nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/20 00:50:00

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-20 09:50:00 +09:00
1 parent b001cbc86e
commit e1da697405
72 files changed
+520 -621
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-4210.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -81,7 +81,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2016/CVE-2016-0638.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -48,7 +48,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2017/CVE-2017-12617.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache Tomcat < 9.0.1 (Beta) \/ < 8.5.23 \/ < 8.0.47 \/ < 7.0.8 - JSP Upload Bypass \/ Remote Code Execution ",
"fork": false,
"created_at": "2017-10-05T23:41:52Z",
"updated_at": "2026-06-06T12:27:20Z",
"updated_at": "2026-06-19T20:03:41Z",
"pushed_at": "2017-10-11T07:43:50Z",
"stargazers_count": 399,
"watchers_count": 399,
"stargazers_count": 400,
"watchers_count": 400,
"has_discussions": false,
"forks_count": 121,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 121,
"watchers": 399,
"watchers": 400,
"score": 0,
"subscribers_count": 13
},
2017/CVE-2017-16744.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": " Proof of Concept (PoC) for CVE: 2017-16744 and 2017-16748",
"fork": false,
"created_at": "2019-09-09T19:08:59Z",
"updated_at": "2026-05-21T18:37:16Z",
"updated_at": "2026-06-19T20:22:28Z",
"pushed_at": "2022-07-03T18:37:23Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2017/CVE-2017-3248.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -81,7 +81,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2017/CVE-2017-5754.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)",
"fork": false,
"created_at": "2018-01-04T04:32:26Z",
"updated_at": "2026-05-20T09:36:08Z",
"updated_at": "2026-06-19T19:44:38Z",
"pushed_at": "2019-11-19T03:36:46Z",
"stargazers_count": 584,
"watchers_count": 584,
"stargazers_count": 585,
"watchers_count": 585,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 77,
"watchers": 584,
"watchers": 585,
"score": 0,
"subscribers_count": 51
},
2018/CVE-2018-2628.json
+2 -2
View File
@@ -617,7 +617,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -646,7 +646,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2018/CVE-2018-3260.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)",
"fork": false,
"created_at": "2018-01-04T04:32:26Z",
"updated_at": "2026-05-20T09:36:08Z",
"updated_at": "2026-06-19T19:44:38Z",
"pushed_at": "2019-11-19T03:36:46Z",
"stargazers_count": 584,
"watchers_count": 584,
"stargazers_count": 585,
"watchers_count": 585,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 77,
"watchers": 584,
"watchers": 585,
"score": 0,
"subscribers_count": 51
}
2018/CVE-2018-9995.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 555,
"watchers_count": 555,
"has_discussions": false,
"forks_count": 201,
"forks_count": 200,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 201,
"forks": 200,
"watchers": 555,
"score": 0,
"subscribers_count": 32
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-19T17:01:35Z",
"pushed_at": "2026-06-19T17:01:24Z",
"updated_at": "2026-06-19T23:51:18Z",
"pushed_at": "2026-06-19T23:51:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-15107.json
-39
View File
@@ -976,45 +976,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 716571164,
"name": "Webmin-CVE-2019-15107",
"full_name": "aamfrk\/Webmin-CVE-2019-15107",
"owner": {
"login": "aamfrk",
"id": 112669603,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112669603?v=4",
"html_url": "https:\/\/github.com\/aamfrk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aamfrk\/Webmin-CVE-2019-15107",
"description": "Exploit for Webmin servers, versions 1.890 through 1.920",
"fork": false,
"created_at": "2023-11-09T12:19:09Z",
"updated_at": "2024-04-28T21:04:26Z",
"pushed_at": "2024-04-28T21:04:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2019-15107",
"exploit",
"python",
"rce",
"webmin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 730844328,
"name": "Webmin-CVE-2019-15107",
2019/CVE-2019-2618.json
+2 -2
View File
@@ -217,7 +217,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -246,7 +246,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2020/CVE-2020-1472.json
+3 -3
View File
@@ -1095,7 +1095,7 @@
"forks": 7,
"watchers": 22,
"score": 0,
"subscribers_count": 0
"subscribers_count": 4
},
{
"id": 299845895,
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-19T16:55:52Z",
"pushed_at": "2026-06-19T16:55:47Z",
"updated_at": "2026-06-19T23:14:37Z",
"pushed_at": "2026-06-19T23:14:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-14882.json
+1 -1
View File
@@ -50,7 +50,7 @@
"forks": 1083,
"watchers": 4281,
"score": 0,
"subscribers_count": 147
"subscribers_count": 148
},
{
"id": 307998445,
2020/CVE-2020-2551.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2070,
"watchers_count": 2070,
"has_discussions": true,
"forks_count": 329,
"forks_count": 328,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -48,7 +48,7 @@
"cve-2020-2883"
],
"visibility": "public",
"forks": 329,
"forks": 328,
"watchers": 2070,
"score": 0,
"subscribers_count": 33
2021/CVE-2021-0481.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484368544,
"name": "packages_apps_settings_AOSP10_r33_CVE-2021-0481",
"full_name": "ShaikUsaf\/packages_apps_settings_AOSP10_r33_CVE-2021-0481",
"owner": {
"login": "ShaikUsaf",
"id": 100413972,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100413972?v=4",
"html_url": "https:\/\/github.com\/ShaikUsaf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ShaikUsaf\/packages_apps_settings_AOSP10_r33_CVE-2021-0481",
"description": null,
"fork": false,
"created_at": "2022-04-22T09:10:38Z",
"updated_at": "2022-04-22T10:05:57Z",
"pushed_at": "2022-04-22T10:06:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-22204.json
+1 -1
View File
@@ -281,7 +281,7 @@
"description": "Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution",
"fork": false,
"created_at": "2022-04-16T22:49:47Z",
"updated_at": "2026-06-06T19:24:28Z",
"updated_at": "2026-06-19T19:18:47Z",
"pushed_at": "2025-01-14T18:36:34Z",
"stargazers_count": 52,
"watchers_count": 52,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-19T17:08:44Z",
"pushed_at": "2026-06-19T17:08:40Z",
"updated_at": "2026-06-20T00:15:59Z",
"pushed_at": "2026-06-20T00:15:55Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3560.json
+33
View File
@@ -1013,5 +1013,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274678239,
"name": "CVE-2021-3560",
"full_name": "adakoifman\/CVE-2021-3560",
"owner": {
"login": "adakoifman",
"id": 23316198,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23316198?v=4",
"html_url": "https:\/\/github.com\/adakoifman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adakoifman\/CVE-2021-3560",
"description": "Повышение привилегий через race condition в polkit",
"fork": false,
"created_at": "2026-06-19T19:16:01Z",
"updated_at": "2026-06-19T20:26:55Z",
"pushed_at": "2026-06-19T20:26:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-38647.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 233,
"watchers_count": 233,
"has_discussions": false,
"forks_count": 53,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 53,
"forks": 54,
"watchers": 233,
"score": 0,
"subscribers_count": 11
2021/CVE-2021-44228.json
+4 -4
View File
@@ -907,7 +907,7 @@
"stargazers_count": 950,
"watchers_count": 950,
"has_discussions": false,
"forks_count": 136,
"forks_count": 135,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -935,7 +935,7 @@
"writeups"
],
"visibility": "public",
"forks": 136,
"forks": 135,
"watchers": 950,
"score": 0,
"subscribers_count": 22
@@ -3878,7 +3878,7 @@
"stargazers_count": 3427,
"watchers_count": 3427,
"has_discussions": true,
"forks_count": 727,
"forks_count": 726,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3886,7 +3886,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 727,
"forks": 726,
"watchers": 3427,
"score": 0,
"subscribers_count": 54
2022/CVE-2022-0543.json
+45
View File
@@ -163,5 +163,50 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274730503,
"name": "CVE-2022-0543",
"full_name": "K3ysTr0K3R\/CVE-2022-0543",
"owner": {
"login": "K3ysTr0K3R",
"id": 70909693,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4",
"html_url": "https:\/\/github.com\/K3ysTr0K3R",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2022-0543",
"description": "PoC for CVE-2022-0543 – Redis Remote Code Execution (RCE)",
"fork": false,
"created_at": "2026-06-19T20:39:56Z",
"updated_at": "2026-06-19T21:22:09Z",
"pushed_at": "2026-06-19T21:18:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2022-0543",
"exploit",
"exploitation",
"hacking",
"lua",
"poc",
"proof-of-concept",
"redis",
"remote-code-execution",
"remote-code-execution-rce",
"sandbox"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-22077.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-04-14T04:06:29Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2025-10-19T02:17:04Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
}
2022/CVE-2022-29799.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "NimbusPwn (CVE-2022-29799\/29800) local privilege escalation PoC in C.",
"fork": false,
"created_at": "2026-06-17T19:44:47Z",
"updated_at": "2026-06-18T08:45:49Z",
"updated_at": "2026-06-19T22:56:11Z",
"pushed_at": "2026-06-17T20:06:23Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -40,7 +40,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2022/CVE-2022-37706.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)",
"fork": false,
"created_at": "2022-09-12T19:22:44Z",
"updated_at": "2026-05-13T19:49:43Z",
"updated_at": "2026-06-19T20:16:52Z",
"pushed_at": "2022-09-19T19:41:34Z",
"stargazers_count": 324,
"watchers_count": 324,
"stargazers_count": 323,
"watchers_count": 323,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 324,
"watchers": 323,
"score": 0,
"subscribers_count": 4
},
2022/CVE-2022-42475.json
+1 -1
View File
@@ -216,7 +216,7 @@
"description": "An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products",
"fork": false,
"created_at": "2023-06-21T21:22:35Z",
"updated_at": "2026-05-16T19:46:33Z",
"updated_at": "2026-06-19T21:55:04Z",
"pushed_at": "2023-06-21T21:24:52Z",
"stargazers_count": 34,
"watchers_count": 34,
2023/CVE-2023-22515.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence",
"fork": false,
"created_at": "2023-10-06T20:29:44Z",
"updated_at": "2026-03-24T21:55:44Z",
"updated_at": "2026-06-19T22:39:00Z",
"pushed_at": "2023-10-06T21:59:30Z",
"stargazers_count": 78,
"watchers_count": 78,
"stargazers_count": 79,
"watchers_count": 79,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 78,
"watchers": 79,
"score": 0,
"subscribers_count": 2
},
@@ -80,10 +80,10 @@
"description": "CVE-2023-22515: Confluence Broken Access Control Exploit",
"fork": false,
"created_at": "2023-10-10T21:40:09Z",
"updated_at": "2026-04-26T08:17:35Z",
"updated_at": "2026-06-19T22:39:05Z",
"pushed_at": "2025-11-12T20:42:37Z",
"stargazers_count": 151,
"watchers_count": 151,
"stargazers_count": 152,
"watchers_count": 152,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -103,7 +103,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 151,
"watchers": 152,
"score": 0,
"subscribers_count": 3
},
2023/CVE-2023-23752.json
+2 -2
View File
@@ -452,7 +452,7 @@
"stargazers_count": 93,
"watchers_count": 93,
"has_discussions": false,
"forks_count": 17,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -467,7 +467,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 17,
"forks": 16,
"watchers": 93,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-26035.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit",
"fork": false,
"created_at": "2023-12-11T19:23:13Z",
"updated_at": "2026-05-21T00:29:25Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2024-05-07T03:32:04Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 24,
"watchers": 23,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-2640.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "GameOver(lay) Ubuntu Privilege Escalation",
"fork": false,
"created_at": "2023-10-09T22:02:42Z",
"updated_at": "2026-06-12T06:01:35Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2023-10-09T22:44:21Z",
"stargazers_count": 135,
"watchers_count": 135,
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 135,
"watchers": 132,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-31756.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 743551741,
"name": "LongBow",
"full_name": "StanleyJobsonAU\/LongBow",
"owner": {
"login": "StanleyJobsonAU",
"id": 123927299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123927299?v=4",
"html_url": "https:\/\/github.com\/StanleyJobsonAU",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/StanleyJobsonAU\/LongBow",
"description": "CVE-2023-31756 Proof of Concept - Remote Code Execution for Archer V1\/V2 Routers",
"fork": false,
"created_at": "2024-01-15T13:32:38Z",
"updated_at": "2025-07-17T06:06:42Z",
"pushed_at": "2024-01-17T12:20:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
}
]
2023/CVE-2023-36664.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Ghostscript command injection vulnerability PoC (CVE-2023-36664)",
"fork": false,
"created_at": "2023-08-12T18:33:57Z",
"updated_at": "2026-05-26T17:52:33Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2023-09-07T08:37:04Z",
"stargazers_count": 130,
"watchers_count": 130,
"stargazers_count": 129,
"watchers_count": 129,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 130,
"watchers": 129,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-51467.json
+2 -2
View File
@@ -139,7 +139,7 @@
"stargazers_count": 74,
"watchers_count": 74,
"has_discussions": false,
"forks_count": 12,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -147,7 +147,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"forks": 11,
"watchers": 74,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-6019.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274673377,
"name": "CVE-2023-6019",
"full_name": "joaquinrrr\/CVE-2023-6019",
"owner": {
"login": "joaquinrrr",
"id": 86880893,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86880893?v=4",
"html_url": "https:\/\/github.com\/joaquinrrr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaquinrrr\/CVE-2023-6019",
"description": "PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API.",
"fork": false,
"created_at": "2026-06-19T19:08:58Z",
"updated_at": "2026-06-19T21:12:56Z",
"pushed_at": "2026-06-19T19:11:03Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-21413.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability",
"fork": false,
"created_at": "2024-02-16T15:17:59Z",
"updated_at": "2026-06-07T07:57:09Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2024-02-19T20:00:35Z",
"stargazers_count": 767,
"watchers_count": 767,
"stargazers_count": 764,
"watchers_count": 764,
"has_discussions": false,
"forks_count": 165,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 165,
"watchers": 767,
"watchers": 764,
"score": 0,
"subscribers_count": 10
},
@@ -113,10 +113,10 @@
"description": "CVE-2024-21413 PoC for THM Lab",
"fork": false,
"created_at": "2024-02-17T14:52:52Z",
"updated_at": "2026-06-16T22:15:16Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2024-03-13T02:44:28Z",
"stargazers_count": 258,
"watchers_count": 258,
"stargazers_count": 256,
"watchers_count": 256,
"has_discussions": false,
"forks_count": 59,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 59,
"watchers": 258,
"watchers": 256,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-22274.json
+4 -4
View File
@@ -87,10 +87,10 @@
"description": "PoC - Authenticated Remote Code Execution in VMware vCenter Server (Exploit)",
"fork": false,
"created_at": "2024-07-15T07:26:59Z",
"updated_at": "2026-04-16T07:10:32Z",
"updated_at": "2026-06-19T20:16:54Z",
"pushed_at": "2024-07-16T23:22:14Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -112,7 +112,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 46,
"watchers": 45,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-24945.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution (RCE) and gain practical experience in exploitation, detection, and mitigation techniques.",
"fork": false,
"created_at": "2026-06-18T14:12:08Z",
"updated_at": "2026-06-18T14:12:38Z",
"pushed_at": "2026-06-18T14:12:09Z",
"updated_at": "2026-06-19T21:25:01Z",
"pushed_at": "2026-06-19T21:24:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-25600.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated Remote Code Execution – Bricks <= 1.9.6",
"fork": false,
"created_at": "2024-02-20T20:16:09Z",
"updated_at": "2026-06-16T13:26:00Z",
"updated_at": "2026-06-19T20:16:53Z",
"pushed_at": "2024-02-25T21:50:09Z",
"stargazers_count": 181,
"watchers_count": 181,
"stargazers_count": 180,
"watchers_count": 180,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 38,
"watchers": 181,
"watchers": 180,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-27198.json
+2 -2
View File
@@ -612,8 +612,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-19T05:53:59Z",
"updated_at": "2026-06-19T18:41:13Z",
"pushed_at": "2026-06-19T18:41:08Z",
"updated_at": "2026-06-19T18:44:33Z",
"pushed_at": "2026-06-19T18:44:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-40725.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers worldwide, potentially leading to source code disclosure and server-side request forgery (SSRF) attacks.",
"fork": false,
"created_at": "2024-07-19T03:51:54Z",
"updated_at": "2026-06-11T10:28:10Z",
"updated_at": "2026-06-19T20:16:54Z",
"pushed_at": "2024-07-19T04:01:13Z",
"stargazers_count": 87,
"watchers_count": 87,
"stargazers_count": 86,
"watchers_count": 86,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 87,
"watchers": 86,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-46987.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive server files via the MediaController. Intended for authorized security auditing and educational research only. ",
"fork": false,
"created_at": "2026-02-01T02:06:33Z",
"updated_at": "2026-05-31T23:00:35Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2026-05-10T15:02:14Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 28,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-51482.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "ZenoMinder Blind SQL Injection PoC",
"fork": false,
"created_at": "2026-03-08T01:42:21Z",
"updated_at": "2026-06-11T08:13:11Z",
"updated_at": "2026-06-19T21:18:58Z",
"pushed_at": "2026-03-08T02:49:57Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24367.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept for CVE-2025-24367",
"fork": false,
"created_at": "2025-10-30T19:41:59Z",
"updated_at": "2026-06-07T19:42:19Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2025-12-08T16:33:46Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 38,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-27591.json
+4 -4
View File
@@ -85,10 +85,10 @@
"description": "CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0",
"fork": false,
"created_at": "2025-07-13T08:41:06Z",
"updated_at": "2026-05-01T18:54:25Z",
"updated_at": "2026-06-19T21:19:03Z",
"pushed_at": "2025-07-16T09:01:14Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -99,7 +99,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-30208.json
+4 -4
View File
@@ -263,10 +263,10 @@
"description": "A PoC of the exploit script for the Arbitrary File Read vulnerability of Vite \/@fs\/ Path Traversal in the transformMiddleware (CVE-2025-30208). ",
"fork": false,
"created_at": "2025-03-27T12:55:01Z",
"updated_at": "2026-02-17T22:47:37Z",
"updated_at": "2026-06-19T20:16:54Z",
"pushed_at": "2025-04-09T00:49:24Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 10,
"watchers": 9,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-43529.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-06-19T07:23:46Z",
"updated_at": "2026-06-19T22:57:21Z",
"pushed_at": "2026-06-18T15:45:39Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-4517.json
+4 -4
View File
@@ -115,10 +115,10 @@
"description": "Privilege Escalation script for CVE-2025-4517",
"fork": false,
"created_at": "2026-02-15T22:09:53Z",
"updated_at": "2026-05-12T17:56:25Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2026-03-14T17:19:26Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -129,7 +129,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-53770.json
+4 -4
View File
@@ -216,10 +216,10 @@
"description": "SharePoint WebPart Injection Exploit Tool",
"fork": false,
"created_at": "2025-07-21T13:48:37Z",
"updated_at": "2026-05-30T05:57:29Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2025-11-28T20:11:11Z",
"stargazers_count": 311,
"watchers_count": 311,
"stargazers_count": 310,
"watchers_count": 310,
"has_discussions": false,
"forks_count": 79,
"allow_forking": true,
@@ -230,7 +230,7 @@
"topics": [],
"visibility": "public",
"forks": 79,
"watchers": 311,
"watchers": 310,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-55182.json
+14 -14
View File
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-06-17T16:25:23Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2453,
"watchers_count": 2453,
"stargazers_count": 2451,
"watchers_count": 2451,
"has_discussions": false,
"forks_count": 269,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 269,
"watchers": 2453,
"watchers": 2451,
"score": 0,
"subscribers_count": 11
},
@@ -1102,10 +1102,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-06-18T15:55:28Z",
"updated_at": "2026-06-19T22:38:59Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1420,
"watchers_count": 1420,
"stargazers_count": 1421,
"watchers_count": 1421,
"has_discussions": false,
"forks_count": 197,
"allow_forking": true,
@@ -1116,7 +1116,7 @@
"topics": [],
"visibility": "public",
"forks": 197,
"watchers": 1420,
"watchers": 1421,
"score": 0,
"subscribers_count": 10
},
@@ -2168,7 +2168,7 @@
"stargazers_count": 575,
"watchers_count": 575,
"has_discussions": false,
"forks_count": 90,
"forks_count": 89,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2176,7 +2176,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 90,
"forks": 89,
"watchers": 575,
"score": 0,
"subscribers_count": 3
@@ -14835,10 +14835,10 @@
"description": "CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.",
"fork": false,
"created_at": "2026-05-24T00:29:42Z",
"updated_at": "2026-05-27T19:07:06Z",
"updated_at": "2026-06-19T20:16:56Z",
"pushed_at": "2026-05-24T00:30:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -14863,7 +14863,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-57819.json
+1 -1
View File
@@ -373,7 +373,7 @@
"description": null,
"fork": false,
"created_at": "2026-06-06T20:49:03Z",
"updated_at": "2026-06-15T11:19:29Z",
"updated_at": "2026-06-19T19:52:08Z",
"pushed_at": "2026-06-06T21:39:52Z",
"stargazers_count": 7,
"watchers_count": 7,
2025/CVE-2025-58434.json
-41
View File
@@ -98,47 +98,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1208350607,
"name": "CVE-2025-58434-59528",
"full_name": "TYehan\/CVE-2025-58434-59528",
"owner": {
"login": "TYehan",
"id": 85949077,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4",
"html_url": "https:\/\/github.com\/TYehan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TYehan\/CVE-2025-58434-59528",
"description": "CVE-2025-58434 and CVE-2025-59528 chain POC - FlowiseAI Remote Code Execution",
"fork": false,
"created_at": "2026-04-12T06:39:37Z",
"updated_at": "2026-04-23T11:13:04Z",
"pushed_at": "2026-04-13T07:41:31Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"chain-attack",
"flowise",
"flowiseai",
"htb",
"rce-exploit",
"remotecodeexecution",
"silentium"
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1208548123,
"name": "CVE-2025-58434",
2025/CVE-2025-59213.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-07T09:11:40Z",
"updated_at": "2026-06-08T14:21:55Z",
"updated_at": "2026-06-19T18:50:55Z",
"pushed_at": "2026-05-19T11:57:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-6018.json
+8 -8
View File
@@ -250,7 +250,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,7 +258,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 16,
"score": 0,
"subscribers_count": 0
@@ -344,12 +344,12 @@
"description": "CVE-2025-6018 CVE-2025-6019 PoC Exploit - Local Privilege Escalation in openSUSE\/SUSE Linux Enterprise 15 - PAM bypass + udisks2 XFS race condition LPE to root",
"fork": false,
"created_at": "2026-02-12T20:40:19Z",
"updated_at": "2026-04-27T05:29:28Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2026-03-24T08:28:15Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -372,8 +372,8 @@
"udisks2"
],
"visibility": "public",
"forks": 2,
"watchers": 5,
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-63389.json
-56
View File
@@ -1,56 +0,0 @@
[
{
"id": 1227613427,
"name": "VisorGoose",
"full_name": "nuclide-research\/VisorGoose",
"owner": {
"login": "nuclide-research",
"id": 288779681,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288779681?v=4",
"html_url": "https:\/\/github.com\/nuclide-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nuclide-research\/VisorGoose",
"description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, RAG\/distilled models across 25 government TLD patterns.",
"fork": false,
"created_at": "2026-05-02T23:31:26Z",
"updated_at": "2026-06-08T23:22:37Z",
"pushed_at": "2026-06-08T23:21:54Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-infrastructure",
"ai-security",
"bug-bounty",
"certificate-transparency",
"cli",
"cloud-takeover",
"ct-logs",
"cve-2025-63389",
"golang",
"government",
"llm",
"llm-security",
"mullvad",
"nuclide",
"ollama",
"osint",
"reconnaissance",
"security",
"shodan",
"visor"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-8110.json
+37 -44
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-8110 PoC",
"fork": false,
"created_at": "2025-12-13T04:15:23Z",
"updated_at": "2026-06-03T10:09:33Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2025-12-24T22:17:22Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 27,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
@@ -263,46 +263,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1208526575,
"name": "CVE-2025-8110-Gogs-RCE-Exploit",
"full_name": "TYehan\/CVE-2025-8110-Gogs-RCE-Exploit",
"owner": {
"login": "TYehan",
"id": 85949077,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4",
"html_url": "https:\/\/github.com\/TYehan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TYehan\/CVE-2025-8110-Gogs-RCE-Exploit",
"description": "Gogs CVE-2025-8110 RCE Exploit",
"fork": false,
"created_at": "2026-04-12T12:06:42Z",
"updated_at": "2026-06-19T11:01:01Z",
"pushed_at": "2026-04-12T12:12:18Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"exploit",
"gogs-api",
"htb",
"rce",
"remotecodeexecution",
"silentium"
],
"visibility": "public",
"forks": 2,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1208812451,
"name": "CVE-2025-8110",
@@ -435,6 +395,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225991105,
"name": "CVE-2025-8110-Gogs-RCE-Exploit",
"full_name": "AdityaInnovates\/CVE-2025-8110-Gogs-RCE-Exploit",
"owner": {
"login": "AdityaInnovates",
"id": 68176618,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68176618?v=4",
"html_url": "https:\/\/github.com\/AdityaInnovates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AdityaInnovates\/CVE-2025-8110-Gogs-RCE-Exploit",
"description": "Gogs CVE-2025-8110 RCE Exploit",
"fork": false,
"created_at": "2026-04-30T21:27:09Z",
"updated_at": "2026-04-30T21:27:09Z",
"pushed_at": "2026-04-12T12:12:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1244586606,
"name": "coreweave-demo-2026-05",
2025/CVE-2025-81110.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.",
"fork": false,
"created_at": "2026-04-11T22:22:37Z",
"updated_at": "2026-06-08T14:45:05Z",
"updated_at": "2026-06-19T21:18:40Z",
"pushed_at": "2026-04-12T09:18:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-9074.json
+4 -4
View File
@@ -150,10 +150,10 @@
"description": "A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.",
"fork": false,
"created_at": "2025-12-06T21:38:19Z",
"updated_at": "2026-04-15T09:43:34Z",
"updated_at": "2026-06-19T21:19:00Z",
"pushed_at": "2025-12-07T12:16:59Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -164,7 +164,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 48,
"watchers": 49,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0300.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1230771282,
"name": "CVE-2026-0300",
"full_name": "0xBlackash\/CVE-2026-0300",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-0300",
"description": "CVE-2026-0300",
"fork": false,
"created_at": "2026-05-06T09:57:04Z",
"updated_at": "2026-05-18T15:24:04Z",
"pushed_at": "2026-05-06T10:21:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230819812,
"name": "cve-2026-0300-audit",
2026/CVE-2026-10520.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-09T21:55:07Z",
"updated_at": "2026-06-13T16:31:04Z",
"updated_at": "2026-06-19T19:33:16Z",
"pushed_at": "2026-06-09T21:58:08Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-11551.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274765654,
"name": "2026-11551",
"full_name": "xxconi\/2026-11551",
"owner": {
"login": "xxconi",
"id": 283740552,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/283740552?v=4",
"html_url": "https:\/\/github.com\/xxconi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xxconi\/2026-11551",
"description": "CVE-2026-11551: Branda Plugin - Unauthenticated Privilege Escalation via Account Takeover",
"fork": false,
"created_at": "2026-06-19T21:43:46Z",
"updated_at": "2026-06-19T21:44:18Z",
"pushed_at": "2026-06-19T21:44:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23744.json
+4 -37
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.",
"fork": false,
"created_at": "2026-01-20T06:55:53Z",
"updated_at": "2026-06-14T14:01:03Z",
"updated_at": "2026-06-19T20:16:55Z",
"pushed_at": "2026-06-14T14:00:59Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -306,39 +306,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1257420096,
"name": "CVE-2026-23744",
"full_name": "TYehan\/CVE-2026-23744",
"owner": {
"login": "TYehan",
"id": 85949077,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4",
"html_url": "https:\/\/github.com\/TYehan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TYehan\/CVE-2026-23744",
"description": "Proof of Concept exploit for CVE-2026-23744: Remote Code Execution vulnerability in MCPJam Inspector <= 1.4.2",
"fork": false,
"created_at": "2026-06-02T16:57:56Z",
"updated_at": "2026-06-02T16:59:00Z",
"pushed_at": "2026-06-02T16:58:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1257689021,
"name": "CVE-2026-23744-PoC",
2026/CVE-2026-23918.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1230844266,
"name": "CVE-2026-23918",
"full_name": "seguridadentrerios\/CVE-2026-23918",
"owner": {
"login": "seguridadentrerios",
"id": 282223302,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282223302?v=4",
"html_url": "https:\/\/github.com\/seguridadentrerios",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/seguridadentrerios\/CVE-2026-23918",
"description": null,
"fork": false,
"created_at": "2026-05-06T11:28:44Z",
"updated_at": "2026-05-06T11:37:12Z",
"pushed_at": "2026-05-06T11:37:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230922026,
"name": "CVE-2026-23918-Apache-H2-PoC",
2026/CVE-2026-25212.json
+44
View File
@@ -0,0 +1,44 @@
[
{
"id": 1274736245,
"name": "CVE-2026-25212",
"full_name": "5170Temp\/CVE-2026-25212",
"owner": {
"login": "5170Temp",
"id": 224469844,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224469844?v=4",
"html_url": "https:\/\/github.com\/5170Temp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/5170Temp\/CVE-2026-25212",
"description": "POC for CVE-2026-25212",
"fork": false,
"created_at": "2026-06-19T20:50:00Z",
"updated_at": "2026-06-19T21:08:04Z",
"pushed_at": "2026-06-19T20:55:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-25212",
"grafana",
"percona",
"pmm",
"poc",
"postgres",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+5 -5
View File
@@ -47,10 +47,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-06-18T14:52:16Z",
"updated_at": "2026-06-19T20:05:31Z",
"pushed_at": "2026-05-22T11:51:03Z",
"stargazers_count": 428,
"watchers_count": 428,
"stargazers_count": 429,
"watchers_count": 429,
"has_discussions": true,
"forks_count": 120,
"allow_forking": true,
@@ -74,7 +74,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 428,
"watchers": 429,
"score": 0,
"subscribers_count": 2
},
@@ -3910,7 +3910,7 @@
"fork": false,
"created_at": "2026-06-01T18:53:44Z",
"updated_at": "2026-06-19T07:54:21Z",
"pushed_at": "2026-06-19T11:16:01Z",
"pushed_at": "2026-06-19T19:58:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-32710.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1230796715,
"name": "CVE-2026-32710",
"full_name": "dinosn\/CVE-2026-32710",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/CVE-2026-32710",
"description": "Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)",
"fork": false,
"created_at": "2026-05-06T10:28:11Z",
"updated_at": "2026-05-19T07:42:53Z",
"pushed_at": "2026-05-06T11:41:57Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 14,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-39813.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-40369.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 249,
"watchers_count": 249,
"has_discussions": false,
"forks_count": 53,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 53,
"forks": 54,
"watchers": 249,
"score": 0,
"subscribers_count": 5
2026/CVE-2026-41940.json
+4 -4
View File
@@ -698,10 +698,10 @@
"description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ",
"fork": false,
"created_at": "2026-05-12T14:47:21Z",
"updated_at": "2026-06-07T14:12:10Z",
"updated_at": "2026-06-19T19:57:26Z",
"pushed_at": "2026-06-07T13:02:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -712,7 +712,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42530.json
+66
View File
@@ -31,5 +31,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274683290,
"name": "CVE-2026-42530",
"full_name": "v4ltonn\/CVE-2026-42530",
"owner": {
"login": "v4ltonn",
"id": 286500569,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286500569?v=4",
"html_url": "https:\/\/github.com\/v4ltonn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/v4ltonn\/CVE-2026-42530",
"description": "Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP\/3 QPACK encoder stream Use-After-Free (CVSS 9.2)",
"fork": false,
"created_at": "2026-06-19T19:23:58Z",
"updated_at": "2026-06-19T21:23:08Z",
"pushed_at": "2026-06-19T21:23:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1274723768,
"name": "CVE-2026-42530",
"full_name": "0xBlackash\/CVE-2026-42530",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-42530",
"description": "CVE-2026-42530",
"fork": false,
"created_at": "2026-06-19T20:28:17Z",
"updated_at": "2026-06-19T21:15:34Z",
"pushed_at": "2026-06-19T21:15:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-4480.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-05T11:05:55Z",
"updated_at": "2026-06-11T22:45:47Z",
"updated_at": "2026-06-19T20:07:50Z",
"pushed_at": "2026-06-05T11:31:22Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-46391.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Proof of concept exploit for CVE-2026-46391",
"fork": false,
"created_at": "2026-05-14T03:43:36Z",
"updated_at": "2026-05-19T04:44:20Z",
"pushed_at": "2026-05-14T04:51:43Z",
"updated_at": "2026-06-19T21:52:26Z",
"pushed_at": "2026-06-19T21:52:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+29 -37
View File
@@ -67,7 +67,6 @@
<code>A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.
</code>
- [0xBlackash/CVE-2026-0300](https://github.com/0xBlackash/CVE-2026-0300)
- [TailwindRG/cve-2026-0300-audit](https://github.com/TailwindRG/cve-2026-0300-audit)
- [bannned-bit/CVE-2026-0300-PANOS](https://github.com/bannned-bit/CVE-2026-0300-PANOS)
- [shizuku198411/CVE-2026-0300](https://github.com/shizuku198411/CVE-2026-0300)
@@ -1019,8 +1018,13 @@
- [Xmyronn/CVE-2026-11518-XSS](https://github.com/Xmyronn/CVE-2026-11518-XSS)
### CVE-2026-11551
### CVE-2026-11551 (2026-06-19)
<code>The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
</code>
- [Polosss/By-Poloss..-..CVE-2026-11551-PoC](https://github.com/Polosss/By-Poloss..-..CVE-2026-11551-PoC)
- [xxconi/2026-11551](https://github.com/xxconi/2026-11551)
### CVE-2026-11645 (2026-06-08)
@@ -1253,7 +1257,6 @@
- [afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744](https://github.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744)
- [alisster00/CVE-2026-23744-RCE](https://github.com/alisster00/CVE-2026-23744-RCE)
- [m2sousa/CVE-2026-23744](https://github.com/m2sousa/CVE-2026-23744)
- [TYehan/CVE-2026-23744](https://github.com/TYehan/CVE-2026-23744)
- [MrR0b0t19/CVE-2026-23744-PoC](https://github.com/MrR0b0t19/CVE-2026-23744-PoC)
- [jf-gondim/mcp-pwn](https://github.com/jf-gondim/mcp-pwn)
- [avivyap/CVE-2026-23744](https://github.com/avivyap/CVE-2026-23744)
@@ -1291,7 +1294,6 @@
</code>
- [aa022/CVE-2026-23918-Passive-Audit](https://github.com/aa022/CVE-2026-23918-Passive-Audit)
- [seguridadentrerios/CVE-2026-23918](https://github.com/seguridadentrerios/CVE-2026-23918)
- [xeloxa/CVE-2026-23918-Apache-H2-PoC](https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC)
- [hackervlogofficial/CVE-2026-23918](https://github.com/hackervlogofficial/CVE-2026-23918)
- [CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC](https://github.com/CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC)
@@ -1408,6 +1410,13 @@
- [MichaelAdamGroberman/CVE-2026-25197](https://github.com/MichaelAdamGroberman/CVE-2026-25197)
### CVE-2026-25212 (2026-04-02)
<code>An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the &quot;Add data source&quot; feature to break out of the database context and execute shell commands on the underlying operating system.
</code>
- [5170Temp/CVE-2026-25212](https://github.com/5170Temp/CVE-2026-25212)
### CVE-2026-25253 (2026-02-01)
<code>OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.
@@ -1833,13 +1842,6 @@
- [mbanyamer/CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-](https://github.com/mbanyamer/CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-)
### CVE-2026-32710 (2026-03-20)
<code>MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2.
</code>
- [dinosn/CVE-2026-32710](https://github.com/dinosn/CVE-2026-32710)
### CVE-2026-32743 (2026-03-18)
<code>PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, and are triggered via MAVLink log request. The LogEntry.filepath buffer is 60 bytes, but the sscanf function parses paths from the log list file with no width specifier, allowing a path longer than 60 characters to overflow the buffer. An attacker with MAVLink link access can trigger this by first creating deeply nested directories via MAVLink FTP, then requesting the log list. The flight controller MAVLink task crashes, losing telemetry and command capability and causing DoS. This issue has been fixed in this commit: https://github.com/PX4/PX4-Autopilot/commit/616b25a280e229c24d5cf12a03dbf248df89c474.
@@ -2658,6 +2660,8 @@
</code>
- [HORKimhab/CVE-2026-42530](https://github.com/HORKimhab/CVE-2026-42530)
- [v4ltonn/CVE-2026-42530](https://github.com/v4ltonn/CVE-2026-42530)
- [0xBlackash/CVE-2026-42530](https://github.com/0xBlackash/CVE-2026-42530)
### CVE-2026-42568 (2026-06-10)
@@ -3428,10 +3432,18 @@
- [dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys](https://github.com/dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys)
### CVE-2026-49344
### CVE-2026-49344 (2026-06-19)
<code>Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine (`/admin/queries/execute`) accepts a JSON DSL (`from` / `select` / `filters` / `traverse` / `output`), translates it into an Eloquent query, and returns results as JSON. The controller method `QueryController::execute()` does not enforce an authorization gate, unlike `store()` and `massDestroy()` in the same controller which are correctly protected. As a result, any authenticated account — including the read-only Auditor role — can query models beyond its intended scope, including the `User` model. Additionally, the `password` column, although declared `$hidden`, is not excluded from filter predicates, which allows it to be used in `LIKE` conditions. The `schema()` and `schemaModel()` endpoints of the same controller are similarly unguarded. The Query Engine is read-only; integrity and availability are not affected. Version 2025.05.19 patches the issue.
</code>
- [hadhub/CVE-2026-49344-Mercator-JSON-DSL](https://github.com/hadhub/CVE-2026-49344-Mercator-JSON-DSL)
### CVE-2026-49345
### CVE-2026-49345 (2026-06-19)
<code>Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery (SSRF) vulnerability exists in Mercator's CVE configuration panel (`/admin/config/parameters`). The `testProvider()` method in `ConfigurationController` passes user-supplied input directly to `curl_init()` without validating the scheme, hostname, or destination IP address. An authenticated user with the `configure` permission can force the Mercator server to issue arbitrary outbound network requests. The suffix `/api/dbInfo` appended to the URL can be bypassed by injecting a `#` fragment character (e.g. `http://TARGET/PATH#`), allowing full control over the target URL. No scheme whitelist, host whitelist, or private/loopback IP block is applied. The `telnet://` scheme can be used for internal port scanning; the `gopher://` scheme enables interaction with unauthenticated internal services (Redis, Memcached), potentially leading to Remote Code Execution under specific deployment conditions. Version 2025.05.19 patches the issue.
</code>
- [hadhub/CVE-2026-49345-Mercator-SSRF](https://github.com/hadhub/CVE-2026-49345-Mercator-SSRF)
### CVE-2026-49413
@@ -5454,11 +5466,11 @@
- [3jee/CVE-2025-8110](https://github.com/3jee/CVE-2025-8110)
- [Ghxstsec/CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110)
- [kayl22/cve-2025-8110-GOGS-RCE](https://github.com/kayl22/cve-2025-8110-GOGS-RCE)
- [TYehan/CVE-2025-8110-Gogs-RCE-Exploit](https://github.com/TYehan/CVE-2025-8110-Gogs-RCE-Exploit)
- [0dgt/CVE-2025-8110](https://github.com/0dgt/CVE-2025-8110)
- [popyue/CVE-2025-8110](https://github.com/popyue/CVE-2025-8110)
- [X4BROZER/CVE-2025-8110](https://github.com/X4BROZER/CVE-2025-8110)
- [hassan-hamadi/CVE-2025-8110-Silentium-HTB](https://github.com/hassan-hamadi/CVE-2025-8110-Silentium-HTB)
- [AdityaInnovates/CVE-2025-8110-Gogs-RCE-Exploit](https://github.com/AdityaInnovates/CVE-2025-8110-Gogs-RCE-Exploit)
- [get-xor/coreweave-demo-2026-05](https://github.com/get-xor/coreweave-demo-2026-05)
- [mananispiwpiw/CVE-2025-8110-PoC](https://github.com/mananispiwpiw/CVE-2025-8110-PoC)
@@ -12952,7 +12964,6 @@
- [AzureADTrent/CVE-2025-58434-59528](https://github.com/AzureADTrent/CVE-2025-58434-59528)
- [Kamigold/Flowise-RCE](https://github.com/Kamigold/Flowise-RCE)
- [CVETeam/FlowiseAI-Critical-KillChain](https://github.com/CVETeam/FlowiseAI-Critical-KillChain)
- [TYehan/CVE-2025-58434-59528](https://github.com/TYehan/CVE-2025-58434-59528)
- [p1ctur3p3rf3ct/CVE-2025-58434](https://github.com/p1ctur3p3rf3ct/CVE-2025-58434)
- [jwsly12/CVE-2025-58434-59528-htb-ctf](https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf)
- [kartik2005221/CVE-2025-58434-poc](https://github.com/kartik2005221/CVE-2025-58434-poc)
@@ -13577,13 +13588,6 @@
- [r0otk3r/CVE-2025-63353](https://github.com/r0otk3r/CVE-2025-63353)
- [Zvckster/CVE-2025-63353](https://github.com/Zvckster/CVE-2025-63353)
### CVE-2025-63389 (2025-12-18)
<code>A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
</code>
- [nuclide-research/VisorGoose](https://github.com/nuclide-research/VisorGoose)
### CVE-2025-63406 (2025-11-13)
<code>An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php
@@ -27789,6 +27793,7 @@
- [FireWolfWang/CVE-2023-6019](https://github.com/FireWolfWang/CVE-2023-6019)
- [Clydeston/CVE-2023-6019](https://github.com/Clydeston/CVE-2023-6019)
- [Zohaibkhan1472/cve-2023-6019](https://github.com/Zohaibkhan1472/cve-2023-6019)
- [joaquinrrr/CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019)
### CVE-2023-6036 (2024-02-12)
@@ -30763,13 +30768,6 @@
- [KIL0BYT3X/CVE-2023-31753](https://github.com/KIL0BYT3X/CVE-2023-31753)
### CVE-2023-31756 (2023-05-19)
<code>A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions &lt;= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter.
</code>
- [StanleyJobsonAU/LongBow](https://github.com/StanleyJobsonAU/LongBow)
### CVE-2023-31779 (2023-05-22)
<code>Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in &quot;Reaction to comment&quot; feature.
@@ -35696,6 +35694,7 @@
- [OpsCipher/CVE-2022-0543](https://github.com/OpsCipher/CVE-2022-0543)
- [SiennaSkies/redisHack](https://github.com/SiennaSkies/redisHack)
- [netw0rk7/CVE-2022-0543-Home-Lab](https://github.com/netw0rk7/CVE-2022-0543-Home-Lab)
- [K3ysTr0K3R/CVE-2022-0543](https://github.com/K3ysTr0K3R/CVE-2022-0543)
### CVE-2022-0591 (2022-03-21)
@@ -43124,13 +43123,6 @@
- [uthrasri/frameworks_opt_net_wifi_CVE-2021-0466](https://github.com/uthrasri/frameworks_opt_net_wifi_CVE-2021-0466)
### CVE-2021-0481 (2021-06-11)
<code>In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189
</code>
- [ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2021-0481](https://github.com/ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2021-0481)
### CVE-2021-0511 (2021-06-21)
<code>In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795
@@ -43840,6 +43832,7 @@
- [realatharva15/polkit-CVE-2021-3560_writeup](https://github.com/realatharva15/polkit-CVE-2021-3560_writeup)
- [yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation](https://github.com/yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation)
- [Jeanback1/CVE-2021-3560-exploit](https://github.com/Jeanback1/CVE-2021-3560-exploit)
- [adakoifman/CVE-2021-3560](https://github.com/adakoifman/CVE-2021-3560)
### CVE-2021-3572 (2021-11-10)
@@ -58598,7 +58591,6 @@
- [gozn/detect-CVE-2019-15107-by-pyshark](https://github.com/gozn/detect-CVE-2019-15107-by-pyshark)
- [h4ck0rman/CVE-2019-15107](https://github.com/h4ck0rman/CVE-2019-15107)
- [olingo99/CVE-2019-15107](https://github.com/olingo99/CVE-2019-15107)
- [aamfrk/Webmin-CVE-2019-15107](https://github.com/aamfrk/Webmin-CVE-2019-15107)
- [0x4r2/Webmin-CVE-2019-15107](https://github.com/0x4r2/Webmin-CVE-2019-15107)
- [NasrallahBaadi/CVE-2019-15107](https://github.com/NasrallahBaadi/CVE-2019-15107)
- [D4rkScare/CVE-2019-15107](https://github.com/D4rkScare/CVE-2019-15107)