nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/15 19:08:53

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-16 04:08:53 +09:00
1 parent 92a0dd9237
commit e0c5bd1f60
83 files changed
+1042 -401
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2015/CVE-2015-1328.json
+33
View File
@@ -279,5 +279,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301856064,
"name": "CVE-2015-1328",
"full_name": "WhatsWrongAndWhy\/CVE-2015-1328",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2015-1328",
"description": null,
"fork": false,
"created_at": "2026-07-15T17:00:54Z",
"updated_at": "2026-07-15T17:21:58Z",
"pushed_at": "2026-07-15T17:21:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2015/CVE-2015-8550.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301860465,
"name": "CVE-2015-8550",
"full_name": "WhatsWrongAndWhy\/CVE-2015-8550",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2015-8550",
"description": null,
"fork": false,
"created_at": "2026-07-15T17:06:00Z",
"updated_at": "2026-07-15T17:07:51Z",
"pushed_at": "2026-07-15T17:07:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2016/CVE-2016-8655.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 12,
"score": 0,
"subscribers_count": 1
},
{
"id": 1301868700,
"name": "CVE-2016-8655",
"full_name": "WhatsWrongAndWhy\/CVE-2016-8655",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2016-8655",
"description": null,
"fork": false,
"created_at": "2026-07-15T17:15:32Z",
"updated_at": "2026-07-15T17:16:49Z",
"pushed_at": "2026-07-15T17:16:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2016/CVE-2016-9793.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301870594,
"name": "CVE-2016-9793",
"full_name": "WhatsWrongAndWhy\/CVE-2016-9793",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2016-9793",
"description": null,
"fork": false,
"created_at": "2026-07-15T17:17:47Z",
"updated_at": "2026-07-15T17:18:45Z",
"pushed_at": "2026-07-15T17:18:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-11882.json
+1 -1
View File
@@ -433,7 +433,7 @@
"forks": 127,
"watchers": 270,
"score": 0,
"subscribers_count": 16
"subscribers_count": 17
},
{
"id": 117234193,
2017/CVE-2017-8759.json
+1 -1
View File
@@ -233,7 +233,7 @@
"forks": 109,
"watchers": 313,
"score": 0,
"subscribers_count": 22
"subscribers_count": 23
},
{
"id": 103865283,
2018/CVE-2018-6242.json
+33
View File
@@ -203,5 +203,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1172678834,
"name": "fusee-gelee",
"full_name": "oliviaholly\/fusee-gelee",
"owner": {
"login": "oliviaholly",
"id": 71535692,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71535692?v=4",
"html_url": "https:\/\/github.com\/oliviaholly",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oliviaholly\/fusee-gelee",
"description": "An implementation of the Fusee Gelee exploit (CVE-2018-6242) for the Nintendo Switch, along with a custom payload.",
"fork": false,
"created_at": "2026-03-04T15:23:28Z",
"updated_at": "2026-07-15T17:51:44Z",
"pushed_at": "2026-03-30T13:12:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-15T11:47:39Z",
"pushed_at": "2026-07-15T11:47:28Z",
"updated_at": "2026-07-15T17:53:10Z",
"pushed_at": "2026-07-15T17:52:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-2215.json
+1 -1
View File
@@ -926,7 +926,7 @@
"description": "app that ports CVE-2019-2215 to arm32 and mounts a su binary to \/sbin with denylist + root app installer. firehose\/Magisk guide included",
"fork": false,
"created_at": "2026-06-30T10:04:00Z",
"updated_at": "2026-07-13T18:53:14Z",
"updated_at": "2026-07-15T17:32:43Z",
"pushed_at": "2026-07-13T17:27:55Z",
"stargazers_count": 10,
"watchers_count": 10,
2020/CVE-2020-1472.json
+6 -6
View File
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-07-14T05:55:03Z",
"updated_at": "2026-07-15T13:32:37Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1310,
"watchers_count": 1310,
"stargazers_count": 1311,
"watchers_count": 1311,
"has_discussions": false,
"forks_count": 281,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 281,
"watchers": 1310,
"watchers": 1311,
"score": 0,
"subscribers_count": 33
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-15T11:51:12Z",
"pushed_at": "2026-07-15T11:50:51Z",
"updated_at": "2026-07-15T17:35:38Z",
"pushed_at": "2026-07-15T17:34:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-0313.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 486862367,
"name": "frameworks_minikin_AOSP10_r33_CVE-2021-0313",
"full_name": "Satheesh575555\/frameworks_minikin_AOSP10_r33_CVE-2021-0313",
"owner": {
"login": "Satheesh575555",
"id": 102573923,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4",
"html_url": "https:\/\/github.com\/Satheesh575555",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Satheesh575555\/frameworks_minikin_AOSP10_r33_CVE-2021-0313",
"description": null,
"fork": false,
"created_at": "2022-04-29T06:30:27Z",
"updated_at": "2022-04-29T06:32:35Z",
"pushed_at": "2022-04-29T06:32:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-3129.json
-66
View File
@@ -980,71 +980,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1210511094,
"name": "CVE-2021-3129",
"full_name": "M4rrow\/CVE-2021-3129",
"owner": {
"login": "M4rrow",
"id": 276001164,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276001164?v=4",
"html_url": "https:\/\/github.com\/M4rrow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/M4rrow\/CVE-2021-3129",
"description": "CVE-2021-3129 (Laravel Ignition RCE Exploit)",
"fork": false,
"created_at": "2026-04-14T13:41:56Z",
"updated_at": "2026-07-14T12:20:10Z",
"pushed_at": "2024-10-05T05:58:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236750316,
"name": "CVE-2021-3129-EXP",
"full_name": "M4rrow\/CVE-2021-3129-EXP",
"owner": {
"login": "M4rrow",
"id": 276001164,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276001164?v=4",
"html_url": "https:\/\/github.com\/M4rrow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/M4rrow\/CVE-2021-3129-EXP",
"description": "Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)",
"fork": false,
"created_at": "2026-05-12T14:36:08Z",
"updated_at": "2026-07-14T17:48:18Z",
"pushed_at": "2026-05-11T11:44:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-15T11:53:30Z",
"pushed_at": "2026-07-15T11:53:00Z",
"updated_at": "2026-07-15T17:57:46Z",
"pushed_at": "2026-07-15T17:57:32Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-43129.json
+42
View File
@@ -0,0 +1,42 @@
[
{
"id": 480972575,
"name": "CVE-2021-43129",
"full_name": "Skotizo\/CVE-2021-43129",
"owner": {
"login": "Skotizo",
"id": 43425616,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43425616?v=4",
"html_url": "https:\/\/github.com\/Skotizo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Skotizo\/CVE-2021-43129",
"description": "Vulnerability in D2L Brightspace's Learning Management System(LMS)",
"fork": false,
"created_at": "2022-04-12T21:04:44Z",
"updated_at": "2022-10-26T20:41:12Z",
"pushed_at": "2022-04-29T06:20:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"exploit",
"information-security",
"mitre-attack",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-44228.json
+2 -2
View File
@@ -14199,8 +14199,8 @@
"description": "Intentionally vulnerable VM-hosted Java shop — Log4Shell (CVE-2021-44228) workshop lab (EC2 \/ Azure VM \/ GCE)",
"fork": false,
"created_at": "2026-07-14T15:29:37Z",
"updated_at": "2026-07-14T17:19:17Z",
"pushed_at": "2026-07-14T17:18:44Z",
"updated_at": "2026-07-15T16:42:50Z",
"pushed_at": "2026-07-15T16:42:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-0847.json
+4 -4
View File
@@ -1237,10 +1237,10 @@
"description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
"fork": false,
"created_at": "2022-03-12T20:57:24Z",
"updated_at": "2026-07-10T10:06:26Z",
"updated_at": "2026-07-15T14:07:31Z",
"pushed_at": "2023-05-20T05:55:45Z",
"stargazers_count": 725,
"watchers_count": 725,
"stargazers_count": 726,
"watchers_count": 726,
"has_discussions": false,
"forks_count": 160,
"allow_forking": true,
@@ -1251,7 +1251,7 @@
"topics": [],
"visibility": "public",
"forks": 160,
"watchers": 725,
"watchers": 726,
"score": 0,
"subscribers_count": 13
},
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-07-15T05:43:42Z",
"pushed_at": "2026-07-15T15:07:53Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-22965.json
+2 -2
View File
@@ -3310,8 +3310,8 @@
"description": "JFrog AppTrust lifecycle policy enforcement demo — shows release gate blocking CVE-2022-22965 (Spring4Shell) with waiver request flow",
"fork": false,
"created_at": "2026-06-21T03:02:40Z",
"updated_at": "2026-07-09T20:30:12Z",
"pushed_at": "2026-07-09T20:30:05Z",
"updated_at": "2026-07-15T16:11:36Z",
"pushed_at": "2026-07-15T16:09:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-15T09:23:01Z",
"pushed_at": "2026-07-15T09:22:33Z",
"updated_at": "2026-07-15T15:19:32Z",
"pushed_at": "2026-07-15T15:17:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-44268.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator",
"fork": false,
"created_at": "2023-02-02T15:34:28Z",
"updated_at": "2026-07-02T17:17:59Z",
"updated_at": "2026-07-15T13:53:25Z",
"pushed_at": "2023-02-02T16:53:37Z",
"stargazers_count": 276,
"watchers_count": 276,
"stargazers_count": 275,
"watchers_count": 275,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 276,
"watchers": 275,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-15T10:40:58Z",
"pushed_at": "2026-07-15T10:40:54Z",
"updated_at": "2026-07-15T13:16:19Z",
"pushed_at": "2026-07-15T13:14:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-15T11:28:44Z",
"pushed_at": "2026-07-15T11:28:38Z",
"updated_at": "2026-07-15T14:04:48Z",
"pushed_at": "2026-07-15T14:02:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-12877.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 915301941,
"name": "CVE-2024-12877",
"full_name": "RandomRobbieBF\/CVE-2024-12877",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-12877",
"description": "GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection",
"fork": false,
"created_at": "2025-01-11T13:54:59Z",
"updated_at": "2026-07-08T12:35:15Z",
"pushed_at": "2025-01-11T13:55:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1046385740,
"name": "CVE-2024-12877-Exploit",
2024/CVE-2024-34102.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "CosmicSting (CVE-2024-34102) POC \/ Patch Validator",
"fork": false,
"created_at": "2024-07-07T23:35:18Z",
"updated_at": "2025-02-14T17:37:45Z",
"pushed_at": "2025-02-14T17:37:41Z",
"updated_at": "2026-07-15T15:53:14Z",
"pushed_at": "2026-07-15T15:53:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-39713.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "CVE-2024-39713 (Rocket.Chat Blind SSRF vulnerability)",
"fork": false,
"created_at": "2025-10-31T06:30:06Z",
"updated_at": "2026-04-30T09:40:26Z",
"pushed_at": "2025-10-31T06:31:01Z",
"updated_at": "2026-07-15T18:13:15Z",
"pushed_at": "2026-07-15T18:13:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-49039.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler",
"fork": false,
"created_at": "2024-11-19T08:57:18Z",
"updated_at": "2026-07-13T07:59:06Z",
"updated_at": "2026-07-15T17:52:33Z",
"pushed_at": "2025-07-21T02:21:21Z",
"stargazers_count": 145,
"watchers_count": 145,
"stargazers_count": 146,
"watchers_count": 146,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 145,
"watchers": 146,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-5082.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301617972,
"name": "CVE-2024-5082",
"full_name": "h4mr3r\/CVE-2024-5082",
"owner": {
"login": "h4mr3r",
"id": 122459511,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122459511?v=4",
"html_url": "https:\/\/github.com\/h4mr3r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/h4mr3r\/CVE-2024-5082",
"description": "Sonatype Nexus 2 - Authorized RCE POC",
"fork": false,
"created_at": "2026-07-15T12:57:00Z",
"updated_at": "2026-07-15T13:08:30Z",
"pushed_at": "2026-07-15T13:07:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-6387.json
+4 -4
View File
@@ -693,10 +693,10 @@
"description": "This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.",
"fork": false,
"created_at": "2024-07-02T06:53:35Z",
"updated_at": "2026-06-23T13:13:03Z",
"updated_at": "2026-07-15T14:00:15Z",
"pushed_at": "2024-07-04T20:04:30Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 51,
"watchers_count": 51,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -707,7 +707,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 50,
"watchers": 51,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-15T11:32:16Z",
"pushed_at": "2026-07-15T11:32:12Z",
"updated_at": "2026-07-15T14:07:39Z",
"pushed_at": "2026-07-15T14:06:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-15T11:31:34Z",
"pushed_at": "2026-07-15T11:31:30Z",
"updated_at": "2026-07-15T14:06:45Z",
"pushed_at": "2026-07-15T14:05:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-20720.json
-44
View File
@@ -1,44 +0,0 @@
[
{
"id": 1296252100,
"name": "CVE-2025-20720",
"full_name": "shinthink\/CVE-2025-20720",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2025-20720",
"description": "CVE-2025-20720 — PolyShell: Magento 2 Unauthenticated Arbitrary File Upload RCE | GIF89a polyglot bypass | guest-cart REST API | 79.5% stores targeted",
"fork": false,
"created_at": "2026-07-10T08:02:19Z",
"updated_at": "2026-07-10T11:57:05Z",
"pushed_at": "2026-07-10T09:53:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adobe-commerce",
"cve",
"exploit",
"file-upload",
"magento",
"mass-scanner",
"polyshell",
"rce"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-15T12:16:37Z",
"pushed_at": "2026-07-15T12:16:08Z",
"updated_at": "2026-07-15T14:52:30Z",
"pushed_at": "2026-07-15T14:51:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24893.json
+4 -4
View File
@@ -1178,10 +1178,10 @@
"description": "CVE-2025-24893 | Vulnérabilité d'exécution de code à distance sur la plateforme XWiki (preuve de concept)",
"fork": false,
"created_at": "2026-01-26T14:21:07Z",
"updated_at": "2026-01-26T14:27:18Z",
"updated_at": "2026-07-15T17:56:31Z",
"pushed_at": "2026-01-26T14:24:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1192,7 +1192,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-26529.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SSRF to XSS - XSS to RCE Moodle",
"fork": false,
"created_at": "2025-04-12T23:17:40Z",
"updated_at": "2026-07-15T12:41:39Z",
"updated_at": "2026-07-15T15:38:11Z",
"pushed_at": "2025-04-13T00:02:26Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 18,
"watchers": 21,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-32044.json
+46
View File
@@ -0,0 +1,46 @@
[
{
"id": 1301949864,
"name": "CVE-2025-32044",
"full_name": "shinthink\/CVE-2025-32044",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2025-32044",
"description": "CVE-2025-32044 — Moodle 4.5.0-4.5.2 Unauthenticated REST API User Data Exposure via Stack Trace Args Leak | CVSS 7.5",
"fork": false,
"created_at": "2026-07-15T18:54:08Z",
"updated_at": "2026-07-15T19:02:38Z",
"pushed_at": "2026-07-15T18:57:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"0day",
"cve",
"exploit",
"information-disclosure",
"moodle",
"pentest",
"security",
"stack-trace",
"user-enumeration",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-32432.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation feature of CraftCMS.",
"fork": false,
"created_at": "2025-04-27T08:50:52Z",
"updated_at": "2026-06-27T06:30:39Z",
"updated_at": "2026-07-15T13:46:31Z",
"pushed_at": "2025-04-27T09:05:54Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-32463.json
+6 -6
View File
@@ -1389,10 +1389,10 @@
"description": "This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.",
"fork": false,
"created_at": "2025-08-08T20:00:41Z",
"updated_at": "2026-07-13T12:07:21Z",
"updated_at": "2026-07-15T15:32:36Z",
"pushed_at": "2026-07-02T15:30:05Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1411,7 +1411,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
},
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-15T10:46:45Z",
"pushed_at": "2026-07-15T10:46:41Z",
"updated_at": "2026-07-15T13:21:38Z",
"pushed_at": "2026-07-15T13:20:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-07-08T21:28:53Z",
"updated_at": "2026-07-15T14:10:59Z",
"pushed_at": "2026-04-30T08:42:55Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-15T10:59:45Z",
"pushed_at": "2026-07-15T10:59:42Z",
"updated_at": "2026-07-15T13:34:38Z",
"pushed_at": "2026-07-15T13:33:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-15T11:00:28Z",
"pushed_at": "2026-07-15T11:00:16Z",
"updated_at": "2026-07-15T13:34:48Z",
"pushed_at": "2026-07-15T13:34:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 857,
"watchers_count": 857,
"has_discussions": false,
"forks_count": 125,
"forks_count": 126,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 125,
"forks": 126,
"watchers": 857,
"score": 0,
"subscribers_count": 20
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-15T10:42:05Z",
"pushed_at": "2026-07-15T10:42:01Z",
"updated_at": "2026-07-15T13:16:29Z",
"pushed_at": "2026-07-15T13:15:17Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+18 -51
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-15T11:21:14Z",
"pushed_at": "2026-07-15T11:21:10Z",
"updated_at": "2026-07-15T13:56:23Z",
"pushed_at": "2026-07-15T13:55:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-15T11:21:47Z",
"pushed_at": "2026-07-15T11:21:43Z",
"updated_at": "2026-07-15T13:56:05Z",
"pushed_at": "2026-07-15T13:55:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-15T11:21:40Z",
"pushed_at": "2026-07-15T11:21:34Z",
"updated_at": "2026-07-15T13:55:53Z",
"pushed_at": "2026-07-15T13:55:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-07-13T12:08:51Z",
"updated_at": "2026-07-15T18:50:33Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2453,
"watchers_count": 2453,
"stargazers_count": 2454,
"watchers_count": 2454,
"has_discussions": false,
"forks_count": 269,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 269,
"watchers": 2453,
"watchers": 2454,
"score": 0,
"subscribers_count": 11
},
@@ -3683,10 +3683,10 @@
"description": "This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.",
"fork": false,
"created_at": "2025-12-05T22:32:32Z",
"updated_at": "2026-07-15T03:35:05Z",
"updated_at": "2026-07-15T15:43:03Z",
"pushed_at": "2026-03-22T19:27:58Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": true,
"forks_count": 3,
"allow_forking": true,
@@ -3718,7 +3718,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
},
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-15T11:21:14Z",
"pushed_at": "2026-07-15T11:21:10Z",
"updated_at": "2026-07-15T13:56:36Z",
"pushed_at": "2026-07-15T13:55:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-15T11:25:26Z",
"pushed_at": "2026-07-15T11:25:21Z",
"updated_at": "2026-07-15T14:00:51Z",
"pushed_at": "2026-07-15T13:59:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15530,39 +15530,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1295533139,
"name": "react2shell",
"full_name": "xp101t\/react2shell",
"owner": {
"login": "xp101t",
"id": 176538849,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176538849?v=4",
"html_url": "https:\/\/github.com\/xp101t",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xp101t\/react2shell",
"description": "PoC for CVE-2025-55182 React2Shell",
"fork": false,
"created_at": "2026-07-09T16:25:31Z",
"updated_at": "2026-07-09T16:28:58Z",
"pushed_at": "2026-07-09T16:28:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296085230,
"name": "reactorwatch-pentest",
2025/CVE-2025-5548.json
+2 -2
View File
@@ -950,8 +950,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-10T21:06:25Z",
"updated_at": "2026-07-10T21:07:20Z",
"pushed_at": "2026-07-10T21:06:29Z",
"updated_at": "2026-07-15T19:01:25Z",
"pushed_at": "2026-07-15T19:01:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-15T12:10:27Z",
"pushed_at": "2026-07-15T12:09:56Z",
"updated_at": "2026-07-15T14:46:56Z",
"pushed_at": "2026-07-15T14:45:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-15T11:22:27Z",
"pushed_at": "2026-07-15T11:22:23Z",
"updated_at": "2026-07-15T13:57:10Z",
"pushed_at": "2026-07-15T13:56:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-15T11:37:59Z",
"pushed_at": "2026-07-15T11:37:55Z",
"updated_at": "2026-07-15T14:13:28Z",
"pushed_at": "2026-07-15T14:11:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0013.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-31T05:02:25Z",
"updated_at": "2026-05-31T05:22:41Z",
"updated_at": "2026-07-15T19:02:27Z",
"pushed_at": "2026-05-31T05:22:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-0023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-10T18:42:22Z",
"updated_at": "2026-06-12T20:49:07Z",
"updated_at": "2026-07-15T19:05:53Z",
"pushed_at": "2026-06-10T18:48:53Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-11989.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301814142,
"name": "security-portfolio-chris-peterson",
"full_name": "repo-ranger21\/security-portfolio-chris-peterson",
"owner": {
"login": "repo-ranger21",
"id": 217090558,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217090558?v=4",
"html_url": "https:\/\/github.com\/repo-ranger21",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/repo-ranger21\/security-portfolio-chris-peterson",
"description": "My portfolio showcasing vulnerability research (CVE-2026-11989, CVE-2026-11395) and automated threat orchestration engineering (Lucius Engine, TalonVigil).",
"fork": false,
"created_at": "2026-07-15T16:16:28Z",
"updated_at": "2026-07-15T16:17:04Z",
"pushed_at": "2026-07-15T16:16:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-13001.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-15T09:58:35Z",
"updated_at": "2026-07-15T09:59:28Z",
"updated_at": "2026-07-15T17:47:13Z",
"pushed_at": "2026-07-15T09:59:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-14960.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301922754,
"name": "CVE-2026-14960-CVE-2026-14961",
"full_name": "FzRsLLaSheR\/CVE-2026-14960-CVE-2026-14961",
"owner": {
"login": "FzRsLLaSheR",
"id": 276254667,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276254667?v=4",
"html_url": "https:\/\/github.com\/FzRsLLaSheR",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FzRsLLaSheR\/CVE-2026-14960-CVE-2026-14961",
"description": null,
"fork": false,
"created_at": "2026-07-15T18:19:51Z",
"updated_at": "2026-07-15T18:25:27Z",
"pushed_at": "2026-07-15T18:25:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-15409.json
+66
View File
@@ -31,5 +31,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301775326,
"name": "rapid7-CVE-2026-15409",
"full_name": "remmons-r7\/rapid7-CVE-2026-15409",
"owner": {
"login": "remmons-r7",
"id": 166433046,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166433046?v=4",
"html_url": "https:\/\/github.com\/remmons-r7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/remmons-r7\/rapid7-CVE-2026-15409",
"description": "This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r\/w and arbitrary code execution via RPC calls.",
"fork": false,
"created_at": "2026-07-15T15:37:11Z",
"updated_at": "2026-07-15T16:44:00Z",
"pushed_at": "2026-07-15T16:43:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301848220,
"name": "CVE-2026-15409",
"full_name": "0xBlackash\/CVE-2026-15409",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-15409",
"description": "CVE-2026-15409",
"fork": false,
"created_at": "2026-07-15T16:51:53Z",
"updated_at": "2026-07-15T16:59:34Z",
"pushed_at": "2026-07-15T16:59:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-15T11:54:13Z",
"pushed_at": "2026-07-15T11:54:00Z",
"updated_at": "2026-07-15T14:30:34Z",
"pushed_at": "2026-07-15T14:28:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-15T11:53:30Z",
"pushed_at": "2026-07-15T11:53:12Z",
"updated_at": "2026-07-15T14:30:35Z",
"pushed_at": "2026-07-15T14:27:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-07-11T02:27:19Z",
"updated_at": "2026-07-15T18:10:47Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 36,
"watchers_count": 36,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 35,
"watchers": 36,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-21628.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-04-02T14:56:08Z",
"updated_at": "2026-07-15T00:05:12Z",
"pushed_at": "2026-07-15T00:05:08Z",
"updated_at": "2026-07-15T17:01:11Z",
"pushed_at": "2026-07-15T17:00:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23744.json
+4 -4
View File
@@ -761,10 +761,10 @@
"description": "A proof-of-concept exploit for CVE-2026-23744 - MCPJam Inspector Remote Code Execution (RCE) vulnerability. This tool demonstrates the security flaw in versions <=1.4.2 and helps security researchers verify patches. For authorized testing and educational purposes only. Includes multiple payload options, command execution, and session management.",
"fork": false,
"created_at": "2026-07-14T18:21:10Z",
"updated_at": "2026-07-14T18:39:01Z",
"updated_at": "2026-07-15T18:46:02Z",
"pushed_at": "2026-07-14T18:38:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -775,7 +775,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-15T11:43:58Z",
"pushed_at": "2026-07-15T11:43:47Z",
"updated_at": "2026-07-15T14:19:31Z",
"pushed_at": "2026-07-15T14:17:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-15T12:12:04Z",
"pushed_at": "2026-07-15T12:11:43Z",
"updated_at": "2026-07-15T14:49:24Z",
"pushed_at": "2026-07-15T14:46:57Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-15T11:56:29Z",
"pushed_at": "2026-07-15T11:56:22Z",
"updated_at": "2026-07-15T14:32:14Z",
"pushed_at": "2026-07-15T14:31:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-15T12:01:28Z",
"pushed_at": "2026-07-15T12:01:03Z",
"updated_at": "2026-07-15T14:38:25Z",
"pushed_at": "2026-07-15T14:35:54Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25262.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results",
"fork": false,
"created_at": "2026-07-08T09:51:38Z",
"updated_at": "2026-07-12T22:58:00Z",
"updated_at": "2026-07-15T18:03:41Z",
"pushed_at": "2026-07-12T05:26:33Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-25541.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1276722249,
"name": "cve-2026-25541-fuel-analysis",
"full_name": "hanyvert\/cve-2026-25541-fuel-analysis",
"full_name": "trajanOx\/cve-2026-25541-fuel-analysis",
"owner": {
"login": "hanyvert",
"login": "trajanOx",
"id": 67313218,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67313218?v=4",
"html_url": "https:\/\/github.com\/hanyvert",
"html_url": "https:\/\/github.com\/trajanOx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hanyvert\/cve-2026-25541-fuel-analysis",
"html_url": "https:\/\/github.com\/trajanOx\/cve-2026-25541-fuel-analysis",
"description": "CVE-2026-25541 impact analysis for Fuel infrastructure (bytes crate integer overflow)",
"fork": false,
"created_at": "2026-06-22T08:28:50Z",
2026/CVE-2026-31431.json
+4 -4
View File
@@ -723,8 +723,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-15T12:33:37Z",
"pushed_at": "2026-07-15T12:33:01Z",
"updated_at": "2026-07-15T15:11:08Z",
"pushed_at": "2026-07-15T15:07:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -772,8 +772,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-15T12:34:20Z",
"pushed_at": "2026-07-15T12:33:43Z",
"updated_at": "2026-07-15T15:09:58Z",
"pushed_at": "2026-07-15T15:08:23Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-15T12:13:21Z",
"pushed_at": "2026-07-15T12:13:00Z",
"updated_at": "2026-07-15T14:49:45Z",
"pushed_at": "2026-07-15T14:48:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-3609.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 857,
"watchers_count": 857,
"has_discussions": false,
"forks_count": 125,
"forks_count": 126,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 125,
"forks": 126,
"watchers": 857,
"score": 0,
"subscribers_count": 20
2026/CVE-2026-3891.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301958363,
"name": "CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"full_name": "m4sh-wacker\/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"owner": {
"login": "m4sh-wacker",
"id": 107651927,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107651927?v=4",
"html_url": "https:\/\/github.com\/m4sh-wacker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/m4sh-wacker\/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"description": "PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0",
"fork": false,
"created_at": "2026-07-15T19:06:14Z",
"updated_at": "2026-07-15T19:08:25Z",
"pushed_at": "2026-07-15T19:08:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+2 -2
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-15T12:34:16Z",
"pushed_at": "2026-07-15T12:34:04Z",
"updated_at": "2026-07-15T15:10:38Z",
"pushed_at": "2026-07-15T15:08:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42533.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1289116990,
"name": "CVE-2026-42533-Scanner",
"full_name": "0xCyberstan\/CVE-2026-42533-Scanner",
"owner": {
"login": "0xCyberstan",
"id": 156473872,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156473872?v=4",
"html_url": "https:\/\/github.com\/0xCyberstan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xCyberstan\/CVE-2026-42533-Scanner",
"description": "Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow \/ info leak).",
"fork": false,
"created_at": "2026-07-04T11:05:56Z",
"updated_at": "2026-07-15T15:12:51Z",
"pushed_at": "2026-07-12T18:46:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43499.json
+21 -21
View File
@@ -245,12 +245,12 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-15T11:18:08Z",
"updated_at": "2026-07-15T18:54:01Z",
"pushed_at": "2026-07-12T14:08:59Z",
"stargazers_count": 153,
"watchers_count": 153,
"stargazers_count": 154,
"watchers_count": 154,
"has_discussions": false,
"forks_count": 41,
"forks_count": 42,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,8 +258,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 41,
"watchers": 153,
"forks": 42,
"watchers": 154,
"score": 0,
"subscribers_count": 0
},
@@ -311,10 +311,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-15T09:39:19Z",
"pushed_at": "2026-07-14T19:09:06Z",
"stargazers_count": 3,
"watchers_count": 3,
"updated_at": "2026-07-15T18:50:31Z",
"pushed_at": "2026-07-15T18:50:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -332,7 +332,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -554,7 +554,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 4,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -562,7 +562,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 6,
"watchers": 5,
"score": 0,
"subscribers_count": 0
@@ -582,10 +582,10 @@
"description": "本次个人漏洞研究进展成果",
"fork": false,
"created_at": "2026-07-14T16:55:11Z",
"updated_at": "2026-07-14T16:56:46Z",
"updated_at": "2026-07-15T13:04:58Z",
"pushed_at": "2026-07-14T16:55:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -596,7 +596,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
@@ -648,10 +648,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-15T08:42:51Z",
"updated_at": "2026-07-15T14:31:18Z",
"pushed_at": "2026-07-15T04:28:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -662,7 +662,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43500.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-43500 \/ CVE-2026-31431 \/ CVE-2026-43284 golang hotfix",
"fork": false,
"created_at": "2026-04-30T12:27:15Z",
"updated_at": "2026-05-31T06:56:16Z",
"pushed_at": "2026-05-31T06:56:13Z",
"updated_at": "2026-07-15T13:50:34Z",
"pushed_at": "2026-07-15T13:49:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-43724.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs. ",
"fork": false,
"created_at": "2026-07-13T22:38:54Z",
"updated_at": "2026-07-15T12:17:57Z",
"updated_at": "2026-07-15T18:59:35Z",
"pushed_at": "2026-07-13T22:40:03Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 13,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45185.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Dead.Letter CVE-2026-45185 EXIM Vulnerability Detection Script",
"fork": false,
"created_at": "2026-05-12T17:51:05Z",
"updated_at": "2026-06-02T03:42:11Z",
"updated_at": "2026-07-15T17:56:42Z",
"pushed_at": "2026-05-12T21:34:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-45585.json
+6 -6
View File
@@ -80,10 +80,10 @@
"description": "BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)",
"fork": false,
"created_at": "2026-05-24T05:26:15Z",
"updated_at": "2026-07-09T05:54:04Z",
"updated_at": "2026-07-15T16:00:35Z",
"pushed_at": "2026-05-24T06:16:44Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-15T12:41:30Z",
"pushed_at": "2026-07-15T12:40:54Z",
"updated_at": "2026-07-15T15:17:31Z",
"pushed_at": "2026-07-15T15:15:47Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-46242.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-46242",
"fork": false,
"created_at": "2026-07-04T16:52:30Z",
"updated_at": "2026-07-14T09:48:22Z",
"updated_at": "2026-07-15T18:45:42Z",
"pushed_at": "2026-07-04T17:20:36Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-46300.json
+1 -1
View File
@@ -147,7 +147,7 @@
"fork": false,
"created_at": "2026-05-18T19:32:29Z",
"updated_at": "2026-07-14T04:13:29Z",
"pushed_at": "2026-07-14T04:13:26Z",
"pushed_at": "2026-07-15T13:09:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46331.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 44,
"forks_count": 45,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 44,
"forks": 45,
"watchers": 132,
"score": 0,
"subscribers_count": 4
2026/CVE-2026-46590.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301635404,
"name": "CVE-2026-46590",
"full_name": "oscerd\/CVE-2026-46590",
"owner": {
"login": "oscerd",
"id": 5106647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
"html_url": "https:\/\/github.com\/oscerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oscerd\/CVE-2026-46590",
"description": "Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-2026-40048 (fixed in 4.18.3\/4.21.0)",
"fork": false,
"created_at": "2026-07-15T13:15:04Z",
"updated_at": "2026-07-15T13:16:43Z",
"pushed_at": "2026-07-15T13:15:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-52199.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301693697,
"name": "CVE-2026-52199",
"full_name": "lamaper\/CVE-2026-52199",
"owner": {
"login": "lamaper",
"id": 108182318,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108182318?v=4",
"html_url": "https:\/\/github.com\/lamaper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lamaper\/CVE-2026-52199",
"description": null,
"fork": false,
"created_at": "2026-07-15T14:15:27Z",
"updated_at": "2026-07-15T14:50:57Z",
"pushed_at": "2026-07-15T14:48:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-53359.json
+35 -2
View File
@@ -179,8 +179,41 @@
"description": "A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.",
"fork": false,
"created_at": "2026-07-15T10:52:54Z",
"updated_at": "2026-07-15T11:46:45Z",
"pushed_at": "2026-07-15T11:46:20Z",
"updated_at": "2026-07-15T16:54:06Z",
"pushed_at": "2026-07-15T16:53:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301723724,
"name": "almalinux-januscape-mitigation",
"full_name": "x024n\/almalinux-januscape-mitigation",
"owner": {
"login": "x024n",
"id": 304541539,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/304541539?v=4",
"html_url": "https:\/\/github.com\/x024n",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/x024n\/almalinux-januscape-mitigation",
"description": "Panduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts",
"fork": false,
"created_at": "2026-07-15T14:46:10Z",
"updated_at": "2026-07-15T14:47:39Z",
"pushed_at": "2026-07-15T14:46:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-58138.json
+66
View File
@@ -42,5 +42,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301745093,
"name": "cve-2026-58138",
"full_name": "seqra\/cve-2026-58138",
"owner": {
"login": "seqra",
"id": 198228434,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/198228434?v=4",
"html_url": "https:\/\/github.com\/seqra",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/seqra\/cve-2026-58138",
"description": null,
"fork": false,
"created_at": "2026-07-15T15:07:29Z",
"updated_at": "2026-07-15T16:07:18Z",
"pushed_at": "2026-07-15T16:05:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301959411,
"name": "CVE-2026-58138",
"full_name": "Ch4120N\/CVE-2026-58138",
"owner": {
"login": "Ch4120N",
"id": 159701862,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159701862?v=4",
"html_url": "https:\/\/github.com\/Ch4120N",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ch4120N\/CVE-2026-58138",
"description": null,
"fork": false,
"created_at": "2026-07-15T19:07:52Z",
"updated_at": "2026-07-15T19:07:53Z",
"pushed_at": "2026-07-15T19:07:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58635.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301614926,
"name": "CVE-2026-58635-PoC",
"full_name": "DavidCarliez\/CVE-2026-58635-PoC",
"owner": {
"login": "DavidCarliez",
"id": 271374756,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/271374756?v=4",
"html_url": "https:\/\/github.com\/DavidCarliez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DavidCarliez\/CVE-2026-58635-PoC",
"description": "Proof of concept for CVE-2026-58635",
"fork": false,
"created_at": "2026-07-15T12:53:34Z",
"updated_at": "2026-07-15T12:54:01Z",
"pushed_at": "2026-07-15T12:53:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-6815.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept (PoC) exploit for CVE-2026-6815: Authenticated Path Traversal & Arbitrary File Write in Casdoor (< 3.54.1) leading to RCE\/DoS.",
"fork": false,
"created_at": "2026-06-04T15:06:44Z",
"updated_at": "2026-07-13T19:33:33Z",
"updated_at": "2026-07-15T14:33:43Z",
"pushed_at": "2026-06-12T16:28:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-8451.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "CVE-2026-8451 - Citrix NetScaler SAML Memory Overread (CitrixBleed) - PoC & Analysis | CVSS 8.8 | AMN SECURITY",
"fork": false,
"created_at": "2026-07-07T23:52:08Z",
"updated_at": "2026-07-12T19:51:22Z",
"updated_at": "2026-07-15T18:10:03Z",
"pushed_at": "2026-07-10T05:41:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
README.md
+95 -13
View File
@@ -337,6 +337,7 @@
</code>
- [willygailo/CVE-2026-3891-Linux](https://github.com/willygailo/CVE-2026-3891-Linux)
- [m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit](https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit)
### CVE-2026-4020 (2026-03-31)
@@ -1180,6 +1181,13 @@
- [Polosss/By-Poloss..-..CVE-2026-11912](https://github.com/Polosss/By-Poloss..-..CVE-2026-11912)
### CVE-2026-11989 (2026-06-19)
<code>The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS &amp; Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.7 via the upload_attachment. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Exploitation requires a form integration to be configured with a field mapped to a WooCommerce product image, product gallery, downloadable files, or Google Contacts attachment field, which is a default use case for these integrations.
</code>
- [repo-ranger21/security-portfolio-chris-peterson](https://github.com/repo-ranger21/security-portfolio-chris-peterson)
### CVE-2026-12166 (2026-07-02)
<code>A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.
@@ -1286,6 +1294,13 @@
- [1beelze/CVE-2026-14894](https://github.com/1beelze/CVE-2026-14894)
### CVE-2026-14960 (2026-07-15)
<code>Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` and `TDE_IOCTL_INDEXIO_WRITE` permit unprivileged user-mode callers to perform arbitrary hardware I/O port reads and writes without authorization checks. A local attacker can abuse this functionality to manipulate hardware registers, tamper with firmware-related interfaces, cause system instability, or establish persistent low-level compromise.
</code>
- [FzRsLLaSheR/CVE-2026-14960-CVE-2026-14961](https://github.com/FzRsLLaSheR/CVE-2026-14960-CVE-2026-14961)
### CVE-2026-15282 (2026-07-10)
<code>The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -1299,6 +1314,8 @@
</code>
- [HORKimhab/CVE-2026-15409](https://github.com/HORKimhab/CVE-2026-15409)
- [remmons-r7/rapid7-CVE-2026-15409](https://github.com/remmons-r7/rapid7-CVE-2026-15409)
- [0xBlackash/CVE-2026-15409](https://github.com/0xBlackash/CVE-2026-15409)
### CVE-2026-15410 (2026-07-14)
@@ -1823,7 +1840,7 @@
<code>Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition &quot;v_capacity &gt;= new_cap + offset&quot; uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.
</code>
- [hanyvert/cve-2026-25541-fuel-analysis](https://github.com/hanyvert/cve-2026-25541-fuel-analysis)
- [trajanOx/cve-2026-25541-fuel-analysis](https://github.com/trajanOx/cve-2026-25541-fuel-analysis)
### CVE-2026-25555 (2026-06-08)
@@ -3294,6 +3311,13 @@
- [v4ltonn/CVE-2026-42530](https://github.com/v4ltonn/CVE-2026-42530)
- [0xBlackash/CVE-2026-42530](https://github.com/0xBlackash/CVE-2026-42530)
### CVE-2026-42533 (2026-07-15)
<code>A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR.\n\nImpact:\nThis vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only.\n\n\n\n\n Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
</code>
- [0xCyberstan/CVE-2026-42533-Scanner](https://github.com/0xCyberstan/CVE-2026-42533-Scanner)
### CVE-2026-42568 (2026-06-10)
<code>Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in `org.yamcs.security.LdapAuthModule` when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13.0 and 5.12.7 patch the issue.
@@ -3805,7 +3829,11 @@
- [mistbarbarianspot/CVE-2026-45659-SharePoint-RCE](https://github.com/mistbarbarianspot/CVE-2026-45659-SharePoint-RCE)
- [amnsecurity/CVE-2026-45659-SharePoint-RCE](https://github.com/amnsecurity/CVE-2026-45659-SharePoint-RCE)
### CVE-2026-45806
### CVE-2026-45806 (2026-07-15)
<code>Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data/workspace/media.cljs into the backend RPC method :create-file-media-object-from-url in backend/src/app/rpc/commands/media.clj, where media/download-image in backend/src/app/media.clj used the shared HTTP client without destination filtering, allowing an authenticated file editor to reach internal-only endpoints. This issue is fixed in version 2.15.0.
</code>
- [0xmrma/CVE-2026-45806](https://github.com/0xmrma/CVE-2026-45806)
### CVE-2026-45829 (2026-05-18)
@@ -4022,6 +4050,13 @@
- [oscerd/CVE-2026-46588](https://github.com/oscerd/CVE-2026-46588)
### CVE-2026-46590 (2026-07-06)
<code>Deserialization of Untrusted Data vulnerability in Apache Camel PQC component.\n\nThe camel-pqc component persists post-quantum key metadata (KeyMetadata) through pluggable KeyLifecycleManager implementations. HashicorpVaultKeyLifecycleManager and AwsSecretsManagerKeyLifecycleManager read that metadata back from the configured secret backend by deserializing a Base64-wrapped value with a raw java.io.ObjectInputStream.readObject() and no ObjectInputFilter or class allow-list; the cast to KeyMetadata happens only after readObject() returns, so any readObject() side effects in a crafted object run before the type check. The same unfiltered legacy-migration read also remained in FileBasedKeyLifecycleManager (for the stored KeyPair and KeyMetadata). A principal who can write to the operator-controlled backend that holds these values - the HashiCorp Vault KV path, or the AWS Secrets Manager secret (requiring a Vault token or secretsmanager:PutSecretValue) - could store a crafted serialized object that is deserialized during normal key-lifecycle operations, potentially leading to code execution in the context of the application that manages the keys. This is an incomplete-remediation follow-on to CVE-2026-40048 (CAMEL-23200), which changed FileBasedKeyLifecycleManager to store metadata as JSON / PKCS#8 / X.509 but did not add an ObjectInputFilter, did not cover the Vault and AWS sibling managers, and left FileBasedKeyLifecycleManager's own legacy-migration deserialization unfiltered.\nThis issue affects Apache Camel: from 4.18.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.18.x LTS releases stream, then they are suggested to upgrade to 4.18.3. For deployments that cannot upgrade immediately, restrict write access to the key backend so that only the application's own identity can write the camel-pqc secrets (least-privilege HashiCorp Vault policies and secretsmanager:PutSecretValue IAM), and keep the PQC key material in a backend separate from any data that less-trusted principals can write.
</code>
- [oscerd/CVE-2026-46590](https://github.com/oscerd/CVE-2026-46590)
### CVE-2026-46645 (2026-06-10)
<code>SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in application.py bypasses the is_accessible() access control check that all other endpoints enforce. If a developer restricts model access by overriding is_accessible(), an authenticated user can still query that model's data through the ajax_lookup endpoint — silently bypassing the restriction. This issue has been patched in version 0.25.1.
@@ -4603,6 +4638,9 @@
- [nk7667/-linx-server-vulnerability-report](https://github.com/nk7667/-linx-server-vulnerability-report)
### CVE-2026-52199
- [lamaper/CVE-2026-52199](https://github.com/lamaper/CVE-2026-52199)
### CVE-2026-52217
- [teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR](https://github.com/teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR)
@@ -4658,6 +4696,7 @@
- [chuzhongyun/CVE-2026-53359-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-53359-Kernel-Fix)
- [xj2268-TA/KVM-Januscape](https://github.com/xj2268-TA/KVM-Januscape)
- [ndouglas-cloudsmith/CVE-2026-53359](https://github.com/ndouglas-cloudsmith/CVE-2026-53359)
- [x024n/almalinux-januscape-mitigation](https://github.com/x024n/almalinux-januscape-mitigation)
### CVE-2026-53360 (2026-07-04)
@@ -5011,6 +5050,15 @@
</code>
- [BiiTts/CVE-2026-58138-Conductor-Unauth-RCE](https://github.com/BiiTts/CVE-2026-58138-Conductor-Unauth-RCE)
- [seqra/cve-2026-58138](https://github.com/seqra/cve-2026-58138)
- [Ch4120N/CVE-2026-58138](https://github.com/Ch4120N/CVE-2026-58138)
### CVE-2026-58635 (2026-07-14)
<code>Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
</code>
- [DavidCarliez/CVE-2026-58635-PoC](https://github.com/DavidCarliez/CVE-2026-58635-PoC)
### CVE-2026-59734 (2026-07-09)
@@ -8303,13 +8351,6 @@
- [SpiritualMachines/buds-audit](https://github.com/SpiritualMachines/buds-audit)
### CVE-2025-20720 (2025-10-14)
<code>In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.
</code>
- [shinthink/CVE-2025-20720](https://github.com/shinthink/CVE-2025-20720)
### CVE-2025-21042 (2025-09-12)
<code>Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
@@ -10475,6 +10516,13 @@
- [LordBheem/CVE-2025-32023](https://github.com/LordBheem/CVE-2025-32023)
- [44528zja/Blackash-CVE-2025-32023](https://github.com/44528zja/Blackash-CVE-2025-32023)
### CVE-2025-32044 (2025-04-25)
<code>A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability.
</code>
- [shinthink/CVE-2025-32044](https://github.com/shinthink/CVE-2025-32044)
### CVE-2025-32094 (2025-08-07)
<code>An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstances, a client making an HTTP/1.x OPTIONS request with an &quot;Expect: 100-continue&quot; header, and using obsolete line folding, can lead to a discrepancy in how two in-path Akamai servers interpret the request, allowing an attacker to smuggle a second request in the original request body.
@@ -13891,7 +13939,6 @@
- [Herick-Costa/CVE-2025-55182-React2Shell-RCE](https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE)
- [diamorphine666/React2shell-CVE-2025-55182-Exploit](https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit)
- [RootEvil333/CVE-2025-55182](https://github.com/RootEvil333/CVE-2025-55182)
- [xp101t/react2shell](https://github.com/xp101t/react2shell)
- [amnsecurity/reactorwatch-pentest](https://github.com/amnsecurity/reactorwatch-pentest)
### CVE-2025-55183 (2025-12-11)
@@ -18321,6 +18368,13 @@
- [sinsinology/CVE-2024-5009](https://github.com/sinsinology/CVE-2024-5009)
- [th3gokul/CVE-2024-5009](https://github.com/th3gokul/CVE-2024-5009)
### CVE-2024-5082 (2024-11-14)
<code>A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. \n\nThis issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.
</code>
- [h4mr3r/CVE-2024-5082](https://github.com/h4mr3r/CVE-2024-5082)
### CVE-2024-5083 (2024-11-14)
<code>A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2\n\nThis issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.
@@ -20102,7 +20156,6 @@
<code>The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present.
</code>
- [RandomRobbieBF/CVE-2024-12877](https://github.com/RandomRobbieBF/CVE-2024-12877)
- [soltanali0/CVE-2024-12877-Exploit](https://github.com/soltanali0/CVE-2024-12877-Exploit)
### CVE-2024-12883 (2024-12-21)
@@ -44567,6 +44620,13 @@
- [Trinadh465/platform_external_gptfdisk_AOSP10_r33_CVE-2021-0308](https://github.com/Trinadh465/platform_external_gptfdisk_AOSP10_r33_CVE-2021-0308)
### CVE-2021-0313 (2021-01-11)
<code>In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514.
</code>
- [Satheesh575555/frameworks_minikin_AOSP10_r33_CVE-2021-0313](https://github.com/Satheesh575555/frameworks_minikin_AOSP10_r33_CVE-2021-0313)
### CVE-2021-0315 (2021-01-11)
<code>In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-169763814.
@@ -45006,8 +45066,6 @@
- [GodOfServer/CVE-2021-3129](https://github.com/GodOfServer/CVE-2021-3129)
- [Prabesh01/hoh4](https://github.com/Prabesh01/hoh4)
- [lukwagoasuman/CVE-2021-3129---Laravel-RCE](https://github.com/lukwagoasuman/CVE-2021-3129---Laravel-RCE)
- [M4rrow/CVE-2021-3129](https://github.com/M4rrow/CVE-2021-3129)
- [M4rrow/CVE-2021-3129-EXP](https://github.com/M4rrow/CVE-2021-3129-EXP)
### CVE-2021-3130 (2021-01-20)
@@ -49853,6 +49911,13 @@
- [SakuraSamuraii/CVE-2021-43032](https://github.com/SakuraSamuraii/CVE-2021-43032)
### CVE-2021-43129 (2022-04-19)
<code>A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz.
</code>
- [Skotizo/CVE-2021-43129](https://github.com/Skotizo/CVE-2021-43129)
### CVE-2021-43141 (2021-11-03)
<code>Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.
@@ -62224,6 +62289,7 @@
- [Swiftloke/fusee-toy](https://github.com/Swiftloke/fusee-toy)
- [nikameru/nxboot](https://github.com/nikameru/nxboot)
- [Resi-le/NXLoader](https://github.com/Resi-le/NXLoader)
- [oliviaholly/fusee-gelee](https://github.com/oliviaholly/fusee-gelee)
### CVE-2018-6341 (2018-12-31)
@@ -68845,6 +68911,7 @@
- [KosukeShimofuji/CVE-2016-8655](https://github.com/KosukeShimofuji/CVE-2016-8655)
- [agkunkle/chocobo](https://github.com/agkunkle/chocobo)
- [martinmullins/CVE-2016-8655_Android](https://github.com/martinmullins/CVE-2016-8655_Android)
- [WhatsWrongAndWhy/CVE-2016-8655](https://github.com/WhatsWrongAndWhy/CVE-2016-8655)
### CVE-2016-8735 (2017-04-06)
@@ -68959,6 +69026,13 @@
- [nadafarafat/bd-alaris-firmware-analysis](https://github.com/nadafarafat/bd-alaris-firmware-analysis)
### CVE-2016-9793 (2016-12-28)
<code>The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.
</code>
- [WhatsWrongAndWhy/CVE-2016-9793](https://github.com/WhatsWrongAndWhy/CVE-2016-9793)
### CVE-2016-9795 (2017-01-27)
<code>The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11, 11.3, 11.3.5, and 11.3.6 on AIX, HP-UX, Linux, and Solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation.
@@ -69318,6 +69392,7 @@
- [thieveshkar/RootQuest-CTF-Box-Multi-Stage-Exploitation-VM](https://github.com/thieveshkar/RootQuest-CTF-Box-Multi-Stage-Exploitation-VM)
- [0xf1d0/CVE-2015-1328](https://github.com/0xf1d0/CVE-2015-1328)
- [saqib-butt2/blackbox-pentesting-infsecos](https://github.com/saqib-butt2/blackbox-pentesting-infsecos)
- [WhatsWrongAndWhy/CVE-2015-1328](https://github.com/WhatsWrongAndWhy/CVE-2015-1328)
### CVE-2015-1397 (2015-04-29)
@@ -70134,6 +70209,13 @@
- [bittorrent3389/CVE-2015-8543_for_SLE12SP1](https://github.com/bittorrent3389/CVE-2015-8543_for_SLE12SP1)
### CVE-2015-8550 (2016-04-14)
<code>Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
</code>
- [WhatsWrongAndWhy/CVE-2015-8550](https://github.com/WhatsWrongAndWhy/CVE-2015-8550)
### CVE-2015-8562 (2015-12-16)
<code>Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015.