diff --git a/2026/CVE-2026-33229.json b/2013/CVE-2013-1814.json
similarity index 50%
rename from 2026/CVE-2026-33229.json
rename to 2013/CVE-2013-1814.json
index ffb6608b42..7220a48cff 100644
--- a/2026/CVE-2026-33229.json
+++ b/2013/CVE-2013-1814.json
@@ -1,21 +1,21 @@
[
{
- "id": 1207661362,
- "name": "CVE-2026-33229",
- "full_name": "azefzafyoussef\/CVE-2026-33229",
+ "id": 1245195069,
+ "name": "java-vulnerable",
+ "full_name": "dannyEndorTest\/java-vulnerable",
"owner": {
- "login": "azefzafyoussef",
- "id": 239175157,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239175157?v=4",
- "html_url": "https:\/\/github.com\/azefzafyoussef",
+ "login": "dannyEndorTest",
+ "id": 286152396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286152396?v=4",
+ "html_url": "https:\/\/github.com\/dannyEndorTest",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/azefzafyoussef\/CVE-2026-33229",
- "description": null,
+ "html_url": "https:\/\/github.com\/dannyEndorTest\/java-vulnerable",
+ "description": "EXPOSURE demo target: Tomcat (CVE-2016-0714) + Apache Rave (CVE-2013-1814) + Java filter-padding deps",
"fork": false,
- "created_at": "2026-04-11T08:18:52Z",
- "updated_at": "2026-04-11T08:31:34Z",
- "pushed_at": "2026-04-11T08:31:31Z",
+ "created_at": "2026-05-21T02:11:48Z",
+ "updated_at": "2026-05-21T02:39:02Z",
+ "pushed_at": "2026-05-21T03:12:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2014/CVE-2014-4210.json b/2014/CVE-2014-4210.json
index 40dc28eb27..1ed15ae19d 100644
--- a/2014/CVE-2014-4210.json
+++ b/2014/CVE-2014-4210.json
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
},
diff --git a/2016/CVE-2016-0638.json b/2016/CVE-2016-0638.json
index 4ce8a29289..d880e15cdb 100644
--- a/2016/CVE-2016-0638.json
+++ b/2016/CVE-2016-0638.json
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
},
diff --git a/2026/CVE-2026-39866.json b/2016/CVE-2016-0714.json
similarity index 50%
rename from 2026/CVE-2026-39866.json
rename to 2016/CVE-2016-0714.json
index ba3a3373a2..7220a48cff 100644
--- a/2026/CVE-2026-39866.json
+++ b/2016/CVE-2016-0714.json
@@ -1,21 +1,21 @@
[
{
- "id": 1207902860,
- "name": "CVE-2026-39866",
- "full_name": "abhayclasher\/CVE-2026-39866",
+ "id": 1245195069,
+ "name": "java-vulnerable",
+ "full_name": "dannyEndorTest\/java-vulnerable",
"owner": {
- "login": "abhayclasher",
- "id": 61083922,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61083922?v=4",
- "html_url": "https:\/\/github.com\/abhayclasher",
+ "login": "dannyEndorTest",
+ "id": 286152396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286152396?v=4",
+ "html_url": "https:\/\/github.com\/dannyEndorTest",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/abhayclasher\/CVE-2026-39866",
- "description": null,
+ "html_url": "https:\/\/github.com\/dannyEndorTest\/java-vulnerable",
+ "description": "EXPOSURE demo target: Tomcat (CVE-2016-0714) + Apache Rave (CVE-2013-1814) + Java filter-padding deps",
"fork": false,
- "created_at": "2026-04-11T15:01:15Z",
- "updated_at": "2026-04-11T15:24:14Z",
- "pushed_at": "2026-04-11T15:24:08Z",
+ "created_at": "2026-05-21T02:11:48Z",
+ "updated_at": "2026-05-21T02:39:02Z",
+ "pushed_at": "2026-05-21T03:12:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json
index 42b2889003..eab81ddfbd 100644
--- a/2016/CVE-2016-15042.json
+++ b/2016/CVE-2016-15042.json
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
- "updated_at": "2026-05-20T21:39:51Z",
- "pushed_at": "2026-05-20T21:39:47Z",
+ "updated_at": "2026-05-21T03:50:54Z",
+ "pushed_at": "2026-05-21T03:50:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2017/CVE-2017-3248.json b/2017/CVE-2017-3248.json
index 8934d28f7c..243a1b746d 100644
--- a/2017/CVE-2017-3248.json
+++ b/2017/CVE-2017-3248.json
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
},
diff --git a/2018/CVE-2018-15473.json b/2018/CVE-2018-15473.json
index 7ce512a6d7..0ac84c411f 100644
--- a/2018/CVE-2018-15473.json
+++ b/2018/CVE-2018-15473.json
@@ -134,7 +134,7 @@
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
- "forks_count": 32,
+ "forks_count": 31,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -142,7 +142,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 32,
+ "forks": 31,
"watchers": 113,
"score": 0,
"subscribers_count": 0
diff --git a/2026/CVE-2026-22557.json b/2018/CVE-2018-21268.json
similarity index 50%
rename from 2026/CVE-2026-22557.json
rename to 2018/CVE-2018-21268.json
index 7c00c4f371..ca1c98e151 100644
--- a/2026/CVE-2026-22557.json
+++ b/2018/CVE-2018-21268.json
@@ -1,21 +1,21 @@
[
{
- "id": 1207875913,
- "name": "CVE-2026-22557-PoC",
- "full_name": "ThePotatoOfDoom\/CVE-2026-22557-PoC",
+ "id": 1245135553,
+ "name": "node-vulnerable",
+ "full_name": "dannyEndorTest\/node-vulnerable",
"owner": {
- "login": "ThePotatoOfDoom",
- "id": 37952098,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37952098?v=4",
- "html_url": "https:\/\/github.com\/ThePotatoOfDoom",
+ "login": "dannyEndorTest",
+ "id": 286152396,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286152396?v=4",
+ "html_url": "https:\/\/github.com\/dannyEndorTest",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/ThePotatoOfDoom\/CVE-2026-22557-PoC",
- "description": "PoC for UniFi Network Application Pre-Auth Path Traversal (CVE-2026-22557)",
+ "html_url": "https:\/\/github.com\/dannyEndorTest\/node-vulnerable",
+ "description": "Synthetic demo target for EXPOSURE — CVE-2018-21268 (traceroute) + CVE-2018-3757 (pdf-image)",
"fork": false,
- "created_at": "2026-04-11T14:21:58Z",
- "updated_at": "2026-04-11T14:33:19Z",
- "pushed_at": "2026-04-11T14:33:16Z",
+ "created_at": "2026-05-21T00:20:15Z",
+ "updated_at": "2026-05-21T00:20:38Z",
+ "pushed_at": "2026-05-21T03:00:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2018/CVE-2018-2628.json b/2018/CVE-2018-2628.json
index 61205bd488..b94374e691 100644
--- a/2018/CVE-2018-2628.json
+++ b/2018/CVE-2018-2628.json
@@ -612,10 +612,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -647,7 +647,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
},
diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json
index 53fc92ef11..900475dec4 100644
--- a/2019/CVE-2019-1040.json
+++ b/2019/CVE-2019-1040.json
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
- "updated_at": "2026-05-21T00:14:15Z",
- "pushed_at": "2026-05-21T00:14:11Z",
+ "updated_at": "2026-05-21T04:47:19Z",
+ "pushed_at": "2026-05-21T04:47:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2019/CVE-2019-2618.json b/2019/CVE-2019-2618.json
index 148a81da42..43ddc11c3d 100644
--- a/2019/CVE-2019-2618.json
+++ b/2019/CVE-2019-2618.json
@@ -212,10 +212,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -247,7 +247,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
}
diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json
index d00125cc0b..c77206572a 100644
--- a/2020/CVE-2020-0610.json
+++ b/2020/CVE-2020-0610.json
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
- "updated_at": "2026-05-21T00:18:33Z",
- "pushed_at": "2026-05-21T00:18:29Z",
+ "updated_at": "2026-05-21T03:50:57Z",
+ "pushed_at": "2026-05-21T03:50:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json
index 976c8ab757..c0ef81e621 100644
--- a/2020/CVE-2020-1472.json
+++ b/2020/CVE-2020-1472.json
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
- "updated_at": "2026-05-19T08:17:27Z",
+ "updated_at": "2026-05-21T05:12:18Z",
"pushed_at": "2025-06-27T07:13:13Z",
- "stargazers_count": 1816,
- "watchers_count": 1816,
+ "stargazers_count": 1817,
+ "watchers_count": 1817,
"has_discussions": false,
"forks_count": 356,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 356,
- "watchers": 1816,
+ "watchers": 1817,
"score": 0,
"subscribers_count": 84
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
- "updated_at": "2026-05-20T23:51:10Z",
- "pushed_at": "2026-05-20T23:51:07Z",
+ "updated_at": "2026-05-21T05:55:26Z",
+ "pushed_at": "2026-05-21T05:55:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2020/CVE-2020-17103.json b/2020/CVE-2020-17103.json
index e7bd218bb5..ca20052a78 100644
--- a/2020/CVE-2020-17103.json
+++ b/2020/CVE-2020-17103.json
@@ -14,12 +14,12 @@
"description": "CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys",
"fork": false,
"created_at": "2026-05-14T20:32:21Z",
- "updated_at": "2026-05-20T23:06:43Z",
+ "updated_at": "2026-05-21T05:46:59Z",
"pushed_at": "2026-05-16T06:01:33Z",
- "stargazers_count": 657,
- "watchers_count": 657,
+ "stargazers_count": 659,
+ "watchers_count": 659,
"has_discussions": false,
- "forks_count": 163,
+ "forks_count": 164,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 163,
- "watchers": 657,
+ "forks": 164,
+ "watchers": 659,
"score": 0,
"subscribers_count": 10
},
diff --git a/2020/CVE-2020-2551.json b/2020/CVE-2020-2551.json
index 5e331033e8..0badf34d3d 100644
--- a/2020/CVE-2020-2551.json
+++ b/2020/CVE-2020-2551.json
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
- "updated_at": "2026-05-19T08:17:06Z",
+ "updated_at": "2026-05-21T02:24:04Z",
"pushed_at": "2023-11-24T09:21:56Z",
- "stargazers_count": 2069,
- "watchers_count": 2069,
+ "stargazers_count": 2070,
+ "watchers_count": 2070,
"has_discussions": true,
"forks_count": 332,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 332,
- "watchers": 2069,
+ "watchers": 2070,
"score": 0,
"subscribers_count": 34
},
diff --git a/2021/CVE-2021-21315.json b/2021/CVE-2021-21315.json
index 4087206b51..320c57f926 100644
--- a/2021/CVE-2021-21315.json
+++ b/2021/CVE-2021-21315.json
@@ -19,7 +19,7 @@
"stargazers_count": 160,
"watchers_count": 160,
"has_discussions": false,
- "forks_count": 26,
+ "forks_count": 25,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -40,7 +40,7 @@
"vulnerability"
],
"visibility": "public",
- "forks": 26,
+ "forks": 25,
"watchers": 160,
"score": 0,
"subscribers_count": 8
diff --git a/2021/CVE-2021-3129.json b/2021/CVE-2021-3129.json
index ce6e6f5dee..3c1428603c 100644
--- a/2021/CVE-2021-3129.json
+++ b/2021/CVE-2021-3129.json
@@ -353,7 +353,7 @@
"stargazers_count": 141,
"watchers_count": 141,
"has_discussions": false,
- "forks_count": 26,
+ "forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -376,7 +376,7 @@
"vulnerability"
],
"visibility": "public",
- "forks": 26,
+ "forks": 27,
"watchers": 141,
"score": 0,
"subscribers_count": 1
diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json
index 219dbf0e9c..5d545a2b39 100644
--- a/2021/CVE-2021-33044.json
+++ b/2021/CVE-2021-33044.json
@@ -151,7 +151,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
+ "forks": 4,
"watchers": 16,
"score": 0,
"subscribers_count": 2
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
- "updated_at": "2026-05-21T00:15:38Z",
- "pushed_at": "2026-05-21T00:15:35Z",
+ "updated_at": "2026-05-21T04:48:52Z",
+ "pushed_at": "2026-05-21T04:48:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
diff --git a/2021/CVE-2021-36981.json b/2021/CVE-2021-36981.json
index a01905203d..46e58b9dd9 100644
--- a/2021/CVE-2021-36981.json
+++ b/2021/CVE-2021-36981.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-04-20T12:26:24Z",
- "updated_at": "2022-05-05T09:18:01Z",
+ "updated_at": "2026-05-21T04:34:08Z",
"pushed_at": "2022-05-05T12:18:59Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 1
}
diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json
index e0a1265aa9..61a6fb830c 100644
--- a/2021/CVE-2021-4034.json
+++ b/2021/CVE-2021-4034.json
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
- "updated_at": "2026-05-20T21:46:22Z",
- "pushed_at": "2026-05-20T21:46:18Z",
+ "updated_at": "2026-05-21T03:57:52Z",
+ "pushed_at": "2026-05-21T03:57:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json
index 6900ebbd34..4c5088cf2a 100644
--- a/2022/CVE-2022-0847.json
+++ b/2022/CVE-2022-0847.json
@@ -113,10 +113,10 @@
"description": "A root exploit for CVE-2022-0847 (Dirty Pipe)",
"fork": false,
"created_at": "2022-03-07T18:55:20Z",
- "updated_at": "2026-05-19T00:15:55Z",
+ "updated_at": "2026-05-21T03:36:25Z",
"pushed_at": "2022-03-08T06:20:05Z",
- "stargazers_count": 1128,
- "watchers_count": 1128,
+ "stargazers_count": 1129,
+ "watchers_count": 1129,
"has_discussions": false,
"forks_count": 221,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 221,
- "watchers": 1128,
+ "watchers": 1129,
"score": 0,
"subscribers_count": 17
},
diff --git a/2022/CVE-2022-1026.json b/2022/CVE-2022-1026.json
index a01a9821f9..617fe1c962 100644
--- a/2022/CVE-2022-1026.json
+++ b/2022/CVE-2022-1026.json
@@ -146,10 +146,10 @@
"description": "Kyocera cred dumper based on CVE-2022-1026",
"fork": false,
"created_at": "2026-04-22T15:04:12Z",
- "updated_at": "2026-04-22T15:18:59Z",
+ "updated_at": "2026-05-21T05:48:50Z",
"pushed_at": "2026-04-22T15:18:54Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
}
diff --git a/2022/CVE-2022-20421.json b/2022/CVE-2022-20421.json
index b0354150a4..0a7156dd72 100644
--- a/2022/CVE-2022-20421.json
+++ b/2022/CVE-2022-20421.json
@@ -14,10 +14,10 @@
"description": "Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)",
"fork": false,
"created_at": "2023-03-23T10:25:59Z",
- "updated_at": "2026-05-13T19:49:54Z",
+ "updated_at": "2026-05-21T01:13:23Z",
"pushed_at": "2023-05-27T15:39:41Z",
- "stargazers_count": 285,
- "watchers_count": 285,
+ "stargazers_count": 286,
+ "watchers_count": 286,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
- "watchers": 285,
+ "watchers": 286,
"score": 0,
"subscribers_count": 6
},
diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json
index 5aa8e69d7e..6bc1e7b4ca 100644
--- a/2022/CVE-2022-26134.json
+++ b/2022/CVE-2022-26134.json
@@ -14,10 +14,10 @@
"description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。",
"fork": false,
"created_at": "2022-05-31T07:44:01Z",
- "updated_at": "2026-05-14T13:06:26Z",
+ "updated_at": "2026-05-21T04:09:30Z",
"pushed_at": "2023-02-26T14:06:05Z",
- "stargazers_count": 1245,
- "watchers_count": 1245,
+ "stargazers_count": 1246,
+ "watchers_count": 1246,
"has_discussions": true,
"forks_count": 186,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 186,
- "watchers": 1245,
+ "watchers": 1246,
"score": 0,
"subscribers_count": 1
},
@@ -1473,10 +1473,10 @@
"description": "Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server.",
"fork": false,
"created_at": "2022-07-15T10:06:15Z",
- "updated_at": "2024-02-07T13:03:55Z",
+ "updated_at": "2026-05-21T05:11:50Z",
"pushed_at": "2022-07-21T14:24:29Z",
- "stargazers_count": 11,
- "watchers_count": 11,
+ "stargazers_count": 12,
+ "watchers_count": 12,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -1487,7 +1487,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 11,
+ "watchers": 12,
"score": 0,
"subscribers_count": 1
},
diff --git a/2022/CVE-2022-26923.json b/2022/CVE-2022-26923.json
index aefef2a6c0..4be78aa949 100644
--- a/2022/CVE-2022-26923.json
+++ b/2022/CVE-2022-26923.json
@@ -262,5 +262,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1245224463,
+ "name": "CVE-2022-26923",
+ "full_name": "victorhugomierez\/CVE-2022-26923",
+ "owner": {
+ "login": "victorhugomierez",
+ "id": 54669288,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54669288?v=4",
+ "html_url": "https:\/\/github.com\/victorhugomierez",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/victorhugomierez\/CVE-2022-26923",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-21T03:02:44Z",
+ "updated_at": "2026-05-21T03:04:41Z",
+ "pushed_at": "2026-05-21T03:04:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2022/CVE-2022-46364.json b/2022/CVE-2022-46364.json
index 072337d334..d6b7f35882 100644
--- a/2022/CVE-2022-46364.json
+++ b/2022/CVE-2022-46364.json
@@ -14,10 +14,10 @@
"description": "CVE-2022-46364-Poc Apache CXF SSRF via MTOM XOP:Include",
"fork": false,
"created_at": "2026-03-28T21:10:47Z",
- "updated_at": "2026-04-23T00:26:00Z",
+ "updated_at": "2026-05-21T05:53:01Z",
"pushed_at": "2026-03-28T21:13:06Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
diff --git a/2023/CVE-2023-29401.json b/2023/CVE-2023-29401.json
index 7c3ca81648..e71c018e90 100644
--- a/2023/CVE-2023-29401.json
+++ b/2023/CVE-2023-29401.json
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-05-20T05:45:18Z",
"updated_at": "2026-05-20T20:01:05Z",
- "pushed_at": "2026-05-20T23:18:54Z",
+ "pushed_at": "2026-05-21T03:00:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json
index 71bf645e44..b13495c1f3 100644
--- a/2023/CVE-2023-32434.json
+++ b/2023/CVE-2023-32434.json
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
- "updated_at": "2026-05-21T00:15:00Z",
- "pushed_at": "2026-05-21T00:14:55Z",
+ "updated_at": "2026-05-21T06:33:27Z",
+ "pushed_at": "2026-05-21T06:33:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-35317.json b/2023/CVE-2023-35317.json
index 9ae658062b..81c2f8d5dd 100644
--- a/2023/CVE-2023-35317.json
+++ b/2023/CVE-2023-35317.json
@@ -14,12 +14,12 @@
"description": "Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317",
"fork": false,
"created_at": "2025-11-16T08:10:33Z",
- "updated_at": "2026-05-20T06:19:51Z",
+ "updated_at": "2026-05-21T02:50:57Z",
"pushed_at": "2025-12-10T21:33:18Z",
- "stargazers_count": 12,
- "watchers_count": 12,
+ "stargazers_count": 13,
+ "watchers_count": 13,
"has_discussions": false,
- "forks_count": 2,
+ "forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"security"
],
"visibility": "public",
- "forks": 2,
- "watchers": 12,
+ "forks": 3,
+ "watchers": 13,
"score": 0,
"subscribers_count": 0
}
diff --git a/2023/CVE-2023-36899.json b/2023/CVE-2023-36899.json
index bd80003677..f527f849ee 100644
--- a/2023/CVE-2023-36899.json
+++ b/2023/CVE-2023-36899.json
@@ -47,10 +47,10 @@
"description": "CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。",
"fork": false,
"created_at": "2023-08-15T23:36:17Z",
- "updated_at": "2025-11-29T15:42:14Z",
+ "updated_at": "2026-05-21T02:49:34Z",
"pushed_at": "2023-08-15T23:37:11Z",
- "stargazers_count": 32,
- "watchers_count": 32,
+ "stargazers_count": 33,
+ "watchers_count": 33,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
- "watchers": 32,
+ "watchers": 33,
"score": 0,
"subscribers_count": 2
}
diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json
index d84336bf36..3a0e4b5951 100644
--- a/2023/CVE-2023-39910.json
+++ b/2023/CVE-2023-39910.json
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
- "updated_at": "2026-05-20T22:36:25Z",
- "pushed_at": "2026-05-20T22:36:21Z",
+ "updated_at": "2026-05-21T04:48:57Z",
+ "pushed_at": "2026-05-21T04:48:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-46604.json b/2023/CVE-2023-46604.json
index a8521711b4..da42219839 100644
--- a/2023/CVE-2023-46604.json
+++ b/2023/CVE-2023-46604.json
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 710778413,
- "name": "ActiveMQ_RCE_Pro_Max",
- "full_name": "ImuSpirit\/ActiveMQ_RCE_Pro_Max",
- "owner": {
- "login": "ImuSpirit",
- "id": 36792635,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36792635?v=4",
- "html_url": "https:\/\/github.com\/ImuSpirit",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ImuSpirit\/ActiveMQ_RCE_Pro_Max",
- "description": "CVE-2023-46604",
- "fork": false,
- "created_at": "2023-10-27T12:22:43Z",
- "updated_at": "2026-01-12T08:58:41Z",
- "pushed_at": "2023-11-03T14:14:31Z",
- "stargazers_count": 63,
- "watchers_count": 63,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 63,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 714084454,
"name": "CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ",
@@ -362,6 +329,39 @@
"score": 0,
"subscribers_count": 1
},
+ {
+ "id": 721014510,
+ "name": "ActiveMQ_RCE_Pro_Max",
+ "full_name": "CrackerCat\/ActiveMQ_RCE_Pro_Max",
+ "owner": {
+ "login": "CrackerCat",
+ "id": 17995064,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17995064?v=4",
+ "html_url": "https:\/\/github.com\/CrackerCat",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CrackerCat\/ActiveMQ_RCE_Pro_Max",
+ "description": "CVE-2023-46604",
+ "fork": false,
+ "created_at": "2023-11-20T07:19:40Z",
+ "updated_at": "2023-11-20T07:19:40Z",
+ "pushed_at": "2023-11-03T14:14:31Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 721121106,
"name": "CVE-2023-46604-demo",
diff --git a/2024/CVE-2024-0311.json b/2024/CVE-2024-0311.json
deleted file mode 100644
index 813402fa2e..0000000000
--- a/2024/CVE-2024-0311.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880277050,
- "name": "CVE-2024-0311",
- "full_name": "calligraf0\/CVE-2024-0311",
- "owner": {
- "login": "calligraf0",
- "id": 115566010,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115566010?v=4",
- "html_url": "https:\/\/github.com\/calligraf0",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/calligraf0\/CVE-2024-0311",
- "description": "Exploit for CVE-2024-0311",
- "fork": false,
- "created_at": "2024-10-29T12:47:18Z",
- "updated_at": "2025-06-02T19:01:07Z",
- "pushed_at": "2024-10-30T16:07:45Z",
- "stargazers_count": 9,
- "watchers_count": 9,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 9,
- "score": 0,
- "subscribers_count": 2
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-0582.json b/2024/CVE-2024-0582.json
index 7d156f4ad8..80682f2c99 100644
--- a/2024/CVE-2024-0582.json
+++ b/2024/CVE-2024-0582.json
@@ -98,53 +98,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 866966019,
- "name": "CVE-2024-0582",
- "full_name": "geniuszly\/CVE-2024-0582",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/CVE-2024-0582",
- "description": "is a PoC exploit targeting a specific vulnerability in the Linux kernel (CVE-2024-0582)",
- "fork": false,
- "created_at": "2024-10-03T07:56:36Z",
- "updated_at": "2025-07-13T15:51:55Z",
- "pushed_at": "2024-10-03T07:58:47Z",
- "stargazers_count": 13,
- "watchers_count": 13,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "buffer-overflow",
- "cve",
- "cve-2024-0582",
- "ethical-hacking",
- "exploit",
- "exploit-development",
- "iouring",
- "iouring-exploit",
- "poc",
- "security",
- "vuln",
- "vulnerability",
- "vulnerability-research"
- ],
- "visibility": "public",
- "forks": 1,
- "watchers": 13,
- "score": 0,
- "subscribers_count": 2
- },
{
"id": 903915508,
"name": "CVE-2024-0582-dataonly",
diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json
index 0a8e55fa51..7e557b0ed5 100644
--- a/2024/CVE-2024-0670.json
+++ b/2024/CVE-2024-0670.json
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
- "updated_at": "2026-05-20T22:36:44Z",
- "pushed_at": "2026-05-20T22:36:40Z",
+ "updated_at": "2026-05-21T04:49:20Z",
+ "pushed_at": "2026-05-21T04:49:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-10140.json b/2024/CVE-2024-10140.json
deleted file mode 100644
index 654fec7c41..0000000000
--- a/2024/CVE-2024-10140.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 875667904,
- "name": "CVE-2024-10140",
- "full_name": "holypryx\/CVE-2024-10140",
- "owner": {
- "login": "holypryx",
- "id": 182792867,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182792867?v=4",
- "html_url": "https:\/\/github.com\/holypryx",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/holypryx\/CVE-2024-10140",
- "description": null,
- "fork": false,
- "created_at": "2024-10-20T15:29:14Z",
- "updated_at": "2025-06-18T07:24:57Z",
- "pushed_at": "2024-10-20T15:31:02Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10354.json b/2024/CVE-2024-10354.json
deleted file mode 100644
index d3da96d568..0000000000
--- a/2024/CVE-2024-10354.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 877188085,
- "name": "CVE-2024-10354",
- "full_name": "K1nakoo\/CVE-2024-10354",
- "owner": {
- "login": "K1nakoo",
- "id": 105909793,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105909793?v=4",
- "html_url": "https:\/\/github.com\/K1nakoo",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/K1nakoo\/CVE-2024-10354",
- "description": null,
- "fork": false,
- "created_at": "2024-10-23T08:37:18Z",
- "updated_at": "2024-10-26T13:50:18Z",
- "pushed_at": "2024-10-23T08:37:53Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10355.json b/2024/CVE-2024-10355.json
deleted file mode 100644
index 866168333d..0000000000
--- a/2024/CVE-2024-10355.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 877198778,
- "name": "CVE-2024-10355",
- "full_name": "K1nakoo\/CVE-2024-10355",
- "owner": {
- "login": "K1nakoo",
- "id": 105909793,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105909793?v=4",
- "html_url": "https:\/\/github.com\/K1nakoo",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/K1nakoo\/CVE-2024-10355",
- "description": null,
- "fork": false,
- "created_at": "2024-10-23T08:59:51Z",
- "updated_at": "2024-10-26T13:50:29Z",
- "pushed_at": "2024-10-23T09:00:22Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10410.json b/2024/CVE-2024-10410.json
deleted file mode 100644
index 723ba78fdd..0000000000
--- a/2024/CVE-2024-10410.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 878506568,
- "name": "CVE-2024-10410",
- "full_name": "K1nakoo\/CVE-2024-10410",
- "owner": {
- "login": "K1nakoo",
- "id": 105909793,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105909793?v=4",
- "html_url": "https:\/\/github.com\/K1nakoo",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/K1nakoo\/CVE-2024-10410",
- "description": null,
- "fork": false,
- "created_at": "2024-10-25T14:15:56Z",
- "updated_at": "2024-10-26T13:44:39Z",
- "pushed_at": "2024-10-25T14:16:30Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10448.json b/2024/CVE-2024-10448.json
deleted file mode 100644
index 4203a35adc..0000000000
--- a/2024/CVE-2024-10448.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 879406614,
- "name": "CVE-2024-10448",
- "full_name": "bevennyamande\/CVE-2024-10448",
- "owner": {
- "login": "bevennyamande",
- "id": 10162710,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10162710?v=4",
- "html_url": "https:\/\/github.com\/bevennyamande",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bevennyamande\/CVE-2024-10448",
- "description": "Blood bank CSRF Attack POC",
- "fork": false,
- "created_at": "2024-10-27T20:18:35Z",
- "updated_at": "2025-04-01T07:45:06Z",
- "pushed_at": "2024-10-27T22:12:30Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10449.json b/2024/CVE-2024-10449.json
deleted file mode 100644
index 8d5204fe05..0000000000
--- a/2024/CVE-2024-10449.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883977165,
- "name": "CVE-2024-10449-patch",
- "full_name": "g-u-i-d\/CVE-2024-10449-patch",
- "owner": {
- "login": "g-u-i-d",
- "id": 3040892,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3040892?v=4",
- "html_url": "https:\/\/github.com\/g-u-i-d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/g-u-i-d\/CVE-2024-10449-patch",
- "description": null,
- "fork": false,
- "created_at": "2024-11-05T23:06:49Z",
- "updated_at": "2024-11-05T23:15:23Z",
- "pushed_at": "2024-11-05T23:15:20Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10470.json b/2024/CVE-2024-10470.json
index 752fd5a2ba..76ca6934ef 100644
--- a/2024/CVE-2024-10470.json
+++ b/2024/CVE-2024-10470.json
@@ -1,37 +1,4 @@
[
- {
- "id": 885543843,
- "name": "CVE-2024-10470",
- "full_name": "RandomRobbieBF\/CVE-2024-10470",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-10470",
- "description": "WPLMS Learning Management System for WordPress <= 4.962 – Unauthenticated Arbitrary File Read and Deletion",
- "fork": false,
- "created_at": "2024-11-08T19:47:34Z",
- "updated_at": "2024-11-08T19:50:12Z",
- "pushed_at": "2024-11-08T19:50:08Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 896308178,
"name": "CVE-2024-10470",
diff --git a/2024/CVE-2024-10557.json b/2024/CVE-2024-10557.json
deleted file mode 100644
index c2951bae50..0000000000
--- a/2024/CVE-2024-10557.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 879936174,
- "name": "CVE-2024-10557",
- "full_name": "bevennyamande\/CVE-2024-10557",
- "owner": {
- "login": "bevennyamande",
- "id": 10162710,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10162710?v=4",
- "html_url": "https:\/\/github.com\/bevennyamande",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bevennyamande\/CVE-2024-10557",
- "description": "A CSRF POC for Updating the Profile of a Hospital leading to Account Takeover",
- "fork": false,
- "created_at": "2024-10-28T20:14:45Z",
- "updated_at": "2024-10-30T21:38:18Z",
- "pushed_at": "2024-10-28T20:40:04Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10586.json b/2024/CVE-2024-10586.json
index 8c80de90db..6296af9779 100644
--- a/2024/CVE-2024-10586.json
+++ b/2024/CVE-2024-10586.json
@@ -1,37 +1,4 @@
[
- {
- "id": 886165127,
- "name": "CVE-2024-10586",
- "full_name": "RandomRobbieBF\/CVE-2024-10586",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-10586",
- "description": "Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation",
- "fork": false,
- "created_at": "2024-11-10T11:30:05Z",
- "updated_at": "2024-11-15T13:24:00Z",
- "pushed_at": "2024-11-10T11:30:46Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 915504134,
"name": "CVE-2024-10586-Poc",
diff --git a/2024/CVE-2024-10605.json b/2024/CVE-2024-10605.json
deleted file mode 100644
index 3ada0bfa60..0000000000
--- a/2024/CVE-2024-10605.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 881099968,
- "name": "CVE-2024-10605",
- "full_name": "bevennyamande\/CVE-2024-10605",
- "owner": {
- "login": "bevennyamande",
- "id": 10162710,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10162710?v=4",
- "html_url": "https:\/\/github.com\/bevennyamande",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bevennyamande\/CVE-2024-10605",
- "description": null,
- "fork": false,
- "created_at": "2024-10-30T22:56:24Z",
- "updated_at": "2024-11-03T23:41:01Z",
- "pushed_at": "2024-10-30T23:06:15Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-10629.json b/2024/CVE-2024-10629.json
index 6af1072210..f2715ffe10 100644
--- a/2024/CVE-2024-10629.json
+++ b/2024/CVE-2024-10629.json
@@ -1,37 +1,4 @@
[
- {
- "id": 887379678,
- "name": "CVE-2024-10629",
- "full_name": "RandomRobbieBF\/CVE-2024-10629",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-10629",
- "description": "GPX Viewer <= 2.2.8 - Authenticated (Subscriber+) Arbitrary File Creation",
- "fork": false,
- "created_at": "2024-11-12T16:36:20Z",
- "updated_at": "2024-11-12T16:38:23Z",
- "pushed_at": "2024-11-12T16:38:19Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 945593807,
"name": "CVE-2024-10629",
diff --git a/2024/CVE-2024-1071.json b/2024/CVE-2024-1071.json
index 756d7a7e3e..fb9620fd81 100644
--- a/2024/CVE-2024-1071.json
+++ b/2024/CVE-2024-1071.json
@@ -196,38 +196,5 @@
"watchers": 2,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 881948753,
- "name": "CVE-2024-1071-PoC-Script",
- "full_name": "Spid3heX\/CVE-2024-1071-PoC-Script",
- "owner": {
- "login": "Spid3heX",
- "id": 183846301,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183846301?v=4",
- "html_url": "https:\/\/github.com\/Spid3heX",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Spid3heX\/CVE-2024-1071-PoC-Script",
- "description": "wp\/ultimate-member - SQL Injection Vulnerability Exploit Script.",
- "fork": false,
- "created_at": "2024-11-01T14:57:34Z",
- "updated_at": "2025-07-04T19:38:13Z",
- "pushed_at": "2024-11-01T18:14:34Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-10914.json b/2024/CVE-2024-10914.json
index 6c279a6be3..53b60aae4c 100644
--- a/2024/CVE-2024-10914.json
+++ b/2024/CVE-2024-10914.json
@@ -1,37 +1,4 @@
[
- {
- "id": 885936481,
- "name": "CVE-2024-10914",
- "full_name": "imnotcha0s\/CVE-2024-10914",
- "owner": {
- "login": "imnotcha0s",
- "id": 64480742,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64480742?v=4",
- "html_url": "https:\/\/github.com\/imnotcha0s",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/imnotcha0s\/CVE-2024-10914",
- "description": "Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection",
- "fork": false,
- "created_at": "2024-11-09T19:30:39Z",
- "updated_at": "2026-04-07T06:07:55Z",
- "pushed_at": "2024-11-09T19:31:42Z",
- "stargazers_count": 13,
- "watchers_count": 13,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 13,
- "score": 0,
- "subscribers_count": 2
- },
{
"id": 886174538,
"name": "CVE-2024-10914",
@@ -73,72 +40,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 887759528,
- "name": "CVE-2024-10914",
- "full_name": "Egi08\/CVE-2024-10914",
- "owner": {
- "login": "Egi08",
- "id": 60685799,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60685799?v=4",
- "html_url": "https:\/\/github.com\/Egi08",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Egi08\/CVE-2024-10914",
- "description": "CVE-2024-10914_Manual testing with burpsuite ",
- "fork": false,
- "created_at": "2024-11-13T08:33:16Z",
- "updated_at": "2024-11-16T04:27:57Z",
- "pushed_at": "2024-11-13T09:39:25Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 888892906,
- "name": "D-Link-NAS-CVE-2024-10914-",
- "full_name": "Bu0uCat\/D-Link-NAS-CVE-2024-10914-",
- "owner": {
- "login": "Bu0uCat",
- "id": 169526025,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169526025?v=4",
- "html_url": "https:\/\/github.com\/Bu0uCat",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Bu0uCat\/D-Link-NAS-CVE-2024-10914-",
- "description": "这是一个D-Link rce漏洞 检测程序",
- "fork": false,
- "created_at": "2024-11-15T07:56:21Z",
- "updated_at": "2024-11-15T07:59:44Z",
- "pushed_at": "2024-11-15T07:59:36Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 889560261,
"name": "CVE-2024-10914",
diff --git a/2024/CVE-2024-10924.json b/2024/CVE-2024-10924.json
index c978dcb860..de5fb00e98 100644
--- a/2024/CVE-2024-10924.json
+++ b/2024/CVE-2024-10924.json
@@ -1,37 +1,4 @@
[
- {
- "id": 888592127,
- "name": "CVE-2024-10924",
- "full_name": "RandomRobbieBF\/CVE-2024-10924",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-10924",
- "description": " Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass",
- "fork": false,
- "created_at": "2024-11-14T16:59:52Z",
- "updated_at": "2025-01-12T18:31:17Z",
- "pushed_at": "2024-11-14T17:00:59Z",
- "stargazers_count": 4,
- "watchers_count": 4,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 4,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 890585149,
"name": "wordpress-really-simple-security-authn-bypass-vulnerable-application",
diff --git a/2024/CVE-2024-10958.json b/2024/CVE-2024-10958.json
deleted file mode 100644
index 26d856a5f2..0000000000
--- a/2024/CVE-2024-10958.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 886253464,
- "name": "CVE-2024-10958-WPPA-Exploit",
- "full_name": "reinh3rz\/CVE-2024-10958-WPPA-Exploit",
- "owner": {
- "login": "reinh3rz",
- "id": 144375735,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144375735?v=4",
- "html_url": "https:\/\/github.com\/reinh3rz",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/reinh3rz\/CVE-2024-10958-WPPA-Exploit",
- "description": null,
- "fork": false,
- "created_at": "2024-11-10T15:43:14Z",
- "updated_at": "2024-11-11T11:53:02Z",
- "pushed_at": "2024-11-10T16:41:57Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-1207.json b/2024/CVE-2024-1207.json
deleted file mode 100644
index 830702d6e3..0000000000
--- a/2024/CVE-2024-1207.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 869417848,
- "name": "CVE-2024-1207",
- "full_name": "sahar042\/CVE-2024-1207",
- "owner": {
- "login": "sahar042",
- "id": 49879157,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49879157?v=4",
- "html_url": "https:\/\/github.com\/sahar042",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/sahar042\/CVE-2024-1207",
- "description": "The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attac",
- "fork": false,
- "created_at": "2024-10-08T09:05:16Z",
- "updated_at": "2024-10-08T09:16:33Z",
- "pushed_at": "2024-10-08T09:08:07Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-14027.json b/2024/CVE-2024-14027.json
index a7a1caebb2..1a014a3166 100644
--- a/2024/CVE-2024-14027.json
+++ b/2024/CVE-2024-14027.json
@@ -14,10 +14,10 @@
"description": "Exploits for CVE-2024-14027 creating using AI\/Claude as a test. ",
"fork": false,
"created_at": "2026-03-13T17:30:21Z",
- "updated_at": "2026-04-11T18:37:33Z",
+ "updated_at": "2026-05-21T05:26:35Z",
"pushed_at": "2026-03-13T19:40:44Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
}
diff --git a/2024/CVE-2024-1698.json b/2024/CVE-2024-1698.json
index 7854ab2d48..cc2c738494 100644
--- a/2024/CVE-2024-1698.json
+++ b/2024/CVE-2024-1698.json
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 872446949,
- "name": "CVE-2024-1698",
- "full_name": "shanglyu\/CVE-2024-1698",
- "owner": {
- "login": "shanglyu",
- "id": 62023200,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62023200?v=4",
- "html_url": "https:\/\/github.com\/shanglyu",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/shanglyu\/CVE-2024-1698",
- "description": null,
- "fork": false,
- "created_at": "2024-10-14T13:02:26Z",
- "updated_at": "2024-10-14T13:09:39Z",
- "pushed_at": "2024-10-14T13:09:35Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 889535406,
"name": "WordPress-NotificationX-CVE-2024-1698",
diff --git a/2024/CVE-2024-21320.json b/2024/CVE-2024-21320.json
deleted file mode 100644
index a8cf3b1739..0000000000
--- a/2024/CVE-2024-21320.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880686304,
- "name": "CVE-2024-21320-POC",
- "full_name": "sxyrxyy\/CVE-2024-21320-POC",
- "owner": {
- "login": "sxyrxyy",
- "id": 125439203,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125439203?v=4",
- "html_url": "https:\/\/github.com\/sxyrxyy",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/sxyrxyy\/CVE-2024-21320-POC",
- "description": null,
- "fork": false,
- "created_at": "2024-10-30T06:58:19Z",
- "updated_at": "2025-08-21T02:28:10Z",
- "pushed_at": "2024-10-30T06:58:59Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-21626.json b/2024/CVE-2024-21626.json
index 75f74906f9..671310b5e1 100644
--- a/2024/CVE-2024-21626.json
+++ b/2024/CVE-2024-21626.json
@@ -395,39 +395,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 884775064,
- "name": "CVE-2024-21626-old-docker-versions",
- "full_name": "Sk3pper\/CVE-2024-21626-old-docker-versions",
- "owner": {
- "login": "Sk3pper",
- "id": 13051136,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13051136?v=4",
- "html_url": "https:\/\/github.com\/Sk3pper",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Sk3pper\/CVE-2024-21626-old-docker-versions",
- "description": null,
- "fork": false,
- "created_at": "2024-11-07T11:17:45Z",
- "updated_at": "2024-11-08T14:53:54Z",
- "pushed_at": "2024-11-08T14:53:51Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 892837460,
"name": "little-joke",
diff --git a/2024/CVE-2024-21762.json b/2024/CVE-2024-21762.json
index f46d065a00..247e9d2363 100644
--- a/2024/CVE-2024-21762.json
+++ b/2024/CVE-2024-21762.json
@@ -164,39 +164,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 877697658,
- "name": "CVE-2024-21762-Checker",
- "full_name": "deFr0ggy\/CVE-2024-21762-Checker",
- "owner": {
- "login": "deFr0ggy",
- "id": 16836050,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16836050?v=4",
- "html_url": "https:\/\/github.com\/deFr0ggy",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/deFr0ggy\/CVE-2024-21762-Checker",
- "description": "This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses.",
- "fork": false,
- "created_at": "2024-10-24T04:58:28Z",
- "updated_at": "2024-10-24T04:58:28Z",
- "pushed_at": "2024-03-25T11:28:23Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 988496476,
"name": "CVE-2024-21762_FortiNet_PoC",
diff --git a/2024/CVE-2024-2242.json b/2024/CVE-2024-2242.json
deleted file mode 100644
index 01d54b6ab2..0000000000
--- a/2024/CVE-2024-2242.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888883677,
- "name": "CVE-2024-2242",
- "full_name": "RandomRobbieBF\/CVE-2024-2242",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-2242",
- "description": "Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting",
- "fork": false,
- "created_at": "2024-11-15T07:32:31Z",
- "updated_at": "2024-11-15T07:34:53Z",
- "pushed_at": "2024-11-15T07:34:50Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-23113.json b/2024/CVE-2024-23113.json
index d5e1fa5961..96d338f116 100644
--- a/2024/CVE-2024-23113.json
+++ b/2024/CVE-2024-23113.json
@@ -1,103 +1,4 @@
[
- {
- "id": 871254396,
- "name": "CVE-2024-23113",
- "full_name": "CheckCve2\/CVE-2024-23113",
- "owner": {
- "login": "CheckCve2",
- "id": 184666422,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184666422?v=4",
- "html_url": "https:\/\/github.com\/CheckCve2",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/CheckCve2\/CVE-2024-23113",
- "description": "test_private_CVE",
- "fork": false,
- "created_at": "2024-10-11T15:16:00Z",
- "updated_at": "2025-03-30T04:00:38Z",
- "pushed_at": "2024-10-11T15:49:17Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 2
- },
- {
- "id": 876057743,
- "name": "CVE-2024-23113",
- "full_name": "p33d\/CVE-2024-23113",
- "owner": {
- "login": "p33d",
- "id": 123099747,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123099747?v=4",
- "html_url": "https:\/\/github.com\/p33d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/p33d\/CVE-2024-23113",
- "description": null,
- "fork": false,
- "created_at": "2024-10-21T10:27:52Z",
- "updated_at": "2026-05-18T02:44:01Z",
- "pushed_at": "2024-10-27T17:49:33Z",
- "stargazers_count": 11,
- "watchers_count": 11,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 11,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 881252874,
- "name": "CVE-2024-23113",
- "full_name": "puckiestyle\/CVE-2024-23113",
- "owner": {
- "login": "puckiestyle",
- "id": 57447087,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57447087?v=4",
- "html_url": "https:\/\/github.com\/puckiestyle",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/puckiestyle\/CVE-2024-23113",
- "description": null,
- "fork": false,
- "created_at": "2024-10-31T07:44:06Z",
- "updated_at": "2025-02-02T14:56:42Z",
- "pushed_at": "2024-10-31T07:46:02Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 976374766,
"name": "CVE-2024-23113",
diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json
index 1a27984aa9..fbdcb318aa 100644
--- a/2024/CVE-2024-23222.json
+++ b/2024/CVE-2024-23222.json
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
- "updated_at": "2026-05-20T23:20:04Z",
- "pushed_at": "2026-05-20T23:20:00Z",
+ "updated_at": "2026-05-21T05:34:47Z",
+ "pushed_at": "2026-05-21T05:34:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -130,8 +130,8 @@
"description": "CVE-2024-23222 WebKit type confusion → iOS 16.4.1 sandbox escape. Full chain: JSC JIT confusion → addrof\/read64\/write64 → WASM indirect call → arbitrary C functions → file write outside sandbox.",
"fork": false,
"created_at": "2026-05-19T10:09:50Z",
- "updated_at": "2026-05-20T22:36:17Z",
- "pushed_at": "2026-05-20T22:36:13Z",
+ "updated_at": "2026-05-21T06:32:59Z",
+ "pushed_at": "2026-05-21T06:32:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-23334.json b/2024/CVE-2024-23334.json
index 9abe8af2dc..521fb119bb 100644
--- a/2024/CVE-2024-23334.json
+++ b/2024/CVE-2024-23334.json
@@ -234,39 +234,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 875667799,
- "name": "CVE-2024-23334",
- "full_name": "wizarddos\/CVE-2024-23334",
- "owner": {
- "login": "wizarddos",
- "id": 69435721,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69435721?v=4",
- "html_url": "https:\/\/github.com\/wizarddos",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/wizarddos\/CVE-2024-23334",
- "description": "Proof-of-Concept for LFI\/Path Traversal vulnerability in Aiohttp =< 3.9.1",
- "fork": false,
- "created_at": "2024-10-20T15:28:58Z",
- "updated_at": "2025-08-12T13:26:30Z",
- "pushed_at": "2024-10-20T16:48:53Z",
- "stargazers_count": 4,
- "watchers_count": 4,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 4,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 885051210,
"name": "CVE-2024-23334",
@@ -300,39 +267,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 885827821,
- "name": "CVE-2024-23334-PoC",
- "full_name": "Arc4he\/CVE-2024-23334-PoC",
- "owner": {
- "login": "Arc4he",
- "id": 168012496,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168012496?v=4",
- "html_url": "https:\/\/github.com\/Arc4he",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Arc4he\/CVE-2024-23334-PoC",
- "description": "Proof of concept of the parh traversal in python AioHTTP library =< 3.9.1",
- "fork": false,
- "created_at": "2024-11-09T13:59:28Z",
- "updated_at": "2025-03-18T17:59:39Z",
- "pushed_at": "2024-11-09T14:18:02Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 888709297,
"name": "LFI-aiohttp-CVE-2024-23334-PoC",
diff --git a/2024/CVE-2024-24590.json b/2024/CVE-2024-24590.json
index 20ccced527..7f727ad1e3 100644
--- a/2024/CVE-2024-24590.json
+++ b/2024/CVE-2024-24590.json
@@ -205,38 +205,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 869071531,
- "name": "CVE-2024-24590",
- "full_name": "j3r1ch0123\/CVE-2024-24590",
- "owner": {
- "login": "j3r1ch0123",
- "id": 110147529,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110147529?v=4",
- "html_url": "https:\/\/github.com\/j3r1ch0123",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/j3r1ch0123\/CVE-2024-24590",
- "description": "Created this exploit for the Hack The Box machine, Blurry.",
- "fork": false,
- "created_at": "2024-10-07T17:07:10Z",
- "updated_at": "2024-10-07T17:18:24Z",
- "pushed_at": "2024-10-07T17:18:20Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-24684.json b/2024/CVE-2024-24684.json
deleted file mode 100644
index 96497dd660..0000000000
--- a/2024/CVE-2024-24684.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 873286914,
- "name": "CVE-2024-24684",
- "full_name": "SpiralBL0CK\/CVE-2024-24684",
- "owner": {
- "login": "SpiralBL0CK",
- "id": 25670930,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
- "html_url": "https:\/\/github.com\/SpiralBL0CK",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-24684",
- "description": "Crash File ( Poc for CVE-2024-24684)",
- "fork": false,
- "created_at": "2024-10-15T23:04:32Z",
- "updated_at": "2024-10-15T23:05:12Z",
- "pushed_at": "2024-10-15T23:05:08Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-24685.json b/2024/CVE-2024-24685.json
deleted file mode 100644
index e8dd13d153..0000000000
--- a/2024/CVE-2024-24685.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 873290083,
- "name": "CVE-2024-24685",
- "full_name": "SpiralBL0CK\/CVE-2024-24685",
- "owner": {
- "login": "SpiralBL0CK",
- "id": 25670930,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
- "html_url": "https:\/\/github.com\/SpiralBL0CK",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-24685",
- "description": "Crash File ( Poc for CVE-2024-24685)",
- "fork": false,
- "created_at": "2024-10-15T23:16:05Z",
- "updated_at": "2024-10-15T23:16:35Z",
- "pushed_at": "2024-10-15T23:16:32Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-24686.json b/2024/CVE-2024-24686.json
deleted file mode 100644
index 9a60080445..0000000000
--- a/2024/CVE-2024-24686.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 873291160,
- "name": "CVE-2024-24686",
- "full_name": "SpiralBL0CK\/CVE-2024-24686",
- "owner": {
- "login": "SpiralBL0CK",
- "id": 25670930,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4",
- "html_url": "https:\/\/github.com\/SpiralBL0CK",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-24686",
- "description": "Crash File ( Poc for CVE-2024-24686)",
- "fork": false,
- "created_at": "2024-10-15T23:20:34Z",
- "updated_at": "2024-10-16T08:47:37Z",
- "pushed_at": "2024-10-15T23:20:47Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-24725.json b/2024/CVE-2024-24725.json
deleted file mode 100644
index 1c9c96e50a..0000000000
--- a/2024/CVE-2024-24725.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 877945371,
- "name": "CVE-2024-24725-PoC",
- "full_name": "MelkorW\/CVE-2024-24725-PoC",
- "owner": {
- "login": "MelkorW",
- "id": 144314304,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144314304?v=4",
- "html_url": "https:\/\/github.com\/MelkorW",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/MelkorW\/CVE-2024-24725-PoC",
- "description": null,
- "fork": false,
- "created_at": "2024-10-24T14:07:47Z",
- "updated_at": "2024-10-25T07:04:17Z",
- "pushed_at": "2024-10-24T14:08:15Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-24919.json b/2024/CVE-2024-24919.json
index 84db99bb56..ca6ea2b6d0 100644
--- a/2024/CVE-2024-24919.json
+++ b/2024/CVE-2024-24919.json
@@ -1637,39 +1637,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 879969031,
- "name": "CVE-2024-24919_POC",
- "full_name": "sar-3mar\/CVE-2024-24919_POC",
- "owner": {
- "login": "sar-3mar",
- "id": 105809777,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105809777?v=4",
- "html_url": "https:\/\/github.com\/sar-3mar",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/sar-3mar\/CVE-2024-24919_POC",
- "description": "It's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd ",
- "fork": false,
- "created_at": "2024-10-28T21:54:41Z",
- "updated_at": "2024-10-28T22:08:32Z",
- "pushed_at": "2024-10-28T22:08:28Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 906477862,
"name": "Check-Point_poc",
diff --git a/2024/CVE-2024-26160.json b/2024/CVE-2024-26160.json
deleted file mode 100644
index a326200127..0000000000
--- a/2024/CVE-2024-26160.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 868851090,
- "name": "CVE-2024-26160",
- "full_name": "CrackerCat\/CVE-2024-26160",
- "owner": {
- "login": "CrackerCat",
- "id": 17995064,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17995064?v=4",
- "html_url": "https:\/\/github.com\/CrackerCat",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/CrackerCat\/CVE-2024-26160",
- "description": "cldflt.sys information disclosure vulnerability (KB5034765 - KB5035853, Win 11).",
- "fork": false,
- "created_at": "2024-10-07T09:46:09Z",
- "updated_at": "2026-04-25T05:38:19Z",
- "pushed_at": "2024-10-04T00:14:36Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-26229.json b/2024/CVE-2024-26229.json
index 13b0d34939..2ffb01f886 100644
--- a/2024/CVE-2024-26229.json
+++ b/2024/CVE-2024-26229.json
@@ -164,39 +164,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 871953279,
- "name": "CVE-2024-26229",
- "full_name": "mqxmm\/CVE-2024-26229",
- "owner": {
- "login": "mqxmm",
- "id": 79595418,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79595418?v=4",
- "html_url": "https:\/\/github.com\/mqxmm",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mqxmm\/CVE-2024-26229",
- "description": null,
- "fork": false,
- "created_at": "2024-10-13T12:10:35Z",
- "updated_at": "2024-10-13T12:11:24Z",
- "pushed_at": "2024-10-13T12:11:21Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1193447514,
"name": "CVE-2024-26229",
diff --git a/2024/CVE-2024-26304.json b/2024/CVE-2024-26304.json
deleted file mode 100644
index 7850003b17..0000000000
--- a/2024/CVE-2024-26304.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867909796,
- "name": "CVE-2024-26304-RCE-exploit",
- "full_name": "X-Projetion\/CVE-2024-26304-RCE-exploit",
- "owner": {
- "login": "X-Projetion",
- "id": 161194427,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161194427?v=4",
- "html_url": "https:\/\/github.com\/X-Projetion",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/X-Projetion\/CVE-2024-26304-RCE-exploit",
- "description": "CVE-2024-26304 is a critical vulnerability (CVSS score of 9.8) affecting ArubaOS",
- "fork": false,
- "created_at": "2024-10-05T01:38:36Z",
- "updated_at": "2026-01-27T02:28:36Z",
- "pushed_at": "2024-10-05T01:51:59Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-27198.json b/2024/CVE-2024-27198.json
index c2935e625f..afa3ac3b32 100644
--- a/2024/CVE-2024-27198.json
+++ b/2024/CVE-2024-27198.json
@@ -399,72 +399,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 870123268,
- "name": "CVE-2024-27198",
- "full_name": "geniuszly\/CVE-2024-27198",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/CVE-2024-27198",
- "description": "is a PoC tool that targets a vulnerability in the TeamCity server (CVE-2024-27198)",
- "fork": false,
- "created_at": "2024-10-09T13:36:56Z",
- "updated_at": "2024-10-21T08:14:55Z",
- "pushed_at": "2024-10-09T13:37:56Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 872559049,
- "name": "CVE-2024-27198_POC",
- "full_name": "Cythonic1\/CVE-2024-27198_POC",
- "owner": {
- "login": "Cythonic1",
- "id": 163199970,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163199970?v=4",
- "html_url": "https:\/\/github.com\/Cythonic1",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Cythonic1\/CVE-2024-27198_POC",
- "description": "a proof of concept of the CVE-2024-27198 which infect jetbrains teamCity",
- "fork": false,
- "created_at": "2024-10-14T16:40:58Z",
- "updated_at": "2024-10-21T13:17:52Z",
- "pushed_at": "2024-10-21T10:05:35Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 920321578,
"name": "Project-Exploiting-CVE-2024-27198-RCE-Vulnerability",
diff --git a/2024/CVE-2024-27564.json b/2024/CVE-2024-27564.json
index 8997339b35..0ba8c1d220 100644
--- a/2024/CVE-2024-27564.json
+++ b/2024/CVE-2024-27564.json
@@ -31,38 +31,5 @@
"watchers": 13,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 868191647,
- "name": "SSRF-Exploit-CVE-2024-27564",
- "full_name": "chaudhrymuhammadtayab\/SSRF-Exploit-CVE-2024-27564",
- "owner": {
- "login": "chaudhrymuhammadtayab",
- "id": 146429770,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146429770?v=4",
- "html_url": "https:\/\/github.com\/chaudhrymuhammadtayab",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/chaudhrymuhammadtayab\/SSRF-Exploit-CVE-2024-27564",
- "description": null,
- "fork": false,
- "created_at": "2024-10-05T17:58:15Z",
- "updated_at": "2024-10-05T17:58:15Z",
- "pushed_at": "2024-09-15T11:55:25Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-27954.json b/2024/CVE-2024-27954.json
index 1a49dca79e..30c6f8f1be 100644
--- a/2024/CVE-2024-27954.json
+++ b/2024/CVE-2024-27954.json
@@ -1,70 +1,4 @@
[
- {
- "id": 880016834,
- "name": "CVE-2024-27954",
- "full_name": "gh-ost00\/CVE-2024-27954",
- "owner": {
- "login": "gh-ost00",
- "id": 153366162,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153366162?v=4",
- "html_url": "https:\/\/github.com\/gh-ost00",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/gh-ost00\/CVE-2024-27954",
- "description": "Automatic Plugin for WordPress < 3.92.1 Multiples Vulnerabilities",
- "fork": false,
- "created_at": "2024-10-29T00:46:35Z",
- "updated_at": "2025-09-26T14:50:15Z",
- "pushed_at": "2024-10-29T02:47:13Z",
- "stargazers_count": 4,
- "watchers_count": 4,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 4,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 880766464,
- "name": "CVE-2024-27954",
- "full_name": "chsxthwik\/CVE-2024-27954",
- "owner": {
- "login": "chsxthwik",
- "id": 140636140,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140636140?v=4",
- "html_url": "https:\/\/github.com\/chsxthwik",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/chsxthwik\/CVE-2024-27954",
- "description": null,
- "fork": false,
- "created_at": "2024-10-30T10:14:54Z",
- "updated_at": "2025-07-21T13:15:02Z",
- "pushed_at": "2024-10-30T10:32:57Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1017521139,
"name": "CVE-2024-27954",
diff --git a/2024/CVE-2024-28116.json b/2024/CVE-2024-28116.json
index ce8a58c52e..70b19be18d 100644
--- a/2024/CVE-2024-28116.json
+++ b/2024/CVE-2024-28116.json
@@ -74,38 +74,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 868072354,
- "name": "GenGravSSTIExploit",
- "full_name": "geniuszly\/GenGravSSTIExploit",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/GenGravSSTIExploit",
- "description": "is a PoC Python script that exploits an authenticated Server-Side Template Injection (SSTI) vulnerability in Grav CMS versions <= 1.7.44 (CVE-2024-28116)",
- "fork": false,
- "created_at": "2024-10-05T12:05:06Z",
- "updated_at": "2025-04-11T06:17:28Z",
- "pushed_at": "2024-10-05T12:08:37Z",
- "stargazers_count": 7,
- "watchers_count": 7,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 7,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-29050.json b/2024/CVE-2024-29050.json
deleted file mode 100644
index 955c0897db..0000000000
--- a/2024/CVE-2024-29050.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867522608,
- "name": "CVE-2024-29050",
- "full_name": "Akrachli\/CVE-2024-29050",
- "owner": {
- "login": "Akrachli",
- "id": 75633934,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75633934?v=4",
- "html_url": "https:\/\/github.com\/Akrachli",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akrachli\/CVE-2024-29050",
- "description": "CVE-2024-29050 is a vulnerability found in the Windows Cryptographic Services.",
- "fork": false,
- "created_at": "2024-10-04T08:19:11Z",
- "updated_at": "2024-10-07T14:07:37Z",
- "pushed_at": "2024-10-04T08:24:47Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-2928.json b/2024/CVE-2024-2928.json
index 30603b2ee1..7bb477205c 100644
--- a/2024/CVE-2024-2928.json
+++ b/2024/CVE-2024-2928.json
@@ -1,37 +1,4 @@
[
- {
- "id": 885154667,
- "name": "CVE-2024-2928",
- "full_name": "nuridincersaygili\/CVE-2024-2928",
- "owner": {
- "login": "nuridincersaygili",
- "id": 45103481,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45103481?v=4",
- "html_url": "https:\/\/github.com\/nuridincersaygili",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/nuridincersaygili\/CVE-2024-2928",
- "description": "Arbitrary file read exploit for CVE-2024-2928 in mlflow ",
- "fork": false,
- "created_at": "2024-11-08T03:55:08Z",
- "updated_at": "2024-11-20T12:08:00Z",
- "pushed_at": "2024-11-08T04:11:07Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1109924534,
"name": "sjtu_CVE-2024-2928",
diff --git a/2024/CVE-2024-29973.json b/2024/CVE-2024-29973.json
index 498ff25a36..ddde559764 100644
--- a/2024/CVE-2024-29973.json
+++ b/2024/CVE-2024-29973.json
@@ -163,38 +163,5 @@
"watchers": 6,
"score": 0,
"subscribers_count": 0
- },
- {
- "id": 870929719,
- "name": "CVE-2024-29973",
- "full_name": "voidbroker\/CVE-2024-29973",
- "owner": {
- "login": "voidbroker",
- "id": 156471538,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
- "html_url": "https:\/\/github.com\/voidbroker",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-29973",
- "description": null,
- "fork": false,
- "created_at": "2024-10-10T23:48:55Z",
- "updated_at": "2026-04-05T19:07:18Z",
- "pushed_at": "2024-10-11T20:10:44Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-30052.json b/2024/CVE-2024-30052.json
deleted file mode 100644
index 837c121784..0000000000
--- a/2024/CVE-2024-30052.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867811373,
- "name": "CVE-2024-30052",
- "full_name": "ynwarcs\/CVE-2024-30052",
- "owner": {
- "login": "ynwarcs",
- "id": 108408574,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108408574?v=4",
- "html_url": "https:\/\/github.com\/ynwarcs",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ynwarcs\/CVE-2024-30052",
- "description": "Materials for CVE-2024-30052.",
- "fork": false,
- "created_at": "2024-10-04T19:09:45Z",
- "updated_at": "2025-09-15T11:35:44Z",
- "pushed_at": "2024-10-04T20:28:39Z",
- "stargazers_count": 12,
- "watchers_count": 12,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 12,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-30090.json b/2024/CVE-2024-30090.json
deleted file mode 100644
index 38537ab611..0000000000
--- a/2024/CVE-2024-30090.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 874092793,
- "name": "CVE-2024-30090",
- "full_name": "Dor00tkit\/CVE-2024-30090",
- "owner": {
- "login": "Dor00tkit",
- "id": 47893732,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47893732?v=4",
- "html_url": "https:\/\/github.com\/Dor00tkit",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Dor00tkit\/CVE-2024-30090",
- "description": "CVE-2024-30090 - LPE PoC",
- "fork": false,
- "created_at": "2024-10-17T08:38:47Z",
- "updated_at": "2026-04-30T10:00:56Z",
- "pushed_at": "2024-10-17T09:53:33Z",
- "stargazers_count": 108,
- "watchers_count": 108,
- "has_discussions": false,
- "forks_count": 24,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 24,
- "watchers": 108,
- "score": 0,
- "subscribers_count": 3
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json
index 064992ff43..58e869989c 100644
--- a/2024/CVE-2024-31317.json
+++ b/2024/CVE-2024-31317.json
@@ -113,10 +113,10 @@
"description": "Detailed discussion of Zygote vulnerability CVE-2024-31317",
"fork": false,
"created_at": "2025-04-26T16:46:35Z",
- "updated_at": "2026-04-08T02:13:15Z",
+ "updated_at": "2026-05-21T02:48:47Z",
"pushed_at": "2025-08-05T03:52:00Z",
- "stargazers_count": 22,
- "watchers_count": 22,
+ "stargazers_count": 23,
+ "watchers_count": 23,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 22,
+ "watchers": 23,
"score": 0,
"subscribers_count": 3
},
diff --git a/2024/CVE-2024-32640.json b/2024/CVE-2024-32640.json
index 80f9116edc..28e8a6fccf 100644
--- a/2024/CVE-2024-32640.json
+++ b/2024/CVE-2024-32640.json
@@ -109,38 +109,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 887494835,
- "name": "CVE-2024-32640",
- "full_name": "pizza-power\/CVE-2024-32640",
- "owner": {
- "login": "pizza-power",
- "id": 6135659,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6135659?v=4",
- "html_url": "https:\/\/github.com\/pizza-power",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/pizza-power\/CVE-2024-32640",
- "description": "Python POC for CVE-2024-32640 Mura CMS SQLi",
- "fork": false,
- "created_at": "2024-11-12T20:50:11Z",
- "updated_at": "2024-11-16T12:30:55Z",
- "pushed_at": "2024-11-15T16:30:18Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-33231.json b/2024/CVE-2024-33231.json
deleted file mode 100644
index 6a5254989a..0000000000
--- a/2024/CVE-2024-33231.json
+++ /dev/null
@@ -1,39 +0,0 @@
-[
- {
- "id": 875006628,
- "name": "CVE-2024-33231",
- "full_name": "fdzdev\/CVE-2024-33231",
- "owner": {
- "login": "fdzdev",
- "id": 17630462,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17630462?v=4",
- "html_url": "https:\/\/github.com\/fdzdev",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fdzdev\/CVE-2024-33231",
- "description": "XSS Vulnerability via File Upload in Ferozo Webmail Application",
- "fork": false,
- "created_at": "2024-10-18T22:09:27Z",
- "updated_at": "2024-11-13T07:54:01Z",
- "pushed_at": "2024-10-18T22:13:32Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "cve-2024-33231",
- "cves"
- ],
- "visibility": "public",
- "forks": 1,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-3400.json b/2024/CVE-2024-3400.json
index 2f2fd08538..2cbc287d44 100644
--- a/2024/CVE-2024-3400.json
+++ b/2024/CVE-2024-3400.json
@@ -1145,39 +1145,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 887034499,
- "name": "CVE-2024-3400",
- "full_name": "workshop748\/CVE-2024-3400",
- "owner": {
- "login": "workshop748",
- "id": 101908212,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101908212?v=4",
- "html_url": "https:\/\/github.com\/workshop748",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/workshop748\/CVE-2024-3400",
- "description": "Attempt at making the CVE-2024-3400 initial exploit (for educational purposes)",
- "fork": false,
- "created_at": "2024-11-12T03:46:39Z",
- "updated_at": "2024-11-12T03:47:21Z",
- "pushed_at": "2024-11-12T03:47:15Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 925999224,
"name": "SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400",
diff --git a/2024/CVE-2024-34102.json b/2024/CVE-2024-34102.json
index 76a158541b..ba46a5fb97 100644
--- a/2024/CVE-2024-34102.json
+++ b/2024/CVE-2024-34102.json
@@ -620,39 +620,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 869658204,
- "name": "magento-cve-2024-34102-exploit-cosmicstring",
- "full_name": "bka\/magento-cve-2024-34102-exploit-cosmicstring",
- "owner": {
- "login": "bka",
- "id": 584644,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/584644?v=4",
- "html_url": "https:\/\/github.com\/bka",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bka\/magento-cve-2024-34102-exploit-cosmicstring",
- "description": null,
- "fork": false,
- "created_at": "2024-10-08T17:02:11Z",
- "updated_at": "2024-10-09T12:33:40Z",
- "pushed_at": "2024-10-09T12:33:37Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 898539017,
"name": "magento2-encryption-key-manager-cli",
diff --git a/2024/CVE-2024-34739.json b/2024/CVE-2024-34739.json
deleted file mode 100644
index a224600456..0000000000
--- a/2024/CVE-2024-34739.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867557806,
- "name": "CVE-2024-34739",
- "full_name": "uthrasri\/CVE-2024-34739",
- "owner": {
- "login": "uthrasri",
- "id": 145666390,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4",
- "html_url": "https:\/\/github.com\/uthrasri",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/uthrasri\/CVE-2024-34739",
- "description": null,
- "fork": false,
- "created_at": "2024-10-04T09:40:59Z",
- "updated_at": "2024-10-04T09:43:47Z",
- "pushed_at": "2024-10-04T09:43:48Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-34741.json b/2024/CVE-2024-34741.json
deleted file mode 100644
index 552e6cf14f..0000000000
--- a/2024/CVE-2024-34741.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867664225,
- "name": "CVE-2024-34741",
- "full_name": "uthrasri\/CVE-2024-34741",
- "owner": {
- "login": "uthrasri",
- "id": 145666390,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4",
- "html_url": "https:\/\/github.com\/uthrasri",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/uthrasri\/CVE-2024-34741",
- "description": null,
- "fork": false,
- "created_at": "2024-10-04T13:41:09Z",
- "updated_at": "2024-10-04T13:44:01Z",
- "pushed_at": "2024-10-04T13:44:03Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-35133.json b/2024/CVE-2024-35133.json
deleted file mode 100644
index e9ab93e912..0000000000
--- a/2024/CVE-2024-35133.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 874697408,
- "name": "IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133",
- "full_name": "Ozozuz\/IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133",
- "owner": {
- "login": "Ozozuz",
- "id": 32651700,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32651700?v=4",
- "html_url": "https:\/\/github.com\/Ozozuz",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Ozozuz\/IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133",
- "description": "Security Bulletin for CVE-2024-35133 - With PoC",
- "fork": false,
- "created_at": "2024-10-18T09:49:27Z",
- "updated_at": "2026-05-06T15:01:27Z",
- "pushed_at": "2024-10-18T09:50:02Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-35250.json b/2024/CVE-2024-35250.json
index 5cbaa7d436..4af7620e50 100644
--- a/2024/CVE-2024-35250.json
+++ b/2024/CVE-2024-35250.json
@@ -1,70 +1,4 @@
[
- {
- "id": 872180884,
- "name": "CVE-2024-35250",
- "full_name": "CrackerCat\/CVE-2024-35250",
- "owner": {
- "login": "CrackerCat",
- "id": 17995064,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17995064?v=4",
- "html_url": "https:\/\/github.com\/CrackerCat",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/CrackerCat\/CVE-2024-35250",
- "description": "PoC for the Untrusted Pointer Dereference in the ks.sys driver",
- "fork": false,
- "created_at": "2024-10-14T01:17:07Z",
- "updated_at": "2026-05-07T07:49:59Z",
- "pushed_at": "2024-10-13T19:46:23Z",
- "stargazers_count": 10,
- "watchers_count": 10,
- "has_discussions": false,
- "forks_count": 63,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 63,
- "watchers": 10,
- "score": 0,
- "subscribers_count": 0
- },
- {
- "id": 878394797,
- "name": "CVE-2024-35250-BOF",
- "full_name": "ro0tmylove\/CVE-2024-35250-BOF",
- "owner": {
- "login": "ro0tmylove",
- "id": 87022727,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87022727?v=4",
- "html_url": "https:\/\/github.com\/ro0tmylove",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ro0tmylove\/CVE-2024-35250-BOF",
- "description": "Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。) ",
- "fork": false,
- "created_at": "2024-10-25T10:06:09Z",
- "updated_at": "2026-05-13T19:50:13Z",
- "pushed_at": "2024-10-21T04:15:27Z",
- "stargazers_count": 13,
- "watchers_count": 13,
- "has_discussions": false,
- "forks_count": 5,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 5,
- "watchers": 13,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 893053192,
"name": "CVE-2024-35250-BOF",
diff --git a/2024/CVE-2024-35584.json b/2024/CVE-2024-35584.json
deleted file mode 100644
index 774036e829..0000000000
--- a/2024/CVE-2024-35584.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 872579006,
- "name": "CVE-2024-35584",
- "full_name": "whwhwh96\/CVE-2024-35584",
- "owner": {
- "login": "whwhwh96",
- "id": 42708408,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42708408?v=4",
- "html_url": "https:\/\/github.com\/whwhwh96",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/whwhwh96\/CVE-2024-35584",
- "description": "OpenSIS SQLi Injection",
- "fork": false,
- "created_at": "2024-10-14T17:24:01Z",
- "updated_at": "2024-10-28T19:27:47Z",
- "pushed_at": "2024-10-14T17:42:11Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-36401.json b/2024/CVE-2024-36401.json
index 162076f624..93ba36235b 100644
--- a/2024/CVE-2024-36401.json
+++ b/2024/CVE-2024-36401.json
@@ -369,39 +369,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 872538624,
- "name": "CVE-2024-36401",
- "full_name": "kkhackz0013\/CVE-2024-36401",
- "owner": {
- "login": "kkhackz0013",
- "id": 183632565,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183632565?v=4",
- "html_url": "https:\/\/github.com\/kkhackz0013",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/kkhackz0013\/CVE-2024-36401",
- "description": null,
- "fork": false,
- "created_at": "2024-10-14T15:57:06Z",
- "updated_at": "2024-10-14T17:16:07Z",
- "pushed_at": "2024-10-14T17:16:03Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 895213731,
"name": "CVE-2024-36401",
diff --git a/2024/CVE-2024-3656.json b/2024/CVE-2024-3656.json
deleted file mode 100644
index 2b0514b2c1..0000000000
--- a/2024/CVE-2024-3656.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871549647,
- "name": "CVE-2024-3656",
- "full_name": "h4x0r-dz\/CVE-2024-3656",
- "owner": {
- "login": "h4x0r-dz",
- "id": 26070859,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26070859?v=4",
- "html_url": "https:\/\/github.com\/h4x0r-dz",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/h4x0r-dz\/CVE-2024-3656",
- "description": "Keycloak admin API allows low privilege users to use administrative functions",
- "fork": false,
- "created_at": "2024-10-12T09:17:00Z",
- "updated_at": "2026-04-02T01:29:32Z",
- "pushed_at": "2024-10-12T09:48:10Z",
- "stargazers_count": 29,
- "watchers_count": 29,
- "has_discussions": false,
- "forks_count": 10,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 10,
- "watchers": 29,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-36823.json b/2024/CVE-2024-36823.json
deleted file mode 100644
index 1dc47dd5dc..0000000000
--- a/2024/CVE-2024-36823.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 882521071,
- "name": "CVE-2024-36823-POC",
- "full_name": "JAckLosingHeart\/CVE-2024-36823-POC",
- "owner": {
- "login": "JAckLosingHeart",
- "id": 57932150,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57932150?v=4",
- "html_url": "https:\/\/github.com\/JAckLosingHeart",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/JAckLosingHeart\/CVE-2024-36823-POC",
- "description": "Ninja Framework sensitive information leak due to weak encryption",
- "fork": false,
- "created_at": "2024-11-03T01:56:11Z",
- "updated_at": "2024-12-13T06:24:14Z",
- "pushed_at": "2024-11-03T01:56:36Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-36877.json b/2024/CVE-2024-36877.json
index 9a917dbf4f..8e69ed596c 100644
--- a/2024/CVE-2024-36877.json
+++ b/2024/CVE-2024-36877.json
@@ -14,10 +14,10 @@
"description": "Exploit POC for CVE-2024-36877",
"fork": false,
"created_at": "2024-08-09T15:33:04Z",
- "updated_at": "2025-12-05T07:56:00Z",
+ "updated_at": "2026-05-21T06:36:52Z",
"pushed_at": "2024-08-14T15:26:18Z",
- "stargazers_count": 48,
- "watchers_count": 48,
+ "stargazers_count": 49,
+ "watchers_count": 49,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
- "watchers": 48,
+ "watchers": 49,
"score": 0,
"subscribers_count": 1
},
diff --git a/2024/CVE-2024-37383.json b/2024/CVE-2024-37383.json
index 61576e07de..3172da6236 100644
--- a/2024/CVE-2024-37383.json
+++ b/2024/CVE-2024-37383.json
@@ -1,37 +1,4 @@
[
- {
- "id": 877680662,
- "name": "CVE-2024-37383-POC",
- "full_name": "bartfroklage\/CVE-2024-37383-POC",
- "owner": {
- "login": "bartfroklage",
- "id": 4425568,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4425568?v=4",
- "html_url": "https:\/\/github.com\/bartfroklage",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bartfroklage\/CVE-2024-37383-POC",
- "description": "Proof of concept for CVE-2024-37383",
- "fork": false,
- "created_at": "2024-10-24T04:01:03Z",
- "updated_at": "2025-12-05T01:37:53Z",
- "pushed_at": "2024-10-24T05:48:34Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 882582274,
"name": "CVE-2024-37383-exploit",
diff --git a/2024/CVE-2024-38041.json b/2024/CVE-2024-38041.json
deleted file mode 100644
index 0b4c6cfa10..0000000000
--- a/2024/CVE-2024-38041.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 874576838,
- "name": "CVE-2024-38041",
- "full_name": "dgkim-dong\/CVE-2024-38041",
- "owner": {
- "login": "dgkim-dong",
- "id": 174416527,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174416527?v=4",
- "html_url": "https:\/\/github.com\/dgkim-dong",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/dgkim-dong\/CVE-2024-38041",
- "description": "Kernel pointers copied to output user mode buffer with ioctl 0x22A014 in the appid.sys driver.",
- "fork": false,
- "created_at": "2024-10-18T04:50:10Z",
- "updated_at": "2026-04-24T03:30:58Z",
- "pushed_at": "2024-07-21T02:35:59Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-38063.json b/2024/CVE-2024-38063.json
index b1c1a12753..0f821fc942 100644
--- a/2024/CVE-2024-38063.json
+++ b/2024/CVE-2024-38063.json
@@ -603,138 +603,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 869344169,
- "name": "CVE-2024-38063",
- "full_name": "becrevex\/CVE-2024-38063",
- "owner": {
- "login": "becrevex",
- "id": 8326868,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8326868?v=4",
- "html_url": "https:\/\/github.com\/becrevex",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/becrevex\/CVE-2024-38063",
- "description": "Performs an IPv6 vulnerability scan and packet flood attack on specified targets. The script simulates a SYN flood and ICMP flood attack and optionally sends exploit packets.",
- "fork": false,
- "created_at": "2024-10-08T06:24:54Z",
- "updated_at": "2025-05-07T18:46:21Z",
- "pushed_at": "2024-11-16T06:07:24Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 872589341,
- "name": "CVE-2024-38063",
- "full_name": "idkwastaken\/CVE-2024-38063",
- "owner": {
- "login": "idkwastaken",
- "id": 180330197,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180330197?v=4",
- "html_url": "https:\/\/github.com\/idkwastaken",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/idkwastaken\/CVE-2024-38063",
- "description": null,
- "fork": false,
- "created_at": "2024-10-14T17:46:58Z",
- "updated_at": "2024-10-14T17:59:59Z",
- "pushed_at": "2024-10-14T17:59:56Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 872765524,
- "name": "CVE-2024-38063",
- "full_name": "thanawee321\/CVE-2024-38063",
- "owner": {
- "login": "thanawee321",
- "id": 53590032,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53590032?v=4",
- "html_url": "https:\/\/github.com\/thanawee321",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/thanawee321\/CVE-2024-38063",
- "description": "Vulnerability CVE-2024-38063",
- "fork": false,
- "created_at": "2024-10-15T03:18:51Z",
- "updated_at": "2025-03-18T17:59:36Z",
- "pushed_at": "2024-10-18T11:48:06Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 884730855,
- "name": "cve-2024-38063-Anonyvader",
- "full_name": "AliHj98\/cve-2024-38063-Anonyvader",
- "owner": {
- "login": "AliHj98",
- "id": 99630322,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99630322?v=4",
- "html_url": "https:\/\/github.com\/AliHj98",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/AliHj98\/cve-2024-38063-Anonyvader",
- "description": null,
- "fork": false,
- "created_at": "2024-11-07T09:36:32Z",
- "updated_at": "2025-10-26T10:20:49Z",
- "pushed_at": "2024-11-07T10:47:48Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 889577031,
"name": "CVE-2024-38063",
diff --git a/2024/CVE-2024-38077.json b/2024/CVE-2024-38077.json
index ac5694c4ae..b70aa36c30 100644
--- a/2024/CVE-2024-38077.json
+++ b/2024/CVE-2024-38077.json
@@ -362,50 +362,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 869931882,
- "name": "CVE-2024-38077",
- "full_name": "mrmtwoj\/CVE-2024-38077",
- "owner": {
- "login": "mrmtwoj",
- "id": 22832463,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4",
- "html_url": "https:\/\/github.com\/mrmtwoj",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mrmtwoj\/CVE-2024-38077",
- "description": "CVE-2024-38077: Remote Code Execution Vulnerability in Windows Remote Desktop Licensing Service",
- "fork": false,
- "created_at": "2024-10-09T06:39:21Z",
- "updated_at": "2026-03-12T22:56:45Z",
- "pushed_at": "2024-10-09T06:42:25Z",
- "stargazers_count": 17,
- "watchers_count": 17,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve-2024-38077",
- "cve-2024-38077poc",
- "licensing-service",
- "poc",
- "rce",
- "rce-exploit",
- "remote-code",
- "remote-code-execution",
- "vulnerability",
- "windows-remote-desktop"
- ],
- "visibility": "public",
- "forks": 3,
- "watchers": 17,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 921018261,
"name": "CVE-2024-38077-POC",
diff --git a/2024/CVE-2024-38124.json b/2024/CVE-2024-38124.json
deleted file mode 100644
index 3ff0fcb597..0000000000
--- a/2024/CVE-2024-38124.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 878525695,
- "name": "Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468",
- "full_name": "tadash10\/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468",
- "owner": {
- "login": "tadash10",
- "id": 126980610,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126980610?v=4",
- "html_url": "https:\/\/github.com\/tadash10",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/tadash10\/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468",
- "description": null,
- "fork": false,
- "created_at": "2024-10-25T14:53:12Z",
- "updated_at": "2025-08-04T04:03:53Z",
- "pushed_at": "2024-11-07T03:49:49Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-38472.json b/2024/CVE-2024-38472.json
index 5498653870..b690afdb5c 100644
--- a/2024/CVE-2024-38472.json
+++ b/2024/CVE-2024-38472.json
@@ -31,49 +31,5 @@
"watchers": 4,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 868234685,
- "name": "apache-vulnerability-testing",
- "full_name": "mrmtwoj\/apache-vulnerability-testing",
- "owner": {
- "login": "mrmtwoj",
- "id": 22832463,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4",
- "html_url": "https:\/\/github.com\/mrmtwoj",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mrmtwoj\/apache-vulnerability-testing",
- "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
- "fork": false,
- "created_at": "2024-10-05T20:32:45Z",
- "updated_at": "2026-05-15T10:10:07Z",
- "pushed_at": "2024-10-05T20:37:02Z",
- "stargazers_count": 132,
- "watchers_count": 132,
- "has_discussions": false,
- "forks_count": 20,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "apache",
- "apache2",
- "cve-2023-3870",
- "cve-2024-38472",
- "cve-2024-38473",
- "cve-2024-38474",
- "cve-2024-38475",
- "cve-2024-38476",
- "cve-2024-38477",
- "cve-2024-39573"
- ],
- "visibility": "public",
- "forks": 20,
- "watchers": 132,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-38816.json b/2024/CVE-2024-38816.json
index b2131b978d..0c540abe71 100644
--- a/2024/CVE-2024-38816.json
+++ b/2024/CVE-2024-38816.json
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 872964642,
- "name": "cve-2024-38816",
- "full_name": "Galaxy-system\/cve-2024-38816",
- "owner": {
- "login": "Galaxy-system",
- "id": 123049563,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123049563?v=4",
- "html_url": "https:\/\/github.com\/Galaxy-system",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Galaxy-system\/cve-2024-38816",
- "description": null,
- "fork": false,
- "created_at": "2024-10-15T11:33:13Z",
- "updated_at": "2024-10-15T11:33:13Z",
- "pushed_at": "2024-10-15T11:33:13Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 897089761,
"name": "App-vulnerable",
diff --git a/2024/CVE-2024-38821.json b/2024/CVE-2024-38821.json
index 82aa69e7b7..4b0bf02732 100644
--- a/2024/CVE-2024-38821.json
+++ b/2024/CVE-2024-38821.json
@@ -1,37 +1,4 @@
[
- {
- "id": 880884921,
- "name": "cve-2024-38821",
- "full_name": "mouadk\/cve-2024-38821",
- "owner": {
- "login": "mouadk",
- "id": 32769487,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32769487?v=4",
- "html_url": "https:\/\/github.com\/mouadk",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mouadk\/cve-2024-38821",
- "description": "cve-2024-38821",
- "fork": false,
- "created_at": "2024-10-30T14:38:37Z",
- "updated_at": "2026-03-05T02:50:57Z",
- "pushed_at": "2024-10-30T15:17:54Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 918629965,
"name": "CVE-2024-38821-POC",
diff --git a/2024/CVE-2024-39205.json b/2024/CVE-2024-39205.json
index 781adeb7e3..a7567e5503 100644
--- a/2024/CVE-2024-39205.json
+++ b/2024/CVE-2024-39205.json
@@ -1,41 +1,4 @@
[
- {
- "id": 878732098,
- "name": "CVE-2024-39205-Pyload-RCE",
- "full_name": "Marven11\/CVE-2024-39205-Pyload-RCE",
- "owner": {
- "login": "Marven11",
- "id": 110723864,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110723864?v=4",
- "html_url": "https:\/\/github.com\/Marven11",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Marven11\/CVE-2024-39205-Pyload-RCE",
- "description": "Pyload RCE with js2py sandbox escape ",
- "fork": false,
- "created_at": "2024-10-26T01:01:35Z",
- "updated_at": "2026-04-03T01:00:55Z",
- "pushed_at": "2024-10-26T01:11:57Z",
- "stargazers_count": 18,
- "watchers_count": 18,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "pyload",
- "rce"
- ],
- "visibility": "public",
- "forks": 3,
- "watchers": 18,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1121641469,
"name": "exploit_CVE-2024-39205",
diff --git a/2024/CVE-2024-4040.json b/2024/CVE-2024-4040.json
index 99cd62aae2..ae5495a1fd 100644
--- a/2024/CVE-2024-4040.json
+++ b/2024/CVE-2024-4040.json
@@ -496,39 +496,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 877132815,
- "name": "CVE-2024-4040",
- "full_name": "rahisec\/CVE-2024-4040",
- "owner": {
- "login": "rahisec",
- "id": 35906436,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35906436?v=4",
- "html_url": "https:\/\/github.com\/rahisec",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/rahisec\/CVE-2024-4040",
- "description": null,
- "fork": false,
- "created_at": "2024-10-23T06:29:19Z",
- "updated_at": "2024-10-23T06:31:12Z",
- "pushed_at": "2024-10-23T06:31:09Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1013828350,
"name": "CrushFTP-CVE-2024-4040-illdeed",
diff --git a/2024/CVE-2024-40443.json b/2024/CVE-2024-40443.json
deleted file mode 100644
index 8a28ba98ce..0000000000
--- a/2024/CVE-2024-40443.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 886294827,
- "name": "CVE-2024-40443",
- "full_name": "Yuma-Tsushima07\/CVE-2024-40443",
- "owner": {
- "login": "Yuma-Tsushima07",
- "id": 63207324,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63207324?v=4",
- "html_url": "https:\/\/github.com\/Yuma-Tsushima07",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Yuma-Tsushima07\/CVE-2024-40443",
- "description": "CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands ",
- "fork": false,
- "created_at": "2024-11-10T17:35:14Z",
- "updated_at": "2024-11-10T17:41:02Z",
- "pushed_at": "2024-11-10T17:40:58Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-40457.json b/2024/CVE-2024-40457.json
deleted file mode 100644
index 3daf5f93fe..0000000000
--- a/2024/CVE-2024-40457.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880953987,
- "name": "CVE-2024-40457-PoC",
- "full_name": "jeppojeps\/CVE-2024-40457-PoC",
- "owner": {
- "login": "jeppojeps",
- "id": 7843530,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7843530?v=4",
- "html_url": "https:\/\/github.com\/jeppojeps",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/jeppojeps\/CVE-2024-40457-PoC",
- "description": "CVE PoC 2024-40457",
- "fork": false,
- "created_at": "2024-10-30T16:51:31Z",
- "updated_at": "2024-10-31T15:14:04Z",
- "pushed_at": "2024-10-30T16:52:51Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-40711.json b/2024/CVE-2024-40711.json
index 729e397ec7..74b7d1649f 100644
--- a/2024/CVE-2024-40711.json
+++ b/2024/CVE-2024-40711.json
@@ -31,38 +31,5 @@
"watchers": 54,
"score": 0,
"subscribers_count": 0
- },
- {
- "id": 873392498,
- "name": "CVE-2024-40711-Exp",
- "full_name": "realstatus\/CVE-2024-40711-Exp",
- "owner": {
- "login": "realstatus",
- "id": 41789399,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41789399?v=4",
- "html_url": "https:\/\/github.com\/realstatus",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/realstatus\/CVE-2024-40711-Exp",
- "description": "CVE-2024-40711-exp",
- "fork": false,
- "created_at": "2024-10-16T05:02:27Z",
- "updated_at": "2026-03-20T06:07:28Z",
- "pushed_at": "2024-10-17T01:06:42Z",
- "stargazers_count": 43,
- "watchers_count": 43,
- "has_discussions": false,
- "forks_count": 6,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 6,
- "watchers": 43,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-41290.json b/2024/CVE-2024-41290.json
deleted file mode 100644
index 68505a5852..0000000000
--- a/2024/CVE-2024-41290.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 866035036,
- "name": "CVE-2024-41290",
- "full_name": "paragbagul111\/CVE-2024-41290",
- "owner": {
- "login": "paragbagul111",
- "id": 68190427,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68190427?v=4",
- "html_url": "https:\/\/github.com\/paragbagul111",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/paragbagul111\/CVE-2024-41290",
- "description": "FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to > store authentication data",
- "fork": false,
- "created_at": "2024-10-01T14:35:39Z",
- "updated_at": "2024-10-01T14:40:00Z",
- "pushed_at": "2024-10-01T14:39:15Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-43363.json b/2024/CVE-2024-43363.json
deleted file mode 100644
index 1a1150e459..0000000000
--- a/2024/CVE-2024-43363.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 869211393,
- "name": "CVE-2024-43363",
- "full_name": "p33d\/CVE-2024-43363",
- "owner": {
- "login": "p33d",
- "id": 123099747,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123099747?v=4",
- "html_url": "https:\/\/github.com\/p33d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/p33d\/CVE-2024-43363",
- "description": null,
- "fork": false,
- "created_at": "2024-10-07T22:59:09Z",
- "updated_at": "2025-03-18T17:59:36Z",
- "pushed_at": "2024-10-07T22:59:53Z",
- "stargazers_count": 4,
- "watchers_count": 4,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 4,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json
index a05ea90576..a5f133d177 100644
--- a/2024/CVE-2024-4367.json
+++ b/2024/CVE-2024-4367.json
@@ -345,39 +345,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 884449297,
- "name": "CVE-2024-4367-pdf-sample",
- "full_name": "pedrochalegre7\/CVE-2024-4367-pdf-sample",
- "owner": {
- "login": "pedrochalegre7",
- "id": 101287325,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101287325?v=4",
- "html_url": "https:\/\/github.com\/pedrochalegre7",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/pedrochalegre7\/CVE-2024-4367-pdf-sample",
- "description": null,
- "fork": false,
- "created_at": "2024-11-06T19:15:38Z",
- "updated_at": "2024-11-07T14:29:14Z",
- "pushed_at": "2024-11-07T14:28:41Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 912425407,
"name": "WEAPONIZING-CVE-2024-4367",
diff --git a/2024/CVE-2024-43965.json b/2024/CVE-2024-43965.json
deleted file mode 100644
index 286f726e4b..0000000000
--- a/2024/CVE-2024-43965.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 872256938,
- "name": "CVE-2024-43965",
- "full_name": "RandomRobbieBF\/CVE-2024-43965",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-43965",
- "description": "SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection",
- "fork": false,
- "created_at": "2024-10-14T05:58:17Z",
- "updated_at": "2024-10-18T17:57:10Z",
- "pushed_at": "2024-10-14T05:59:29Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-44000.json b/2024/CVE-2024-44000.json
index 071a753951..6a5794c9dd 100644
--- a/2024/CVE-2024-44000.json
+++ b/2024/CVE-2024-44000.json
@@ -97,38 +97,5 @@
"watchers": 3,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 870756822,
- "name": "CVE-2024-44000",
- "full_name": "geniuszly\/CVE-2024-44000",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/CVE-2024-44000",
- "description": "is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies",
- "fork": false,
- "created_at": "2024-10-10T15:58:10Z",
- "updated_at": "2026-04-25T18:37:16Z",
- "pushed_at": "2024-10-10T15:59:51Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-4406.json b/2024/CVE-2024-4406.json
deleted file mode 100644
index 3e75fbcd21..0000000000
--- a/2024/CVE-2024-4406.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 872352341,
- "name": "cve-2024-4406-xiaomi13pro-exploit-files",
- "full_name": "Yogehi\/cve-2024-4406-xiaomi13pro-exploit-files",
- "owner": {
- "login": "Yogehi",
- "id": 10925671,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10925671?v=4",
- "html_url": "https:\/\/github.com\/Yogehi",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Yogehi\/cve-2024-4406-xiaomi13pro-exploit-files",
- "description": "Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.",
- "fork": false,
- "created_at": "2024-10-14T09:38:04Z",
- "updated_at": "2025-12-03T17:14:37Z",
- "pushed_at": "2024-10-14T09:43:53Z",
- "stargazers_count": 31,
- "watchers_count": 31,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 31,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-44193.json b/2024/CVE-2024-44193.json
deleted file mode 100644
index 877d4d8f42..0000000000
--- a/2024/CVE-2024-44193.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867684338,
- "name": "CVE-2024-44193",
- "full_name": "mbog14\/CVE-2024-44193",
- "owner": {
- "login": "mbog14",
- "id": 74453009,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74453009?v=4",
- "html_url": "https:\/\/github.com\/mbog14",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/mbog14\/CVE-2024-44193",
- "description": "Hacking Windows through iTunes - Local Privilege Escalation 0-day",
- "fork": false,
- "created_at": "2024-10-04T14:20:15Z",
- "updated_at": "2025-12-21T23:59:01Z",
- "pushed_at": "2024-10-04T14:59:50Z",
- "stargazers_count": 98,
- "watchers_count": 98,
- "has_discussions": false,
- "forks_count": 14,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 14,
- "watchers": 98,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-44258.json b/2024/CVE-2024-44258.json
index 51da0d3dae..ba50e71dff 100644
--- a/2024/CVE-2024-44258.json
+++ b/2024/CVE-2024-44258.json
@@ -1,37 +1,4 @@
[
- {
- "id": 880195363,
- "name": "CVE-2024-44258",
- "full_name": "ifpdz\/CVE-2024-44258",
- "owner": {
- "login": "ifpdz",
- "id": 105882406,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105882406?v=4",
- "html_url": "https:\/\/github.com\/ifpdz",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ifpdz\/CVE-2024-44258",
- "description": "CVE-2024-44258",
- "fork": false,
- "created_at": "2024-10-29T09:45:03Z",
- "updated_at": "2025-12-14T17:15:33Z",
- "pushed_at": "2024-11-02T19:20:44Z",
- "stargazers_count": 89,
- "watchers_count": 89,
- "has_discussions": false,
- "forks_count": 14,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 14,
- "watchers": 89,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 985535889,
"name": "POC-CVE-2024-44258-Py",
diff --git a/2024/CVE-2024-44337.json b/2024/CVE-2024-44337.json
deleted file mode 100644
index d56a0aec64..0000000000
--- a/2024/CVE-2024-44337.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 873032825,
- "name": "CVE-2024-44337",
- "full_name": "Brinmon\/CVE-2024-44337",
- "owner": {
- "login": "Brinmon",
- "id": 135578945,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135578945?v=4",
- "html_url": "https:\/\/github.com\/Brinmon",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Brinmon\/CVE-2024-44337",
- "description": "CVE-2024-44337 POC The package `github.com\/gomarkdown\/markdown` is a Go library for parsing Markdown text and rendering as HTML. which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely.",
- "fork": false,
- "created_at": "2024-10-15T13:44:20Z",
- "updated_at": "2025-03-18T17:59:36Z",
- "pushed_at": "2024-10-15T13:56:40Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-4439.json b/2024/CVE-2024-4439.json
index 522352029e..67aecca22d 100644
--- a/2024/CVE-2024-4439.json
+++ b/2024/CVE-2024-4439.json
@@ -98,39 +98,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 870571270,
- "name": "CVE-2024-4439",
- "full_name": "soltanali0\/CVE-2024-4439",
- "owner": {
- "login": "soltanali0",
- "id": 87374678,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4",
- "html_url": "https:\/\/github.com\/soltanali0",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/soltanali0\/CVE-2024-4439",
- "description": "aa",
- "fork": false,
- "created_at": "2024-10-10T09:30:11Z",
- "updated_at": "2024-10-10T09:43:46Z",
- "pushed_at": "2024-10-10T09:43:42Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 892084521,
"name": "CVE-2024-4439",
diff --git a/2024/CVE-2024-44625.json b/2024/CVE-2024-44625.json
deleted file mode 100644
index ab5686f474..0000000000
--- a/2024/CVE-2024-44625.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887990161,
- "name": "CVE-2024-44625",
- "full_name": "Fysac\/CVE-2024-44625",
- "owner": {
- "login": "Fysac",
- "id": 6894940,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6894940?v=4",
- "html_url": "https:\/\/github.com\/Fysac",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Fysac\/CVE-2024-44625",
- "description": "Symbolic link path traversal vulnerability in Gogs",
- "fork": false,
- "created_at": "2024-11-13T16:16:31Z",
- "updated_at": "2025-06-27T04:23:43Z",
- "pushed_at": "2024-11-14T02:54:13Z",
- "stargazers_count": 7,
- "watchers_count": 7,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 7,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-45409.json b/2024/CVE-2024-45409.json
deleted file mode 100644
index 0e6f2d1068..0000000000
--- a/2024/CVE-2024-45409.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 868840911,
- "name": "CVE-2024-45409",
- "full_name": "synacktiv\/CVE-2024-45409",
- "owner": {
- "login": "synacktiv",
- "id": 50145679,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4",
- "html_url": "https:\/\/github.com\/synacktiv",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/synacktiv\/CVE-2024-45409",
- "description": "Ruby-SAML \/ GitLab Authentication Bypass (CVE-2024-45409) exploit",
- "fork": false,
- "created_at": "2024-10-07T09:24:46Z",
- "updated_at": "2026-01-26T16:55:19Z",
- "pushed_at": "2024-10-07T11:50:17Z",
- "stargazers_count": 83,
- "watchers_count": 83,
- "has_discussions": false,
- "forks_count": 13,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 13,
- "watchers": 83,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json
index 6987d3b2a4..1f344b1c77 100644
--- a/2024/CVE-2024-4577.json
+++ b/2024/CVE-2024-4577.json
@@ -1542,112 +1542,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 867649513,
- "name": "CVE-2024-4577-checker",
- "full_name": "JeninSutradhar\/CVE-2024-4577-checker",
- "owner": {
- "login": "JeninSutradhar",
- "id": 111521642,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111521642?v=4",
- "html_url": "https:\/\/github.com\/JeninSutradhar",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/JeninSutradhar\/CVE-2024-4577-checker",
- "description": "A Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI.",
- "fork": false,
- "created_at": "2024-10-04T13:10:19Z",
- "updated_at": "2025-02-21T22:08:48Z",
- "pushed_at": "2024-11-13T14:37:33Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "apache",
- "cve",
- "cve-scanning",
- "php8",
- "security-scanner",
- "vulnerability"
- ],
- "visibility": "public",
- "forks": 1,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 872339376,
- "name": "CVE-2024-4577",
- "full_name": "longhoangth18\/CVE-2024-4577",
- "owner": {
- "login": "longhoangth18",
- "id": 152260528,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152260528?v=4",
- "html_url": "https:\/\/github.com\/longhoangth18",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/longhoangth18\/CVE-2024-4577",
- "description": null,
- "fork": false,
- "created_at": "2024-10-14T09:11:06Z",
- "updated_at": "2026-01-10T14:57:12Z",
- "pushed_at": "2024-10-14T09:36:45Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 882724102,
- "name": "CVE-2024-4577",
- "full_name": "ahmetramazank\/CVE-2024-4577",
- "owner": {
- "login": "ahmetramazank",
- "id": 109250080,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109250080?v=4",
- "html_url": "https:\/\/github.com\/ahmetramazank",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ahmetramazank\/CVE-2024-4577",
- "description": null,
- "fork": false,
- "created_at": "2024-11-03T15:42:04Z",
- "updated_at": "2024-11-03T16:17:52Z",
- "pushed_at": "2024-11-03T16:17:49Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 884083771,
"name": "CVE-2024-4577-RCE-PoC",
diff --git a/2024/CVE-2024-46483.json b/2024/CVE-2024-46483.json
deleted file mode 100644
index fba31ac5d5..0000000000
--- a/2024/CVE-2024-46483.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 874747179,
- "name": "cve-2024-46483",
- "full_name": "kn32\/cve-2024-46483",
- "owner": {
- "login": "kn32",
- "id": 105210950,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105210950?v=4",
- "html_url": "https:\/\/github.com\/kn32",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/kn32\/cve-2024-46483",
- "description": "Pre-Authentication Heap Overflow in Xlight SFTP server <= 3.9.4.2",
- "fork": false,
- "created_at": "2024-10-18T11:46:14Z",
- "updated_at": "2026-04-15T13:06:09Z",
- "pushed_at": "2024-10-18T12:29:36Z",
- "stargazers_count": 11,
- "watchers_count": 11,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 11,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-46635.json b/2024/CVE-2024-46635.json
deleted file mode 100644
index d8e9cd6883..0000000000
--- a/2024/CVE-2024-46635.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 865729500,
- "name": "CVE-2024-46635",
- "full_name": "h1thub\/CVE-2024-46635",
- "owner": {
- "login": "h1thub",
- "id": 167607208,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167607208?v=4",
- "html_url": "https:\/\/github.com\/h1thub",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/h1thub\/CVE-2024-46635",
- "description": null,
- "fork": false,
- "created_at": "2024-10-01T03:07:04Z",
- "updated_at": "2024-11-11T08:25:02Z",
- "pushed_at": "2024-10-01T17:59:04Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-46658.json b/2024/CVE-2024-46658.json
deleted file mode 100644
index 6e316186d0..0000000000
--- a/2024/CVE-2024-46658.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867076537,
- "name": "CVE-2024-46658",
- "full_name": "jackalkarlos\/CVE-2024-46658",
- "owner": {
- "login": "jackalkarlos",
- "id": 88983987,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88983987?v=4",
- "html_url": "https:\/\/github.com\/jackalkarlos",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/jackalkarlos\/CVE-2024-46658",
- "description": "Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629",
- "fork": false,
- "created_at": "2024-10-03T12:12:23Z",
- "updated_at": "2025-06-14T19:25:13Z",
- "pushed_at": "2024-10-03T14:19:05Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-47176.json b/2024/CVE-2024-47176.json
index 92b27dd792..5d25f41dbc 100644
--- a/2024/CVE-2024-47176.json
+++ b/2024/CVE-2024-47176.json
@@ -236,179 +236,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 867190495,
- "name": "CVE-2024-47176",
- "full_name": "l0n3m4n\/CVE-2024-47176",
- "owner": {
- "login": "l0n3m4n",
- "id": 143868630,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143868630?v=4",
- "html_url": "https:\/\/github.com\/l0n3m4n",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/l0n3m4n\/CVE-2024-47176",
- "description": "Unauthenticated RCE on cups-browsed (exploit and nuclei template)",
- "fork": false,
- "created_at": "2024-10-03T15:53:04Z",
- "updated_at": "2026-05-18T02:44:01Z",
- "pushed_at": "2024-10-03T17:11:17Z",
- "stargazers_count": 17,
- "watchers_count": 17,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "ctf",
- "cups",
- "cve",
- "exploit",
- "pentesting",
- "rce",
- "redteaming"
- ],
- "visibility": "public",
- "forks": 1,
- "watchers": 17,
- "score": 0,
- "subscribers_count": 2
- },
- {
- "id": 868024917,
- "name": "CVE-2024-47176",
- "full_name": "gumerzzzindo\/CVE-2024-47176",
- "owner": {
- "login": "gumerzzzindo",
- "id": 114024126,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114024126?v=4",
- "html_url": "https:\/\/github.com\/gumerzzzindo",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/gumerzzzindo\/CVE-2024-47176",
- "description": null,
- "fork": false,
- "created_at": "2024-10-05T09:22:36Z",
- "updated_at": "2024-10-05T10:05:20Z",
- "pushed_at": "2024-10-05T10:05:16Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 868786835,
- "name": "CVE-2024-47176-Scanner",
- "full_name": "MalwareTech\/CVE-2024-47176-Scanner",
- "owner": {
- "login": "MalwareTech",
- "id": 7256561,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7256561?v=4",
- "html_url": "https:\/\/github.com\/MalwareTech",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/MalwareTech\/CVE-2024-47176-Scanner",
- "description": "A simple scanner for identifying vulnerable cups-browsed instances on your network",
- "fork": false,
- "created_at": "2024-10-07T07:25:18Z",
- "updated_at": "2026-01-24T20:20:05Z",
- "pushed_at": "2024-10-07T16:59:47Z",
- "stargazers_count": 66,
- "watchers_count": 66,
- "has_discussions": false,
- "forks_count": 13,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 13,
- "watchers": 66,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 874384484,
- "name": "CUPS-CVE-2024-47176",
- "full_name": "gianlu111\/CUPS-CVE-2024-47176",
- "owner": {
- "login": "gianlu111",
- "id": 43763664,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43763664?v=4",
- "html_url": "https:\/\/github.com\/gianlu111",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/gianlu111\/CUPS-CVE-2024-47176",
- "description": "A Mass Scanner designed to detect the CVE-2024-47176 vulnerability across systems running the Common Unix Printing System (CUPS). ",
- "fork": false,
- "created_at": "2024-10-17T18:21:10Z",
- "updated_at": "2024-10-17T18:49:53Z",
- "pushed_at": "2024-10-17T18:32:38Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 875147460,
- "name": "CVE-2024-47176",
- "full_name": "0x7556\/CVE-2024-47176",
- "owner": {
- "login": "0x7556",
- "id": 50582207,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50582207?v=4",
- "html_url": "https:\/\/github.com\/0x7556",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/0x7556\/CVE-2024-47176",
- "description": "Unix CUPS打印系统 远程代码执行漏洞",
- "fork": false,
- "created_at": "2024-10-19T08:08:02Z",
- "updated_at": "2024-10-19T08:20:57Z",
- "pushed_at": "2024-10-19T08:23:01Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1180852710,
"name": "CVE-2024-47176",
diff --git a/2024/CVE-2024-47575.json b/2024/CVE-2024-47575.json
index 185887807b..bbb112b1fe 100644
--- a/2024/CVE-2024-47575.json
+++ b/2024/CVE-2024-47575.json
@@ -1,37 +1,4 @@
[
- {
- "id": 885039863,
- "name": "Fortijump-Exploit-CVE-2024-47575",
- "full_name": "watchtowrlabs\/Fortijump-Exploit-CVE-2024-47575",
- "owner": {
- "login": "watchtowrlabs",
- "id": 99977116,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
- "html_url": "https:\/\/github.com\/watchtowrlabs",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/watchtowrlabs\/Fortijump-Exploit-CVE-2024-47575",
- "description": "Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575",
- "fork": false,
- "created_at": "2024-11-07T21:03:30Z",
- "updated_at": "2026-04-15T09:38:01Z",
- "pushed_at": "2024-11-14T16:25:52Z",
- "stargazers_count": 98,
- "watchers_count": 98,
- "has_discussions": false,
- "forks_count": 30,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 30,
- "watchers": 98,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 912523304,
"name": "CVE-2024-47575-POC",
diff --git a/2024/CVE-2024-48208.json b/2024/CVE-2024-48208.json
deleted file mode 100644
index 4450546c99..0000000000
--- a/2024/CVE-2024-48208.json
+++ /dev/null
@@ -1,43 +0,0 @@
-[
- {
- "id": 880590271,
- "name": "CVE-2024-48208",
- "full_name": "rohilchaudhry\/CVE-2024-48208",
- "owner": {
- "login": "rohilchaudhry",
- "id": 146772664,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146772664?v=4",
- "html_url": "https:\/\/github.com\/rohilchaudhry",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/rohilchaudhry\/CVE-2024-48208",
- "description": "This repo contains all the work surrounding the development of the PoC for CVE-2024-48208, and how a simple OOB(Out-of-bound) read can result in jail escapes as well as broken access control.",
- "fork": false,
- "created_at": "2024-10-30T01:44:32Z",
- "updated_at": "2026-03-28T04:57:24Z",
- "pushed_at": "2024-11-05T15:09:29Z",
- "stargazers_count": 7,
- "watchers_count": 7,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "buffer-overflow",
- "cve",
- "cve-2024-48208",
- "exploit",
- "heap",
- "overflow",
- "poc"
- ],
- "visibility": "public",
- "forks": 1,
- "watchers": 7,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48217.json b/2024/CVE-2024-48217.json
deleted file mode 100644
index ec57e0b1b3..0000000000
--- a/2024/CVE-2024-48217.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 881716535,
- "name": "CVE-2024-48217",
- "full_name": "ajrielrm\/CVE-2024-48217",
- "owner": {
- "login": "ajrielrm",
- "id": 45825467,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45825467?v=4",
- "html_url": "https:\/\/github.com\/ajrielrm",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ajrielrm\/CVE-2024-48217",
- "description": "CVE-2024-48217 Sismart Vulnerability",
- "fork": false,
- "created_at": "2024-11-01T04:44:17Z",
- "updated_at": "2024-11-02T05:24:19Z",
- "pushed_at": "2024-11-02T05:24:15Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48322.json b/2024/CVE-2024-48322.json
deleted file mode 100644
index 02f6e330c0..0000000000
--- a/2024/CVE-2024-48322.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885825604,
- "name": "CVE-2024-48322",
- "full_name": "trqt\/CVE-2024-48322",
- "owner": {
- "login": "trqt",
- "id": 30443527,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30443527?v=4",
- "html_url": "https:\/\/github.com\/trqt",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/trqt\/CVE-2024-48322",
- "description": null,
- "fork": false,
- "created_at": "2024-11-09T13:52:50Z",
- "updated_at": "2024-11-15T13:24:49Z",
- "pushed_at": "2024-11-09T14:03:28Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48325.json b/2024/CVE-2024-48325.json
deleted file mode 100644
index 46a0437d2d..0000000000
--- a/2024/CVE-2024-48325.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 882387857,
- "name": "cve-2024-48325",
- "full_name": "osvaldotenorio\/cve-2024-48325",
- "owner": {
- "login": "osvaldotenorio",
- "id": 45275816,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45275816?v=4",
- "html_url": "https:\/\/github.com\/osvaldotenorio",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/osvaldotenorio\/cve-2024-48325",
- "description": null,
- "fork": false,
- "created_at": "2024-11-02T17:43:12Z",
- "updated_at": "2024-11-07T00:50:54Z",
- "pushed_at": "2024-11-07T00:50:51Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48326.json b/2024/CVE-2024-48326.json
deleted file mode 100644
index 480e50745c..0000000000
--- a/2024/CVE-2024-48326.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 882443639,
- "name": "CVE-2024-48326",
- "full_name": "fabiobsj\/CVE-2024-48326",
- "owner": {
- "login": "fabiobsj",
- "id": 11925049,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11925049?v=4",
- "html_url": "https:\/\/github.com\/fabiobsj",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fabiobsj\/CVE-2024-48326",
- "description": null,
- "fork": false,
- "created_at": "2024-11-02T19:41:19Z",
- "updated_at": "2024-11-02T19:57:14Z",
- "pushed_at": "2024-11-02T19:57:11Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48392.json b/2024/CVE-2024-48392.json
deleted file mode 100644
index 6f478ca889..0000000000
--- a/2024/CVE-2024-48392.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 878366260,
- "name": "CVE-2024-48392-PoC",
- "full_name": "Renzusclarke\/CVE-2024-48392-PoC",
- "owner": {
- "login": "Renzusclarke",
- "id": 77496879,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77496879?v=4",
- "html_url": "https:\/\/github.com\/Renzusclarke",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Renzusclarke\/CVE-2024-48392-PoC",
- "description": null,
- "fork": false,
- "created_at": "2024-10-25T09:00:11Z",
- "updated_at": "2024-10-25T09:23:52Z",
- "pushed_at": "2024-10-25T09:23:48Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48415.json b/2024/CVE-2024-48415.json
deleted file mode 100644
index 77b9fcd061..0000000000
--- a/2024/CVE-2024-48415.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 875127580,
- "name": "CVE-2024-48415",
- "full_name": "khaliquesX\/CVE-2024-48415",
- "owner": {
- "login": "khaliquesX",
- "id": 185584210,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185584210?v=4",
- "html_url": "https:\/\/github.com\/khaliquesX",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/khaliquesX\/CVE-2024-48415",
- "description": null,
- "fork": false,
- "created_at": "2024-10-19T06:58:56Z",
- "updated_at": "2024-10-19T07:08:10Z",
- "pushed_at": "2024-10-19T07:08:06Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48427.json b/2024/CVE-2024-48427.json
deleted file mode 100644
index c7df2367a7..0000000000
--- a/2024/CVE-2024-48427.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 877820324,
- "name": "CVE-2024-48427",
- "full_name": "vighneshnair7\/CVE-2024-48427",
- "owner": {
- "login": "vighneshnair7",
- "id": 186159201,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186159201?v=4",
- "html_url": "https:\/\/github.com\/vighneshnair7",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/vighneshnair7\/CVE-2024-48427",
- "description": null,
- "fork": false,
- "created_at": "2024-10-24T09:50:31Z",
- "updated_at": "2024-10-29T12:51:15Z",
- "pushed_at": "2024-10-24T10:02:13Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48644.json b/2024/CVE-2024-48644.json
deleted file mode 100644
index 4d7ced8dc5..0000000000
--- a/2024/CVE-2024-48644.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 874489228,
- "name": "CVE-2024-48644",
- "full_name": "rosembergpro\/CVE-2024-48644",
- "owner": {
- "login": "rosembergpro",
- "id": 7573860,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7573860?v=4",
- "html_url": "https:\/\/github.com\/rosembergpro",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/rosembergpro\/CVE-2024-48644",
- "description": "Reolink Duo 2 WiFi v1.0.280 - Account Enumeration Vulnerability",
- "fork": false,
- "created_at": "2024-10-17T23:27:04Z",
- "updated_at": "2024-10-18T02:21:47Z",
- "pushed_at": "2024-10-18T02:21:43Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48652.json b/2024/CVE-2024-48652.json
deleted file mode 100644
index b09a0e29b4..0000000000
--- a/2024/CVE-2024-48652.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 875183000,
- "name": "CVE-2024-48652",
- "full_name": "paragbagul111\/CVE-2024-48652",
- "owner": {
- "login": "paragbagul111",
- "id": 68190427,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68190427?v=4",
- "html_url": "https:\/\/github.com\/paragbagul111",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/paragbagul111\/CVE-2024-48652",
- "description": "Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field",
- "fork": false,
- "created_at": "2024-10-19T10:06:58Z",
- "updated_at": "2024-10-19T10:21:13Z",
- "pushed_at": "2024-10-19T10:21:10Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48914.json b/2024/CVE-2024-48914.json
deleted file mode 100644
index daa1ac5b6c..0000000000
--- a/2024/CVE-2024-48914.json
+++ /dev/null
@@ -1,43 +0,0 @@
-[
- {
- "id": 876045350,
- "name": "CVE-2024-48914",
- "full_name": "EQSTLab\/CVE-2024-48914",
- "owner": {
- "login": "EQSTLab",
- "id": 148991397,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
- "html_url": "https:\/\/github.com\/EQSTLab",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/EQSTLab\/CVE-2024-48914",
- "description": "Arbitrary File Read and DoS in vendure-ecommerce exploit",
- "fork": false,
- "created_at": "2024-10-21T10:02:05Z",
- "updated_at": "2025-03-18T17:59:37Z",
- "pushed_at": "2024-10-21T10:50:16Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "exploit",
- "poc",
- "proof-of-concept",
- "security",
- "typescript",
- "vulnerability"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-48955.json b/2024/CVE-2024-48955.json
deleted file mode 100644
index 6d5bdd2a92..0000000000
--- a/2024/CVE-2024-48955.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880290163,
- "name": "CVE-2024-48955_Overview",
- "full_name": "BrotherOfJhonny\/CVE-2024-48955_Overview",
- "owner": {
- "login": "BrotherOfJhonny",
- "id": 28454566,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28454566?v=4",
- "html_url": "https:\/\/github.com\/BrotherOfJhonny",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/BrotherOfJhonny\/CVE-2024-48955_Overview",
- "description": "CVE-2024-48955_Overview",
- "fork": false,
- "created_at": "2024-10-29T13:14:19Z",
- "updated_at": "2024-10-29T13:32:43Z",
- "pushed_at": "2024-10-29T13:32:39Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-4898.json b/2024/CVE-2024-4898.json
index 0e903f7afa..60b79b91f2 100644
--- a/2024/CVE-2024-4898.json
+++ b/2024/CVE-2024-4898.json
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 885127096,
- "name": "CVE-2024-4898",
- "full_name": "gh-ost00\/CVE-2024-4898",
- "owner": {
- "login": "gh-ost00",
- "id": 153366162,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153366162?v=4",
- "html_url": "https:\/\/github.com\/gh-ost00",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/gh-ost00\/CVE-2024-4898",
- "description": "CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup\/Arbitrary Options Update\/Administrative User Creation",
- "fork": false,
- "created_at": "2024-11-08T02:15:52Z",
- "updated_at": "2024-11-08T02:15:52Z",
- "pushed_at": "2024-06-12T10:23:05Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-49328.json b/2024/CVE-2024-49328.json
index c687dc1ade..37b64e80fc 100644
--- a/2024/CVE-2024-49328.json
+++ b/2024/CVE-2024-49328.json
@@ -1,37 +1,4 @@
[
- {
- "id": 884373508,
- "name": "CVE-2024-49328",
- "full_name": "RandomRobbieBF\/CVE-2024-49328",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-49328",
- "description": "WP REST API FNS <= 1.0.0 - Privilege Escalation",
- "fork": false,
- "created_at": "2024-11-06T16:25:59Z",
- "updated_at": "2026-04-06T02:59:17Z",
- "pushed_at": "2024-11-06T16:28:46Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 915393828,
"name": "CVE-2024-49328-exploit",
diff --git a/2024/CVE-2024-49368.json b/2024/CVE-2024-49368.json
deleted file mode 100644
index 3b658d8b11..0000000000
--- a/2024/CVE-2024-49368.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887035757,
- "name": "CVE-2024-49368",
- "full_name": "Aashay221999\/CVE-2024-49368",
- "owner": {
- "login": "Aashay221999",
- "id": 43607208,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43607208?v=4",
- "html_url": "https:\/\/github.com\/Aashay221999",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Aashay221999\/CVE-2024-49368",
- "description": "Explorations of CVE-2024-49368 + Exploit Development",
- "fork": false,
- "created_at": "2024-11-12T03:50:46Z",
- "updated_at": "2024-11-12T03:56:07Z",
- "pushed_at": "2024-11-12T03:56:04Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-4956.json b/2024/CVE-2024-4956.json
index 9103d4841e..21d4e74ef8 100644
--- a/2024/CVE-2024-4956.json
+++ b/2024/CVE-2024-4956.json
@@ -448,39 +448,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 867826963,
- "name": "shirocrack",
- "full_name": "An00bRektn\/shirocrack",
- "owner": {
- "login": "An00bRektn",
- "id": 58986498,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58986498?v=4",
- "html_url": "https:\/\/github.com\/An00bRektn",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/An00bRektn\/shirocrack",
- "description": "Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956.",
- "fork": false,
- "created_at": "2024-10-04T19:54:05Z",
- "updated_at": "2024-12-06T13:38:19Z",
- "pushed_at": "2024-10-04T20:38:27Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 955330678,
"name": "CVE-2024-4956",
diff --git a/2024/CVE-2024-49607.json b/2024/CVE-2024-49607.json
deleted file mode 100644
index a598e769ed..0000000000
--- a/2024/CVE-2024-49607.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885865765,
- "name": "CVE-2024-49607",
- "full_name": "RandomRobbieBF\/CVE-2024-49607",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-49607",
- "description": "WP Dropbox Dropins <= 1.0 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-09T15:46:58Z",
- "updated_at": "2025-01-06T13:37:21Z",
- "pushed_at": "2024-11-09T15:48:04Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-49681.json b/2024/CVE-2024-49681.json
deleted file mode 100644
index 5e91243ef5..0000000000
--- a/2024/CVE-2024-49681.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885857761,
- "name": "CVE-2024-49681",
- "full_name": "RandomRobbieBF\/CVE-2024-49681",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-49681",
- "description": "WP Sessions Time Monitoring Full Automatic <= 1.0.9 - Unauthenticated SQL Injection",
- "fork": false,
- "created_at": "2024-11-09T15:24:16Z",
- "updated_at": "2024-11-14T10:40:35Z",
- "pushed_at": "2024-11-09T15:25:29Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 2
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50251.json b/2024/CVE-2024-50251.json
deleted file mode 100644
index 019512ecf5..0000000000
--- a/2024/CVE-2024-50251.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887128999,
- "name": "CVE-2024-50251-PoC",
- "full_name": "slavin-ayu\/CVE-2024-50251-PoC",
- "owner": {
- "login": "slavin-ayu",
- "id": 88360575,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88360575?v=4",
- "html_url": "https:\/\/github.com\/slavin-ayu",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/slavin-ayu\/CVE-2024-50251-PoC",
- "description": "Just a local Dos bug in Linux kernel",
- "fork": false,
- "created_at": "2024-11-12T08:08:55Z",
- "updated_at": "2024-11-15T07:06:25Z",
- "pushed_at": "2024-11-12T08:14:29Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50335.json b/2024/CVE-2024-50335.json
deleted file mode 100644
index 67a350c9c7..0000000000
--- a/2024/CVE-2024-50335.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 884650375,
- "name": "CVE-2024-50335",
- "full_name": "shellkraft\/CVE-2024-50335",
- "owner": {
- "login": "shellkraft",
- "id": 89618500,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89618500?v=4",
- "html_url": "https:\/\/github.com\/shellkraft",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/shellkraft\/CVE-2024-50335",
- "description": "A security vulnerability in SuiteCRM that can be exploited to steal CSRF tokens and perform unauthorized actions, such as creating new administrative users without proper authentication.",
- "fork": false,
- "created_at": "2024-11-07T06:19:49Z",
- "updated_at": "2026-03-11T21:30:01Z",
- "pushed_at": "2024-11-07T06:51:47Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50340.json b/2024/CVE-2024-50340.json
deleted file mode 100644
index 688cf64978..0000000000
--- a/2024/CVE-2024-50340.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 884497011,
- "name": "CVE-2024-50340",
- "full_name": "Nyamort\/CVE-2024-50340",
- "owner": {
- "login": "Nyamort",
- "id": 67233336,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67233336?v=4",
- "html_url": "https:\/\/github.com\/Nyamort",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Nyamort\/CVE-2024-50340",
- "description": null,
- "fork": false,
- "created_at": "2024-11-06T21:24:43Z",
- "updated_at": "2026-01-10T14:57:13Z",
- "pushed_at": "2024-11-08T16:39:57Z",
- "stargazers_count": 12,
- "watchers_count": 12,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 12,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50427.json b/2024/CVE-2024-50427.json
deleted file mode 100644
index a0c4336ed8..0000000000
--- a/2024/CVE-2024-50427.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885351535,
- "name": "CVE-2024-50427",
- "full_name": "RandomRobbieBF\/CVE-2024-50427",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50427",
- "description": "SurveyJS: Drag & Drop WordPress Form Builder <= 1.9.136 - Authenticated (Subscriber+) Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-08T12:24:06Z",
- "updated_at": "2024-11-08T12:26:15Z",
- "pushed_at": "2024-11-08T12:26:12Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50450.json b/2024/CVE-2024-50450.json
deleted file mode 100644
index bf64ceaf47..0000000000
--- a/2024/CVE-2024-50450.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885327071,
- "name": "CVE-2024-50450",
- "full_name": "RandomRobbieBF\/CVE-2024-50450",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50450",
- "description": "WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.4 - Unauthenticated Arbitrary Shortcode Execution",
- "fork": false,
- "created_at": "2024-11-08T11:24:16Z",
- "updated_at": "2024-11-15T13:26:04Z",
- "pushed_at": "2024-11-08T11:25:54Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50473.json b/2024/CVE-2024-50473.json
deleted file mode 100644
index 868f635025..0000000000
--- a/2024/CVE-2024-50473.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885717449,
- "name": "CVE-2024-50473",
- "full_name": "RandomRobbieBF\/CVE-2024-50473",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50473",
- "description": "Ajar in5 Embed <= 3.1.3 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-09T07:46:54Z",
- "updated_at": "2024-11-09T07:49:13Z",
- "pushed_at": "2024-11-09T07:49:10Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50475.json b/2024/CVE-2024-50475.json
deleted file mode 100644
index fef490fb42..0000000000
--- a/2024/CVE-2024-50475.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883081341,
- "name": "CVE-2024-50475",
- "full_name": "RandomRobbieBF\/CVE-2024-50475",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50475",
- "description": "Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update",
- "fork": false,
- "created_at": "2024-11-04T10:46:46Z",
- "updated_at": "2024-11-04T10:51:54Z",
- "pushed_at": "2024-11-04T10:51:51Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50476.json b/2024/CVE-2024-50476.json
deleted file mode 100644
index 4038304949..0000000000
--- a/2024/CVE-2024-50476.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883044063,
- "name": "CVE-2024-50476",
- "full_name": "RandomRobbieBF\/CVE-2024-50476",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50476",
- "description": "GRÜN spendino Spendenformular <= 1.0.1 - Unauthenticated Arbitrary Options Update",
- "fork": false,
- "created_at": "2024-11-04T09:30:36Z",
- "updated_at": "2024-11-04T09:32:19Z",
- "pushed_at": "2024-11-04T09:32:16Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50477.json b/2024/CVE-2024-50477.json
deleted file mode 100644
index 1d846bc6b0..0000000000
--- a/2024/CVE-2024-50477.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885488327,
- "name": "CVE-2024-50477",
- "full_name": "RandomRobbieBF\/CVE-2024-50477",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50477",
- "description": "Stacks Mobile App Builder <= 5.2.3 - Authentication Bypass via Account Takeover",
- "fork": false,
- "created_at": "2024-11-08T17:22:29Z",
- "updated_at": "2024-11-08T17:24:37Z",
- "pushed_at": "2024-11-08T17:24:34Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50478.json b/2024/CVE-2024-50478.json
deleted file mode 100644
index cc9955c4b7..0000000000
--- a/2024/CVE-2024-50478.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883959177,
- "name": "CVE-2024-50478",
- "full_name": "RandomRobbieBF\/CVE-2024-50478",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50478",
- "description": "1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover",
- "fork": false,
- "created_at": "2024-11-05T22:04:55Z",
- "updated_at": "2024-11-05T22:06:29Z",
- "pushed_at": "2024-11-05T22:06:26Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50482.json b/2024/CVE-2024-50482.json
deleted file mode 100644
index bb451d9994..0000000000
--- a/2024/CVE-2024-50482.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883725552,
- "name": "CVE-2024-50482",
- "full_name": "RandomRobbieBF\/CVE-2024-50482",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50482",
- "description": "Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-05T13:19:05Z",
- "updated_at": "2024-11-05T13:21:18Z",
- "pushed_at": "2024-11-05T13:21:14Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50483.json b/2024/CVE-2024-50483.json
deleted file mode 100644
index 03cd3945d0..0000000000
--- a/2024/CVE-2024-50483.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883950955,
- "name": "CVE-2024-50483",
- "full_name": "RandomRobbieBF\/CVE-2024-50483",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50483",
- "description": "Meetup <= 0.1 - Authentication Bypass via Account Takeover",
- "fork": false,
- "created_at": "2024-11-05T21:38:44Z",
- "updated_at": "2024-11-14T10:41:37Z",
- "pushed_at": "2024-11-05T21:40:58Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 2
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50485.json b/2024/CVE-2024-50485.json
deleted file mode 100644
index 3dadbe60e0..0000000000
--- a/2024/CVE-2024-50485.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883716846,
- "name": "CVE-2024-50485",
- "full_name": "RandomRobbieBF\/CVE-2024-50485",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50485",
- "description": "Exam Matrix <= 1.5 - Unauthenticated Privilege Escalation",
- "fork": false,
- "created_at": "2024-11-05T13:02:28Z",
- "updated_at": "2024-11-05T13:03:53Z",
- "pushed_at": "2024-11-05T13:03:49Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50488.json b/2024/CVE-2024-50488.json
deleted file mode 100644
index 71173bbea4..0000000000
--- a/2024/CVE-2024-50488.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885769222,
- "name": "CVE-2024-50488",
- "full_name": "RandomRobbieBF\/CVE-2024-50488",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50488",
- "description": "Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation",
- "fork": false,
- "created_at": "2024-11-09T10:54:06Z",
- "updated_at": "2024-11-09T10:58:33Z",
- "pushed_at": "2024-11-09T10:56:30Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50490.json b/2024/CVE-2024-50490.json
deleted file mode 100644
index c9d87be13a..0000000000
--- a/2024/CVE-2024-50490.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883699871,
- "name": "CVE-2024-50490",
- "full_name": "RandomRobbieBF\/CVE-2024-50490",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50490",
- "description": "PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update",
- "fork": false,
- "created_at": "2024-11-05T12:27:41Z",
- "updated_at": "2024-11-05T12:29:25Z",
- "pushed_at": "2024-11-05T12:29:21Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50493.json b/2024/CVE-2024-50493.json
deleted file mode 100644
index ac5510b8c3..0000000000
--- a/2024/CVE-2024-50493.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 886111060,
- "name": "CVE-2024-50493",
- "full_name": "RandomRobbieBF\/CVE-2024-50493",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50493",
- "description": "Automatic Translation <= 1.0.4 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-10T08:17:41Z",
- "updated_at": "2024-11-10T08:18:31Z",
- "pushed_at": "2024-11-10T08:18:28Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50498.json b/2024/CVE-2024-50498.json
index 48154d29da..a2d6370e06 100644
--- a/2024/CVE-2024-50498.json
+++ b/2024/CVE-2024-50498.json
@@ -1,37 +1,4 @@
[
- {
- "id": 883392821,
- "name": "CVE-2024-50498",
- "full_name": "RandomRobbieBF\/CVE-2024-50498",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50498",
- "description": "WP Query Console <= 1.0 - Unauthenticated Remote Code Execution",
- "fork": false,
- "created_at": "2024-11-04T22:13:45Z",
- "updated_at": "2025-02-21T15:35:33Z",
- "pushed_at": "2024-11-04T22:15:03Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 898207911,
"name": "CVE-2024-50498",
diff --git a/2024/CVE-2024-50657.json b/2024/CVE-2024-50657.json
deleted file mode 100644
index 8bd8a1bc94..0000000000
--- a/2024/CVE-2024-50657.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888839263,
- "name": "CVE-2024-50657",
- "full_name": "SAHALLL\/CVE-2024-50657",
- "owner": {
- "login": "SAHALLL",
- "id": 90813381,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90813381?v=4",
- "html_url": "https:\/\/github.com\/SAHALLL",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/SAHALLL\/CVE-2024-50657",
- "description": null,
- "fork": false,
- "created_at": "2024-11-15T05:22:27Z",
- "updated_at": "2024-11-16T04:12:32Z",
- "pushed_at": "2024-11-16T04:12:29Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50848.json b/2024/CVE-2024-50848.json
deleted file mode 100644
index 9b3f342cc4..0000000000
--- a/2024/CVE-2024-50848.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 889175343,
- "name": "CVE-2024-50848",
- "full_name": "1mhr4b\/CVE-2024-50848",
- "owner": {
- "login": "1mhr4b",
- "id": 188617964,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188617964?v=4",
- "html_url": "https:\/\/github.com\/1mhr4b",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/1mhr4b\/CVE-2024-50848",
- "description": null,
- "fork": false,
- "created_at": "2024-11-15T18:57:25Z",
- "updated_at": "2024-11-15T19:29:50Z",
- "pushed_at": "2024-11-15T19:29:46Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50961.json b/2024/CVE-2024-50961.json
deleted file mode 100644
index df45b51798..0000000000
--- a/2024/CVE-2024-50961.json
+++ /dev/null
@@ -1,39 +0,0 @@
-[
- {
- "id": 887738523,
- "name": "CVE-2024-50961",
- "full_name": "fdzdev\/CVE-2024-50961",
- "owner": {
- "login": "fdzdev",
- "id": 17630462,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17630462?v=4",
- "html_url": "https:\/\/github.com\/fdzdev",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fdzdev\/CVE-2024-50961",
- "description": "Remote attacker can access sensitive data exposed on the URL",
- "fork": false,
- "created_at": "2024-11-13T07:43:06Z",
- "updated_at": "2024-11-13T07:53:44Z",
- "pushed_at": "2024-11-13T07:47:02Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "cve-2024-50961",
- "cves"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50962.json b/2024/CVE-2024-50962.json
deleted file mode 100644
index 6366d049a0..0000000000
--- a/2024/CVE-2024-50962.json
+++ /dev/null
@@ -1,39 +0,0 @@
-[
- {
- "id": 887740422,
- "name": "CVE-2024-50962",
- "full_name": "fdzdev\/CVE-2024-50962",
- "owner": {
- "login": "fdzdev",
- "id": 17630462,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17630462?v=4",
- "html_url": "https:\/\/github.com\/fdzdev",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fdzdev\/CVE-2024-50962",
- "description": "A Cross-Site Scripting (XSS) vulnerability",
- "fork": false,
- "created_at": "2024-11-13T07:47:38Z",
- "updated_at": "2024-11-13T08:28:29Z",
- "pushed_at": "2024-11-13T07:48:30Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "cve-2024-50962",
- "cves"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50964.json b/2024/CVE-2024-50964.json
deleted file mode 100644
index 6024ff0478..0000000000
--- a/2024/CVE-2024-50964.json
+++ /dev/null
@@ -1,39 +0,0 @@
-[
- {
- "id": 887741002,
- "name": "CVE-2024-50964",
- "full_name": "fdzdev\/CVE-2024-50964",
- "owner": {
- "login": "fdzdev",
- "id": 17630462,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17630462?v=4",
- "html_url": "https:\/\/github.com\/fdzdev",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fdzdev\/CVE-2024-50964",
- "description": "MX Server misconfiguration",
- "fork": false,
- "created_at": "2024-11-13T07:49:09Z",
- "updated_at": "2024-11-13T08:28:26Z",
- "pushed_at": "2024-11-13T07:51:37Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve",
- "cve-2024-50964",
- "cves"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50968.json b/2024/CVE-2024-50968.json
deleted file mode 100644
index 9d535508e7..0000000000
--- a/2024/CVE-2024-50968.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887259811,
- "name": "CVE-2024-50968",
- "full_name": "Akhlak2511\/CVE-2024-50968",
- "owner": {
- "login": "Akhlak2511",
- "id": 74315191,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74315191?v=4",
- "html_url": "https:\/\/github.com\/Akhlak2511",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akhlak2511\/CVE-2024-50968",
- "description": null,
- "fork": false,
- "created_at": "2024-11-12T12:48:17Z",
- "updated_at": "2024-11-12T13:02:03Z",
- "pushed_at": "2024-11-12T13:01:59Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50969.json b/2024/CVE-2024-50969.json
deleted file mode 100644
index 8b705ca56b..0000000000
--- a/2024/CVE-2024-50969.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887401537,
- "name": "CVE-2024-50969",
- "full_name": "Akhlak2511\/CVE-2024-50969",
- "owner": {
- "login": "Akhlak2511",
- "id": 74315191,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74315191?v=4",
- "html_url": "https:\/\/github.com\/Akhlak2511",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akhlak2511\/CVE-2024-50969",
- "description": null,
- "fork": false,
- "created_at": "2024-11-12T17:20:07Z",
- "updated_at": "2024-11-12T17:28:23Z",
- "pushed_at": "2024-11-12T17:28:01Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50970.json b/2024/CVE-2024-50970.json
deleted file mode 100644
index 2908f7bdd8..0000000000
--- a/2024/CVE-2024-50970.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887406221,
- "name": "CVE-2024-50970",
- "full_name": "Akhlak2511\/CVE-2024-50970",
- "owner": {
- "login": "Akhlak2511",
- "id": 74315191,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74315191?v=4",
- "html_url": "https:\/\/github.com\/Akhlak2511",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akhlak2511\/CVE-2024-50970",
- "description": null,
- "fork": false,
- "created_at": "2024-11-12T17:30:00Z",
- "updated_at": "2024-11-12T17:34:01Z",
- "pushed_at": "2024-11-12T17:33:58Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50971.json b/2024/CVE-2024-50971.json
deleted file mode 100644
index f4cab4eb78..0000000000
--- a/2024/CVE-2024-50971.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887409068,
- "name": "CVE-2024-50971",
- "full_name": "Akhlak2511\/CVE-2024-50971",
- "owner": {
- "login": "Akhlak2511",
- "id": 74315191,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74315191?v=4",
- "html_url": "https:\/\/github.com\/Akhlak2511",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akhlak2511\/CVE-2024-50971",
- "description": null,
- "fork": false,
- "created_at": "2024-11-12T17:36:02Z",
- "updated_at": "2024-11-12T17:39:26Z",
- "pushed_at": "2024-11-12T17:39:23Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-50972.json b/2024/CVE-2024-50972.json
deleted file mode 100644
index 458323cefe..0000000000
--- a/2024/CVE-2024-50972.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887411310,
- "name": "CVE-2024-50972",
- "full_name": "Akhlak2511\/CVE-2024-50972",
- "owner": {
- "login": "Akhlak2511",
- "id": 74315191,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74315191?v=4",
- "html_url": "https:\/\/github.com\/Akhlak2511",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Akhlak2511\/CVE-2024-50972",
- "description": null,
- "fork": false,
- "created_at": "2024-11-12T17:40:54Z",
- "updated_at": "2024-11-12T17:43:51Z",
- "pushed_at": "2024-11-12T17:43:47Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51026.json b/2024/CVE-2024-51026.json
deleted file mode 100644
index a7fc0d1c21..0000000000
--- a/2024/CVE-2024-51026.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 886757040,
- "name": "CVE-2024-51026_Overview",
- "full_name": "BrotherOfJhonny\/CVE-2024-51026_Overview",
- "owner": {
- "login": "BrotherOfJhonny",
- "id": 28454566,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28454566?v=4",
- "html_url": "https:\/\/github.com\/BrotherOfJhonny",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/BrotherOfJhonny\/CVE-2024-51026_Overview",
- "description": "Sistema NetAdmin IAM 4 é vulnerável a Cross Site Scripting (XSS), no endpoint \/BalloonSave.ashx",
- "fork": false,
- "created_at": "2024-11-11T14:49:47Z",
- "updated_at": "2024-11-11T14:58:58Z",
- "pushed_at": "2024-11-11T14:58:55Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51030.json b/2024/CVE-2024-51030.json
deleted file mode 100644
index d5400eb71b..0000000000
--- a/2024/CVE-2024-51030.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883929203,
- "name": "CVE-2024-51030",
- "full_name": "vighneshnair7\/CVE-2024-51030",
- "owner": {
- "login": "vighneshnair7",
- "id": 186159201,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186159201?v=4",
- "html_url": "https:\/\/github.com\/vighneshnair7",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/vighneshnair7\/CVE-2024-51030",
- "description": null,
- "fork": false,
- "created_at": "2024-11-05T20:33:56Z",
- "updated_at": "2024-11-05T20:45:23Z",
- "pushed_at": "2024-11-05T20:45:20Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51031.json b/2024/CVE-2024-51031.json
deleted file mode 100644
index 63d554dd72..0000000000
--- a/2024/CVE-2024-51031.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883938105,
- "name": "CVE-2024-51031",
- "full_name": "vighneshnair7\/CVE-2024-51031",
- "owner": {
- "login": "vighneshnair7",
- "id": 186159201,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186159201?v=4",
- "html_url": "https:\/\/github.com\/vighneshnair7",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/vighneshnair7\/CVE-2024-51031",
- "description": null,
- "fork": false,
- "created_at": "2024-11-05T20:59:14Z",
- "updated_at": "2024-11-05T21:04:48Z",
- "pushed_at": "2024-11-05T21:04:45Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51032.json b/2024/CVE-2024-51032.json
deleted file mode 100644
index 422fef9509..0000000000
--- a/2024/CVE-2024-51032.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 883932000,
- "name": "CVE-2024-51032",
- "full_name": "Shree-Chandragiri\/CVE-2024-51032",
- "owner": {
- "login": "Shree-Chandragiri",
- "id": 187441471,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187441471?v=4",
- "html_url": "https:\/\/github.com\/Shree-Chandragiri",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Shree-Chandragiri\/CVE-2024-51032",
- "description": "A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the \"owner\" input field.",
- "fork": false,
- "created_at": "2024-11-05T20:41:15Z",
- "updated_at": "2024-11-05T21:04:24Z",
- "pushed_at": "2024-11-05T21:04:21Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-5124.json b/2024/CVE-2024-5124.json
deleted file mode 100644
index a775bc3c4b..0000000000
--- a/2024/CVE-2024-5124.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880757168,
- "name": "CVE-2024-5124",
- "full_name": "gogo2464\/CVE-2024-5124",
- "owner": {
- "login": "gogo2464",
- "id": 57051187,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57051187?v=4",
- "html_url": "https:\/\/github.com\/gogo2464",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/gogo2464\/CVE-2024-5124",
- "description": null,
- "fork": false,
- "created_at": "2024-10-30T09:53:42Z",
- "updated_at": "2025-08-22T14:30:52Z",
- "pushed_at": "2024-11-03T11:49:36Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51358.json b/2024/CVE-2024-51358.json
deleted file mode 100644
index 7a5b38c941..0000000000
--- a/2024/CVE-2024-51358.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 882335500,
- "name": "CVE-2024-51358",
- "full_name": "Kov404\/CVE-2024-51358",
- "owner": {
- "login": "Kov404",
- "id": 177751667,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177751667?v=4",
- "html_url": "https:\/\/github.com\/Kov404",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Kov404\/CVE-2024-51358",
- "description": null,
- "fork": false,
- "created_at": "2024-11-02T14:55:00Z",
- "updated_at": "2025-06-28T14:26:46Z",
- "pushed_at": "2024-11-02T14:56:04Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51378.json b/2024/CVE-2024-51378.json
index 8a7fa60d49..14b009d163 100644
--- a/2024/CVE-2024-51378.json
+++ b/2024/CVE-2024-51378.json
@@ -1,37 +1,4 @@
[
- {
- "id": 880552224,
- "name": "CVE-2024-51378",
- "full_name": "refr4g\/CVE-2024-51378",
- "owner": {
- "login": "refr4g",
- "id": 63981656,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63981656?v=4",
- "html_url": "https:\/\/github.com\/refr4g",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/refr4g\/CVE-2024-51378",
- "description": "Exploit for CyberPanel Pre-Auth RCE via Command Injection",
- "fork": false,
- "created_at": "2024-10-29T23:34:27Z",
- "updated_at": "2026-02-03T10:37:29Z",
- "pushed_at": "2024-11-01T10:12:49Z",
- "stargazers_count": 22,
- "watchers_count": 22,
- "has_discussions": false,
- "forks_count": 7,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 7,
- "watchers": 22,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 931305888,
"name": "CVE-2024-51378",
diff --git a/2024/CVE-2024-51430.json b/2024/CVE-2024-51430.json
deleted file mode 100644
index c8d231780b..0000000000
--- a/2024/CVE-2024-51430.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 880470583,
- "name": "CVE-2024-51430",
- "full_name": "BLACK-SCORP10\/CVE-2024-51430",
- "owner": {
- "login": "BLACK-SCORP10",
- "id": 102329978,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102329978?v=4",
- "html_url": "https:\/\/github.com\/BLACK-SCORP10",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/BLACK-SCORP10\/CVE-2024-51430",
- "description": "The Online Diagnostic Lab Management System has a security problem called Cross-Site Scripting (XSS) in the Borrower section.",
- "fork": false,
- "created_at": "2024-10-29T19:32:05Z",
- "updated_at": "2024-11-21T09:14:45Z",
- "pushed_at": "2024-10-29T19:40:06Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51435.json b/2024/CVE-2024-51435.json
deleted file mode 100644
index aa00cc08f8..0000000000
--- a/2024/CVE-2024-51435.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 878714460,
- "name": "CVE-2024-51435",
- "full_name": "bevennyamande\/CVE-2024-51435",
- "owner": {
- "login": "bevennyamande",
- "id": 10162710,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10162710?v=4",
- "html_url": "https:\/\/github.com\/bevennyamande",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/bevennyamande\/CVE-2024-51435",
- "description": "bloodbank POCs",
- "fork": false,
- "created_at": "2024-10-25T23:28:09Z",
- "updated_at": "2024-10-28T18:47:29Z",
- "pushed_at": "2024-10-25T23:50:42Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51567.json b/2024/CVE-2024-51567.json
deleted file mode 100644
index 15a1b03f65..0000000000
--- a/2024/CVE-2024-51567.json
+++ /dev/null
@@ -1,71 +0,0 @@
-[
- {
- "id": 881591080,
- "name": "CVE-2024-51567",
- "full_name": "ajayalf\/CVE-2024-51567",
- "owner": {
- "login": "ajayalf",
- "id": 49350537,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49350537?v=4",
- "html_url": "https:\/\/github.com\/ajayalf",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ajayalf\/CVE-2024-51567",
- "description": "CVE-2024-51567 is a Python PoC exploit targeting an RCE vulnerability in CyberPanel v2.3.6’s upgrademysqlstatus endpoint, bypassing CSRF protections.",
- "fork": false,
- "created_at": "2024-10-31T21:55:57Z",
- "updated_at": "2026-01-10T14:57:30Z",
- "pushed_at": "2024-11-01T10:48:42Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve-2024-51567",
- "cyberpanel"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 884847468,
- "name": "CVE-2024-51567-RCE-EXPLOIT",
- "full_name": "thehash007\/CVE-2024-51567-RCE-EXPLOIT",
- "owner": {
- "login": "thehash007",
- "id": 108442682,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108442682?v=4",
- "html_url": "https:\/\/github.com\/thehash007",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/thehash007\/CVE-2024-51567-RCE-EXPLOIT",
- "description": "cbyerpanel rce exploit",
- "fork": false,
- "created_at": "2024-11-07T13:52:37Z",
- "updated_at": "2024-12-28T21:06:32Z",
- "pushed_at": "2024-11-07T13:57:25Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51665.json b/2024/CVE-2024-51665.json
deleted file mode 100644
index c58054d54c..0000000000
--- a/2024/CVE-2024-51665.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 886174697,
- "name": "CVE-2024-51665",
- "full_name": "RandomRobbieBF\/CVE-2024-51665",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-51665",
- "description": "Magical Addons For Elementor <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery",
- "fork": false,
- "created_at": "2024-11-10T12:01:52Z",
- "updated_at": "2024-11-15T13:23:56Z",
- "pushed_at": "2024-11-10T12:02:45Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-51747.json b/2024/CVE-2024-51747.json
deleted file mode 100644
index 020d9f7089..0000000000
--- a/2024/CVE-2024-51747.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888811330,
- "name": "CVE-2024-51747",
- "full_name": "l20170217b\/CVE-2024-51747",
- "owner": {
- "login": "l20170217b",
- "id": 153576205,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153576205?v=4",
- "html_url": "https:\/\/github.com\/l20170217b",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/l20170217b\/CVE-2024-51747",
- "description": null,
- "fork": false,
- "created_at": "2024-11-15T03:40:49Z",
- "updated_at": "2024-11-18T12:40:30Z",
- "pushed_at": "2024-11-15T04:00:38Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-52301.json b/2024/CVE-2024-52301.json
deleted file mode 100644
index bdccd094bc..0000000000
--- a/2024/CVE-2024-52301.json
+++ /dev/null
@@ -1,68 +0,0 @@
-[
- {
- "id": 888639868,
- "name": "CVE-2024-52301",
- "full_name": "Nyamort\/CVE-2024-52301",
- "owner": {
- "login": "Nyamort",
- "id": 67233336,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67233336?v=4",
- "html_url": "https:\/\/github.com\/Nyamort",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Nyamort\/CVE-2024-52301",
- "description": null,
- "fork": false,
- "created_at": "2024-11-14T18:41:31Z",
- "updated_at": "2025-09-22T04:00:37Z",
- "pushed_at": "2024-11-14T19:27:31Z",
- "stargazers_count": 20,
- "watchers_count": 20,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 20,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 889180658,
- "name": "CVE-2024-52301-Research",
- "full_name": "martinhaunschmid\/CVE-2024-52301-Research",
- "owner": {
- "login": "martinhaunschmid",
- "id": 35374703,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35374703?v=4",
- "html_url": "https:\/\/github.com\/martinhaunschmid",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/martinhaunschmid\/CVE-2024-52301-Research",
- "description": "A bit of research around CVE-2024-52301",
- "fork": false,
- "created_at": "2024-11-15T19:11:35Z",
- "updated_at": "2026-05-08T16:30:52Z",
- "pushed_at": "2024-11-15T19:42:11Z",
- "stargazers_count": 5,
- "watchers_count": 5,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 5,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-54756.json b/2024/CVE-2024-54756.json
deleted file mode 100644
index c037afac1b..0000000000
--- a/2024/CVE-2024-54756.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888773794,
- "name": "GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC",
- "full_name": "Chainmanner\/GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC",
- "owner": {
- "login": "Chainmanner",
- "id": 4983414,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4983414?v=4",
- "html_url": "https:\/\/github.com\/Chainmanner",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Chainmanner\/GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC",
- "description": "Proof of concept for CVE-2024-54756, a vulnerability I found in GZDoom's ZScript scripting engine.",
- "fork": false,
- "created_at": "2024-11-15T01:29:13Z",
- "updated_at": "2025-08-07T01:10:06Z",
- "pushed_at": "2024-11-15T02:08:22Z",
- "stargazers_count": 12,
- "watchers_count": 12,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 12,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-5522.json b/2024/CVE-2024-5522.json
index 06df8b0b89..3a76a97f2f 100644
--- a/2024/CVE-2024-5522.json
+++ b/2024/CVE-2024-5522.json
@@ -31,53 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 866079798,
- "name": "CVE-2024-5522",
- "full_name": "geniuszly\/CVE-2024-5522",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/CVE-2024-5522",
- "description": "A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites",
- "fork": false,
- "created_at": "2024-10-01T16:02:12Z",
- "updated_at": "2025-03-18T17:59:36Z",
- "pushed_at": "2024-10-01T16:03:38Z",
- "stargazers_count": 10,
- "watchers_count": 10,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "buffer-overflow",
- "cve",
- "cve-2024-5522",
- "cybersecurity",
- "ethical-hacking",
- "exploit",
- "exploit-development",
- "linux",
- "poc",
- "security",
- "vulnerability",
- "vulnerability-research",
- "wordpress",
- "wp"
- ],
- "visibility": "public",
- "forks": 2,
- "watchers": 10,
- "score": 0,
- "subscribers_count": 2
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-5764.json b/2024/CVE-2024-5764.json
deleted file mode 100644
index c8abda6429..0000000000
--- a/2024/CVE-2024-5764.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888675608,
- "name": "CVE-2024-5764",
- "full_name": "fin3ss3g0d\/CVE-2024-5764",
- "owner": {
- "login": "fin3ss3g0d",
- "id": 62859381,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62859381?v=4",
- "html_url": "https:\/\/github.com\/fin3ss3g0d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/fin3ss3g0d\/CVE-2024-5764",
- "description": "CVE-2024-5764 exploitation script",
- "fork": false,
- "created_at": "2024-11-14T20:08:45Z",
- "updated_at": "2025-12-31T04:41:28Z",
- "pushed_at": "2024-11-14T20:11:52Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-5910.json b/2024/CVE-2024-5910.json
deleted file mode 100644
index 9ee0ae7e2b..0000000000
--- a/2024/CVE-2024-5910.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 889262902,
- "name": "Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464",
- "full_name": "p33d\/Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464",
- "owner": {
- "login": "p33d",
- "id": 123099747,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123099747?v=4",
- "html_url": "https:\/\/github.com\/p33d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/p33d\/Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464",
- "description": null,
- "fork": false,
- "created_at": "2024-11-15T23:46:01Z",
- "updated_at": "2024-11-15T23:46:01Z",
- "pushed_at": "2024-11-15T23:46:01Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-5932.json b/2024/CVE-2024-5932.json
index d57debbc1b..4f199e686c 100644
--- a/2024/CVE-2024-5932.json
+++ b/2024/CVE-2024-5932.json
@@ -43,39 +43,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 871074593,
- "name": "cve-2024-5932",
- "full_name": "OxLmahdi\/cve-2024-5932",
- "owner": {
- "login": "OxLmahdi",
- "id": 159675795,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159675795?v=4",
- "html_url": "https:\/\/github.com\/OxLmahdi",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/OxLmahdi\/cve-2024-5932",
- "description": null,
- "fork": false,
- "created_at": "2024-10-11T08:12:38Z",
- "updated_at": "2025-11-11T10:17:13Z",
- "pushed_at": "2024-10-11T08:32:55Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1038437961,
"name": "CVE-2024-5932-web-ui",
diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json
index 18992efc9a..acf3c0657e 100644
--- a/2024/CVE-2024-6387.json
+++ b/2024/CVE-2024-6387.json
@@ -2832,39 +2832,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 876504709,
- "name": "CVE-2024-6387-poc-1",
- "full_name": "anhvutuan\/CVE-2024-6387-poc-1",
- "owner": {
- "login": "anhvutuan",
- "id": 74167929,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74167929?v=4",
- "html_url": "https:\/\/github.com\/anhvutuan",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/anhvutuan\/CVE-2024-6387-poc-1",
- "description": "CVE-2024-6387, also known as RegreSSHion, is a high-severity vulnerability found in OpenSSH servers (sshd) running on glibc-based Linux systems. It is a regression of a previously fixed vulnerability (CVE-2006-5051), which means the issue was reintroduced in newer versions of OpenSSH.",
- "fork": false,
- "created_at": "2024-10-22T04:50:10Z",
- "updated_at": "2025-02-07T01:50:27Z",
- "pushed_at": "2024-07-11T14:59:20Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 893527608,
"name": "CVE-2024-6387",
diff --git a/2024/CVE-2024-6473.json b/2024/CVE-2024-6473.json
deleted file mode 100644
index 160c6fa22b..0000000000
--- a/2024/CVE-2024-6473.json
+++ /dev/null
@@ -1,42 +0,0 @@
-[
- {
- "id": 882188373,
- "name": "CVE-2024-6473-PoC",
- "full_name": "12345qwert123456\/CVE-2024-6473-PoC",
- "owner": {
- "login": "12345qwert123456",
- "id": 63474188,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63474188?v=4",
- "html_url": "https:\/\/github.com\/12345qwert123456",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/12345qwert123456\/CVE-2024-6473-PoC",
- "description": "Proof of concept (exploit) for CVE-2024-6473",
- "fork": false,
- "created_at": "2024-11-02T05:37:30Z",
- "updated_at": "2026-04-09T18:44:09Z",
- "pushed_at": "2024-11-02T05:55:35Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": false,
- "pull_request_creation_policy": "all",
- "topics": [
- "browser",
- "cve",
- "dll-hijacking",
- "exploit",
- "poc",
- "yandex"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-6778.json b/2024/CVE-2024-6778.json
index 5151adf01e..ea4d7a0253 100644
--- a/2024/CVE-2024-6778.json
+++ b/2024/CVE-2024-6778.json
@@ -31,38 +31,5 @@
"watchers": 96,
"score": 0,
"subscribers_count": 2
- },
- {
- "id": 875609314,
- "name": "POC-CVE-2024-6778",
- "full_name": "r00tjunip3r1\/POC-CVE-2024-6778",
- "owner": {
- "login": "r00tjunip3r1",
- "id": 185687343,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185687343?v=4",
- "html_url": "https:\/\/github.com\/r00tjunip3r1",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/r00tjunip3r1\/POC-CVE-2024-6778",
- "description": null,
- "fork": false,
- "created_at": "2024-10-20T12:47:53Z",
- "updated_at": "2025-01-13T01:22:30Z",
- "pushed_at": "2024-10-20T12:50:33Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-7029.json b/2024/CVE-2024-7029.json
index b19a33606a..4c82b5be31 100644
--- a/2024/CVE-2024-7029.json
+++ b/2024/CVE-2024-7029.json
@@ -73,38 +73,5 @@
"watchers": 5,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 869446465,
- "name": "CVE-2024-7029",
- "full_name": "geniuszly\/CVE-2024-7029",
- "owner": {
- "login": "geniuszly",
- "id": 137893386,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4",
- "html_url": "https:\/\/github.com\/geniuszly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/geniuszly\/CVE-2024-7029",
- "description": " A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution (RCE)",
- "fork": false,
- "created_at": "2024-10-08T10:04:08Z",
- "updated_at": "2026-03-09T00:26:06Z",
- "pushed_at": "2024-10-08T10:08:07Z",
- "stargazers_count": 9,
- "watchers_count": 9,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 9,
- "score": 0,
- "subscribers_count": 2
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-7124.json b/2024/CVE-2024-7124.json
deleted file mode 100644
index ea5916b25b..0000000000
--- a/2024/CVE-2024-7124.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 888565008,
- "name": "CVE-2024-7124",
- "full_name": "kac89\/CVE-2024-7124",
- "owner": {
- "login": "kac89",
- "id": 5662731,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5662731?v=4",
- "html_url": "https:\/\/github.com\/kac89",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/kac89\/CVE-2024-7124",
- "description": "Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting (XSS). ",
- "fork": false,
- "created_at": "2024-11-14T16:05:44Z",
- "updated_at": "2024-11-14T16:09:22Z",
- "pushed_at": "2024-11-14T16:09:19Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-7456.json b/2024/CVE-2024-7456.json
deleted file mode 100644
index cf649886db..0000000000
--- a/2024/CVE-2024-7456.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 882153324,
- "name": "CVE-2024-7456scripts",
- "full_name": "77Philly\/CVE-2024-7456scripts",
- "owner": {
- "login": "77Philly",
- "id": 184293581,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184293581?v=4",
- "html_url": "https:\/\/github.com\/77Philly",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/77Philly\/CVE-2024-7456scripts",
- "description": null,
- "fork": false,
- "created_at": "2024-11-02T02:42:27Z",
- "updated_at": "2024-11-02T02:58:40Z",
- "pushed_at": "2024-11-02T02:58:37Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-7514.json b/2024/CVE-2024-7514.json
deleted file mode 100644
index d5f896f839..0000000000
--- a/2024/CVE-2024-7514.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871135091,
- "name": "CVE-2024-7514",
- "full_name": "RandomRobbieBF\/CVE-2024-7514",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-7514",
- "description": "WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal",
- "fork": false,
- "created_at": "2024-10-11T10:43:22Z",
- "updated_at": "2024-10-18T17:57:22Z",
- "pushed_at": "2024-10-11T10:45:10Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-7593.json b/2024/CVE-2024-7593.json
index 2f432acbcc..55f94288b6 100644
--- a/2024/CVE-2024-7593.json
+++ b/2024/CVE-2024-7593.json
@@ -69,38 +69,5 @@
"watchers": 9,
"score": 0,
"subscribers_count": 1
- },
- {
- "id": 871449363,
- "name": "CVE-2024-7593",
- "full_name": "voidbroker\/CVE-2024-7593",
- "owner": {
- "login": "voidbroker",
- "id": 156471538,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
- "html_url": "https:\/\/github.com\/voidbroker",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-7593",
- "description": null,
- "fork": false,
- "created_at": "2024-10-12T02:17:14Z",
- "updated_at": "2024-10-12T02:17:42Z",
- "pushed_at": "2024-10-12T02:17:39Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-7808.json b/2024/CVE-2024-7808.json
deleted file mode 100644
index 3e96c8c0bd..0000000000
--- a/2024/CVE-2024-7808.json
+++ /dev/null
@@ -1,40 +0,0 @@
-[
- {
- "id": 884904353,
- "name": "CVE-2024-7808",
- "full_name": "TheUnknownSoul\/CVE-2024-7808",
- "owner": {
- "login": "TheUnknownSoul",
- "id": 58050201,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58050201?v=4",
- "html_url": "https:\/\/github.com\/TheUnknownSoul",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/TheUnknownSoul\/CVE-2024-7808",
- "description": "RCE exploit for low privileged user via CSRF in open-webui ",
- "fork": false,
- "created_at": "2024-11-07T15:42:53Z",
- "updated_at": "2025-06-15T15:00:59Z",
- "pushed_at": "2024-11-08T10:08:07Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "csrf",
- "hack-tool",
- "open-webui",
- "rce-exploit"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-7854.json b/2024/CVE-2024-7854.json
deleted file mode 100644
index 9d3260f693..0000000000
--- a/2024/CVE-2024-7854.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 867703844,
- "name": "CVE-2024-7854",
- "full_name": "RandomRobbieBF\/CVE-2024-7854",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-7854",
- "description": "Woo Inquiry <= 0.1 - Unauthenticated SQL Injection",
- "fork": false,
- "created_at": "2024-10-04T14:59:36Z",
- "updated_at": "2024-10-18T17:57:30Z",
- "pushed_at": "2024-10-04T15:03:18Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-8529.json b/2024/CVE-2024-8529.json
deleted file mode 100644
index d44c0a3d7d..0000000000
--- a/2024/CVE-2024-8529.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871753655,
- "name": "CVE-2024-8529",
- "full_name": "RandomRobbieBF\/CVE-2024-8529",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-8529",
- "description": "LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'",
- "fork": false,
- "created_at": "2024-10-12T20:52:32Z",
- "updated_at": "2024-10-20T20:02:46Z",
- "pushed_at": "2024-10-12T20:55:55Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-8698.json b/2024/CVE-2024-8698.json
deleted file mode 100644
index c4c76f87e9..0000000000
--- a/2024/CVE-2024-8698.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 870632664,
- "name": "CVE-2024-8698-POC",
- "full_name": "huydoppaz\/CVE-2024-8698-POC",
- "owner": {
- "login": "huydoppaz",
- "id": 180631518,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180631518?v=4",
- "html_url": "https:\/\/github.com\/huydoppaz",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/huydoppaz\/CVE-2024-8698-POC",
- "description": "i'm noob with saml and keycloak . J4f",
- "fork": false,
- "created_at": "2024-10-10T11:50:07Z",
- "updated_at": "2025-11-28T11:01:10Z",
- "pushed_at": "2024-10-10T12:09:42Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-8963.json b/2024/CVE-2024-8963.json
deleted file mode 100644
index ccdca3e28b..0000000000
--- a/2024/CVE-2024-8963.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 887922973,
- "name": "CVE-2024-8963",
- "full_name": "patfire94\/CVE-2024-8963",
- "owner": {
- "login": "patfire94",
- "id": 167763968,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167763968?v=4",
- "html_url": "https:\/\/github.com\/patfire94",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/patfire94\/CVE-2024-8963",
- "description": "Ivanti Cloud Services Appliance - Path Traversal",
- "fork": false,
- "created_at": "2024-11-13T14:12:57Z",
- "updated_at": "2024-11-13T20:10:06Z",
- "pushed_at": "2024-11-13T20:10:03Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9061.json b/2024/CVE-2024-9061.json
deleted file mode 100644
index b480673244..0000000000
--- a/2024/CVE-2024-9061.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 873461230,
- "name": "CVE-2024-9061",
- "full_name": "RandomRobbieBF\/CVE-2024-9061",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9061",
- "description": "WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add",
- "fork": false,
- "created_at": "2024-10-16T07:57:48Z",
- "updated_at": "2025-03-14T23:29:27Z",
- "pushed_at": "2024-10-16T07:59:43Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9106.json b/2024/CVE-2024-9106.json
deleted file mode 100644
index 821705b63a..0000000000
--- a/2024/CVE-2024-9106.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 865906316,
- "name": "CVE-2024-9106",
- "full_name": "RandomRobbieBF\/CVE-2024-9106",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9106",
- "description": "Wechat Social login <= 1.3.0 - Authentication Bypass",
- "fork": false,
- "created_at": "2024-10-01T10:28:08Z",
- "updated_at": "2024-10-18T17:57:33Z",
- "pushed_at": "2024-10-01T10:31:05Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9224.json b/2024/CVE-2024-9224.json
deleted file mode 100644
index cfcbbd6463..0000000000
--- a/2024/CVE-2024-9224.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871101035,
- "name": "CVE-2024-9224",
- "full_name": "RandomRobbieBF\/CVE-2024-9224",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9224",
- "description": "Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read",
- "fork": false,
- "created_at": "2024-10-11T09:17:20Z",
- "updated_at": "2024-10-18T17:57:23Z",
- "pushed_at": "2024-10-11T09:21:20Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9234.json b/2024/CVE-2024-9234.json
index 6e69b24a3c..edc29a8419 100644
--- a/2024/CVE-2024-9234.json
+++ b/2024/CVE-2024-9234.json
@@ -1,37 +1,4 @@
[
- {
- "id": 874396366,
- "name": "CVE-2024-9234",
- "full_name": "RandomRobbieBF\/CVE-2024-9234",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9234",
- "description": "GutenKit <= 2.1.0 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-10-17T18:48:12Z",
- "updated_at": "2025-06-30T10:31:25Z",
- "pushed_at": "2024-10-17T18:49:22Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 909321616,
"name": "CVE-2024-9234",
diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json
index 7d3f2ca68d..4fea15e315 100644
--- a/2024/CVE-2024-9264.json
+++ b/2024/CVE-2024-9264.json
@@ -44,117 +44,6 @@
"score": 0,
"subscribers_count": 4
},
- {
- "id": 875437112,
- "name": "File-Read-CVE-2024-9264",
- "full_name": "z3k0sec\/File-Read-CVE-2024-9264",
- "owner": {
- "login": "z3k0sec",
- "id": 135271952,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135271952?v=4",
- "html_url": "https:\/\/github.com\/z3k0sec",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/z3k0sec\/File-Read-CVE-2024-9264",
- "description": "File Read Proof of Concept for CVE-2024-9264",
- "fork": false,
- "created_at": "2024-10-20T01:13:37Z",
- "updated_at": "2025-05-12T01:05:45Z",
- "pushed_at": "2024-10-20T11:46:34Z",
- "stargazers_count": 7,
- "watchers_count": 7,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve-2024-9264",
- "exploit",
- "grafana",
- "poc"
- ],
- "visibility": "public",
- "forks": 3,
- "watchers": 7,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 875890256,
- "name": "CVE-2024-9264-RCE-Exploit",
- "full_name": "z3k0sec\/CVE-2024-9264-RCE-Exploit",
- "owner": {
- "login": "z3k0sec",
- "id": 135271952,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135271952?v=4",
- "html_url": "https:\/\/github.com\/z3k0sec",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/z3k0sec\/CVE-2024-9264-RCE-Exploit",
- "description": "Grafana RCE exploit (CVE-2024-9264)",
- "fork": false,
- "created_at": "2024-10-21T03:36:05Z",
- "updated_at": "2026-04-20T11:04:58Z",
- "pushed_at": "2024-10-21T22:31:47Z",
- "stargazers_count": 38,
- "watchers_count": 38,
- "has_discussions": false,
- "forks_count": 6,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve-2024-9264",
- "duckdb",
- "exploit",
- "grafana",
- "rce",
- "shellfs"
- ],
- "visibility": "public",
- "forks": 6,
- "watchers": 38,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 876056610,
- "name": "Grafana-CVE-2024-9264",
- "full_name": "punitdarji\/Grafana-CVE-2024-9264",
- "owner": {
- "login": "punitdarji",
- "id": 38101321,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38101321?v=4",
- "html_url": "https:\/\/github.com\/punitdarji",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/punitdarji\/Grafana-CVE-2024-9264",
- "description": null,
- "fork": false,
- "created_at": "2024-10-21T10:25:27Z",
- "updated_at": "2024-10-21T10:26:17Z",
- "pushed_at": "2024-10-21T10:26:13Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 993920679,
"name": "CVE-2024-9264",
diff --git a/2024/CVE-2024-9441.json b/2024/CVE-2024-9441.json
index 4a613ef7d9..dfac6efb1b 100644
--- a/2024/CVE-2024-9441.json
+++ b/2024/CVE-2024-9441.json
@@ -1,70 +1,4 @@
[
- {
- "id": 867057499,
- "name": "CVE-2024-9441",
- "full_name": "adhikara13\/CVE-2024-9441",
- "owner": {
- "login": "adhikara13",
- "id": 44716348,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44716348?v=4",
- "html_url": "https:\/\/github.com\/adhikara13",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/adhikara13\/CVE-2024-9441",
- "description": "Nortek Linear eMerge E3 Pre-Auth RCE PoC (CVE-2024-9441)",
- "fork": false,
- "created_at": "2024-10-03T11:28:46Z",
- "updated_at": "2025-10-26T19:11:54Z",
- "pushed_at": "2024-10-03T11:32:27Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 870893978,
- "name": "CVE-2024-9441",
- "full_name": "p33d\/CVE-2024-9441",
- "owner": {
- "login": "p33d",
- "id": 123099747,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123099747?v=4",
- "html_url": "https:\/\/github.com\/p33d",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/p33d\/CVE-2024-9441",
- "description": null,
- "fork": false,
- "created_at": "2024-10-10T21:29:08Z",
- "updated_at": "2025-09-15T11:35:44Z",
- "pushed_at": "2024-10-10T21:33:29Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 900915677,
"name": "CVE-2024-9441-Checker",
diff --git a/2024/CVE-2024-9464.json b/2024/CVE-2024-9464.json
deleted file mode 100644
index 5120ed74c7..0000000000
--- a/2024/CVE-2024-9464.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 870215749,
- "name": "CVE-2024-9464",
- "full_name": "horizon3ai\/CVE-2024-9464",
- "owner": {
- "login": "horizon3ai",
- "id": 79593994,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4",
- "html_url": "https:\/\/github.com\/horizon3ai",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2024-9464",
- "description": "Proof of Concept Exploit for CVE-2024-9464",
- "fork": false,
- "created_at": "2024-10-09T16:36:25Z",
- "updated_at": "2026-05-04T00:40:41Z",
- "pushed_at": "2024-10-09T16:41:41Z",
- "stargazers_count": 44,
- "watchers_count": 44,
- "has_discussions": false,
- "forks_count": 9,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 9,
- "watchers": 44,
- "score": 0,
- "subscribers_count": 4
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9465.json b/2024/CVE-2024-9465.json
deleted file mode 100644
index ce4ff782d2..0000000000
--- a/2024/CVE-2024-9465.json
+++ /dev/null
@@ -1,68 +0,0 @@
-[
- {
- "id": 870208687,
- "name": "CVE-2024-9465",
- "full_name": "horizon3ai\/CVE-2024-9465",
- "owner": {
- "login": "horizon3ai",
- "id": 79593994,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4",
- "html_url": "https:\/\/github.com\/horizon3ai",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2024-9465",
- "description": "Proof of Concept Exploit for CVE-2024-9465",
- "fork": false,
- "created_at": "2024-10-09T16:22:05Z",
- "updated_at": "2026-03-10T00:38:23Z",
- "pushed_at": "2024-10-09T16:34:42Z",
- "stargazers_count": 31,
- "watchers_count": 31,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 31,
- "score": 0,
- "subscribers_count": 4
- },
- {
- "id": 871034576,
- "name": "CVE-2024-9465",
- "full_name": "Qlng\/CVE-2024-9465",
- "owner": {
- "login": "Qlng",
- "id": 39910823,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39910823?v=4",
- "html_url": "https:\/\/github.com\/Qlng",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Qlng\/CVE-2024-9465",
- "description": "Checkpoint SQL Injection via Time-Based Attack (CVE-2024-9465)",
- "fork": false,
- "created_at": "2024-10-11T06:25:36Z",
- "updated_at": "2024-10-11T06:25:36Z",
- "pushed_at": "2024-10-10T08:39:22Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9466.json b/2024/CVE-2024-9466.json
deleted file mode 100644
index cef3e3679c..0000000000
--- a/2024/CVE-2024-9466.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 875151386,
- "name": "CVE-2024-9466",
- "full_name": "holypryx\/CVE-2024-9466",
- "owner": {
- "login": "holypryx",
- "id": 182792867,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182792867?v=4",
- "html_url": "https:\/\/github.com\/holypryx",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/holypryx\/CVE-2024-9466",
- "description": "CVE-2024-9466 poc",
- "fork": false,
- "created_at": "2024-10-19T08:22:13Z",
- "updated_at": "2024-10-22T02:01:29Z",
- "pushed_at": "2024-10-19T08:25:45Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9570.json b/2024/CVE-2024-9570.json
deleted file mode 100644
index 444f133274..0000000000
--- a/2024/CVE-2024-9570.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871275663,
- "name": "CVE-2024-9570_D-Link-DIR-619L-bof",
- "full_name": "dylvie\/CVE-2024-9570_D-Link-DIR-619L-bof",
- "owner": {
- "login": "dylvie",
- "id": 78607002,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78607002?v=4",
- "html_url": "https:\/\/github.com\/dylvie",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/dylvie\/CVE-2024-9570_D-Link-DIR-619L-bof",
- "description": "Exploit for CVE-2024-9570",
- "fork": false,
- "created_at": "2024-10-11T16:05:06Z",
- "updated_at": "2024-10-14T02:39:01Z",
- "pushed_at": "2024-10-11T16:08:06Z",
- "stargazers_count": 6,
- "watchers_count": 6,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 6,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9593.json b/2024/CVE-2024-9593.json
index 2eabce0949..dc441b501c 100644
--- a/2024/CVE-2024-9593.json
+++ b/2024/CVE-2024-9593.json
@@ -1,37 +1,4 @@
[
- {
- "id": 874679920,
- "name": "CVE-2024-9593",
- "full_name": "RandomRobbieBF\/CVE-2024-9593",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9593",
- "description": "Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution",
- "fork": false,
- "created_at": "2024-10-18T09:11:03Z",
- "updated_at": "2025-02-06T12:32:15Z",
- "pushed_at": "2024-10-18T09:14:40Z",
- "stargazers_count": 7,
- "watchers_count": 7,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 7,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 890236164,
"name": "CVE-2024-9593-EXP",
diff --git a/2024/CVE-2024-9680.json b/2024/CVE-2024-9680.json
index ea0d209c57..a5bd076977 100644
--- a/2024/CVE-2024-9680.json
+++ b/2024/CVE-2024-9680.json
@@ -1,37 +1,4 @@
[
- {
- "id": 874322010,
- "name": "Firefox-CVE-2024-9680",
- "full_name": "tdonaworth\/Firefox-CVE-2024-9680",
- "owner": {
- "login": "tdonaworth",
- "id": 56687505,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56687505?v=4",
- "html_url": "https:\/\/github.com\/tdonaworth",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/tdonaworth\/Firefox-CVE-2024-9680",
- "description": null,
- "fork": false,
- "created_at": "2024-10-17T16:10:38Z",
- "updated_at": "2025-04-14T02:33:03Z",
- "pushed_at": "2024-10-17T16:28:17Z",
- "stargazers_count": 11,
- "watchers_count": 11,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 11,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 1091482962,
"name": "Tor-0day-JavaScript-Exploit",
diff --git a/2024/CVE-2024-9707.json b/2024/CVE-2024-9707.json
index 3cb40364b1..8d804424f8 100644
--- a/2024/CVE-2024-9707.json
+++ b/2024/CVE-2024-9707.json
@@ -1,37 +1,4 @@
[
- {
- "id": 871033172,
- "name": "CVE-2024-9707",
- "full_name": "RandomRobbieBF\/CVE-2024-9707",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9707",
- "description": "Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation\/Activation",
- "fork": false,
- "created_at": "2024-10-11T06:21:38Z",
- "updated_at": "2024-10-18T17:57:25Z",
- "pushed_at": "2024-10-11T06:25:01Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 915839096,
"name": "CVE-2024-9707-Poc",
diff --git a/2024/CVE-2024-9796.json b/2024/CVE-2024-9796.json
index 60a201b68a..e8ce3e9090 100644
--- a/2024/CVE-2024-9796.json
+++ b/2024/CVE-2024-9796.json
@@ -1,37 +1,4 @@
[
- {
- "id": 874826793,
- "name": "CVE-2024-9796",
- "full_name": "RandomRobbieBF\/CVE-2024-9796",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9796",
- "description": "WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection",
- "fork": false,
- "created_at": "2024-10-18T14:30:42Z",
- "updated_at": "2026-03-15T20:11:59Z",
- "pushed_at": "2024-10-18T14:39:55Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 919116885,
"name": "CVE-2024-9796",
diff --git a/2024/CVE-2024-9821.json b/2024/CVE-2024-9821.json
deleted file mode 100644
index 60016b467b..0000000000
--- a/2024/CVE-2024-9821.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871263157,
- "name": "CVE-2024-9821",
- "full_name": "RandomRobbieBF\/CVE-2024-9821",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9821",
- "description": "Bot for Telegram on WooCommerce <= 1.2.4 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass",
- "fork": false,
- "created_at": "2024-10-11T15:35:39Z",
- "updated_at": "2024-10-18T17:57:16Z",
- "pushed_at": "2024-10-11T15:47:18Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9822.json b/2024/CVE-2024-9822.json
deleted file mode 100644
index 954bd890d7..0000000000
--- a/2024/CVE-2024-9822.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 871710418,
- "name": "CVE-2024-9822",
- "full_name": "RandomRobbieBF\/CVE-2024-9822",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9822",
- "description": "Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator",
- "fork": false,
- "created_at": "2024-10-12T18:11:16Z",
- "updated_at": "2025-05-13T18:59:12Z",
- "pushed_at": "2024-10-12T18:13:11Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9890.json b/2024/CVE-2024-9890.json
deleted file mode 100644
index 54e47c1beb..0000000000
--- a/2024/CVE-2024-9890.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 885365895,
- "name": "CVE-2024-9890",
- "full_name": "RandomRobbieBF\/CVE-2024-9890",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9890",
- "description": "User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass",
- "fork": false,
- "created_at": "2024-11-08T12:56:55Z",
- "updated_at": "2024-11-08T12:59:44Z",
- "pushed_at": "2024-11-08T12:59:40Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9926.json b/2024/CVE-2024-9926.json
deleted file mode 100644
index cf2ca52967..0000000000
--- a/2024/CVE-2024-9926.json
+++ /dev/null
@@ -1,83 +0,0 @@
-[
- {
- "id": 877508313,
- "name": "wordpress-jetpack-broken-access-control-vulnerable-application",
- "full_name": "m3ssap0\/wordpress-jetpack-broken-access-control-vulnerable-application",
- "owner": {
- "login": "m3ssap0",
- "id": 705120,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/705120?v=4",
- "html_url": "https:\/\/github.com\/m3ssap0",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/m3ssap0\/wordpress-jetpack-broken-access-control-vulnerable-application",
- "description": "WARNING: This is a vulnerable application to test the exploit for the Jetpack < 13.9.1 broken access control (CVE-2024-9926). Run it at your own risk!",
- "fork": false,
- "created_at": "2024-10-23T19:12:55Z",
- "updated_at": "2024-11-25T03:27:38Z",
- "pushed_at": "2024-11-09T11:13:38Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "broken-access-control",
- "cve-2024-9926",
- "jetpack",
- "vulnerable-application",
- "wordpress"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 1
- },
- {
- "id": 881924384,
- "name": "wordpress-jetpack-broken-access-control-exploit",
- "full_name": "m3ssap0\/wordpress-jetpack-broken-access-control-exploit",
- "owner": {
- "login": "m3ssap0",
- "id": 705120,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/705120?v=4",
- "html_url": "https:\/\/github.com\/m3ssap0",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/m3ssap0\/wordpress-jetpack-broken-access-control-exploit",
- "description": "Exploits Jetpack < 13.9.1 broken access control (CVE-2024-9926).",
- "fork": false,
- "created_at": "2024-11-01T14:03:55Z",
- "updated_at": "2024-11-27T13:31:35Z",
- "pushed_at": "2024-11-09T11:19:38Z",
- "stargazers_count": 3,
- "watchers_count": 3,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [
- "cve-2024-9926",
- "exploit",
- "jetpack",
- "security",
- "security-tools",
- "vulnerability",
- "vulnerability-scan",
- "wordpress"
- ],
- "visibility": "public",
- "forks": 0,
- "watchers": 3,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-9932.json b/2024/CVE-2024-9932.json
index d1d3794a2a..9b9c1ead4b 100644
--- a/2024/CVE-2024-9932.json
+++ b/2024/CVE-2024-9932.json
@@ -1,37 +1,4 @@
[
- {
- "id": 883779888,
- "name": "CVE-2024-9932",
- "full_name": "RandomRobbieBF\/CVE-2024-9932",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9932",
- "description": "Wux Blog Editor <= 3.0.0 - Unauthenticated Arbitrary File Upload",
- "fork": false,
- "created_at": "2024-11-05T15:00:39Z",
- "updated_at": "2026-01-10T14:57:25Z",
- "pushed_at": "2024-11-05T15:02:04Z",
- "stargazers_count": 4,
- "watchers_count": 4,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 4,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 915454852,
"name": "CVE-2024-9932-POC",
diff --git a/2024/CVE-2024-9933.json b/2024/CVE-2024-9933.json
index d43d382299..20130a137f 100644
--- a/2024/CVE-2024-9933.json
+++ b/2024/CVE-2024-9933.json
@@ -1,37 +1,4 @@
[
- {
- "id": 883936829,
- "name": "CVE-2024-9933",
- "full_name": "RandomRobbieBF\/CVE-2024-9933",
- "owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-9933",
- "description": "WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check",
- "fork": false,
- "created_at": "2024-11-05T20:55:09Z",
- "updated_at": "2024-11-05T20:58:15Z",
- "pushed_at": "2024-11-05T20:58:11Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 908944974,
"name": "CVE-2024-9933",
diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json
index bcfb653191..0545705148 100644
--- a/2025/CVE-2025-14847.json
+++ b/2025/CVE-2025-14847.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
- "updated_at": "2026-05-20T22:41:32Z",
- "pushed_at": "2026-05-20T22:41:28Z",
+ "updated_at": "2026-05-21T04:54:01Z",
+ "pushed_at": "2026-05-21T04:53:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
- "updated_at": "2026-05-20T22:40:37Z",
- "pushed_at": "2026-05-20T22:40:33Z",
+ "updated_at": "2026-05-21T04:53:02Z",
+ "pushed_at": "2026-05-21T04:52:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-22442.json b/2025/CVE-2025-22442.json
new file mode 100644
index 0000000000..722df027d8
--- /dev/null
+++ b/2025/CVE-2025-22442.json
@@ -0,0 +1,41 @@
+[
+ {
+ "id": 1245168511,
+ "name": "android-workprofile-exploit",
+ "full_name": "Hasan-Al-Hussein\/android-workprofile-exploit",
+ "owner": {
+ "login": "Hasan-Al-Hussein",
+ "id": 200383997,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200383997?v=4",
+ "html_url": "https:\/\/github.com\/Hasan-Al-Hussein",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Hasan-Al-Hussein\/android-workprofile-exploit",
+ "description": "Research project demonstrating CVE-2025-22442 Android work-profile exploitation and data exfiltration",
+ "fork": false,
+ "created_at": "2026-05-21T01:23:55Z",
+ "updated_at": "2026-05-21T02:20:47Z",
+ "pushed_at": "2026-05-21T01:39:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "adb",
+ "android",
+ "cybersecurity",
+ "python",
+ "security-research"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json
index c7fb0d5590..c03e3ab9b4 100644
--- a/2025/CVE-2025-2304.json
+++ b/2025/CVE-2025-2304.json
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
- "updated_at": "2026-05-20T23:00:59Z",
- "pushed_at": "2026-05-20T23:00:55Z",
+ "updated_at": "2026-05-21T05:14:15Z",
+ "pushed_at": "2026-05-21T05:14:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-23266.json b/2025/CVE-2025-23266.json
index 3c94fe8b51..a5c325e8b9 100644
--- a/2025/CVE-2025-23266.json
+++ b/2025/CVE-2025-23266.json
@@ -154,8 +154,8 @@
"description": "Original security research into container boundary weaknesses. Published: OCI hook privilege escalation in rootless Podman deployments (CVE-2025-23266).",
"fork": false,
"created_at": "2026-01-10T19:55:26Z",
- "updated_at": "2026-04-13T05:42:46Z",
- "pushed_at": "2026-04-13T01:11:16Z",
+ "updated_at": "2026-05-21T00:52:48Z",
+ "pushed_at": "2026-05-21T00:52:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-24252.json b/2025/CVE-2025-24252.json
index 8e29749936..bf0d42b5fd 100644
--- a/2025/CVE-2025-24252.json
+++ b/2025/CVE-2025-24252.json
@@ -14,10 +14,10 @@
"description": "poc for CVE-2025-24252 & CVE-2025-24132",
"fork": false,
"created_at": "2025-04-29T22:12:52Z",
- "updated_at": "2026-05-07T02:14:09Z",
+ "updated_at": "2026-05-21T03:48:50Z",
"pushed_at": "2026-01-08T13:22:11Z",
- "stargazers_count": 160,
- "watchers_count": 160,
+ "stargazers_count": 161,
+ "watchers_count": 161,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
- "watchers": 160,
+ "watchers": 161,
"score": 0,
"subscribers_count": 5
},
diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json
index 7852b5ffd0..01954fec6d 100644
--- a/2025/CVE-2025-24257.json
+++ b/2025/CVE-2025-24257.json
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
- "updated_at": "2026-05-20T23:30:44Z",
- "pushed_at": "2026-05-20T23:30:40Z",
+ "updated_at": "2026-05-21T05:46:28Z",
+ "pushed_at": "2026-05-21T05:46:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json
index 63c47d248b..2aca12241b 100644
--- a/2025/CVE-2025-31258.json
+++ b/2025/CVE-2025-31258.json
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
- "updated_at": "2026-05-21T00:20:12Z",
- "pushed_at": "2026-05-21T00:20:06Z",
+ "updated_at": "2026-05-21T06:39:02Z",
+ "pushed_at": "2026-05-21T06:38:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-31700.json b/2025/CVE-2025-31700.json
index f73bba7b38..3d38f0e7be 100644
--- a/2025/CVE-2025-31700.json
+++ b/2025/CVE-2025-31700.json
@@ -19,7 +19,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
+ "forks": 4,
"watchers": 16,
"score": 0,
"subscribers_count": 2
diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json
index 69fb090071..24e9344771 100644
--- a/2025/CVE-2025-32463.json
+++ b/2025/CVE-2025-32463.json
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
- "updated_at": "2026-05-21T00:13:52Z",
- "pushed_at": "2026-05-21T00:13:48Z",
+ "updated_at": "2026-05-21T06:32:16Z",
+ "pushed_at": "2026-05-21T06:32:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
- "updated_at": "2026-05-21T00:21:33Z",
- "pushed_at": "2026-05-21T00:21:30Z",
+ "updated_at": "2026-05-21T06:40:14Z",
+ "pushed_at": "2026-05-21T06:40:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
- "updated_at": "2026-05-21T00:21:23Z",
- "pushed_at": "2026-05-21T00:21:19Z",
+ "updated_at": "2026-05-21T06:40:49Z",
+ "pushed_at": "2026-05-21T06:40:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json
index 31bed2d753..490a45b6da 100644
--- a/2025/CVE-2025-36911.json
+++ b/2025/CVE-2025-36911.json
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
- "updated_at": "2026-05-20T22:51:41Z",
- "pushed_at": "2026-05-20T22:51:37Z",
+ "updated_at": "2026-05-21T05:04:19Z",
+ "pushed_at": "2026-05-21T05:04:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json
index 8a05f78520..86bbd8fe07 100644
--- a/2025/CVE-2025-48804.json
+++ b/2025/CVE-2025-48804.json
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
- "updated_at": "2026-05-20T14:59:47Z",
+ "updated_at": "2026-05-21T05:54:04Z",
"pushed_at": "2026-05-20T14:39:54Z",
- "stargazers_count": 186,
- "watchers_count": 186,
+ "stargazers_count": 188,
+ "watchers_count": 188,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 34,
- "watchers": 186,
+ "watchers": 188,
"score": 0,
"subscribers_count": 2
}
diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json
index d8170e1170..348cf6d777 100644
--- a/2025/CVE-2025-49144.json
+++ b/2025/CVE-2025-49144.json
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
- "updated_at": "2026-05-21T00:21:14Z",
- "pushed_at": "2026-05-21T00:21:10Z",
+ "updated_at": "2026-05-21T06:40:08Z",
+ "pushed_at": "2026-05-21T06:40:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json
index f9f0acc95f..02af9ea8d5 100644
--- a/2025/CVE-2025-49844.json
+++ b/2025/CVE-2025-49844.json
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
- "updated_at": "2026-05-21T00:39:09Z",
- "pushed_at": "2026-05-21T00:39:05Z",
+ "updated_at": "2026-05-21T04:12:00Z",
+ "pushed_at": "2026-05-21T04:11:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
- "updated_at": "2026-05-21T00:39:54Z",
- "pushed_at": "2026-05-21T00:39:51Z",
+ "updated_at": "2026-05-21T04:12:52Z",
+ "pushed_at": "2026-05-21T04:12:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json
index 5383548d0f..139893eede 100644
--- a/2025/CVE-2025-52915.json
+++ b/2025/CVE-2025-52915.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-05-20T22:04:00Z",
+ "updated_at": "2026-05-21T03:39:03Z",
"pushed_at": "2026-05-19T07:17:52Z",
- "stargazers_count": 750,
- "watchers_count": 750,
+ "stargazers_count": 754,
+ "watchers_count": 754,
"has_discussions": false,
"forks_count": 112,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 112,
- "watchers": 750,
+ "watchers": 754,
"score": 0,
"subscribers_count": 18
}
diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json
index 8b5b0d9241..8b9ec9772f 100644
--- a/2025/CVE-2025-5419.json
+++ b/2025/CVE-2025-5419.json
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
- "updated_at": "2026-05-20T22:59:22Z",
- "pushed_at": "2026-05-20T22:59:18Z",
+ "updated_at": "2026-05-21T05:12:41Z",
+ "pushed_at": "2026-05-21T05:12:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json
index 8515883f64..c021a3da4f 100644
--- a/2025/CVE-2025-54253.json
+++ b/2025/CVE-2025-54253.json
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
- "updated_at": "2026-05-21T00:16:12Z",
- "pushed_at": "2026-05-21T00:16:08Z",
+ "updated_at": "2026-05-21T06:34:58Z",
+ "pushed_at": "2026-05-21T06:34:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json
index b9537de345..0340af0e50 100644
--- a/2025/CVE-2025-54424.json
+++ b/2025/CVE-2025-54424.json
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
- "updated_at": "2026-05-21T00:15:46Z",
- "pushed_at": "2026-05-21T00:15:43Z",
+ "updated_at": "2026-05-21T06:34:32Z",
+ "pushed_at": "2026-05-21T06:34:29Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json
index 34989cf348..3eefbf3aa0 100644
--- a/2025/CVE-2025-55182.json
+++ b/2025/CVE-2025-55182.json
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
- "updated_at": "2026-05-20T22:27:53Z",
- "pushed_at": "2026-05-20T22:27:50Z",
+ "updated_at": "2026-05-21T04:40:34Z",
+ "pushed_at": "2026-05-21T04:40:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
- "updated_at": "2026-05-20T22:27:47Z",
- "pushed_at": "2026-05-20T22:27:43Z",
+ "updated_at": "2026-05-21T04:40:08Z",
+ "pushed_at": "2026-05-21T04:40:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
- "updated_at": "2026-05-20T22:27:37Z",
- "pushed_at": "2026-05-20T22:27:34Z",
+ "updated_at": "2026-05-21T04:40:08Z",
+ "pushed_at": "2026-05-21T04:40:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
- "updated_at": "2026-05-20T22:28:45Z",
- "pushed_at": "2026-05-20T22:28:41Z",
+ "updated_at": "2026-05-21T04:41:04Z",
+ "pushed_at": "2026-05-21T04:41:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
- "updated_at": "2026-05-20T22:27:11Z",
- "pushed_at": "2026-05-20T22:27:08Z",
+ "updated_at": "2026-05-21T04:39:35Z",
+ "pushed_at": "2026-05-21T04:39:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
- "updated_at": "2026-05-20T22:28:20Z",
- "pushed_at": "2026-05-20T22:28:16Z",
+ "updated_at": "2026-05-21T04:40:48Z",
+ "pushed_at": "2026-05-21T04:40:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
- "updated_at": "2026-05-20T22:30:57Z",
- "pushed_at": "2026-05-20T22:30:53Z",
+ "updated_at": "2026-05-21T04:43:32Z",
+ "pushed_at": "2026-05-21T04:43:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
- "updated_at": "2026-05-20T22:27:51Z",
- "pushed_at": "2026-05-20T22:27:47Z",
+ "updated_at": "2026-05-21T04:40:15Z",
+ "pushed_at": "2026-05-21T04:40:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
- "updated_at": "2026-05-20T22:28:37Z",
- "pushed_at": "2026-05-20T22:28:34Z",
+ "updated_at": "2026-05-21T04:41:04Z",
+ "pushed_at": "2026-05-21T04:41:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -576,10 +576,10 @@
"description": "CVE-2025-55182 POC",
"fork": false,
"created_at": "2025-12-03T21:16:22Z",
- "updated_at": "2026-05-18T14:03:35Z",
+ "updated_at": "2026-05-21T04:17:40Z",
"pushed_at": "2025-12-08T21:21:26Z",
- "stargazers_count": 797,
- "watchers_count": 797,
+ "stargazers_count": 796,
+ "watchers_count": 796,
"has_discussions": false,
"forks_count": 203,
"allow_forking": true,
@@ -590,7 +590,7 @@
"topics": [],
"visibility": "public",
"forks": 203,
- "watchers": 797,
+ "watchers": 796,
"score": 0,
"subscribers_count": 3
},
@@ -12284,8 +12284,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
- "updated_at": "2026-05-20T22:27:29Z",
- "pushed_at": "2026-05-20T22:27:26Z",
+ "updated_at": "2026-05-21T04:39:59Z",
+ "pushed_at": "2026-05-21T04:39:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12369,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
- "updated_at": "2026-05-20T22:26:51Z",
- "pushed_at": "2026-05-20T22:26:47Z",
+ "updated_at": "2026-05-21T04:39:14Z",
+ "pushed_at": "2026-05-21T04:39:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12418,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
- "updated_at": "2026-05-20T22:26:59Z",
- "pushed_at": "2026-05-20T22:26:53Z",
+ "updated_at": "2026-05-21T04:39:14Z",
+ "pushed_at": "2026-05-21T04:39:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12503,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
- "updated_at": "2026-05-20T22:28:20Z",
- "pushed_at": "2026-05-20T22:28:15Z",
+ "updated_at": "2026-05-21T04:40:43Z",
+ "pushed_at": "2026-05-21T04:40:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12705,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
- "updated_at": "2026-05-20T22:28:14Z",
- "pushed_at": "2026-05-20T22:28:10Z",
+ "updated_at": "2026-05-21T04:40:42Z",
+ "pushed_at": "2026-05-21T04:40:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12975,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
- "updated_at": "2026-05-20T22:32:33Z",
- "pushed_at": "2026-05-20T22:32:30Z",
+ "updated_at": "2026-05-21T04:45:17Z",
+ "pushed_at": "2026-05-21T04:45:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13496,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
- "updated_at": "2026-05-20T22:37:36Z",
- "pushed_at": "2026-05-20T22:37:32Z",
+ "updated_at": "2026-05-21T04:50:03Z",
+ "pushed_at": "2026-05-21T04:49:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json
index d69e57d210..1c8a491d2c 100644
--- a/2025/CVE-2025-55184.json
+++ b/2025/CVE-2025-55184.json
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
- "updated_at": "2026-05-20T22:33:02Z",
- "pushed_at": "2026-05-20T22:32:58Z",
+ "updated_at": "2026-05-21T04:45:37Z",
+ "pushed_at": "2026-05-21T04:45:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-55315.json b/2025/CVE-2025-55315.json
index 6b0e6e6fd0..7ef435acdf 100644
--- a/2025/CVE-2025-55315.json
+++ b/2025/CVE-2025-55315.json
@@ -14,10 +14,10 @@
"description": "Tool that reproduces CVE-2025-55315 in ASP.NET Core.",
"fork": false,
"created_at": "2025-10-16T17:14:56Z",
- "updated_at": "2026-02-20T18:28:43Z",
+ "updated_at": "2026-05-21T02:49:40Z",
"pushed_at": "2026-01-12T21:58:10Z",
- "stargazers_count": 46,
- "watchers_count": 46,
+ "stargazers_count": 47,
+ "watchers_count": 47,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 6,
- "watchers": 46,
+ "watchers": 47,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json
index 87d886bc24..26d32cfbff 100644
--- a/2025/CVE-2025-59287.json
+++ b/2025/CVE-2025-59287.json
@@ -57,12 +57,12 @@
"description": "Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317",
"fork": false,
"created_at": "2025-11-16T08:10:33Z",
- "updated_at": "2026-05-20T06:19:51Z",
+ "updated_at": "2026-05-21T02:50:57Z",
"pushed_at": "2025-12-10T21:33:18Z",
- "stargazers_count": 12,
- "watchers_count": 12,
+ "stargazers_count": 13,
+ "watchers_count": 13,
"has_discussions": false,
- "forks_count": 2,
+ "forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -81,8 +81,8 @@
"security"
],
"visibility": "public",
- "forks": 2,
- "watchers": 12,
+ "forks": 3,
+ "watchers": 13,
"score": 0,
"subscribers_count": 0
},
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
- "updated_at": "2026-05-20T22:51:40Z",
- "pushed_at": "2026-05-20T22:51:36Z",
+ "updated_at": "2026-05-21T05:04:20Z",
+ "pushed_at": "2026-05-21T05:04:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json
index ae5cd3a534..f50e7fbd68 100644
--- a/2025/CVE-2025-61882.json
+++ b/2025/CVE-2025-61882.json
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
- "updated_at": "2026-05-21T00:37:44Z",
- "pushed_at": "2026-05-21T00:37:40Z",
+ "updated_at": "2026-05-21T04:10:40Z",
+ "pushed_at": "2026-05-21T04:10:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json
index 018110ec60..214e9fbbf9 100644
--- a/2025/CVE-2025-6554.json
+++ b/2025/CVE-2025-6554.json
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
- "updated_at": "2026-05-20T22:23:19Z",
- "pushed_at": "2026-05-20T22:22:59Z",
+ "updated_at": "2026-05-21T04:35:21Z",
+ "pushed_at": "2026-05-21T04:35:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json
index 245d0e2e29..68e0bb18d9 100644
--- a/2025/CVE-2025-66398.json
+++ b/2025/CVE-2025-66398.json
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
- "updated_at": "2026-05-20T23:25:09Z",
- "pushed_at": "2026-05-20T23:25:05Z",
+ "updated_at": "2026-05-21T05:39:57Z",
+ "pushed_at": "2026-05-21T05:39:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json
index 21af369f16..2f807ec7ae 100644
--- a/2025/CVE-2025-66478.json
+++ b/2025/CVE-2025-66478.json
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
- "updated_at": "2026-05-20T22:29:02Z",
- "pushed_at": "2026-05-20T22:28:58Z",
+ "updated_at": "2026-05-21T04:41:31Z",
+ "pushed_at": "2026-05-21T04:41:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json
index 58a10a74b3..574bb3e490 100644
--- a/2025/CVE-2025-68921.json
+++ b/2025/CVE-2025-68921.json
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
- "updated_at": "2026-05-20T22:48:47Z",
- "pushed_at": "2026-05-20T22:48:43Z",
+ "updated_at": "2026-05-21T05:01:10Z",
+ "pushed_at": "2026-05-21T05:01:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json
index bb37fd4955..73529f2ea2 100644
--- a/2025/CVE-2025-69985.json
+++ b/2025/CVE-2025-69985.json
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
- "updated_at": "2026-05-20T23:13:14Z",
- "pushed_at": "2026-05-20T23:13:10Z",
+ "updated_at": "2026-05-21T05:27:08Z",
+ "pushed_at": "2026-05-21T05:27:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json
index a8242ee7b4..ccc96c428b 100644
--- a/2025/CVE-2025-70795.json
+++ b/2025/CVE-2025-70795.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-05-20T23:08:16Z",
- "pushed_at": "2026-05-20T23:08:12Z",
+ "updated_at": "2026-05-21T05:22:28Z",
+ "pushed_at": "2026-05-21T05:22:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json
index b2f7330a3f..ad3edc1124 100644
--- a/2025/CVE-2025-8088.json
+++ b/2025/CVE-2025-8088.json
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
- "updated_at": "2026-05-20T22:24:09Z",
- "pushed_at": "2026-05-20T22:24:05Z",
+ "updated_at": "2026-05-21T04:36:27Z",
+ "pushed_at": "2026-05-21T04:36:23Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json
index d4ff7068bd..a3514fb8f7 100644
--- a/2025/CVE-2025-8110.json
+++ b/2025/CVE-2025-8110.json
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
- "updated_at": "2026-05-20T22:32:08Z",
- "pushed_at": "2026-05-20T22:32:05Z",
+ "updated_at": "2026-05-21T04:44:42Z",
+ "pushed_at": "2026-05-21T04:44:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json
index fb24912759..9931e79671 100644
--- a/2025/CVE-2025-9074.json
+++ b/2025/CVE-2025-9074.json
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
- "updated_at": "2026-05-20T22:33:27Z",
- "pushed_at": "2026-05-20T22:33:23Z",
+ "updated_at": "2026-05-21T04:46:10Z",
+ "pushed_at": "2026-05-21T04:46:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json
index 6ab9d1cf8e..e2337bdff7 100644
--- a/2026/CVE-2026-0073.json
+++ b/2026/CVE-2026-0073.json
@@ -151,10 +151,10 @@
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
- "updated_at": "2026-05-20T15:35:15Z",
+ "updated_at": "2026-05-21T04:56:49Z",
"pushed_at": "2026-05-07T11:15:25Z",
- "stargazers_count": 12,
- "watchers_count": 12,
+ "stargazers_count": 13,
+ "watchers_count": 13,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -175,7 +175,7 @@
],
"visibility": "public",
"forks": 3,
- "watchers": 12,
+ "watchers": 13,
"score": 0,
"subscribers_count": 0
},
@@ -326,10 +326,10 @@
"description": "An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS\/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.",
"fork": false,
"created_at": "2026-05-20T08:02:35Z",
- "updated_at": "2026-05-20T20:01:20Z",
+ "updated_at": "2026-05-21T05:23:43Z",
"pushed_at": "2026-05-20T10:53:30Z",
- "stargazers_count": 7,
- "watchers_count": 7,
+ "stargazers_count": 8,
+ "watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -340,7 +340,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 7,
+ "watchers": 8,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json
index ad698016f1..d332454d94 100644
--- a/2026/CVE-2026-0828.json
+++ b/2026/CVE-2026-0828.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-05-20T23:08:16Z",
- "pushed_at": "2026-05-20T23:08:12Z",
+ "updated_at": "2026-05-21T05:22:28Z",
+ "pushed_at": "2026-05-21T05:22:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json
index f2cb55da78..b0c5dd942b 100644
--- a/2026/CVE-2026-20841.json
+++ b/2026/CVE-2026-20841.json
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
- "updated_at": "2026-05-20T23:07:39Z",
- "pushed_at": "2026-05-20T23:07:36Z",
+ "updated_at": "2026-05-21T05:21:37Z",
+ "pushed_at": "2026-05-21T05:21:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
- "updated_at": "2026-05-20T23:06:39Z",
- "pushed_at": "2026-05-20T23:06:35Z",
+ "updated_at": "2026-05-21T05:20:42Z",
+ "pushed_at": "2026-05-21T05:20:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-23869.json b/2026/CVE-2026-23869.json
deleted file mode 100644
index 11e22e30af..0000000000
--- a/2026/CVE-2026-23869.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 1207561092,
- "name": "CVE-2026-23869-Exploit",
- "full_name": "cybertechajju\/CVE-2026-23869-Exploit",
- "owner": {
- "login": "cybertechajju",
- "id": 120666627,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120666627?v=4",
- "html_url": "https:\/\/github.com\/cybertechajju",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/cybertechajju\/CVE-2026-23869-Exploit",
- "description": null,
- "fork": false,
- "created_at": "2026-04-11T05:00:48Z",
- "updated_at": "2026-05-10T02:52:32Z",
- "pushed_at": "2026-04-11T05:19:55Z",
- "stargazers_count": 8,
- "watchers_count": 8,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 8,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json
index bcfee0b3b3..91c3c52036 100644
--- a/2026/CVE-2026-23870.json
+++ b/2026/CVE-2026-23870.json
@@ -14,10 +14,10 @@
"description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)",
"fork": false,
"created_at": "2026-05-07T23:00:40Z",
- "updated_at": "2026-05-20T14:42:47Z",
+ "updated_at": "2026-05-21T03:18:28Z",
"pushed_at": "2026-05-12T04:28:18Z",
- "stargazers_count": 152,
- "watchers_count": 152,
+ "stargazers_count": 153,
+ "watchers_count": 153,
"has_discussions": true,
"forks_count": 32,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 32,
- "watchers": 152,
+ "watchers": 153,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json
index 98e601fcd0..0b38b154d4 100644
--- a/2026/CVE-2026-2406.json
+++ b/2026/CVE-2026-2406.json
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
- "updated_at": "2026-05-20T22:58:58Z",
- "pushed_at": "2026-05-20T22:58:54Z",
+ "updated_at": "2026-05-21T05:12:03Z",
+ "pushed_at": "2026-05-21T05:11:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json
index 251c7ec0fe..0a667f0342 100644
--- a/2026/CVE-2026-24061.json
+++ b/2026/CVE-2026-24061.json
@@ -47,8 +47,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
- "updated_at": "2026-05-20T22:55:44Z",
- "pushed_at": "2026-05-20T22:55:40Z",
+ "updated_at": "2026-05-21T05:08:45Z",
+ "pushed_at": "2026-05-21T05:08:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json
index e22bdbc3c9..372dc21656 100644
--- a/2026/CVE-2026-24291.json
+++ b/2026/CVE-2026-24291.json
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
- "updated_at": "2026-05-20T23:26:48Z",
- "pushed_at": "2026-05-20T23:26:45Z",
+ "updated_at": "2026-05-21T05:41:54Z",
+ "pushed_at": "2026-05-21T05:41:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json
index 54da847e5c..ddc1c6baab 100644
--- a/2026/CVE-2026-2441.json
+++ b/2026/CVE-2026-2441.json
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
- "updated_at": "2026-05-20T23:09:54Z",
- "pushed_at": "2026-05-20T23:09:51Z",
+ "updated_at": "2026-05-21T05:24:13Z",
+ "pushed_at": "2026-05-21T05:24:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json
index ec6e2e1753..7104d9af8a 100644
--- a/2026/CVE-2026-2472.json
+++ b/2026/CVE-2026-2472.json
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
- "updated_at": "2026-05-20T23:15:34Z",
- "pushed_at": "2026-05-20T23:15:30Z",
+ "updated_at": "2026-05-21T05:29:56Z",
+ "pushed_at": "2026-05-21T05:29:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json
index 7d44d7f956..e5c5ea0aba 100644
--- a/2026/CVE-2026-25643.json
+++ b/2026/CVE-2026-25643.json
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
- "updated_at": "2026-05-20T23:14:36Z",
- "pushed_at": "2026-05-20T23:14:32Z",
+ "updated_at": "2026-05-21T05:28:34Z",
+ "pushed_at": "2026-05-21T05:28:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-2587.json b/2026/CVE-2026-2587.json
index 748a4db02c..359be53c56 100644
--- a/2026/CVE-2026-2587.json
+++ b/2026/CVE-2026-2587.json
@@ -14,8 +14,8 @@
"description": "PoC validator for CVE-2026-2587 — Critical (CVSS 9.6) EL Injection RCE in Eclipse GlassFish < 7.1.0 admin console gadget handler. Multi-target scanner with CSV\/JSON output.",
"fork": false,
"created_at": "2026-05-20T21:31:14Z",
- "updated_at": "2026-05-20T22:31:48Z",
- "pushed_at": "2026-05-20T22:31:43Z",
+ "updated_at": "2026-05-21T06:45:29Z",
+ "pushed_at": "2026-05-21T06:45:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json
index 27422ca91a..5137cda1c0 100644
--- a/2026/CVE-2026-2991.json
+++ b/2026/CVE-2026-2991.json
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
- "updated_at": "2026-05-20T23:30:22Z",
- "pushed_at": "2026-05-20T23:30:17Z",
+ "updated_at": "2026-05-21T05:46:00Z",
+ "pushed_at": "2026-05-21T05:45:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-29923.json b/2026/CVE-2026-29923.json
deleted file mode 100644
index 3b48b430ef..0000000000
--- a/2026/CVE-2026-29923.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 1206971957,
- "name": "CVE-2026-29923",
- "full_name": "athenasec16\/CVE-2026-29923",
- "owner": {
- "login": "athenasec16",
- "id": 275072581,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/275072581?v=4",
- "html_url": "https:\/\/github.com\/athenasec16",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/athenasec16\/CVE-2026-29923",
- "description": "A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request ",
- "fork": false,
- "created_at": "2026-04-10T12:48:55Z",
- "updated_at": "2026-05-19T20:00:26Z",
- "pushed_at": "2026-04-11T13:56:20Z",
- "stargazers_count": 22,
- "watchers_count": 22,
- "has_discussions": false,
- "forks_count": 2,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 2,
- "watchers": 22,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2026/CVE-2026-30862.json b/2026/CVE-2026-30862.json
deleted file mode 100644
index 9d057df8c4..0000000000
--- a/2026/CVE-2026-30862.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 1176879171,
- "name": "CVE-2026-30862",
- "full_name": "drkim-dev\/CVE-2026-30862",
- "owner": {
- "login": "drkim-dev",
- "id": 218967903,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218967903?v=4",
- "html_url": "https:\/\/github.com\/drkim-dev",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/drkim-dev\/CVE-2026-30862",
- "description": "CVE-2026-30862 | appsmith Privilege Escalation(xss)",
- "fork": false,
- "created_at": "2026-03-09T13:24:42Z",
- "updated_at": "2026-04-23T04:54:56Z",
- "pushed_at": "2026-04-10T22:48:05Z",
- "stargazers_count": 2,
- "watchers_count": 2,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 2,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json
index 5e25ef6763..c031d8f55c 100644
--- a/2026/CVE-2026-31431.json
+++ b/2026/CVE-2026-31431.json
@@ -157,10 +157,10 @@
"description": "A Go implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-29T22:51:24Z",
- "updated_at": "2026-05-18T22:06:22Z",
+ "updated_at": "2026-05-21T01:32:09Z",
"pushed_at": "2026-05-01T03:24:14Z",
- "stargazers_count": 348,
- "watchers_count": 348,
+ "stargazers_count": 349,
+ "watchers_count": 349,
"has_discussions": false,
"forks_count": 75,
"allow_forking": true,
@@ -171,7 +171,7 @@
"topics": [],
"visibility": "public",
"forks": 75,
- "watchers": 348,
+ "watchers": 349,
"score": 0,
"subscribers_count": 2
},
@@ -190,8 +190,8 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
- "updated_at": "2026-05-20T21:22:53Z",
- "pushed_at": "2026-05-20T04:13:26Z",
+ "updated_at": "2026-05-21T05:19:04Z",
+ "pushed_at": "2026-05-21T05:19:00Z",
"stargazers_count": 404,
"watchers_count": 404,
"has_discussions": true,
@@ -1058,12 +1058,12 @@
"description": null,
"fork": false,
"created_at": "2026-04-30T07:09:23Z",
- "updated_at": "2026-05-15T01:56:58Z",
+ "updated_at": "2026-05-21T06:36:49Z",
"pushed_at": "2026-04-30T07:24:20Z",
- "stargazers_count": 31,
- "watchers_count": 31,
+ "stargazers_count": 32,
+ "watchers_count": 32,
"has_discussions": false,
- "forks_count": 15,
+ "forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1071,8 +1071,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 15,
- "watchers": 31,
+ "forks": 16,
+ "watchers": 32,
"score": 0,
"subscribers_count": 0
},
@@ -2039,10 +2039,10 @@
"description": "PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.",
"fork": false,
"created_at": "2026-04-30T11:33:22Z",
- "updated_at": "2026-05-20T09:41:26Z",
+ "updated_at": "2026-05-21T03:16:24Z",
"pushed_at": "2026-05-07T09:04:29Z",
- "stargazers_count": 143,
- "watchers_count": 143,
+ "stargazers_count": 145,
+ "watchers_count": 145,
"has_discussions": false,
"forks_count": 25,
"allow_forking": true,
@@ -2064,7 +2064,7 @@
],
"visibility": "public",
"forks": 25,
- "watchers": 143,
+ "watchers": 145,
"score": 0,
"subscribers_count": 0
},
@@ -7881,8 +7881,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
- "updated_at": "2026-05-20T23:48:13Z",
- "pushed_at": "2026-05-20T23:48:08Z",
+ "updated_at": "2026-05-21T06:05:26Z",
+ "pushed_at": "2026-05-21T06:05:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8419,10 +8419,10 @@
"description": "CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer",
"fork": false,
"created_at": "2026-05-06T01:51:02Z",
- "updated_at": "2026-05-20T15:03:26Z",
+ "updated_at": "2026-05-21T06:45:19Z",
"pushed_at": "2026-05-06T19:32:18Z",
- "stargazers_count": 56,
- "watchers_count": 56,
+ "stargazers_count": 58,
+ "watchers_count": 58,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -8433,7 +8433,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
- "watchers": 56,
+ "watchers": 58,
"score": 0,
"subscribers_count": 0
},
@@ -8716,8 +8716,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
- "updated_at": "2026-05-20T23:49:00Z",
- "pushed_at": "2026-05-20T23:48:56Z",
+ "updated_at": "2026-05-21T06:06:23Z",
+ "pushed_at": "2026-05-21T06:06:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -10649,10 +10649,10 @@
"description": "Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on https:\/\/4xura.com\/binex\/kernel\/copy-fail",
"fork": false,
"created_at": "2026-05-18T05:23:15Z",
- "updated_at": "2026-05-19T09:22:34Z",
+ "updated_at": "2026-05-21T06:18:02Z",
"pushed_at": "2026-05-19T09:22:29Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -10663,7 +10663,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -10818,10 +10818,10 @@
"description": "CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer",
"fork": false,
"created_at": "2026-05-20T04:37:35Z",
- "updated_at": "2026-05-20T22:57:51Z",
+ "updated_at": "2026-05-21T05:42:06Z",
"pushed_at": "2026-05-20T04:52:41Z",
- "stargazers_count": 6,
- "watchers_count": 6,
+ "stargazers_count": 8,
+ "watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -10832,7 +10832,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 6,
+ "watchers": 8,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json
index f3723af927..e7acaabd81 100644
--- a/2026/CVE-2026-31802.json
+++ b/2026/CVE-2026-31802.json
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
- "updated_at": "2026-05-20T23:27:55Z",
- "pushed_at": "2026-05-20T23:27:51Z",
+ "updated_at": "2026-05-21T05:43:03Z",
+ "pushed_at": "2026-05-21T05:42:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-33826.json b/2026/CVE-2026-33826.json
index 3cd2e36537..58ee02aabd 100644
--- a/2026/CVE-2026-33826.json
+++ b/2026/CVE-2026-33826.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-22T12:35:05Z",
- "updated_at": "2026-04-22T12:42:12Z",
+ "updated_at": "2026-05-21T04:14:12Z",
"pushed_at": "2026-04-22T12:42:08Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2024/CVE-2024-48360.json b/2026/CVE-2026-33829.json
similarity index 51%
rename from 2024/CVE-2024-48360.json
rename to 2026/CVE-2026-33829.json
index 8e02ee806f..6bce3f1d51 100644
--- a/2024/CVE-2024-48360.json
+++ b/2026/CVE-2026-33829.json
@@ -1,21 +1,21 @@
[
{
- "id": 880893405,
- "name": "CVE-2024-48360",
- "full_name": "OpenXP-Research\/CVE-2024-48360",
+ "id": 1245255897,
+ "name": "CVE-2026-33829-Writeup",
+ "full_name": "rahultb-sec\/CVE-2026-33829-Writeup",
"owner": {
- "login": "OpenXP-Research",
- "id": 124332420,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4",
- "html_url": "https:\/\/github.com\/OpenXP-Research",
+ "login": "rahultb-sec",
+ "id": 218551451,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218551451?v=4",
+ "html_url": "https:\/\/github.com\/rahultb-sec",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2024-48360",
- "description": "CVE-2024-48360 Poc",
+ "html_url": "https:\/\/github.com\/rahultb-sec\/CVE-2026-33829-Writeup",
+ "description": "Vulnerability Case Study: CVE-2026-33829 (Windows Snipping Tool NTLM Coercion)",
"fork": false,
- "created_at": "2024-10-30T14:55:07Z",
- "updated_at": "2024-11-05T19:37:17Z",
- "pushed_at": "2024-10-30T15:02:26Z",
+ "created_at": "2026-05-21T03:56:59Z",
+ "updated_at": "2026-05-21T05:49:36Z",
+ "pushed_at": "2026-05-21T05:49:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-3629.json b/2026/CVE-2026-3629.json
index 1fa37b36f0..d9e6cdbe2f 100644
--- a/2026/CVE-2026-3629.json
+++ b/2026/CVE-2026-3629.json
@@ -14,10 +14,10 @@
"description": "WordPress Privilege Escalation Checker",
"fork": false,
"created_at": "2026-05-17T21:18:10Z",
- "updated_at": "2026-05-20T12:37:14Z",
+ "updated_at": "2026-05-21T02:44:13Z",
"pushed_at": "2026-05-17T21:51:30Z",
- "stargazers_count": 7,
- "watchers_count": 7,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 7,
+ "watchers": 9,
"score": 0,
"subscribers_count": 0
}
diff --git a/2024/CVE-2024-48359.json b/2026/CVE-2026-38763.json
similarity index 51%
rename from 2024/CVE-2024-48359.json
rename to 2026/CVE-2026-38763.json
index 1d8e40a3d5..06d93b178e 100644
--- a/2024/CVE-2024-48359.json
+++ b/2026/CVE-2026-38763.json
@@ -1,21 +1,21 @@
[
{
- "id": 880891866,
- "name": "CVE-2024-48359",
- "full_name": "OpenXP-Research\/CVE-2024-48359",
+ "id": 1245250368,
+ "name": "CVE-2026-38763",
+ "full_name": "D7EAD\/CVE-2026-38763",
"owner": {
- "login": "OpenXP-Research",
- "id": 124332420,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4",
- "html_url": "https:\/\/github.com\/OpenXP-Research",
+ "login": "D7EAD",
+ "id": 42398281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42398281?v=4",
+ "html_url": "https:\/\/github.com\/D7EAD",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2024-48359",
- "description": "CVE-2024-48359 PoC",
+ "html_url": "https:\/\/github.com\/D7EAD\/CVE-2026-38763",
+ "description": "An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel.",
"fork": false,
- "created_at": "2024-10-30T14:52:04Z",
- "updated_at": "2024-12-01T16:09:54Z",
- "pushed_at": "2024-10-30T15:02:47Z",
+ "created_at": "2026-05-21T03:47:01Z",
+ "updated_at": "2026-05-21T03:47:27Z",
+ "pushed_at": "2026-05-21T03:47:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2024/CVE-2024-7135.json b/2026/CVE-2026-38764.json
similarity index 50%
rename from 2024/CVE-2024-7135.json
rename to 2026/CVE-2026-38764.json
index 8292d6ff16..0f987b84aa 100644
--- a/2024/CVE-2024-7135.json
+++ b/2026/CVE-2026-38764.json
@@ -1,21 +1,21 @@
[
{
- "id": 871140348,
- "name": "CVE-2024-7135",
- "full_name": "RandomRobbieBF\/CVE-2024-7135",
+ "id": 1245250893,
+ "name": "CVE-2026-38764",
+ "full_name": "D7EAD\/CVE-2026-38764",
"owner": {
- "login": "RandomRobbieBF",
- "id": 51722811,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
- "html_url": "https:\/\/github.com\/RandomRobbieBF",
+ "login": "D7EAD",
+ "id": 42398281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42398281?v=4",
+ "html_url": "https:\/\/github.com\/D7EAD",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-7135",
- "description": "Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read",
+ "html_url": "https:\/\/github.com\/D7EAD\/CVE-2026-38764",
+ "description": "An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys",
"fork": false,
- "created_at": "2024-10-11T10:56:59Z",
- "updated_at": "2024-10-18T17:57:19Z",
- "pushed_at": "2024-10-11T11:18:26Z",
+ "created_at": "2026-05-21T03:47:54Z",
+ "updated_at": "2026-05-21T03:48:08Z",
+ "pushed_at": "2026-05-21T03:47:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 1,
"score": 0,
- "subscribers_count": 1
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-38765.json b/2026/CVE-2026-38765.json
new file mode 100644
index 0000000000..5611e8c8db
--- /dev/null
+++ b/2026/CVE-2026-38765.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1245251260,
+ "name": "CVE-2026-38765",
+ "full_name": "D7EAD\/CVE-2026-38765",
+ "owner": {
+ "login": "D7EAD",
+ "id": 42398281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42398281?v=4",
+ "html_url": "https:\/\/github.com\/D7EAD",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D7EAD\/CVE-2026-38765",
+ "description": "An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys",
+ "fork": false,
+ "created_at": "2026-05-21T03:48:35Z",
+ "updated_at": "2026-05-21T03:48:43Z",
+ "pushed_at": "2026-05-21T03:48:36Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-38766.json b/2026/CVE-2026-38766.json
new file mode 100644
index 0000000000..8e9f2ac64b
--- /dev/null
+++ b/2026/CVE-2026-38766.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1245251777,
+ "name": "CVE-2026-38766",
+ "full_name": "D7EAD\/CVE-2026-38766",
+ "owner": {
+ "login": "D7EAD",
+ "id": 42398281,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42398281?v=4",
+ "html_url": "https:\/\/github.com\/D7EAD",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/D7EAD\/CVE-2026-38766",
+ "description": "An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via a kernel mode driver.",
+ "fork": false,
+ "created_at": "2026-05-21T03:49:32Z",
+ "updated_at": "2026-05-21T03:49:41Z",
+ "pushed_at": "2026-05-21T03:49:33Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json
index f9d54ad846..e52809ed39 100644
--- a/2026/CVE-2026-40369.json
+++ b/2026/CVE-2026-40369.json
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
- "updated_at": "2026-05-20T21:23:29Z",
+ "updated_at": "2026-05-21T05:11:23Z",
"pushed_at": "2026-05-18T21:29:59Z",
- "stargazers_count": 129,
- "watchers_count": 129,
+ "stargazers_count": 132,
+ "watchers_count": 132,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
- "watchers": 129,
+ "watchers": 132,
"score": 0,
"subscribers_count": 2
}
diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json
index cc48236428..bfee9eaa69 100644
--- a/2026/CVE-2026-41940.json
+++ b/2026/CVE-2026-41940.json
@@ -146,10 +146,10 @@
"description": "CVE-2026-41940",
"fork": false,
"created_at": "2026-04-30T07:29:23Z",
- "updated_at": "2026-05-07T07:13:02Z",
+ "updated_at": "2026-05-21T06:02:50Z",
"pushed_at": "2026-04-30T07:05:29Z",
- "stargazers_count": 8,
- "watchers_count": 8,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
- "watchers": 8,
+ "watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -212,10 +212,10 @@
"description": "High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)",
"fork": false,
"created_at": "2026-04-30T08:11:23Z",
- "updated_at": "2026-05-20T11:03:46Z",
+ "updated_at": "2026-05-21T06:00:11Z",
"pushed_at": "2026-05-18T14:38:15Z",
- "stargazers_count": 82,
- "watchers_count": 82,
+ "stargazers_count": 83,
+ "watchers_count": 83,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
- "watchers": 82,
+ "watchers": 83,
"score": 0,
"subscribers_count": 1
},
@@ -738,12 +738,12 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
- "updated_at": "2026-05-20T21:55:51Z",
+ "updated_at": "2026-05-21T06:41:03Z",
"pushed_at": "2026-05-01T12:10:32Z",
- "stargazers_count": 424,
- "watchers_count": 424,
+ "stargazers_count": 426,
+ "watchers_count": 426,
"has_discussions": false,
- "forks_count": 127,
+ "forks_count": 128,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -751,8 +751,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 127,
- "watchers": 424,
+ "forks": 128,
+ "watchers": 426,
"score": 0,
"subscribers_count": 6
},
@@ -1845,8 +1845,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
- "updated_at": "2026-05-20T23:49:19Z",
- "pushed_at": "2026-05-20T23:49:16Z",
+ "updated_at": "2026-05-21T06:06:50Z",
+ "pushed_at": "2026-05-21T06:06:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json
index 89a6a4fcec..dc781ca42b 100644
--- a/2026/CVE-2026-42945.json
+++ b/2026/CVE-2026-42945.json
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
- "updated_at": "2026-05-20T23:56:57Z",
+ "updated_at": "2026-05-21T06:31:45Z",
"pushed_at": "2026-05-13T18:40:57Z",
- "stargazers_count": 753,
- "watchers_count": 753,
+ "stargazers_count": 760,
+ "watchers_count": 760,
"has_discussions": false,
"forks_count": 133,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 133,
- "watchers": 753,
+ "watchers": 760,
"score": 0,
"subscribers_count": 5
},
@@ -146,10 +146,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
- "updated_at": "2026-05-20T08:59:25Z",
+ "updated_at": "2026-05-21T05:32:39Z",
"pushed_at": "2026-05-14T11:38:47Z",
- "stargazers_count": 18,
- "watchers_count": 18,
+ "stargazers_count": 22,
+ "watchers_count": 22,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
- "watchers": 18,
+ "watchers": 22,
"score": 0,
"subscribers_count": 1
},
@@ -316,7 +316,7 @@
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
- "forks_count": 0,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -324,7 +324,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 0,
+ "forks": 1,
"watchers": 14,
"score": 0,
"subscribers_count": 0
@@ -377,10 +377,10 @@
"description": "CVE-2026-42945: nginx-rift vulnerability analysis and detection script",
"fork": false,
"created_at": "2026-05-15T03:05:11Z",
- "updated_at": "2026-05-15T04:13:34Z",
+ "updated_at": "2026-05-21T03:19:36Z",
"pushed_at": "2026-05-15T04:13:30Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -391,7 +391,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -608,10 +608,10 @@
"description": "nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)",
"fork": false,
"created_at": "2026-05-16T14:25:39Z",
- "updated_at": "2026-05-20T13:50:04Z",
+ "updated_at": "2026-05-21T03:32:39Z",
"pushed_at": "2026-05-17T01:59:59Z",
- "stargazers_count": 4,
- "watchers_count": 4,
+ "stargazers_count": 5,
+ "watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -622,7 +622,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
- "watchers": 4,
+ "watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -877,7 +877,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
- "forks_count": 0,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -894,7 +894,7 @@
"python3"
],
"visibility": "public",
- "forks": 0,
+ "forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json
index d7df610107..24f4ffbb78 100644
--- a/2026/CVE-2026-43284.json
+++ b/2026/CVE-2026-43284.json
@@ -480,10 +480,10 @@
"description": "CVE-2026-43284\/CVE-2026-43500 'DirtyFrag' Benign patch & mitigation detection script",
"fork": false,
"created_at": "2026-05-11T19:41:31Z",
- "updated_at": "2026-05-20T22:54:46Z",
+ "updated_at": "2026-05-21T06:33:27Z",
"pushed_at": "2026-05-12T07:14:42Z",
- "stargazers_count": 8,
- "watchers_count": 8,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -494,7 +494,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 8,
+ "watchers": 9,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-4350.json b/2026/CVE-2026-4350.json
deleted file mode 100644
index 13ca76190b..0000000000
--- a/2026/CVE-2026-4350.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 1207502087,
- "name": "CVE-2026-4350",
- "full_name": "whyiamsobusy\/CVE-2026-4350",
- "owner": {
- "login": "whyiamsobusy",
- "id": 252200060,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/252200060?v=4",
- "html_url": "https:\/\/github.com\/whyiamsobusy",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/whyiamsobusy\/CVE-2026-4350",
- "description": "CVE-2026-4350 - Perfmatters WordPress Arbitrary File Deletion",
- "fork": false,
- "created_at": "2026-04-11T02:46:23Z",
- "updated_at": "2026-04-11T02:51:52Z",
- "pushed_at": "2026-04-11T02:51:46Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2026/CVE-2026-44578.json b/2026/CVE-2026-44578.json
index 70c4ccc5e9..719d7d4b05 100644
--- a/2026/CVE-2026-44578.json
+++ b/2026/CVE-2026-44578.json
@@ -47,12 +47,12 @@
"description": "NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF",
"fork": false,
"created_at": "2026-05-15T05:02:38Z",
- "updated_at": "2026-05-20T04:08:38Z",
+ "updated_at": "2026-05-21T02:26:58Z",
"pushed_at": "2026-05-15T05:09:54Z",
- "stargazers_count": 69,
- "watchers_count": 69,
+ "stargazers_count": 70,
+ "watchers_count": 70,
"has_discussions": false,
- "forks_count": 15,
+ "forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 15,
- "watchers": 69,
+ "forks": 16,
+ "watchers": 70,
"score": 0,
"subscribers_count": 0
},
diff --git a/2024/CVE-2024-51132.json b/2026/CVE-2026-45250.json
similarity index 51%
rename from 2024/CVE-2024-51132.json
rename to 2026/CVE-2026-45250.json
index d636cb68d4..8b52de9272 100644
--- a/2024/CVE-2024-51132.json
+++ b/2026/CVE-2026-45250.json
@@ -1,21 +1,21 @@
[
{
- "id": 882327865,
- "name": "CVE-2024-51132-POC",
- "full_name": "JAckLosingHeart\/CVE-2024-51132-POC",
+ "id": 1245279981,
+ "name": "setcred",
+ "full_name": "venglin\/setcred",
"owner": {
- "login": "JAckLosingHeart",
- "id": 57932150,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57932150?v=4",
- "html_url": "https:\/\/github.com\/JAckLosingHeart",
+ "login": "venglin",
+ "id": 42781581,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42781581?v=4",
+ "html_url": "https:\/\/github.com\/venglin",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/JAckLosingHeart\/CVE-2024-51132-POC",
- "description": null,
+ "html_url": "https:\/\/github.com\/venglin\/setcred",
+ "description": "CVE-2026-45250 - FreeBSD 14.x LPE",
"fork": false,
- "created_at": "2024-11-02T14:30:29Z",
- "updated_at": "2024-11-21T07:42:10Z",
- "pushed_at": "2024-11-09T07:58:09Z",
+ "created_at": "2026-05-21T04:40:37Z",
+ "updated_at": "2026-05-21T05:26:12Z",
+ "pushed_at": "2026-05-21T04:43:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 1,
"watchers": 1,
"score": 0,
- "subscribers_count": 1
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-4631.json b/2026/CVE-2026-4631.json
index 58489c16c7..8ec5d06ada 100644
--- a/2026/CVE-2026-4631.json
+++ b/2026/CVE-2026-4631.json
@@ -14,10 +14,10 @@
"description": "Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection",
"fork": false,
"created_at": "2026-04-18T20:30:02Z",
- "updated_at": "2026-05-14T02:43:04Z",
+ "updated_at": "2026-05-21T04:31:31Z",
"pushed_at": "2026-04-18T22:04:47Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 2
}
diff --git a/2026/CVE-2026-9082.json b/2026/CVE-2026-9082.json
new file mode 100644
index 0000000000..5a367a81a6
--- /dev/null
+++ b/2026/CVE-2026-9082.json
@@ -0,0 +1,68 @@
+[
+ {
+ "id": 1245259671,
+ "name": "CVE-2026-9082",
+ "full_name": "HORKimhab\/CVE-2026-9082",
+ "owner": {
+ "login": "HORKimhab",
+ "id": 41143106,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
+ "html_url": "https:\/\/github.com\/HORKimhab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-9082",
+ "description": "CVE-2026-9082 | SA-CORE-2026-004",
+ "fork": false,
+ "created_at": "2026-05-21T04:03:42Z",
+ "updated_at": "2026-05-21T04:09:47Z",
+ "pushed_at": "2026-05-21T04:09:43Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1245274124,
+ "name": "cve-2026-9082",
+ "full_name": "lysophavin18\/cve-2026-9082",
+ "owner": {
+ "login": "lysophavin18",
+ "id": 116633924,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116633924?v=4",
+ "html_url": "https:\/\/github.com\/lysophavin18",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/lysophavin18\/cve-2026-9082",
+ "description": "cve poc",
+ "fork": false,
+ "created_at": "2026-05-21T04:30:27Z",
+ "updated_at": "2026-05-21T04:31:25Z",
+ "pushed_at": "2026-05-21T04:31:21Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/README.md b/README.md
index efba745ec8..c9a94d5dfe 100644
--- a/README.md
+++ b/README.md
@@ -401,13 +401,6 @@
- [bootstrapbool/cve-2026-4257](https://github.com/bootstrapbool/cve-2026-4257)
- [shootcannon/CVE-2026-4257](https://github.com/shootcannon/CVE-2026-4257)
-### CVE-2026-4350 (2026-04-03)
-
-The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method processing the `$_GET['delete']` parameter without any sanitization, authorization check, or nonce verification. The unsanitized filename is concatenated with the storage directory path and passed to `unlink()`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server by using `../` path traversal sequences, including `wp-config.php` which would force WordPress into the installation wizard and allow full site takeover.
-
-
-- [whyiamsobusy/CVE-2026-4350](https://github.com/whyiamsobusy/CVE-2026-4350)
-
### CVE-2026-4447 (2026-03-20)
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
@@ -741,6 +734,14 @@
- [Maxime288/CVE-2026-8838-RCE](https://github.com/Maxime288/CVE-2026-8838-RCE)
+### CVE-2026-9082 (2026-05-20)
+
+Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.\n\nThis issue affects Drupal core: from 8.9.0 before 10.4.10, from 10.5.0 before 10.5.10, from 10.6.0 before 10.6.9, from 11.0.0 before 11.1.10, from 11.2.0 before 11.2.12, from 11.3.0 before 11.3.10.
+
+
+- [HORKimhab/CVE-2026-9082](https://github.com/HORKimhab/CVE-2026-9082)
+- [lysophavin18/cve-2026-9082](https://github.com/lysophavin18/cve-2026-9082)
+
### CVE-2026-20127 (2026-02-25)
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
@@ -907,13 +908,6 @@
- [mbanyamer/CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ](https://github.com/mbanyamer/CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ)
-### CVE-2026-22557 (2026-03-19)
-
-A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying system that could be manipulated to access an underlying account.
-
-
-- [ThePotatoOfDoom/CVE-2026-22557-PoC](https://github.com/ThePotatoOfDoom/CVE-2026-22557-PoC)
-
### CVE-2026-22679 (2026-04-07)
Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug/method endpoint that allows attackers to execute arbitrary commands by invoking exposed debug functionality. Attackers can craft POST requests with attacker-controlled interfaceName and methodName parameters to reach command-execution helpers and achieve arbitrary command execution on the system. Exploitation evidence was first observed by the Shadowserver Foundation on 2026-03-31 (UTC).
@@ -977,13 +971,6 @@
- [lukasz-rybak/CVE-2026-23500](https://github.com/lukasz-rybak/CVE-2026-23500)
-### CVE-2026-23869 (2026-04-08)
-
-A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4). The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.
-
-
-- [cybertechajju/CVE-2026-23869-Exploit](https://github.com/cybertechajju/CVE-2026-23869-Exploit)
-
### CVE-2026-23870 (2026-05-06)
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).
@@ -1382,13 +1369,6 @@
- [kiyochii/CVE-2026-29628](https://github.com/kiyochii/CVE-2026-29628)
-### CVE-2026-29923 (2026-04-09)
-
-The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.
-
-
-- [athenasec16/CVE-2026-29923](https://github.com/athenasec16/CVE-2026-29923)
-
### CVE-2026-29971 (2026-04-27)
A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser via the ftpBackup functionality, authentication input handling, search functionality, and error message rendering components
@@ -1424,13 +1404,6 @@
- [dylvie/CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication](https://github.com/dylvie/CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication)
-### CVE-2026-30862 (2026-03-09)
-
-Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget (TableWidgetV2). The root cause is a lack of HTML sanitization in the React component rendering pipeline, allowing malicious attributes to be interpolated into the DOM. By leveraging the "Invite Users" feature, an attacker with a regular user account (user@gmail.com) can force a System Administrator to execute a high-privileged API call (/api/v1/admin/env), resulting in a Full Administrative Account Takeover. This vulnerability is fixed in 1.96.
-
-
-- [drkim-dev/CVE-2026-30862](https://github.com/drkim-dev/CVE-2026-30862)
-
### CVE-2026-30950 (2026-05-18)
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, they can take it over, reading any messages in it and locking the legitimate user out. The PATCH /sessions/{session_id}/assign-user endpoint authenticates the caller but never verifies session ownership: the service layer invokes the session lookup with user_id=None, which the data access layer interprets as a privileged/system call that bypasses the ownership filter, allowing any authenticated user to reassign an arbitrary session to themselves. This issue has been patched in version 0.6.51.
@@ -2002,13 +1975,6 @@
- [abhinavagarwal07/abhinavagarwal07.github.io](https://github.com/abhinavagarwal07/abhinavagarwal07.github.io)
-### CVE-2026-33229 (2026-04-08)
-
-XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly protected scripting API allows any user with script right to bypass the sandboxing of the Velocity scripting API and execute, e.g., arbitrary Python scripts, allowing full access to the XWiki instance and thereby compromising the confidentiality, integrity and availability of the whole instance. Note that script right already constitutes a high level of access that we don't recommend giving to untrusted users. This vulnerability is fixed in 17.4.8 and 17.10.1.
-
-
-- [azefzafyoussef/CVE-2026-33229](https://github.com/azefzafyoussef/CVE-2026-33229)
-
### CVE-2026-33317 (2026-04-24)
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, missing checks in `entry_get_attribute_value()` in `ta/pkcs11/src/object.c` can lead to out-of-bounds read from the PKCS#11 TA heap or a crash. When chained with the OOB read, the PKCS#11 TA function `PKCS11_CMD_GET_ATTRIBUTE_VALUE` or `entry_get_attribute_value()` can, with a bad template parameter, be tricked into reading at most 7 bytes beyond the end of the template buffer and writing beyond the end of the template buffer with the content of an attribute value of a PKCS#11 object. Commits e031c4e562023fd9f199e39fd2e85797e4cbdca9, 16926d5a46934c46e6656246b4fc18385a246900, and 149e8d7ecc4ef8bb00ab4a37fd2ccede6d79e1ca contain patches and are anticipated to be part of version 4.11.0.
@@ -2135,6 +2101,13 @@
- [kaleth4/CVE-2026-33827](https://github.com/kaleth4/CVE-2026-33827)
+### CVE-2026-33829 (2026-04-14)
+
+Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
+
+
+- [rahultb-sec/CVE-2026-33829-Writeup](https://github.com/rahultb-sec/CVE-2026-33829-Writeup)
+
### CVE-2026-33937 (2026-03-27)
Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition to a template string. The `value` field of a `NumberLiteral` AST node is emitted directly into the generated JavaScript without quoting or sanitization. An attacker who can supply a crafted AST to `compile()` can therefore inject and execute arbitrary JavaScript, leading to Remote Code Execution on the server. Version 4.7.9 fixes the issue. Some workarounds are available. Validate input type before calling `Handlebars.compile()`; ensure the argument is always a `string`, never a plain object or JSON-deserialized value. Use the Handlebars runtime-only build (`handlebars/runtime`) on the server if templates are pre-compiled at build time; `compile()` will be unavailable.
@@ -2496,6 +2469,18 @@
### CVE-2026-38698
- [vital-information-resource-under-siege/CVE-2026-38698-and-CVE-2026-38699](https://github.com/vital-information-resource-under-siege/CVE-2026-38698-and-CVE-2026-38699)
+### CVE-2026-38763
+- [D7EAD/CVE-2026-38763](https://github.com/D7EAD/CVE-2026-38763)
+
+### CVE-2026-38764
+- [D7EAD/CVE-2026-38764](https://github.com/D7EAD/CVE-2026-38764)
+
+### CVE-2026-38765
+- [D7EAD/CVE-2026-38765](https://github.com/D7EAD/CVE-2026-38765)
+
+### CVE-2026-38766
+- [D7EAD/CVE-2026-38766](https://github.com/D7EAD/CVE-2026-38766)
+
### CVE-2026-38934 (2026-04-27)
Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/settings_process.php
@@ -2567,13 +2552,6 @@
- [keraattin/CVE-2026-39842](https://github.com/keraattin/CVE-2026-39842)
-### CVE-2026-39866 (2026-04-21)
-
-Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release_update.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue.
-
-
-- [abhayclasher/CVE-2026-39866](https://github.com/abhayclasher/CVE-2026-39866)
-
### CVE-2026-39973 (2026-04-21)
Apktool is a tool for reverse engineering Android APK files. In versions 3.0.0 and 3.0.1, a path traversal vulnerability in `brut/androlib/res/decoder/ResFileDecoder.java` allows a maliciously crafted APK to write arbitrary files to the filesystem during standard decoding (`apktool d`). This is a security regression introduced in commit e10a045 (PR #4041, December 12, 2025), which removed the `BrutIO.sanitizePath()` call that previously prevented path traversal in resource file output paths. An attacker can embed `../` sequences in the `resources.arsc` Type String Pool to escape the output directory and write files to arbitrary locations, including `~/.ssh/config`, `~/.bashrc`, or Windows Startup folders, escalating to RCE. The fix in version 3.0.2 re-introduces `BrutIO.sanitizePath()` in `ResFileDecoder.java` before file write operations.
@@ -3099,6 +3077,9 @@
- [materaj2/cve-2026-45185-detection-script](https://github.com/materaj2/cve-2026-45185-detection-script)
- [MJ-bin/POC_CVE-2026-45185](https://github.com/MJ-bin/POC_CVE-2026-45185)
+### CVE-2026-45250
+- [venglin/setcred](https://github.com/venglin/setcred)
+
### CVE-2026-45321 (2026-05-12)
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.
@@ -6486,6 +6467,13 @@
- [pescada-dev/CVE-2025-22381](https://github.com/pescada-dev/CVE-2025-22381)
+### CVE-2025-22442 (2025-09-02)
+
+In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications into a newly created work profile due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
+
+
+- [Hasan-Al-Hussein/android-workprofile-exploit](https://github.com/Hasan-Al-Hussein/android-workprofile-exploit)
+
### CVE-2025-22457 (2025-04-03)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
@@ -14764,13 +14752,6 @@
- [jidle123/cve-2024-0305exp](https://github.com/jidle123/cve-2024-0305exp)
-### CVE-2024-0311 (2024-03-14)
-
-A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.
-
-
-- [calligraf0/CVE-2024-0311](https://github.com/calligraf0/CVE-2024-0311)
-
### CVE-2024-0324 (2024-02-05)
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wppb_two_factor_authentication_settings_update' function in all versions up to, and including, 3.10.8. This makes it possible for unauthenticated attackers to enable or disable the 2FA functionality present in the Premium version of the plugin for arbitrary user roles.
@@ -14857,7 +14838,6 @@
- [ysanatomic/io_uring_LPE-CVE-2024-0582](https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582)
- [Forsaken0129/CVE-2024-0582](https://github.com/Forsaken0129/CVE-2024-0582)
- [0ptyx/cve-2024-0582](https://github.com/0ptyx/cve-2024-0582)
-- [geniuszly/CVE-2024-0582](https://github.com/geniuszly/CVE-2024-0582)
- [101010zyl/CVE-2024-0582-dataonly](https://github.com/101010zyl/CVE-2024-0582-dataonly)
- [kuzeyardabulut/CVE-2024-0582](https://github.com/kuzeyardabulut/CVE-2024-0582)
- [pwnmonk/io_uring-n-day](https://github.com/pwnmonk/io_uring-n-day)
@@ -15002,7 +14982,6 @@
- [Matrexdz/CVE-2024-1071-Docker](https://github.com/Matrexdz/CVE-2024-1071-Docker)
- [gh-ost00/CVE-2024-1071-SQL-Injection](https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection)
- [dogucyber/WordPress-Exploit-CVE-2024-1071](https://github.com/dogucyber/WordPress-Exploit-CVE-2024-1071)
-- [Spid3heX/CVE-2024-1071-PoC-Script](https://github.com/Spid3heX/CVE-2024-1071-PoC-Script)
### CVE-2024-1086 (2024-01-31)
@@ -15029,13 +15008,6 @@
- [enessakircolak/CVE-2024-1112](https://github.com/enessakircolak/CVE-2024-1112)
-### CVE-2024-1207 (2024-02-08)
-
-The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
-
-
-- [sahar042/CVE-2024-1207](https://github.com/sahar042/CVE-2024-1207)
-
### CVE-2024-1208 (2024-02-05)
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.
@@ -15167,7 +15139,6 @@
- [kamranhasan/CVE-2024-1698-Exploit](https://github.com/kamranhasan/CVE-2024-1698-Exploit)
-- [shanglyu/CVE-2024-1698](https://github.com/shanglyu/CVE-2024-1698)
- [jesicatjan/WordPress-NotificationX-CVE-2024-1698](https://github.com/jesicatjan/WordPress-NotificationX-CVE-2024-1698)
### CVE-2024-1709 (2024-02-21)
@@ -15246,13 +15217,6 @@
- [uthrasri/CVE-2024-2193](https://github.com/uthrasri/CVE-2024-2193)
-### CVE-2024-2242 (2024-03-13)
-
-The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to, and including, 5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
-
-
-- [RandomRobbieBF/CVE-2024-2242](https://github.com/RandomRobbieBF/CVE-2024-2242)
-
### CVE-2024-2257 (2024-05-10)
This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to improper implementation of password policies. An attacker with physical access could exploit this by creating password that do not adhere to the defined security standards/policy on the vulnerable system.\n\nSuccessful exploitation of this vulnerability could allow the attacker to expose the router to potential security threats.
@@ -15341,7 +15305,6 @@
A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.
-- [nuridincersaygili/CVE-2024-2928](https://github.com/nuridincersaygili/CVE-2024-2928)
- [rain321654/sjtu_CVE-2024-2928](https://github.com/rain321654/sjtu_CVE-2024-2928)
### CVE-2024-2961 (2024-04-17)
@@ -15569,7 +15532,6 @@
- [marconesler/CVE-2024-3400](https://github.com/marconesler/CVE-2024-3400)
- [andrelia-hacks/CVE-2024-3400](https://github.com/andrelia-hacks/CVE-2024-3400)
- [ivan-n0v/cve-2024-3400](https://github.com/ivan-n0v/cve-2024-3400)
-- [workshop748/CVE-2024-3400](https://github.com/workshop748/CVE-2024-3400)
- [hashdr1ft/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400](https://github.com/hashdr1ft/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400)
- [CyprianAtsyor/letsdefend-cve2024-3400-case-study](https://github.com/CyprianAtsyor/letsdefend-cve2024-3400-case-study)
- [CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-](https://github.com/CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-)
@@ -15643,13 +15605,6 @@
- [H1ng007/CVE-2024-3640_WafBypass](https://github.com/H1ng007/CVE-2024-3640_WafBypass)
-### CVE-2024-3656 (2024-10-09)
-
-A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise.
-
-
-- [h4x0r-dz/CVE-2024-3656](https://github.com/h4x0r-dz/CVE-2024-3656)
-
### CVE-2024-3660 (2024-04-16)
A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.
@@ -15741,7 +15696,6 @@
- [entroychang/CVE-2024-4040](https://github.com/entroychang/CVE-2024-4040)
- [safeer-accuknox/CrushFTP-cve-2024-4040-poc](https://github.com/safeer-accuknox/CrushFTP-cve-2024-4040-poc)
- [geniuszly/GenCrushSSTIExploit](https://github.com/geniuszly/GenCrushSSTIExploit)
-- [rahisec/CVE-2024-4040](https://github.com/rahisec/CVE-2024-4040)
- [ill-deed/CrushFTP-CVE-2024-4040-illdeed](https://github.com/ill-deed/CrushFTP-CVE-2024-4040-illdeed)
- [juanorts/CrushFTP10-Docker-CVE-2024-4040](https://github.com/juanorts/CrushFTP10-Docker-CVE-2024-4040)
- [Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept](https://github.com/Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept)
@@ -15840,7 +15794,6 @@
- [UnHackerEnCapital/PDFernetRemotelo](https://github.com/UnHackerEnCapital/PDFernetRemotelo)
- [Masamuneee/CVE-2024-4367-Analysis](https://github.com/Masamuneee/CVE-2024-4367-Analysis)
- [m0d0ri205/PDFJS](https://github.com/m0d0ri205/PDFJS)
-- [pedrochalegre7/CVE-2024-4367-pdf-sample](https://github.com/pedrochalegre7/CVE-2024-4367-pdf-sample)
- [exfil0/WEAPONIZING-CVE-2024-4367](https://github.com/exfil0/WEAPONIZING-CVE-2024-4367)
- [kabiri-labs/CVE-2024-4367-PoC](https://github.com/kabiri-labs/CVE-2024-4367-PoC)
- [elamani-drawing/CVE-2024-4367-POC-PDFJS](https://github.com/elamani-drawing/CVE-2024-4367-POC-PDFJS)
@@ -15853,13 +15806,6 @@
- [1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf](https://github.com/1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf)
- [xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss](https://github.com/xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss)
-### CVE-2024-4406 (2024-05-02)
-
-Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the integral-dialog-page.html file. When parsing the integralInfo parameter, the process does not properly sanitize user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22332.
-
-
-- [Yogehi/cve-2024-4406-xiaomi13pro-exploit-files](https://github.com/Yogehi/cve-2024-4406-xiaomi13pro-exploit-files)
-
### CVE-2024-4439 (2024-05-03)
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. In addition, it also makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that have the comment block present and display the comment author's avatar.
@@ -15868,7 +15814,6 @@
- [MielPopsssssss/CVE-2024-4439](https://github.com/MielPopsssssss/CVE-2024-4439)
- [d0rb/CVE-2024-4439](https://github.com/d0rb/CVE-2024-4439)
- [xssor-dz/-CVE-2024-4439](https://github.com/xssor-dz/-CVE-2024-4439)
-- [soltanali0/CVE-2024-4439](https://github.com/soltanali0/CVE-2024-4439)
- [w0r1i0g1ht/CVE-2024-4439](https://github.com/w0r1i0g1ht/CVE-2024-4439)
### CVE-2024-4443 (2024-05-22)
@@ -15932,9 +15877,6 @@
- [ywChen-NTUST/PHP-CGI-RCE-Scanner](https://github.com/ywChen-NTUST/PHP-CGI-RCE-Scanner)
- [AhmedMansour93/Event-ID-268-Rule-Name-SOC292-Possible-PHP-Injection-Detected-CVE-2024-4577-](https://github.com/AhmedMansour93/Event-ID-268-Rule-Name-SOC292-Possible-PHP-Injection-Detected-CVE-2024-4577-)
- [phirojshah/CVE-2024-4577](https://github.com/phirojshah/CVE-2024-4577)
-- [JeninSutradhar/CVE-2024-4577-checker](https://github.com/JeninSutradhar/CVE-2024-4577-checker)
-- [longhoangth18/CVE-2024-4577](https://github.com/longhoangth18/CVE-2024-4577)
-- [ahmetramazank/CVE-2024-4577](https://github.com/ahmetramazank/CVE-2024-4577)
- [BTtea/CVE-2024-4577-RCE-PoC](https://github.com/BTtea/CVE-2024-4577-RCE-PoC)
- [Dejavu666/CVE-2024-4577](https://github.com/Dejavu666/CVE-2024-4577)
- [tpdlshdmlrkfmcla/php-cgi-cve-2024-4577](https://github.com/tpdlshdmlrkfmcla/php-cgi-cve-2024-4577)
@@ -16020,7 +15962,6 @@
- [cve-2024/CVE-2024-4898-Poc](https://github.com/cve-2024/CVE-2024-4898-Poc)
-- [gh-ost00/CVE-2024-4898](https://github.com/gh-ost00/CVE-2024-4898)
### CVE-2024-4947 (2024-05-15)
@@ -16047,7 +15988,6 @@
- [verylazytech/CVE-2024-4956](https://github.com/verylazytech/CVE-2024-4956)
- [JolyIrsb/CVE-2024-4956](https://github.com/JolyIrsb/CVE-2024-4956)
- [UMASANKAR-MG/Path-Traversal-CVE-2024-4956](https://github.com/UMASANKAR-MG/Path-Traversal-CVE-2024-4956)
-- [An00bRektn/shirocrack](https://github.com/An00bRektn/shirocrack)
- [art-of-defence/CVE-2024-4956](https://github.com/art-of-defence/CVE-2024-4956)
- [Buff3st-0v3rfl0w/CVE-2024-4956](https://github.com/Buff3st-0v3rfl0w/CVE-2024-4956)
- [amalpvatayam67/day04-nexus-4956](https://github.com/amalpvatayam67/day04-nexus-4956)
@@ -16080,13 +16020,6 @@
- [ModeBrutal/CVE-2024-5084-Auto-Exploit](https://github.com/ModeBrutal/CVE-2024-5084-Auto-Exploit)
- [RedTeamBlueTeam/CVE-2024-5084-Red-Team](https://github.com/RedTeamBlueTeam/CVE-2024-5084-Red-Team)
-### CVE-2024-5124 (2024-06-06)
-
-A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Python. This method of comparison allows an attacker to guess passwords based on the timing of each character's comparison. The issue arises from the code segment that checks a password for a particular username, which can lead to the exposure of sensitive information to an unauthorized actor. An attacker exploiting this vulnerability could potentially guess user passwords, compromising the security of the system.
-
-
-- [gogo2464/CVE-2024-5124](https://github.com/gogo2464/CVE-2024-5124)
-
### CVE-2024-5153 (2024-06-06)
The Startklar Elementor Addons plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.15 via the 'dropzone_hash' parameter. This makes it possible for unauthenticated attackers to copy the contents of arbitrary files on the server, which can contain sensitive information, and to delete arbitrary directories, including the root WordPress directory.
@@ -16158,7 +16091,6 @@
- [kryptonproject/CVE-2024-5522-PoC](https://github.com/kryptonproject/CVE-2024-5522-PoC)
-- [geniuszly/CVE-2024-5522](https://github.com/geniuszly/CVE-2024-5522)
### CVE-2024-5535 (2024-06-27)
@@ -16195,13 +16127,6 @@
- [afine-com/CVE-2024-5737](https://github.com/afine-com/CVE-2024-5737)
-### CVE-2024-5764 (2024-10-23)
-
-Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.\n\nThis issue affects Nexus Repository: from 3.0.0 through 3.72.0.
-
-
-- [fin3ss3g0d/CVE-2024-5764](https://github.com/fin3ss3g0d/CVE-2024-5764)
-
### CVE-2024-5806 (2024-06-25)
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.
@@ -16217,20 +16142,12 @@
- [ig-labs/EDR-ALPC-Block-POC](https://github.com/ig-labs/EDR-ALPC-Block-POC)
-### CVE-2024-5910 (2024-07-10)
-
-Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.\n\nNote: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
-
-
-- [p33d/Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464](https://github.com/p33d/Palo-Alto-Expedition-Remote-Code-Execution-Exploit-CVE-2024-5910-CVE-2024-9464)
-
### CVE-2024-5932 (2024-08-20)
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'give_title' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.
- [EQSTLab/CVE-2024-5932](https://github.com/EQSTLab/CVE-2024-5932)
-- [OxLmahdi/cve-2024-5932](https://github.com/OxLmahdi/cve-2024-5932)
- [hlc23/CVE-2024-5932-web-ui](https://github.com/hlc23/CVE-2024-5932-web-ui)
- [autom4il/CVE-2024-5932](https://github.com/autom4il/CVE-2024-5932)
- [nishant-kumar-5173/CVE-2024-5932](https://github.com/nishant-kumar-5173/CVE-2024-5932)
@@ -16422,7 +16339,6 @@
- [HadesNull123/CVE-2024-6387_Check](https://github.com/HadesNull123/CVE-2024-6387_Check)
- [identity-threat-labs/CVE-2024-6387-Vulnerability-Checker](https://github.com/identity-threat-labs/CVE-2024-6387-Vulnerability-Checker)
- [identity-threat-labs/Article-RegreSSHion-CVE-2024-6387](https://github.com/identity-threat-labs/Article-RegreSSHion-CVE-2024-6387)
-- [anhvutuan/CVE-2024-6387-poc-1](https://github.com/anhvutuan/CVE-2024-6387-poc-1)
- [YassDEV221608/CVE-2024-6387](https://github.com/YassDEV221608/CVE-2024-6387)
- [awusan125/test_for6387](https://github.com/awusan125/test_for6387)
- [YassDEV221608/CVE-2024-6387_PoC](https://github.com/YassDEV221608/CVE-2024-6387_PoC)
@@ -16443,13 +16359,6 @@
- [Nxploited/CVE-2024-6460](https://github.com/Nxploited/CVE-2024-6460)
- [E1-Bot141/CVE-2024-6460](https://github.com/E1-Bot141/CVE-2024-6460)
-### CVE-2024-6473 (2024-09-03)
-
-Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used.
-
-
-- [12345qwert123456/CVE-2024-6473-PoC](https://github.com/12345qwert123456/CVE-2024-6473-PoC)
-
### CVE-2024-6485 (2024-07-11)
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.
@@ -16527,7 +16436,6 @@
- [ading2210/CVE-2024-6778-POC](https://github.com/ading2210/CVE-2024-6778-POC)
-- [r00tjunip3r1/POC-CVE-2024-6778](https://github.com/r00tjunip3r1/POC-CVE-2024-6778)
### CVE-2024-6782 (2024-08-06)
@@ -16554,7 +16462,6 @@
- [bigherocenter/CVE-2024-7029-EXPLOIT](https://github.com/bigherocenter/CVE-2024-7029-EXPLOIT)
- [ebrasha/CVE-2024-7029](https://github.com/ebrasha/CVE-2024-7029)
-- [geniuszly/CVE-2024-7029](https://github.com/geniuszly/CVE-2024-7029)
### CVE-2024-7094 (2024-08-13)
@@ -16571,20 +16478,6 @@
- [gh-ost00/CVE-2024-7120](https://github.com/gh-ost00/CVE-2024-7120)
- [jokeir07x/CVE-2024-7120-Exploit-by-Dark-07x](https://github.com/jokeir07x/CVE-2024-7120-Exploit-by-Dark-07x)
-### CVE-2024-7124 (2024-11-14)
-
-Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects DInGO dLibra software in versions from 6.0 before 6.3.20.
-
-
-- [kac89/CVE-2024-7124](https://github.com/kac89/CVE-2024-7124)
-
-### CVE-2024-7135 (2024-07-31)
-
-The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_file' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
-
-
-- [RandomRobbieBF/CVE-2024-7135](https://github.com/RandomRobbieBF/CVE-2024-7135)
-
### CVE-2024-7313 (2024-08-26)
The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
@@ -16613,13 +16506,6 @@
- [davidxbors/CVE-2024-7399-POC](https://github.com/davidxbors/CVE-2024-7399-POC)
-### CVE-2024-7456 (2024-11-01)
-
-A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, allowing for SQL injection. The `orderByClause` variable is constructed without server-side validation or sanitization, enabling an attacker to execute arbitrary SQL commands. Successful exploitation can lead to complete data loss, modification, or corruption.
-
-
-- [77Philly/CVE-2024-7456scripts](https://github.com/77Philly/CVE-2024-7456scripts)
-
### CVE-2024-7479 (2024-09-25)
Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.
@@ -16628,13 +16514,6 @@
- [PeterGabaldon/CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481)
- [fortra/CVE-2024-7479](https://github.com/fortra/CVE-2024-7479)
-### CVE-2024-7514 (2024-10-11)
-
-The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation during the comments import process, in versions up to, and including, 2.3.7. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\r\nThe issue was partially fixed in version 2.3.8 and fully fixed in 2.3.9
-
-
-- [RandomRobbieBF/CVE-2024-7514](https://github.com/RandomRobbieBF/CVE-2024-7514)
-
### CVE-2024-7591 (2024-09-05)
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:\n\n* LoadMaster: 7.2.40.0 and above\n\n* ECS: All versions\n\n* Multi-Tenancy: 7.1.35.4 and above
@@ -16649,7 +16528,6 @@
- [rxerium/CVE-2024-7593](https://github.com/rxerium/CVE-2024-7593)
- [D3N14LD15K/CVE-2024-7593_PoC_Exploit](https://github.com/D3N14LD15K/CVE-2024-7593_PoC_Exploit)
-- [voidbroker/CVE-2024-7593](https://github.com/voidbroker/CVE-2024-7593)
### CVE-2024-7595 (2025-02-05)
@@ -16681,20 +16559,6 @@
- [lfillaz/CVE-2024-7703](https://github.com/lfillaz/CVE-2024-7703)
-### CVE-2024-7808 (2024-08-15)
-
-Es wurde eine kritische Schwachstelle in code-projects Job Portal 1.0 ausgemacht. Betroffen hiervon ist ein unbekannter Ablauf der Datei logindbc.php. Dank Manipulation des Arguments email mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [TheUnknownSoul/CVE-2024-7808](https://github.com/TheUnknownSoul/CVE-2024-7808)
-
-### CVE-2024-7854 (2024-08-21)
-
-The Woo Inquiry plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 0.1 due to insufficient escaping on the user supplied parameter 'dbid' and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
-
-
-- [RandomRobbieBF/CVE-2024-7854](https://github.com/RandomRobbieBF/CVE-2024-7854)
-
### CVE-2024-7856 (2024-08-29)
The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the 'file' parameter in all versions up to, and including, 5.7.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files which can make remote code execution possible when wp-config.php is deleted.
@@ -16907,13 +16771,6 @@
- [Avento/CVE-2024-8522](https://github.com/Avento/CVE-2024-8522)
-### CVE-2024-8529 (2024-09-12)
-
-The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
-
-
-- [RandomRobbieBF/CVE-2024-8529](https://github.com/RandomRobbieBF/CVE-2024-8529)
-
### CVE-2024-8636 (2024-09-11)
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
@@ -16935,13 +16792,6 @@
- [4minx/CVE-2024-8682](https://github.com/4minx/CVE-2024-8682)
-### CVE-2024-8698 (2024-09-19)
-
-A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.
-
-
-- [huydoppaz/CVE-2024-8698-POC](https://github.com/huydoppaz/CVE-2024-8698-POC)
-
### CVE-2024-8743 (2024-10-05)
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.5.7. This is due to a lack of proper checks on allowed file types. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an administrator, to upload .css and .js files, which could lead to Stored Cross-Site Scripting.
@@ -16979,13 +16829,6 @@
- [gh-ost00/CVE-2024-8949-POC](https://github.com/gh-ost00/CVE-2024-8949-POC)
-### CVE-2024-8963 (2024-09-19)
-
-Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
-
-
-- [patfire94/CVE-2024-8963](https://github.com/patfire94/CVE-2024-8963)
-
### CVE-2024-9014 (2024-09-23)
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
@@ -17005,20 +16848,6 @@
- [tpdlshdmlrkfmcla/CVE-2024-9047](https://github.com/tpdlshdmlrkfmcla/CVE-2024-9047)
- [amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal](https://github.com/amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal)
-### CVE-2024-9061 (2024-10-16)
-
-The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. NOTE: This vulnerability was partially fixed in version 1.3.5 with a nonce check, which effectively prevented access to the affected function. However, version 1.3.6 incorporates the correct authorization check to prevent unauthorized access.
-
-
-- [RandomRobbieBF/CVE-2024-9061](https://github.com/RandomRobbieBF/CVE-2024-9061)
-
-### CVE-2024-9106 (2024-10-01)
-
-The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This is only exploitable if the app secret is not set, so it has a default empty value.
-
-
-- [RandomRobbieBF/CVE-2024-9106](https://github.com/RandomRobbieBF/CVE-2024-9106)
-
### CVE-2024-9162 (2024-10-28)
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and including, 7.86. This makes it possible for authenticated attackers, with Administrator-level access and above, to create an export file with the .php extension on the affected site's server, adding an arbitrary PHP code to it, which may make remote code execution possible.
@@ -17033,19 +16862,11 @@
- [Andrysqui/CVE-2024-9166](https://github.com/Andrysqui/CVE-2024-9166)
-### CVE-2024-9224 (2024-10-01)
-
-The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
-
-
-- [RandomRobbieBF/CVE-2024-9224](https://github.com/RandomRobbieBF/CVE-2024-9224)
-
### CVE-2024-9234 (2024-10-11)
The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the install_and_activate_plugin_from_external() function (install-active-plugin REST API endpoint) in all versions up to, and including, 2.1.0. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins, or utilize the functionality to upload arbitrary files spoofed like plugins.
-- [RandomRobbieBF/CVE-2024-9234](https://github.com/RandomRobbieBF/CVE-2024-9234)
- [Nxploited/CVE-2024-9234](https://github.com/Nxploited/CVE-2024-9234)
### CVE-2024-9264 (2024-10-18)
@@ -17054,9 +16875,6 @@
- [nollium/CVE-2024-9264](https://github.com/nollium/CVE-2024-9264)
-- [z3k0sec/File-Read-CVE-2024-9264](https://github.com/z3k0sec/File-Read-CVE-2024-9264)
-- [z3k0sec/CVE-2024-9264-RCE-Exploit](https://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit)
-- [punitdarji/Grafana-CVE-2024-9264](https://github.com/punitdarji/Grafana-CVE-2024-9264)
- [Cythonic1/CVE-2024-9264](https://github.com/Cythonic1/CVE-2024-9264)
- [Exerrdev/CVE-2024-9264-Fixed](https://github.com/Exerrdev/CVE-2024-9264-Fixed)
- [Royall-Researchers/CVE-2024-9264](https://github.com/Royall-Researchers/CVE-2024-9264)
@@ -17085,8 +16903,6 @@
The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.
-- [adhikara13/CVE-2024-9441](https://github.com/adhikara13/CVE-2024-9441)
-- [p33d/CVE-2024-9441](https://github.com/p33d/CVE-2024-9441)
- [jk-mayne/CVE-2024-9441-Checker](https://github.com/jk-mayne/CVE-2024-9441-Checker)
### CVE-2024-9463 (2024-10-09)
@@ -17096,28 +16912,6 @@
- [momo1239/CVE-2024-9463-Proof-of-Concept](https://github.com/momo1239/CVE-2024-9463-Proof-of-Concept)
-### CVE-2024-9464 (2024-10-09)
-
-An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
-
-
-- [horizon3ai/CVE-2024-9464](https://github.com/horizon3ai/CVE-2024-9464)
-
-### CVE-2024-9465 (2024-10-09)
-
-An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system.
-
-
-- [horizon3ai/CVE-2024-9465](https://github.com/horizon3ai/CVE-2024-9465)
-- [Qlng/CVE-2024-9465](https://github.com/Qlng/CVE-2024-9465)
-
-### CVE-2024-9466 (2024-10-09)
-
-A cleartext storage of sensitive information vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to reveal firewall usernames, passwords, and API keys generated using those credentials.
-
-
-- [holypryx/CVE-2024-9466](https://github.com/holypryx/CVE-2024-9466)
-
### CVE-2024-9474 (2024-11-18)
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.\n\nCloud NGFW and Prisma Access are not impacted by this vulnerability.
@@ -17143,19 +16937,11 @@
- [ELIZEUOPAIN/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory](https://github.com/ELIZEUOPAIN/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory)
-### CVE-2024-9570 (2024-10-07)
-
-Eine Schwachstelle wurde in D-Link DIR-619L B1 2.06 gefunden. Sie wurde als kritisch eingestuft. Hierbei geht es um die Funktion formEasySetTimezone der Datei /goform/formEasySetTimezone. Durch das Beeinflussen des Arguments curTime mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [dylvie/CVE-2024-9570_D-Link-DIR-619L-bof](https://github.com/dylvie/CVE-2024-9570_D-Link-DIR-619L-bof)
-
### CVE-2024-9593 (2024-10-18)
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock) and 1.1.4 (for Time Clock Pro) via the 'etimeclockwp_load_function_callback' function. This allows unauthenticated attackers to execute code on the server. The invoked function's parameters cannot be specified.
-- [RandomRobbieBF/CVE-2024-9593](https://github.com/RandomRobbieBF/CVE-2024-9593)
- [0x4f5da2-venom/CVE-2024-9593-EXP](https://github.com/0x4f5da2-venom/CVE-2024-9593-EXP)
### CVE-2024-9680 (2024-10-09)
@@ -17163,7 +16949,6 @@
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
-- [tdonaworth/Firefox-CVE-2024-9680](https://github.com/tdonaworth/Firefox-CVE-2024-9680)
- [moscovium-mc/Tor-0day-JavaScript-Exploit](https://github.com/moscovium-mc/Tor-0day-JavaScript-Exploit)
### CVE-2024-9698 (2024-12-14)
@@ -17178,7 +16963,6 @@
The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.
-- [RandomRobbieBF/CVE-2024-9707](https://github.com/RandomRobbieBF/CVE-2024-9707)
- [Nxploited/CVE-2024-9707-Poc](https://github.com/Nxploited/CVE-2024-9707-Poc)
### CVE-2024-9756 (2024-10-12)
@@ -17193,46 +16977,15 @@
The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
-- [RandomRobbieBF/CVE-2024-9796](https://github.com/RandomRobbieBF/CVE-2024-9796)
- [viniciuslazzari/CVE-2024-9796](https://github.com/viniciuslazzari/CVE-2024-9796)
- [BwithE/CVE-2024-9796](https://github.com/BwithE/CVE-2024-9796)
- [yup-Ivan/CVE-2024-9796](https://github.com/yup-Ivan/CVE-2024-9796)
-### CVE-2024-9821 (2024-10-12)
-
-The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to view the Telegram Bot Token, a secret token used to control the bot, which can then be used to log in as any existing user on the site, such as an administrator, if they know the username, due to the Login with Telegram feature.
-
-
-- [RandomRobbieBF/CVE-2024-9821](https://github.com/RandomRobbieBF/CVE-2024-9821)
-
-### CVE-2024-9822 (2024-10-11)
-
-The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'login_admin_user' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the administrator, or if it does not exist, then to the first administrator.
-
-
-- [RandomRobbieBF/CVE-2024-9822](https://github.com/RandomRobbieBF/CVE-2024-9822)
-
-### CVE-2024-9890 (2024-10-26)
-
-The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. This is due to an improper capability check in the 'switchUser' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator. CVE-2024-50503 may be a duplicate.
-
-
-- [RandomRobbieBF/CVE-2024-9890](https://github.com/RandomRobbieBF/CVE-2024-9890)
-
-### CVE-2024-9926 (2024-11-07)
-
-The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form
-
-
-- [m3ssap0/wordpress-jetpack-broken-access-control-vulnerable-application](https://github.com/m3ssap0/wordpress-jetpack-broken-access-control-vulnerable-application)
-- [m3ssap0/wordpress-jetpack-broken-access-control-exploit](https://github.com/m3ssap0/wordpress-jetpack-broken-access-control-exploit)
-
### CVE-2024-9932 (2024-10-26)
The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
-- [RandomRobbieBF/CVE-2024-9932](https://github.com/RandomRobbieBF/CVE-2024-9932)
- [Nxploited/CVE-2024-9932-POC](https://github.com/Nxploited/CVE-2024-9932-POC)
- [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-9932)
@@ -17241,7 +16994,6 @@
The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' function. This makes it possible for unauthenticated attackers to log in to the WatchTowerHQ client administrator user.
-- [RandomRobbieBF/CVE-2024-9933](https://github.com/RandomRobbieBF/CVE-2024-9933)
- [Nxploited/CVE-2024-9933](https://github.com/Nxploited/CVE-2024-9933)
### CVE-2024-9935 (2024-11-16)
@@ -17268,13 +17020,6 @@
- [RandomRobbieBF/CVE-2024-10124](https://github.com/RandomRobbieBF/CVE-2024-10124)
- [Nxploited/CVE-2024-10124-Poc](https://github.com/Nxploited/CVE-2024-10124-Poc)
-### CVE-2024-10140 (2024-10-19)
-
-Eine kritische Schwachstelle wurde in code-projects Pharmacy Management System 1.0 entdeckt. Betroffen davon ist ein unbekannter Prozess der Datei /manage_supplier.php. Durch Beeinflussen des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [holypryx/CVE-2024-10140](https://github.com/holypryx/CVE-2024-10140)
-
### CVE-2024-10220 (2024-11-22)
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
@@ -17296,47 +17041,11 @@
- [RandomRobbieBF/CVE-2024-10245](https://github.com/RandomRobbieBF/CVE-2024-10245)
-### CVE-2024-10354 (2024-10-25)
-
-In SourceCodester Petrol Pump Management Software 1.0 wurde eine kritische Schwachstelle entdeckt. Das betrifft eine unbekannte Funktionalität der Datei /admin/print.php. Mit der Manipulation des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [K1nakoo/CVE-2024-10354](https://github.com/K1nakoo/CVE-2024-10354)
-
-### CVE-2024-10355 (2024-10-25)
-
-Eine kritische Schwachstelle wurde in SourceCodester Petrol Pump Management Software 1.0 entdeckt. Dies betrifft einen unbekannten Teil der Datei /admin/invoice.php. Durch die Manipulation des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [K1nakoo/CVE-2024-10355](https://github.com/K1nakoo/CVE-2024-10355)
-
-### CVE-2024-10410 (2024-10-27)
-
-In SourceCodester Online Hotel Reservation System 1.0 wurde eine kritische Schwachstelle entdeckt. Dabei geht es um die Funktion upload der Datei /admin/mod_room/controller.php?action=add. Dank Manipulation des Arguments image mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [K1nakoo/CVE-2024-10410](https://github.com/K1nakoo/CVE-2024-10410)
-
-### CVE-2024-10448 (2024-10-28)
-
-Eine problematische Schwachstelle wurde in code-projects Blood Bank Management System 1.0 entdeckt. Betroffen davon ist ein unbekannter Prozess der Datei /file/delete.php. Dank Manipulation des Arguments bid mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [bevennyamande/CVE-2024-10448](https://github.com/bevennyamande/CVE-2024-10448)
-
-### CVE-2024-10449 (2024-10-28)
-
-Es wurde eine kritische Schwachstelle in Codezips Hospital Appointment System 1.0 gefunden. Betroffen hiervon ist ein unbekannter Ablauf der Datei /loginAction.php. Mit der Manipulation des Arguments Username mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [g-u-i-d/CVE-2024-10449-patch](https://github.com/g-u-i-d/CVE-2024-10449-patch)
-
### CVE-2024-10470 (2024-11-09)
The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions checks in the readfile and unlink functions in all versions up to, and including, 4.962. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The theme is vulnerable even when it is not activated.
-- [RandomRobbieBF/CVE-2024-10470](https://github.com/RandomRobbieBF/CVE-2024-10470)
- [0xshoriful/CVE-2024-10470](https://github.com/0xshoriful/CVE-2024-10470)
### CVE-2024-10508 (2024-11-09)
@@ -17368,13 +17077,6 @@
- [ubaydev/CVE-2024-10542](https://github.com/ubaydev/CVE-2024-10542)
-### CVE-2024-10557 (2024-10-31)
-
-In code-projects Blood Bank Management System 1.0 wurde eine Schwachstelle gefunden. Sie wurde als problematisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei /file/updateprofile.php. Mit der Manipulation mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [bevennyamande/CVE-2024-10557](https://github.com/bevennyamande/CVE-2024-10557)
-
### CVE-2024-10571 (2024-11-14)
The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
@@ -17394,22 +17096,13 @@
The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.
-- [RandomRobbieBF/CVE-2024-10586](https://github.com/RandomRobbieBF/CVE-2024-10586)
- [Nxploited/CVE-2024-10586-Poc](https://github.com/Nxploited/CVE-2024-10586-Poc)
-### CVE-2024-10605 (2024-10-31)
-
-Es wurde eine Schwachstelle in code-projects Blood Bank Management System 1.0 ausgemacht. Sie wurde als problematisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /file/request.php. Durch die Manipulation mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
-
-
-- [bevennyamande/CVE-2024-10605](https://github.com/bevennyamande/CVE-2024-10605)
-
### CVE-2024-10629 (2024-11-13)
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary files on the affected site's server which may make remote code execution possible.
-- [RandomRobbieBF/CVE-2024-10629](https://github.com/RandomRobbieBF/CVE-2024-10629)
- [Nxploited/CVE-2024-10629](https://github.com/Nxploited/CVE-2024-10629)
### CVE-2024-10654 (2024-11-01)
@@ -17475,10 +17168,7 @@
In D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es die Funktion cgi_user_add der Datei /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. Durch Manipulation des Arguments name mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Die Komplexität eines Angriffs ist eher hoch. Sie gilt als schwierig ausnutzbar. Der Exploit steht zur öffentlichen Verfügung.
-- [imnotcha0s/CVE-2024-10914](https://github.com/imnotcha0s/CVE-2024-10914)
- [verylazytech/CVE-2024-10914](https://github.com/verylazytech/CVE-2024-10914)
-- [Egi08/CVE-2024-10914](https://github.com/Egi08/CVE-2024-10914)
-- [Bu0uCat/D-Link-NAS-CVE-2024-10914-](https://github.com/Bu0uCat/D-Link-NAS-CVE-2024-10914-)
- [ThemeHackers/CVE-2024-10914](https://github.com/ThemeHackers/CVE-2024-10914)
- [retuci0/cve-2024-10914-port](https://github.com/retuci0/cve-2024-10914-port)
- [K3ysTr0K3R/CVE-2024-10914-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2024-10914-EXPLOIT)
@@ -17502,7 +17192,6 @@
The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default).
-- [RandomRobbieBF/CVE-2024-10924](https://github.com/RandomRobbieBF/CVE-2024-10924)
- [m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-application](https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-application)
- [MattJButler/CVE-2024-10924](https://github.com/MattJButler/CVE-2024-10924)
- [m3ssap0/wordpress-really-simple-security-authn-bypass-exploit](https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-exploit)
@@ -17530,13 +17219,6 @@
- [sahil3276/CVE-2024-10930](https://github.com/sahil3276/CVE-2024-10930)
-### CVE-2024-10958 (2024-11-10)
-
-The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
-
-
-- [reinh3rz/CVE-2024-10958-WPPA-Exploit](https://github.com/reinh3rz/CVE-2024-10958-WPPA-Exploit)
-
### CVE-2024-11003 (2024-11-19)
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.
@@ -18208,13 +17890,6 @@
- [PhucHauDeveloper/BadBlue](https://github.com/PhucHauDeveloper/BadBlue)
- [Danyw24/blueXploit](https://github.com/Danyw24/blueXploit)
-### CVE-2024-21320 (2024-01-09)
-
-Windows Themes Spoofing Vulnerability
-
-
-- [sxyrxyy/CVE-2024-21320-POC](https://github.com/sxyrxyy/CVE-2024-21320-POC)
-
### CVE-2024-21338 (2024-02-13)
Windows Kernel Elevation of Privilege Vulnerability
@@ -18402,7 +18077,6 @@
- [KubernetesBachelor/CVE-2024-21626](https://github.com/KubernetesBachelor/CVE-2024-21626)
- [dorser/cve-2024-21626](https://github.com/dorser/cve-2024-21626)
- [FlojBoj/CVE-2024-21626](https://github.com/FlojBoj/CVE-2024-21626)
-- [Sk3pper/CVE-2024-21626-old-docker-versions](https://github.com/Sk3pper/CVE-2024-21626-old-docker-versions)
- [adaammmeeee/little-joke](https://github.com/adaammmeeee/little-joke)
- [R4mbb/CVE-2024-21626-PoC](https://github.com/R4mbb/CVE-2024-21626-PoC)
- [scherepiuk/container-escape-ebpf](https://github.com/scherepiuk/container-escape-ebpf)
@@ -18463,7 +18137,6 @@
- [r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check](https://github.com/r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check)
- [d0rb/CVE-2024-21762](https://github.com/d0rb/CVE-2024-21762)
- [rdoix/cve-2024-21762-checker](https://github.com/rdoix/cve-2024-21762-checker)
-- [deFr0ggy/CVE-2024-21762-Checker](https://github.com/deFr0ggy/CVE-2024-21762-Checker)
- [abrewer251/CVE-2024-21762_FortiNet_PoC](https://github.com/abrewer251/CVE-2024-21762_FortiNet_PoC)
- [0x13-ByteZer0/CVE-2024-21762](https://github.com/0x13-ByteZer0/CVE-2024-21762)
- [0x0asif/CVE-2024-21762](https://github.com/0x0asif/CVE-2024-21762)
@@ -18816,9 +18489,6 @@
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
-- [CheckCve2/CVE-2024-23113](https://github.com/CheckCve2/CVE-2024-23113)
-- [p33d/CVE-2024-23113](https://github.com/p33d/CVE-2024-23113)
-- [puckiestyle/CVE-2024-23113](https://github.com/puckiestyle/CVE-2024-23113)
- [valornode/CVE-2024-23113](https://github.com/valornode/CVE-2024-23113)
- [MAVRICK-1/cve-2024-23113-test-env](https://github.com/MAVRICK-1/cve-2024-23113-test-env)
@@ -18865,9 +18535,7 @@
- [brian-edgar-re/poc-cve-2024-23334](https://github.com/brian-edgar-re/poc-cve-2024-23334)
- [binaryninja/CVE-2024-23334](https://github.com/binaryninja/CVE-2024-23334)
- [s4botai/CVE-2024-23334-PoC](https://github.com/s4botai/CVE-2024-23334-PoC)
-- [wizarddos/CVE-2024-23334](https://github.com/wizarddos/CVE-2024-23334)
- [0xR00/CVE-2024-23334](https://github.com/0xR00/CVE-2024-23334)
-- [Arc4he/CVE-2024-23334-PoC](https://github.com/Arc4he/CVE-2024-23334-PoC)
- [TheRedP4nther/LFI-aiohttp-CVE-2024-23334-PoC](https://github.com/TheRedP4nther/LFI-aiohttp-CVE-2024-23334-PoC)
- [Betan423/CVE-2024-23334-PoC](https://github.com/Betan423/CVE-2024-23334-PoC)
- [BestDevOfc/CVE-2024-23334-PoC](https://github.com/BestDevOfc/CVE-2024-23334-PoC)
@@ -19335,35 +19003,6 @@
- [junnythemarksman/CVE-2024-24590](https://github.com/junnythemarksman/CVE-2024-24590)
- [sviim/ClearML-CVE-2024-24590-RCE](https://github.com/sviim/ClearML-CVE-2024-24590-RCE)
- [Bigb972003/cve-2024-24590](https://github.com/Bigb972003/cve-2024-24590)
-- [j3r1ch0123/CVE-2024-24590](https://github.com/j3r1ch0123/CVE-2024-24590)
-
-### CVE-2024-24684 (2024-05-28)
-
-Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the header parsing occuring while processing an `.off` file via the `readOFF` function. \r\n\r\n\r\nWe can see above that at [0] a stack-based buffer called `comment` is defined with an hardcoded size of `1000 bytes`. The call to `fscanf` at [1] is unsafe and if the first line of the header of the `.off` files is longer than 1000 bytes it will overflow the `header` buffer.
-
-
-- [SpiralBL0CK/CVE-2024-24684](https://github.com/SpiralBL0CK/CVE-2024-24684)
-
-### CVE-2024-24685 (2024-05-28)
-
-Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the vertex section of an `.off` file processed via the `readOFF` function.
-
-
-- [SpiralBL0CK/CVE-2024-24685](https://github.com/SpiralBL0CK/CVE-2024-24685)
-
-### CVE-2024-24686 (2024-05-28)
-
-Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the faces section of an `.off` file processed via the `readOFF` function.
-
-
-- [SpiralBL0CK/CVE-2024-24686](https://github.com/SpiralBL0CK/CVE-2024-24686)
-
-### CVE-2024-24725 (2024-03-23)
-
-Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/import_run.php&type=externalAssessment&step=4 URI.
-
-
-- [MelkorW/CVE-2024-24725-PoC](https://github.com/MelkorW/CVE-2024-24725-PoC)
### CVE-2024-24760 (2024-02-02)
@@ -19446,7 +19085,6 @@
- [AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-](https://github.com/AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-)
- [geniuszly/CVE-2024-24919](https://github.com/geniuszly/CVE-2024-24919)
- [voidbroker/CVE-2024-24919](https://github.com/voidbroker/CVE-2024-24919)
-- [sar-3mar/CVE-2024-24919_POC](https://github.com/sar-3mar/CVE-2024-24919_POC)
- [NingXin2002/Check-Point_poc](https://github.com/NingXin2002/Check-Point_poc)
- [hashdr1ft/SOC_287](https://github.com/hashdr1ft/SOC_287)
- [funixone/CVE-2024-24919---Exploit-Script](https://github.com/funixone/CVE-2024-24919---Exploit-Script)
@@ -19726,13 +19364,6 @@
- [usutani/study-turbolinks-link](https://github.com/usutani/study-turbolinks-link)
- [gmo-ierae/CVE-2024-26144-test](https://github.com/gmo-ierae/CVE-2024-26144-test)
-### CVE-2024-26160 (2024-03-12)
-
-Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
-
-
-- [CrackerCat/CVE-2024-26160](https://github.com/CrackerCat/CVE-2024-26160)
-
### CVE-2024-26169 (2024-03-12)
Windows Error Reporting Service Elevation of Privilege Vulnerability
@@ -19757,7 +19388,6 @@
- [apkc/CVE-2024-26229-BOF](https://github.com/apkc/CVE-2024-26229-BOF)
- [team-MineDEV/CVE-2024-26229](https://github.com/team-MineDEV/CVE-2024-26229)
- [Cracked5pider/eop24-26229](https://github.com/Cracked5pider/eop24-26229)
-- [mqxmm/CVE-2024-26229](https://github.com/mqxmm/CVE-2024-26229)
- [vettrivel007/CVE-2024-26229](https://github.com/vettrivel007/CVE-2024-26229)
- [0xGunrunner/CVE-2024-26229-BOF](https://github.com/0xGunrunner/CVE-2024-26229-BOF)
@@ -19769,13 +19399,6 @@
- [kiwids0220/CVE-2024-26230](https://github.com/kiwids0220/CVE-2024-26230)
- [Wa1nut4/CVE-2024-26230](https://github.com/Wa1nut4/CVE-2024-26230)
-### CVE-2024-26304 (2024-05-01)
-
-There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. \n\n
-
-
-- [X-Projetion/CVE-2024-26304-RCE-exploit](https://github.com/X-Projetion/CVE-2024-26304-RCE-exploit)
-
### CVE-2024-26308 (2024-02-19)
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.\n\nUsers are recommended to upgrade to version 1.26, which fixes the issue.
@@ -19888,8 +19511,6 @@
- [Stuub/RCity-CVE-2024-27198](https://github.com/Stuub/RCity-CVE-2024-27198)
- [HPT-Intern-Task-Submission/CVE-2024-27198](https://github.com/HPT-Intern-Task-Submission/CVE-2024-27198)
- [jrbH4CK/CVE-2024-27198](https://github.com/jrbH4CK/CVE-2024-27198)
-- [geniuszly/CVE-2024-27198](https://github.com/geniuszly/CVE-2024-27198)
-- [Cythonic1/CVE-2024-27198_POC](https://github.com/Cythonic1/CVE-2024-27198_POC)
- [ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability](https://github.com/ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability)
- [EynaExp/CVE-2024-27198-POC](https://github.com/EynaExp/CVE-2024-27198-POC)
- [cmpnn-romain/CVE-2024-27198_Lab](https://github.com/cmpnn-romain/CVE-2024-27198_Lab)
@@ -19969,7 +19590,6 @@
- [chsxthwik/CVE-2024-27564](https://github.com/chsxthwik/CVE-2024-27564)
-- [chaudhrymuhammadtayab/SSRF-Exploit-CVE-2024-27564](https://github.com/chaudhrymuhammadtayab/SSRF-Exploit-CVE-2024-27564)
### CVE-2024-27619 (2024-03-29)
@@ -20075,8 +19695,6 @@
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0.
-- [gh-ost00/CVE-2024-27954](https://github.com/gh-ost00/CVE-2024-27954)
-- [chsxthwik/CVE-2024-27954](https://github.com/chsxthwik/CVE-2024-27954)
- [r0otk3r/CVE-2024-27954](https://github.com/r0otk3r/CVE-2024-27954)
### CVE-2024-27956 (2024-03-21)
@@ -20141,7 +19759,6 @@
- [akabe1/Graver](https://github.com/akabe1/Graver)
- [gunzf0x/Grav-CMS-RCE-Authenticated](https://github.com/gunzf0x/Grav-CMS-RCE-Authenticated)
-- [geniuszly/GenGravSSTIExploit](https://github.com/geniuszly/GenGravSSTIExploit)
### CVE-2024-28157 (2024-03-06)
@@ -20276,13 +19893,6 @@
- [HussainFathy/CVE-2024-28999](https://github.com/HussainFathy/CVE-2024-28999)
-### CVE-2024-29050 (2024-04-09)
-
-Windows Cryptographic Services Remote Code Execution Vulnerability
-
-
-- [Akrachli/CVE-2024-29050](https://github.com/Akrachli/CVE-2024-29050)
-
### CVE-2024-29059 (2024-03-22)
.NET Framework Information Disclosure Vulnerability
@@ -20453,7 +20063,6 @@
- [NanoWraith/CVE-2024-29973](https://github.com/NanoWraith/CVE-2024-29973)
- [p0et08/CVE-2024-29973](https://github.com/p0et08/CVE-2024-29973)
- [RevoltSecurities/CVE-2024-29973](https://github.com/RevoltSecurities/CVE-2024-29973)
-- [voidbroker/CVE-2024-29973](https://github.com/voidbroker/CVE-2024-29973)
### CVE-2024-29988 (2024-04-09)
@@ -20479,13 +20088,6 @@
- [fortra/CVE-2024-30051](https://github.com/fortra/CVE-2024-30051)
- [devianntsec/CVE-2024-30051](https://github.com/devianntsec/CVE-2024-30051)
-### CVE-2024-30052 (2024-06-11)
-
-Visual Studio Remote Code Execution Vulnerability
-
-
-- [ynwarcs/CVE-2024-30052](https://github.com/ynwarcs/CVE-2024-30052)
-
### CVE-2024-30056 (2024-05-25)
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
@@ -20515,13 +20117,6 @@
- [ramzihafiz/cve-2024-30088-binary](https://github.com/ramzihafiz/cve-2024-30088-binary)
- [repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit](https://github.com/repo4Chu/CVE-2024-30088__Windows-TOCTOU-exploit)
-### CVE-2024-30090 (2024-06-11)
-
-Microsoft Streaming Service Elevation of Privilege Vulnerability
-
-
-- [Dor00tkit/CVE-2024-30090](https://github.com/Dor00tkit/CVE-2024-30090)
-
### CVE-2024-30167 (2026-05-08)
/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter.
@@ -21000,7 +20595,6 @@
- [Stuub/CVE-2024-32640-SQLI-MuraCMS](https://github.com/Stuub/CVE-2024-32640-SQLI-MuraCMS)
- [0xYumeko/CVE-2024-32640-SQLI-MuraCMS](https://github.com/0xYumeko/CVE-2024-32640-SQLI-MuraCMS)
- [sammings/CVE-2024-32640](https://github.com/sammings/CVE-2024-32640)
-- [pizza-power/CVE-2024-32640](https://github.com/pizza-power/CVE-2024-32640)
### CVE-2024-32651 (2024-04-25)
@@ -21060,13 +20654,6 @@
- [paragbagul111/CVE-2024-33210](https://github.com/paragbagul111/CVE-2024-33210)
-### CVE-2024-33231 (2024-11-18)
-
-Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component.
-
-
-- [fdzdev/CVE-2024-33231](https://github.com/fdzdev/CVE-2024-33231)
-
### CVE-2024-33297 (2025-01-10)
Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function
@@ -21208,7 +20795,6 @@
- [wubinworks/magento2-cosmic-sting-patch](https://github.com/wubinworks/magento2-cosmic-sting-patch)
- [EQSTLab/CVE-2024-34102](https://github.com/EQSTLab/CVE-2024-34102)
- [dream434/CVE-2024-34102](https://github.com/dream434/CVE-2024-34102)
-- [bka/magento-cve-2024-34102-exploit-cosmicstring](https://github.com/bka/magento-cve-2024-34102-exploit-cosmicstring)
- [wubinworks/magento2-encryption-key-manager-cli](https://github.com/wubinworks/magento2-encryption-key-manager-cli)
- [mksundaram69/CVE-2024-34102](https://github.com/mksundaram69/CVE-2024-34102)
- [Koray123-debug/CVE-2024-34102](https://github.com/Koray123-debug/CVE-2024-34102)
@@ -21435,13 +21021,6 @@
- [0xDTC/Prestashop-CVE-2024-34716](https://github.com/0xDTC/Prestashop-CVE-2024-34716)
- [Pallangyo98/Trickster-HTB](https://github.com/Pallangyo98/Trickster-HTB)
-### CVE-2024-34739 (2024-08-15)
-
-In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
-
-
-- [uthrasri/CVE-2024-34739](https://github.com/uthrasri/CVE-2024-34739)
-
### CVE-2024-34740 (2024-08-15)
In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
@@ -21449,13 +21028,6 @@
- [michalbednarski/AbxOverflow](https://github.com/michalbednarski/AbxOverflow)
-### CVE-2024-34741 (2024-08-15)
-
-In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
-
-
-- [uthrasri/CVE-2024-34741](https://github.com/uthrasri/CVE-2024-34741)
-
### CVE-2024-34831 (2024-09-10)
cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component.
@@ -21491,13 +21063,6 @@
- [laskdjlaskdj12/CVE-2024-35106-POC](https://github.com/laskdjlaskdj12/CVE-2024-35106-POC)
-### CVE-2024-35133 (2024-08-29)
-
-IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
-
-
-- [Ozozuz/IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133](https://github.com/Ozozuz/IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133)
-
### CVE-2024-35176 (2024-05-16)
REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.
@@ -21524,8 +21089,6 @@
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
-- [CrackerCat/CVE-2024-35250](https://github.com/CrackerCat/CVE-2024-35250)
-- [ro0tmylove/CVE-2024-35250-BOF](https://github.com/ro0tmylove/CVE-2024-35250-BOF)
- [yinsel/CVE-2024-35250-BOF](https://github.com/yinsel/CVE-2024-35250-BOF)
- [0xROOTPLS/GiveMeKernel](https://github.com/0xROOTPLS/GiveMeKernel)
- [xvalegendary/HVCIPwned](https://github.com/xvalegendary/HVCIPwned)
@@ -21586,13 +21149,6 @@
- [cyberaz0r/Typecho-Multiple-Vulnerabilities](https://github.com/cyberaz0r/Typecho-Multiple-Vulnerabilities)
-### CVE-2024-35584 (2024-10-15)
-
-SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from "X-Forwarded-For" header and appends it to a SQL INSERT statement directly, leading to SQL Injection.
-
-
-- [whwhwh96/CVE-2024-35584](https://github.com/whwhwh96/CVE-2024-35584)
-
### CVE-2024-36039 (2024-05-21)
PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict.
@@ -21637,7 +21193,6 @@
- [justin-p/geoexplorer](https://github.com/justin-p/geoexplorer)
- [daniellowrie/CVE-2024-36401-PoC](https://github.com/daniellowrie/CVE-2024-36401-PoC)
- [punitdarji/GeoServer-CVE-2024-36401](https://github.com/punitdarji/GeoServer-CVE-2024-36401)
-- [kkhackz0013/CVE-2024-36401](https://github.com/kkhackz0013/CVE-2024-36401)
- [0x0d3ad/CVE-2024-36401](https://github.com/0x0d3ad/CVE-2024-36401)
- [funnyDog896/CVE-2024-36401-WoodpeckerPlugin](https://github.com/funnyDog896/CVE-2024-36401-WoodpeckerPlugin)
- [whitebear-ch/GeoServerExploit](https://github.com/whitebear-ch/GeoServerExploit)
@@ -21703,13 +21258,6 @@
- [IvanGlinkin/CVE-2024-36821](https://github.com/IvanGlinkin/CVE-2024-36821)
-### CVE-2024-36823 (2024-06-06)
-
-The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.
-
-
-- [JAckLosingHeart/CVE-2024-36823-POC](https://github.com/JAckLosingHeart/CVE-2024-36823-POC)
-
### CVE-2024-36837 (2024-06-05)
SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file.
@@ -21848,7 +21396,6 @@
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes.
-- [bartfroklage/CVE-2024-37383-POC](https://github.com/bartfroklage/CVE-2024-37383-POC)
- [amirzargham/CVE-2024-37383-exploit](https://github.com/amirzargham/CVE-2024-37383-exploit)
- [hyungin0505/CVE-2024-37383_PoC](https://github.com/hyungin0505/CVE-2024-37383_PoC)
@@ -21952,13 +21499,6 @@
- [hnytgl/CVE-2024-38036](https://github.com/hnytgl/CVE-2024-38036)
-### CVE-2024-38041 (2024-07-09)
-
-Windows Kernel Information Disclosure Vulnerability
-
-
-- [dgkim-dong/CVE-2024-38041](https://github.com/dgkim-dong/CVE-2024-38041)
-
### CVE-2024-38063 (2024-08-13)
Windows TCP/IP Remote Code Execution Vulnerability
@@ -21982,10 +21522,6 @@
- [FrancescoDiSalesGithub/quick-fix-cve-2024-38063](https://github.com/FrancescoDiSalesGithub/quick-fix-cve-2024-38063)
- [Faizan-Khanx/CVE-2024-38063](https://github.com/Faizan-Khanx/CVE-2024-38063)
- [ArenaldyP/CVE-2024-38063-Medium](https://github.com/ArenaldyP/CVE-2024-38063-Medium)
-- [becrevex/CVE-2024-38063](https://github.com/becrevex/CVE-2024-38063)
-- [idkwastaken/CVE-2024-38063](https://github.com/idkwastaken/CVE-2024-38063)
-- [thanawee321/CVE-2024-38063](https://github.com/thanawee321/CVE-2024-38063)
-- [AliHj98/cve-2024-38063-Anonyvader](https://github.com/AliHj98/cve-2024-38063-Anonyvader)
- [Dragkob/CVE-2024-38063](https://github.com/Dragkob/CVE-2024-38063)
- [fredagsguf/Windows-CVE-2024-38063](https://github.com/fredagsguf/Windows-CVE-2024-38063)
- [jip-0-0-0-0-0/CVE-2024-38063-scanner](https://github.com/jip-0-0-0-0-0/CVE-2024-38063-scanner)
@@ -22012,7 +21548,6 @@
- [atlassion/CVE-2024-38077-check](https://github.com/atlassion/CVE-2024-38077-check)
- [BBD-YZZ/fyne-gui](https://github.com/BBD-YZZ/fyne-gui)
- [Destiny0991/check_38077](https://github.com/Destiny0991/check_38077)
-- [mrmtwoj/CVE-2024-38077](https://github.com/mrmtwoj/CVE-2024-38077)
- [Accord96/CVE-2024-38077-POC](https://github.com/Accord96/CVE-2024-38077-POC)
- [Ermensonx/CVE-2024-38077-MadLicense-exploit](https://github.com/Ermensonx/CVE-2024-38077-MadLicense-exploit)
@@ -22030,13 +21565,6 @@
- [BunBunCodes/CPSC253_CybersecurityFinalProjectReports](https://github.com/BunBunCodes/CPSC253_CybersecurityFinalProjectReports)
-### CVE-2024-38124 (2024-10-08)
-
-Windows Netlogon Elevation of Privilege Vulnerability
-
-
-- [tadash10/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468](https://github.com/tadash10/Detailed-Analysis-and-Mitigation-Strategies-for-CVE-2024-38124-and-CVE-2024-43468)
-
### CVE-2024-38127 (2024-08-13)
Windows Hyper-V Elevation of Privilege Vulnerability
@@ -22106,7 +21634,6 @@
- [Abdurahmon3236/CVE-2024-38472](https://github.com/Abdurahmon3236/CVE-2024-38472)
-- [mrmtwoj/apache-vulnerability-testing](https://github.com/mrmtwoj/apache-vulnerability-testing)
### CVE-2024-38473 (2024-07-01)
@@ -22162,7 +21689,6 @@
- [startsw1th/cve-2024-38816-demo](https://github.com/startsw1th/cve-2024-38816-demo)
- [WULINPIN/CVE-2024-38816-PoC](https://github.com/WULINPIN/CVE-2024-38816-PoC)
-- [Galaxy-system/cve-2024-38816](https://github.com/Galaxy-system/cve-2024-38816)
- [Anthony1078/App-vulnerable](https://github.com/Anthony1078/App-vulnerable)
- [jaloon/spring-webmvc5](https://github.com/jaloon/spring-webmvc5)
@@ -22188,7 +21714,6 @@
Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances.\n\nFor this to impact an application, all of the following must be true:\n\n * It must be a WebFlux application\n * It must be using Spring's static resources support\n * It must have a non-permitAll authorization rule applied to the static resources support
-- [mouadk/cve-2024-38821](https://github.com/mouadk/cve-2024-38821)
- [masa42/CVE-2024-38821-POC](https://github.com/masa42/CVE-2024-38821-POC)
### CVE-2024-38828 (2024-11-18)
@@ -22268,7 +21793,6 @@
An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a crafted HTTP request.
-- [Marven11/CVE-2024-39205-Pyload-RCE](https://github.com/Marven11/CVE-2024-39205-Pyload-RCE)
- [btar1gan/exploit_CVE-2024-39205](https://github.com/btar1gan/exploit_CVE-2024-39205)
### CVE-2024-39210 (2024-07-05)
@@ -22488,13 +22012,6 @@
- [SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN](https://github.com/SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN)
-### CVE-2024-40443 (2024-11-13)
-
-SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php
-
-
-- [Yuma-Tsushima07/CVE-2024-40443](https://github.com/Yuma-Tsushima07/CVE-2024-40443)
-
### CVE-2024-40445 (2025-04-22)
A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths.
@@ -22509,13 +22026,6 @@
- [BwithE/CVE-2024-40453](https://github.com/BwithE/CVE-2024-40453)
-### CVE-2024-40457 (2024-09-12)
-
-No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior.
-
-
-- [jeppojeps/CVE-2024-40457-PoC](https://github.com/jeppojeps/CVE-2024-40457-PoC)
-
### CVE-2024-40492 (2024-07-17)
Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function.
@@ -22606,7 +22116,6 @@
- [watchtowrlabs/CVE-2024-40711](https://github.com/watchtowrlabs/CVE-2024-40711)
-- [realstatus/CVE-2024-40711-Exp](https://github.com/realstatus/CVE-2024-40711-Exp)
### CVE-2024-40725 (2024-07-18)
@@ -22660,13 +22169,6 @@
- [artemy-ccrsky/CVE-2024-41276](https://github.com/artemy-ccrsky/CVE-2024-41276)
-### CVE-2024-41290 (2024-10-02)
-
-FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.
-
-
-- [paragbagul111/CVE-2024-41290](https://github.com/paragbagul111/CVE-2024-41290)
-
### CVE-2024-41301
- [patrickdeanramos/CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting](https://github.com/patrickdeanramos/CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting)
@@ -23003,13 +22505,6 @@
- [ive57/yasa-cve-2024-43202](https://github.com/ive57/yasa-cve-2024-43202)
-### CVE-2024-43363 (2024-10-07)
-
-Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious hostname containing php code and repeat the installation process (completing only step 5 of the installation process is enough, no need to complete the steps before or after it) to use a php file as the cacti log file. After having the malicious hostname end up in the logs (log poisoning), one can simply go to the log file url to execute commands to achieve RCE. This issue has been addressed in version 1.2.28 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
-
-
-- [p33d/CVE-2024-43363](https://github.com/p33d/CVE-2024-43363)
-
### CVE-2024-43400 (2024-08-19)
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible for a user without Script or Programming rights to craft a URL pointing to a page with arbitrary JavaScript. This requires social engineer to trick a user to follow the URL. This has been patched in XWiki 14.10.21, 15.5.5, 15.10.6 and 16.0.0.
@@ -23101,13 +22596,6 @@
- [RandomRobbieBF/CVE-2024-43919](https://github.com/RandomRobbieBF/CVE-2024-43919)
-### CVE-2024-43965 (2024-08-29)
-
-Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4.
-
-
-- [RandomRobbieBF/CVE-2024-43965](https://github.com/RandomRobbieBF/CVE-2024-43965)
-
### CVE-2024-43998 (2024-11-01)
Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n/a through 1.0.3.
@@ -23124,7 +22612,6 @@
- [absholi7ly/CVE-2024-44000-LiteSpeed-Cache](https://github.com/absholi7ly/CVE-2024-44000-LiteSpeed-Cache)
- [gbrsh/CVE-2024-44000](https://github.com/gbrsh/CVE-2024-44000)
- [ifqygazhar/CVE-2024-44000-LiteSpeed-Cache](https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache)
-- [geniuszly/CVE-2024-44000](https://github.com/geniuszly/CVE-2024-44000)
### CVE-2024-44083 (2024-08-19)
@@ -23141,19 +22628,11 @@
- [yo-yo-yo-jbo/hm-surf](https://github.com/yo-yo-yo-jbo/hm-surf)
-### CVE-2024-44193 (2024-10-02)
-
-A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges.
-
-
-- [mbog14/CVE-2024-44193](https://github.com/mbog14/CVE-2024-44193)
-
### CVE-2024-44258 (2024-10-28)
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
-- [ifpdz/CVE-2024-44258](https://github.com/ifpdz/CVE-2024-44258)
- [missaels235/POC-CVE-2024-44258-Py](https://github.com/missaels235/POC-CVE-2024-44258-Py)
- [fuzzlove/SparstanBoogie-CVE-2024-44258](https://github.com/fuzzlove/SparstanBoogie-CVE-2024-44258)
@@ -23178,13 +22657,6 @@
- [chessredoffsec/CVE-2024-44313](https://github.com/chessredoffsec/CVE-2024-44313)
-### CVE-2024-44337 (2024-10-15)
-
-The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem.
-
-
-- [Brinmon/CVE-2024-44337](https://github.com/Brinmon/CVE-2024-44337)
-
### CVE-2024-44346
- [Shauryae1337/CVE-2024-44346](https://github.com/Shauryae1337/CVE-2024-44346)
- [sahil3276/CVE-2024-44346](https://github.com/sahil3276/CVE-2024-44346)
@@ -23234,13 +22706,6 @@
- [merbinr/CVE-2024-44623](https://github.com/merbinr/CVE-2024-44623)
-### CVE-2024-44625 (2024-11-15)
-
-Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.
-
-
-- [Fysac/CVE-2024-44625](https://github.com/Fysac/CVE-2024-44625)
-
### CVE-2024-44762 (2024-10-16)
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
@@ -23397,13 +22862,6 @@
- [SpiralBL0CK/CVE-2024-45383](https://github.com/SpiralBL0CK/CVE-2024-45383)
-### CVE-2024-45409 (2024-09-10)
-
-The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.
-
-
-- [synacktiv/CVE-2024-45409](https://github.com/synacktiv/CVE-2024-45409)
-
### CVE-2024-45410 (2024-09-19)
Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it should not be possible to remove or modify these headers. Since the application trusts the value of these headers, security implications might arise, if they can be modified. For HTTP/1.1, however, it was found that some of theses custom headers can indeed be removed and in certain cases manipulated. The attack relies on the HTTP/1.1 behavior, that headers can be defined as hop-by-hop via the HTTP Connection header. This issue has been addressed in release versions 2.11.9 and 3.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
@@ -23532,13 +22990,6 @@
- [vidura2/CVE-2024-46451](https://github.com/vidura2/CVE-2024-46451)
-### CVE-2024-46483 (2024-10-22)
-
-Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.
-
-
-- [kn32/cve-2024-46483](https://github.com/kn32/cve-2024-46483)
-
### CVE-2024-46506 (2025-05-13)
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
@@ -23575,13 +23026,6 @@
- [d4lyw/CVE-2024-46627](https://github.com/d4lyw/CVE-2024-46627)
-### CVE-2024-46635 (2024-09-30)
-
-An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter.
-
-
-- [h1thub/CVE-2024-46635](https://github.com/h1thub/CVE-2024-46635)
-
### CVE-2024-46636 (2026-04-27)
NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter
@@ -23589,13 +23033,6 @@
- [NU1L0/CVE-2024-46636-SQLi-MODAPS](https://github.com/NU1L0/CVE-2024-46636-SQLi-MODAPS)
-### CVE-2024-46658 (2024-10-03)
-
-Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability.
-
-
-- [jackalkarlos/CVE-2024-46658](https://github.com/jackalkarlos/CVE-2024-46658)
-
### CVE-2024-46878 (2026-03-23)
A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.
@@ -23699,11 +23136,6 @@
- [aytackalinci/CVE-2024-47176](https://github.com/aytackalinci/CVE-2024-47176)
- [lkarlslund/jugular](https://github.com/lkarlslund/jugular)
- [nma-io/CVE-2024-47176](https://github.com/nma-io/CVE-2024-47176)
-- [l0n3m4n/CVE-2024-47176](https://github.com/l0n3m4n/CVE-2024-47176)
-- [gumerzzzindo/CVE-2024-47176](https://github.com/gumerzzzindo/CVE-2024-47176)
-- [MalwareTech/CVE-2024-47176-Scanner](https://github.com/MalwareTech/CVE-2024-47176-Scanner)
-- [gianlu111/CUPS-CVE-2024-47176](https://github.com/gianlu111/CUPS-CVE-2024-47176)
-- [0x7556/CVE-2024-47176](https://github.com/0x7556/CVE-2024-47176)
- [deancooreman/CVE-2024-47176](https://github.com/deancooreman/CVE-2024-47176)
- [jimi2x/dirtycups](https://github.com/jimi2x/dirtycups)
@@ -23726,7 +23158,6 @@
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
-- [watchtowrlabs/Fortijump-Exploit-CVE-2024-47575](https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575)
- [revanslbw/CVE-2024-47575-POC](https://github.com/revanslbw/CVE-2024-47575-POC)
- [AnnnNix/CVE-2024-47575](https://github.com/AnnnNix/CVE-2024-47575)
@@ -23780,20 +23211,6 @@
- [GCatt-AS/CVE-2024-48197](https://github.com/GCatt-AS/CVE-2024-48197)
-### CVE-2024-48208 (2024-10-24)
-
-pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.
-
-
-- [rohilchaudhry/CVE-2024-48208](https://github.com/rohilchaudhry/CVE-2024-48208)
-
-### CVE-2024-48217 (2024-11-01)
-
-An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.
-
-
-- [ajrielrm/CVE-2024-48217](https://github.com/ajrielrm/CVE-2024-48217)
-
### CVE-2024-48245 (2025-01-07)
Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which are present in /newvehicle.php and /newdriver.php.
@@ -23822,23 +23239,6 @@
- [jisi-001/CVE-2024-48307POC](https://github.com/jisi-001/CVE-2024-48307POC)
-### CVE-2024-48322 (2024-11-11)
-
-UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.
-
-
-- [trqt/CVE-2024-48322](https://github.com/trqt/CVE-2024-48322)
-
-### CVE-2024-48325 (2024-11-06)
-
-Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicao_id" parameter in "/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicao_id" is not properly sanitized, allowing an unauthenticated remote attacker to inject malicious SQL commands.
-
-
-- [osvaldotenorio/cve-2024-48325](https://github.com/osvaldotenorio/cve-2024-48325)
-
-### CVE-2024-48326
-- [fabiobsj/CVE-2024-48326](https://github.com/fabiobsj/CVE-2024-48326)
-
### CVE-2024-48336 (2024-11-04)
The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privileges to silently execute arbitrary code in the Magisk app and escalate privileges to root via a crafted package, aka Bug #8279. User interaction is not needed for exploitation.
@@ -23846,41 +23246,6 @@
- [canyie/MagiskEoP](https://github.com/canyie/MagiskEoP)
-### CVE-2024-48359 (2024-10-31)
-
-Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.
-
-
-- [OpenXP-Research/CVE-2024-48359](https://github.com/OpenXP-Research/CVE-2024-48359)
-
-### CVE-2024-48360 (2024-10-31)
-
-Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.
-
-
-- [OpenXP-Research/CVE-2024-48360](https://github.com/OpenXP-Research/CVE-2024-48360)
-
-### CVE-2024-48392 (2025-01-21)
-
-OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lack of input validation, which could lead to account takeover.
-
-
-- [Renzusclarke/CVE-2024-48392-PoC](https://github.com/Renzusclarke/CVE-2024-48392-PoC)
-
-### CVE-2024-48415 (2024-10-22)
-
-itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functionality on the Borrowers page.
-
-
-- [khaliquesX/CVE-2024-48415](https://github.com/khaliquesX/CVE-2024-48415)
-
-### CVE-2024-48427 (2024-10-24)
-
-A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manage_service&id
-
-
-- [vighneshnair7/CVE-2024-48427](https://github.com/vighneshnair7/CVE-2024-48427)
-
### CVE-2024-48510 (2024-11-13)
Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
@@ -23916,20 +23281,6 @@
- [surajhacx/HelakuruV.1.1-DLLHijack](https://github.com/surajhacx/HelakuruV.1.1-DLLHijack)
-### CVE-2024-48644 (2024-10-22)
-
-Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_23031701) allows remote attackers to determine valid user accounts via login attempts. This can lead to the enumeration of user accounts and potentially facilitate other attacks, such as brute-forcing of passwords. The vulnerability arises from the application responding differently to login attempts with valid and invalid usernames.
-
-
-- [rosembergpro/CVE-2024-48644](https://github.com/rosembergpro/CVE-2024-48644)
-
-### CVE-2024-48652 (2024-10-22)
-
-Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.
-
-
-- [paragbagul111/CVE-2024-48652](https://github.com/paragbagul111/CVE-2024-48652)
-
### CVE-2024-48705 (2025-09-02)
Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "set_sys_adm" function of the "adm.cgi" binary, and is due to improper santization of the user provided "newpass" field
@@ -23956,20 +23307,6 @@
- [Mitchellzhou1/CVE-2024-48910-PoC](https://github.com/Mitchellzhou1/CVE-2024-48910-PoC)
- [Alex-Acero-Security/CVE-2024-48910-POC](https://github.com/Alex-Acero-Security/CVE-2024-48910-POC)
-### CVE-2024-48914 (2024-10-15)
-
-Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data such as configuration files, environment variables, and other critical data stored on the server. In the same code path is an additional vector for crashing the server via a malformed URI. Patches are available in versions 3.0.5 and 2.3.3. Some workarounds are also available. One may use object storage rather than the local file system, e.g. MinIO or S3, or define middleware which detects and blocks requests with urls containing `/../`.
-
-
-- [EQSTLab/CVE-2024-48914](https://github.com/EQSTLab/CVE-2024-48914)
-
-### CVE-2024-48955 (2024-10-29)
-
-Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the functionalities menus, the return of this call is not encrypted and as the system does not validate the session authorization, an attacker can copy the content of the browser of a user with greater privileges having access to the functionalities of the user that the code was copied.
-
-
-- [BrotherOfJhonny/CVE-2024-48955_Overview](https://github.com/BrotherOfJhonny/CVE-2024-48955_Overview)
-
### CVE-2024-48990 (2024-11-19)
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
@@ -24052,16 +23389,8 @@
Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through <= 1.0.0.
-- [RandomRobbieBF/CVE-2024-49328](https://github.com/RandomRobbieBF/CVE-2024-49328)
- [Nxploited/CVE-2024-49328-exploit](https://github.com/Nxploited/CVE-2024-49328-exploit)
-### CVE-2024-49368 (2024-10-21)
-
-Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue.
-
-
-- [Aashay221999/CVE-2024-49368](https://github.com/Aashay221999/CVE-2024-49368)
-
### CVE-2024-49369 (2024-11-12)
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12.
@@ -24076,13 +23405,6 @@
- [OHDUDEOKNICE/CVE-2024-49379](https://github.com/OHDUDEOKNICE/CVE-2024-49379)
-### CVE-2024-49607 (2024-10-20)
-
-Unrestricted Upload of File with Dangerous Type vulnerability in redhopit WP Dropbox Dropins wp-dropbox-dropins allows Upload a Web Shell to a Web Server.This issue affects WP Dropbox Dropins: from n/a through <= 1.0.
-
-
-- [RandomRobbieBF/CVE-2024-49607](https://github.com/RandomRobbieBF/CVE-2024-49607)
-
### CVE-2024-49653 (2024-10-23)
Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through <= 1.2.
@@ -24097,13 +23419,6 @@
- [Nxploited/CVE-2024-49668](https://github.com/Nxploited/CVE-2024-49668)
-### CVE-2024-49681 (2024-10-24)
-
-Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through <= 1.0.9.
-
-
-- [RandomRobbieBF/CVE-2024-49681](https://github.com/RandomRobbieBF/CVE-2024-49681)
-
### CVE-2024-49699 (2025-01-21)
Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through <= 4.1.3.
@@ -24128,27 +23443,6 @@
- [sastraadiwiguna-purpleeliteteaming/LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-](https://github.com/sastraadiwiguna-purpleeliteteaming/LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-)
-### CVE-2024-50251 (2024-11-09)
-
-In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_payload: sanitize offset and length before calling skb_checksum()\n\nIf access to offset + length is larger than the skbuff length, then\nskb_checksum() triggers BUG_ON().\n\nskb_checksum() internally subtracts the length parameter while iterating\nover skbuff, BUG_ON(len) at the end of it checks that the expected\nlength to be included in the checksum calculation is fully consumed.
-
-
-- [slavin-ayu/CVE-2024-50251-PoC](https://github.com/slavin-ayu/CVE-2024-50251-PoC)
-
-### CVE-2024-50335 (2024-11-05)
-
-SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting (XSS), allowing an attacker to inject malicious JavaScript code. This can be exploited to steal CSRF tokens and perform unauthorized actions, such as creating new administrative users without proper authentication. The vulnerability arises due to insufficient input validation and sanitization of the Publish Key field within the SuiteCRM application. When an attacker injects a malicious script, it gets executed within the context of an authenticated user's session. The injected script (o.js) then leverages the captured CSRF token to forge requests that create new administrative users, effectively compromising the integrity and security of the CRM instance. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
-
-
-- [shellkraft/CVE-2024-50335](https://github.com/shellkraft/CVE-2024-50335)
-
-### CVE-2024-50340 (2024-11-06)
-
-symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the `register_argv_argc` php directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by the kernel when handling the request. As of versions 5.4.46, 6.4.14, and 7.1.7 the `SymfonyRuntime` now ignores the `argv` values for non-SAPI PHP runtimes. All users are advised to upgrade. There are no known workarounds for this vulnerability.
-
-
-- [Nyamort/CVE-2024-50340](https://github.com/Nyamort/CVE-2024-50340)
-
### CVE-2024-50379 (2024-12-17)
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
@@ -24182,90 +23476,6 @@
- [C411e/CVE-2024-50404](https://github.com/C411e/CVE-2024-50404)
-### CVE-2024-50427 (2024-10-29)
-
-Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136.
-
-
-- [RandomRobbieBF/CVE-2024-50427](https://github.com/RandomRobbieBF/CVE-2024-50427)
-
-### CVE-2024-50450 (2024-10-28)
-
-Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through <= 1.3.3.4.
-
-
-- [RandomRobbieBF/CVE-2024-50450](https://github.com/RandomRobbieBF/CVE-2024-50450)
-
-### CVE-2024-50473 (2024-10-29)
-
-Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through <= 3.1.3.
-
-
-- [RandomRobbieBF/CVE-2024-50473](https://github.com/RandomRobbieBF/CVE-2024-50473)
-
-### CVE-2024-50475 (2024-10-29)
-
-Missing Authorization vulnerability in Scott Gamon Signup Page signup-page allows Privilege Escalation.This issue affects Signup Page: from n/a through <= 1.0.
-
-
-- [RandomRobbieBF/CVE-2024-50475](https://github.com/RandomRobbieBF/CVE-2024-50475)
-
-### CVE-2024-50476 (2024-10-29)
-
-Missing Authorization vulnerability in GRÜN Software Group GmbH GRÜN spendino Spendenformular spendino allows Privilege Escalation.This issue affects GRÜN spendino Spendenformular: from n/a through <= 1.0.1.
-
-
-- [RandomRobbieBF/CVE-2024-50476](https://github.com/RandomRobbieBF/CVE-2024-50476)
-
-### CVE-2024-50477 (2024-10-28)
-
-Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through <= 5.2.3.
-
-
-- [RandomRobbieBF/CVE-2024-50477](https://github.com/RandomRobbieBF/CVE-2024-50477)
-
-### CVE-2024-50478 (2024-10-28)
-
-Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.
-
-
-- [RandomRobbieBF/CVE-2024-50478](https://github.com/RandomRobbieBF/CVE-2024-50478)
-
-### CVE-2024-50482 (2024-10-29)
-
-Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through <= 1.0.0.
-
-
-- [RandomRobbieBF/CVE-2024-50482](https://github.com/RandomRobbieBF/CVE-2024-50482)
-
-### CVE-2024-50483 (2024-10-28)
-
-Authorization Bypass Through User-Controlled Key vulnerability in Tareq Hasan Meetup meetup allows Privilege Escalation.This issue affects Meetup: from n/a through <= 0.1.
-
-
-- [RandomRobbieBF/CVE-2024-50483](https://github.com/RandomRobbieBF/CVE-2024-50483)
-
-### CVE-2024-50485 (2024-10-29)
-
-Incorrect Privilege Assignment vulnerability in Udit Rawat Exam Matrix exam-matrix allows Privilege Escalation.This issue affects Exam Matrix: from n/a through <= 1.5.
-
-
-- [RandomRobbieBF/CVE-2024-50485](https://github.com/RandomRobbieBF/CVE-2024-50485)
-
-### CVE-2024-50488 (2024-10-28)
-
-Authentication Bypass Using an Alternate Path or Channel vulnerability in yespbs Token Login token-login allows Authentication Bypass.This issue affects Token Login: from n/a through <= 1.0.3.
-
-
-- [RandomRobbieBF/CVE-2024-50488](https://github.com/RandomRobbieBF/CVE-2024-50488)
-
-### CVE-2024-50490 (2024-10-29)
-
-Missing Authorization vulnerability in lowcage PegaPoll pegapoll allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PegaPoll: from n/a through <= 1.0.2.
-
-
-- [RandomRobbieBF/CVE-2024-50490](https://github.com/RandomRobbieBF/CVE-2024-50490)
-
### CVE-2024-50491 (2024-10-28)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through <= 1.9.9.
@@ -24280,19 +23490,11 @@
- [Nxploited/CVE-2024-50492](https://github.com/Nxploited/CVE-2024-50492)
-### CVE-2024-50493 (2024-10-29)
-
-Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation automatic-translation allows Upload a Web Shell to a Web Server.This issue affects Automatic Translation: from n/a through <= 1.0.4.
-
-
-- [RandomRobbieBF/CVE-2024-50493](https://github.com/RandomRobbieBF/CVE-2024-50493)
-
### CVE-2024-50498 (2024-10-28)
Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.
-- [RandomRobbieBF/CVE-2024-50498](https://github.com/RandomRobbieBF/CVE-2024-50498)
- [p0et08/CVE-2024-50498](https://github.com/p0et08/CVE-2024-50498)
- [Nxploited/CVE-2024-50498](https://github.com/Nxploited/CVE-2024-50498)
- [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498)
@@ -24379,13 +23581,6 @@
- [cetinpy/CVE-2024-50633](https://github.com/cetinpy/CVE-2024-50633)
-### CVE-2024-50657 (2024-11-22)
-
-An issue in Owncloud android apk v.4.3.1 allows a physically proximate attacker to escalate privileges via the PassCodeViewModel class, specifically in the checkPassCodeIsValid method
-
-
-- [SAHALLL/CVE-2024-50657](https://github.com/SAHALLL/CVE-2024-50657)
-
### CVE-2024-50677 (2024-12-06)
A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.
@@ -24407,13 +23602,6 @@
- [g3tsyst3m/CVE-2024-50804](https://github.com/g3tsyst3m/CVE-2024-50804)
-### CVE-2024-50848 (2024-11-18)
-
-An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.
-
-
-- [1mhr4b/CVE-2024-50848](https://github.com/1mhr4b/CVE-2024-50848)
-
### CVE-2024-50849 (2024-11-18)
A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code.
@@ -24435,15 +23623,6 @@
- [AbdullahAlmutawa/CVE-2024-50945](https://github.com/AbdullahAlmutawa/CVE-2024-50945)
-### CVE-2024-50961
-- [fdzdev/CVE-2024-50961](https://github.com/fdzdev/CVE-2024-50961)
-
-### CVE-2024-50962
-- [fdzdev/CVE-2024-50962](https://github.com/fdzdev/CVE-2024-50962)
-
-### CVE-2024-50964
-- [fdzdev/CVE-2024-50964](https://github.com/fdzdev/CVE-2024-50964)
-
### CVE-2024-50967 (2025-01-17)
The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.
@@ -24451,41 +23630,6 @@
- [0xByteHunter/CVE-2024-50967](https://github.com/0xByteHunter/CVE-2024-50967)
-### CVE-2024-50968 (2024-11-14)
-
-A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout.
-
-
-- [Akhlak2511/CVE-2024-50968](https://github.com/Akhlak2511/CVE-2024-50968)
-
-### CVE-2024-50969 (2024-11-13)
-
-A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter.
-
-
-- [Akhlak2511/CVE-2024-50969](https://github.com/Akhlak2511/CVE-2024-50969)
-
-### CVE-2024-50970 (2024-11-13)
-
-A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
-
-
-- [Akhlak2511/CVE-2024-50970](https://github.com/Akhlak2511/CVE-2024-50970)
-
-### CVE-2024-50971 (2024-11-13)
-
-A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter.
-
-
-- [Akhlak2511/CVE-2024-50971](https://github.com/Akhlak2511/CVE-2024-50971)
-
-### CVE-2024-50972 (2024-11-13)
-
-A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.
-
-
-- [Akhlak2511/CVE-2024-50972](https://github.com/Akhlak2511/CVE-2024-50972)
-
### CVE-2024-50986 (2024-11-15)
An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.
@@ -24493,41 +23637,6 @@
- [riftsandroses/CVE-2024-50986](https://github.com/riftsandroses/CVE-2024-50986)
-### CVE-2024-51026 (2024-11-11)
-
-The NetAdmin IAM system (version 4.0.30319) has a Cross Site Scripting (XSS) vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field.
-
-
-- [BrotherOfJhonny/CVE-2024-51026_Overview](https://github.com/BrotherOfJhonny/CVE-2024-51026_Overview)
-
-### CVE-2024-51030 (2024-11-08)
-
-A SQL injection vulnerability in manage_client.php and view_cab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database.
-
-
-- [vighneshnair7/CVE-2024-51030](https://github.com/vighneshnair7/CVE-2024-51030)
-
-### CVE-2024-51031 (2024-11-08)
-
-A Cross-site Scripting (XSS) vulnerability in manage_account.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields.
-
-
-- [vighneshnair7/CVE-2024-51031](https://github.com/vighneshnair7/CVE-2024-51031)
-
-### CVE-2024-51032 (2024-11-08)
-
-A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field.
-
-
-- [Shree-Chandragiri/CVE-2024-51032](https://github.com/Shree-Chandragiri/CVE-2024-51032)
-
-### CVE-2024-51132 (2024-11-05)
-
-An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
-
-
-- [JAckLosingHeart/CVE-2024-51132-POC](https://github.com/JAckLosingHeart/CVE-2024-51132-POC)
-
### CVE-2024-51179 (2024-11-12)
An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as the User Plane Function (UPF) and the Session Management Function (SMF), The Packet Data Unit (PDU) session establishment process.
@@ -24542,19 +23651,11 @@
- [devianntsec/CVE-2024-51324](https://github.com/devianntsec/CVE-2024-51324)
-### CVE-2024-51358 (2024-11-05)
-
-An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new application.
-
-
-- [Kov404/CVE-2024-51358](https://github.com/Kov404/CVE-2024-51358)
-
### CVE-2024-51378 (2024-10-29)
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
-- [refr4g/CVE-2024-51378](https://github.com/refr4g/CVE-2024-51378)
- [qnole000/CVE-2024-51378](https://github.com/qnole000/CVE-2024-51378)
- [rimbadirgantara/CVE-2024-51378](https://github.com/rimbadirgantara/CVE-2024-51378)
@@ -24565,16 +23666,6 @@
- [D1se0/CVE-2024-51428-PoC](https://github.com/D1se0/CVE-2024-51428-PoC)
-### CVE-2024-51430 (2024-10-31)
-
-Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component.
-
-
-- [BLACK-SCORP10/CVE-2024-51430](https://github.com/BLACK-SCORP10/CVE-2024-51430)
-
-### CVE-2024-51435
-- [bevennyamande/CVE-2024-51435](https://github.com/bevennyamande/CVE-2024-51435)
-
### CVE-2024-51442 (2025-01-08)
Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specially crafted minidlna.conf configuration file.
@@ -24597,14 +23688,6 @@
- [0xDaeras/CVE-2024-51482-POC](https://github.com/0xDaeras/CVE-2024-51482-POC)
- [mattiapertusati/htb-cctv](https://github.com/mattiapertusati/htb-cctv)
-### CVE-2024-51567 (2024-10-29)
-
-upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
-
-
-- [ajayalf/CVE-2024-51567](https://github.com/ajayalf/CVE-2024-51567)
-- [thehash007/CVE-2024-51567-RCE-EXPLOIT](https://github.com/thehash007/CVE-2024-51567-RCE-EXPLOIT)
-
### CVE-2024-51568 (2024-10-29)
CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters.
@@ -24612,20 +23695,6 @@
- [jsnv-dev/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template](https://github.com/jsnv-dev/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template)
-### CVE-2024-51665 (2024-11-04)
-
-Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1.
-
-
-- [RandomRobbieBF/CVE-2024-51665](https://github.com/RandomRobbieBF/CVE-2024-51665)
-
-### CVE-2024-51747 (2024-11-11)
-
-Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path` entry in the `project_has_files` SQLite db. Thus, an attacker who can upload a modified sqlite.db through the dedicated feature, can set arbitrary file links, by abusing path traversals. Once the modified db is uploaded and the project page is accessed, a file download can be triggered and all files, readable in the context of the Kanboard application permissions, can be downloaded. This issue has been addressed in version 1.2.42 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
-
-
-- [l20170217b/CVE-2024-51747](https://github.com/l20170217b/CVE-2024-51747)
-
### CVE-2024-51788 (2024-11-11)
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0.
@@ -24692,14 +23761,6 @@
- [iuds/-CVE-2024-52010-](https://github.com/iuds/-CVE-2024-52010-)
-### CVE-2024-52301 (2024-11-12)
-
-Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.
-
-
-- [Nyamort/CVE-2024-52301](https://github.com/Nyamort/CVE-2024-52301)
-- [martinhaunschmid/CVE-2024-52301-Research](https://github.com/martinhaunschmid/CVE-2024-52301-Research)
-
### CVE-2024-52302 (2024-11-14)
common-user-management is a robust Spring Boot application featuring user management services designed to control user access dynamically. There is a critical security vulnerability in the application endpoint /api/v1/customer/profile-picture. This endpoint allows file uploads without proper validation or restrictions, enabling attackers to upload malicious files that can lead to Remote Code Execution (RCE).
@@ -25076,13 +24137,6 @@
- [hotplugin0x01/CVE-2024-54679](https://github.com/hotplugin0x01/CVE-2024-54679)
-### CVE-2024-54756 (2025-02-20)
-
-A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file.
-
-
-- [Chainmanner/GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC](https://github.com/Chainmanner/GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC)
-
### CVE-2024-54761 (2025-01-09)
BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.
@@ -33801,7 +32855,6 @@
- [trganda/ActiveMQ-RCE](https://github.com/trganda/ActiveMQ-RCE)
-- [ImuSpirit/ActiveMQ_RCE_Pro_Max](https://github.com/ImuSpirit/ActiveMQ_RCE_Pro_Max)
- [SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ](https://github.com/SaumyajeetDas/CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ)
- [evkl1d/CVE-2023-46604](https://github.com/evkl1d/CVE-2023-46604)
- [justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp](https://github.com/justdoit-cai/CVE-2023-46604-Apache-ActiveMQ-RCE-exp)
@@ -33811,6 +32864,7 @@
- [LiritoShawshark/CVE-2023-46604_ActiveMQ_RCE_Recurrence](https://github.com/LiritoShawshark/CVE-2023-46604_ActiveMQ_RCE_Recurrence)
- [NKeshawarz/CVE-2023-46604-RCE](https://github.com/NKeshawarz/CVE-2023-46604-RCE)
- [minhangxiaohui/ActiveMQ_CVE-2023-46604](https://github.com/minhangxiaohui/ActiveMQ_CVE-2023-46604)
+- [CrackerCat/ActiveMQ_RCE_Pro_Max](https://github.com/CrackerCat/ActiveMQ_RCE_Pro_Max)
- [nitzanoligo/CVE-2023-46604-demo](https://github.com/nitzanoligo/CVE-2023-46604-demo)
- [dcm2406/CVE-Lab](https://github.com/dcm2406/CVE-Lab)
- [mrpentst/CVE-2023-46604](https://github.com/mrpentst/CVE-2023-46604)
@@ -38486,6 +37540,7 @@
- [Yowise/CVE-2022-26923](https://github.com/Yowise/CVE-2022-26923)
- [rayngnpc/CVE-2022-26923-rayng](https://github.com/rayngnpc/CVE-2022-26923-rayng)
- [Eliasdekiniweek/CVE-2022-26923](https://github.com/Eliasdekiniweek/CVE-2022-26923)
+- [victorhugomierez/CVE-2022-26923](https://github.com/victorhugomierez/CVE-2022-26923)
### CVE-2022-26927 (2022-05-10)
@@ -62870,6 +61925,13 @@
- [parzel/CVE-2018-20966](https://github.com/parzel/CVE-2018-20966)
+### CVE-2018-21268 (2020-06-25)
+
+The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.
+
+
+- [dannyEndorTest/node-vulnerable](https://github.com/dannyEndorTest/node-vulnerable)
+
### CVE-2018-25031 (2022-03-11)
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others.
@@ -65793,6 +64855,13 @@
- [Trinadh465/OpenSSL-1_0_1g_CVE-2016-0702](https://github.com/Trinadh465/OpenSSL-1_0_1g_CVE-2016-0702)
+### CVE-2016-0714 (2016-02-25)
+
+The session-persistence implementation in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 mishandles session attributes, which allows remote authenticated users to bypass intended SecurityManager restrictions and execute arbitrary code in a privileged context via a web application that places a crafted object in a session.
+
+
+- [dannyEndorTest/java-vulnerable](https://github.com/dannyEndorTest/java-vulnerable)
+
### CVE-2016-0728 (2016-02-08)
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.
@@ -69255,6 +68324,13 @@
- [bekhzod0725/perl-CVE-2013-1775](https://github.com/bekhzod0725/perl-CVE-2013-1775)
+### CVE-2013-1814 (2013-03-14)
+
+The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response.
+
+
+- [dannyEndorTest/java-vulnerable](https://github.com/dannyEndorTest/java-vulnerable)
+
### CVE-2013-1965 (2013-07-10)
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.