,8 +108,8 @@
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 23,
"watchers": 215,
"forks": 24,
"watchers": 219,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-49975.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1258685193,
"name": "Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"full_name": "fevar54\/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"owner": {
"login": "fevar54",
"id": 80516843,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
"html_url": "https:\/\/github.com\/fevar54",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fevar54\/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-",
"description": "Este repositorio contiene un Proof of Concept (POC) para CVE-2026-49975, también conocida como HTTP\/2 Bomb, una vulnerabilidad de denegación de servicio (DoS) remoto que afecta a la mayoría de los servidores web principales en su configuración HTTP\/2 predeterminada, incluyendo:",
"fork": false,
"created_at": "2026-06-03T20:22:30Z",
"updated_at": "2026-06-03T21:08:31Z",
"pushed_at": "2026-06-03T20:34:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
README.md
+16 -6
View File
@@ -161,6 +161,13 @@
- [stvm8/CVE-2026-2005_lab](https://github.com/stvm8/CVE-2026-2005_lab)
- [var77/CVE-2026-2005](https://github.com/var77/CVE-2026-2005)
### CVE-2026-2256 (2026-03-02)
<code>A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.
</code>
- [melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection](https://github.com/melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection)
### CVE-2026-2291 (2026-05-11)
<code>dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS.
@@ -1072,6 +1079,9 @@
### CVE-2026-26897
- [iwallplace/CVE-2026-26897-EcoOnline-DeepLink](https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink)
### CVE-2026-26898
- [iwallplace/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection](https://github.com/iwallplace/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection)
### CVE-2026-26899
- [iwallplace/CVE-2026-26899-OpenWrt-Exploit](https://github.com/iwallplace/CVE-2026-26899-OpenWrt-Exploit)
@@ -1247,10 +1257,7 @@
- [arkdev1/check-cve-2026-31431](https://github.com/arkdev1/check-cve-2026-31431)
- [wuwu001/CVE-2026-31431-exploit](https://github.com/wuwu001/CVE-2026-31431-exploit)
- [ryan2929/CVE-2026-31431](https://github.com/ryan2929/CVE-2026-31431)
- [WavesMan/cve-2026-31431-fleet-remediator](https://github.com/WavesMan/cve-2026-31431-fleet-remediator)
- [wuzuowei/copy-fail-CVE-2026-31431](https://github.com/wuzuowei/copy-fail-CVE-2026-31431)
- [Aurillium/RootRemover](https://github.com/Aurillium/RootRemover)
- [mrowkoob/copy-fail-mitigate-no-reboot](https://github.com/mrowkoob/copy-fail-mitigate-no-reboot)
- [nisec-eric/cve-2026-31431](https://github.com/nisec-eric/cve-2026-31431)
- [pascal-gujer/CVE-2026-31431](https://github.com/pascal-gujer/CVE-2026-31431)
- [eleveni386/CVE-2026-31431-Golang](https://github.com/eleveni386/CVE-2026-31431-Golang)
@@ -2229,7 +2236,6 @@
<code>cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.
</code>
- [Wesuiliye/CVE-2026-41940](https://github.com/Wesuiliye/CVE-2026-41940)
- [assetnote/cpanel2shell-scanner](https://github.com/assetnote/cpanel2shell-scanner)
- [realawaisakbar/CVE-2026-41940-Exploit-PoC](https://github.com/realawaisakbar/CVE-2026-41940-Exploit-PoC)
- [ilmndwntr/CVE-2026-41940-MASS-EXPLOIT](https://github.com/ilmndwntr/CVE-2026-41940-MASS-EXPLOIT)
@@ -2472,6 +2478,7 @@
- [niekaicheng/CVE-2026-42945_NGINX_Rift](https://github.com/niekaicheng/CVE-2026-42945_NGINX_Rift)
- [quantumworld-dpdns-io/CVE-2026-42945](https://github.com/quantumworld-dpdns-io/CVE-2026-42945)
- [strivepan/Nginx_cve-2026-42945-scanner-gui](https://github.com/strivepan/Nginx_cve-2026-42945-scanner-gui)
- [lowilol/CVE-2026-42945-NGINX-Rift-Check-Script](https://github.com/lowilol/CVE-2026-42945-NGINX-Rift-Check-Script)
### CVE-2026-43284 (2026-05-08)
@@ -2857,6 +2864,9 @@
- [9Bakabaka/CVE-2026-49943-PoC](https://github.com/9Bakabaka/CVE-2026-49943-PoC)
### CVE-2026-49975
- [fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-](https://github.com/fevar54/Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-)
### CVE-2026-350234
- [usernameisunavailable-cell/Bili-cracker](https://github.com/usernameisunavailable-cell/Bili-cracker)
@@ -17712,7 +17722,6 @@
<code>The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive information from the database, such as the hashed administrator password.
</code>
- [RandomRobbieBF/CVE-2024-12558](https://github.com/RandomRobbieBF/CVE-2024-12558)
- [Nxploited/CVE-2024-12558-exploit](https://github.com/Nxploited/CVE-2024-12558-exploit)
### CVE-2024-12583 (2025-01-04)
@@ -23523,6 +23532,7 @@
- [ramzerk/CVE-2024-46987](https://github.com/ramzerk/CVE-2024-46987)
- [BLUEBERRYP1LL/CVE-2024-46987](https://github.com/BLUEBERRYP1LL/CVE-2024-46987)
- [bootstrapbool/msf-cve-2024-46987](https://github.com/bootstrapbool/msf-cve-2024-46987)
- [SuriyaBoon/HackTheBox-Facts](https://github.com/SuriyaBoon/HackTheBox-Facts)
### CVE-2024-47051 (2025-02-26)
@@ -23828,7 +23838,7 @@
- [Mitchellzhou1/CVE-2024-48910-PoC](https://github.com/Mitchellzhou1/CVE-2024-48910-PoC)
- [Alex-Acero-Security/CVE-2024-48910-POC](https://github.com/Alex-Acero-Security/CVE-2024-48910-POC)
- [Galaxy-sc/CVE-2024-48910-dompurify-mxss-detector](https://github.com/Galaxy-sc/CVE-2024-48910-dompurify-mxss-detector)
- [Galaxy-sc/CVE-2024-48910-dompurify-xss-detector](https://github.com/Galaxy-sc/CVE-2024-48910-dompurify-xss-detector)
### CVE-2024-48914 (2024-10-15)