diff --git a/2014/CVE-2014-4210.json b/2014/CVE-2014-4210.json index 9bf145f713..e4c19c35c1 100644 --- a/2014/CVE-2014-4210.json +++ b/2014/CVE-2014-4210.json @@ -52,7 +52,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -81,7 +81,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2016/CVE-2016-0638.json b/2016/CVE-2016-0638.json index 29904f9cda..079d553c6c 100644 --- a/2016/CVE-2016-0638.json +++ b/2016/CVE-2016-0638.json @@ -19,7 +19,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -48,7 +48,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2017/CVE-2017-12617.json b/2017/CVE-2017-12617.json index 7a5a17d428..13018ab6f2 100644 --- a/2017/CVE-2017-12617.json +++ b/2017/CVE-2017-12617.json @@ -14,10 +14,10 @@ "description": "Apache Tomcat < 9.0.1 (Beta) \/ < 8.5.23 \/ < 8.0.47 \/ < 7.0.8 - JSP Upload Bypass \/ Remote Code Execution ", "fork": false, "created_at": "2017-10-05T23:41:52Z", - "updated_at": "2026-06-06T12:27:20Z", + "updated_at": "2026-06-19T20:03:41Z", "pushed_at": "2017-10-11T07:43:50Z", - "stargazers_count": 399, - "watchers_count": 399, + "stargazers_count": 400, + "watchers_count": 400, "has_discussions": false, "forks_count": 121, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 121, - "watchers": 399, + "watchers": 400, "score": 0, "subscribers_count": 13 }, diff --git a/2017/CVE-2017-16744.json b/2017/CVE-2017-16744.json index 60a8dd6875..dc36769da6 100644 --- a/2017/CVE-2017-16744.json +++ b/2017/CVE-2017-16744.json @@ -14,10 +14,10 @@ "description": " Proof of Concept (PoC) for CVE: 2017-16744 and 2017-16748", "fork": false, "created_at": "2019-09-09T19:08:59Z", - "updated_at": "2026-05-21T18:37:16Z", + "updated_at": "2026-06-19T20:22:28Z", "pushed_at": "2022-07-03T18:37:23Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 } diff --git a/2017/CVE-2017-3248.json b/2017/CVE-2017-3248.json index 3a526196df..ebacb949f4 100644 --- a/2017/CVE-2017-3248.json +++ b/2017/CVE-2017-3248.json @@ -52,7 +52,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -81,7 +81,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2017/CVE-2017-5754.json b/2017/CVE-2017-5754.json index 6fd6b5c91c..4accdb37a7 100644 --- a/2017/CVE-2017-5754.json +++ b/2017/CVE-2017-5754.json @@ -14,10 +14,10 @@ "description": "SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)", "fork": false, "created_at": "2018-01-04T04:32:26Z", - "updated_at": "2026-05-20T09:36:08Z", + "updated_at": "2026-06-19T19:44:38Z", "pushed_at": "2019-11-19T03:36:46Z", - "stargazers_count": 584, - "watchers_count": 584, + "stargazers_count": 585, + "watchers_count": 585, "has_discussions": false, "forks_count": 77, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 77, - "watchers": 584, + "watchers": 585, "score": 0, "subscribers_count": 51 }, diff --git a/2018/CVE-2018-2628.json b/2018/CVE-2018-2628.json index 9247501e5d..1bc6efdd5c 100644 --- a/2018/CVE-2018-2628.json +++ b/2018/CVE-2018-2628.json @@ -617,7 +617,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -646,7 +646,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2018/CVE-2018-3260.json b/2018/CVE-2018-3260.json index bee88f510e..71000ac387 100644 --- a/2018/CVE-2018-3260.json +++ b/2018/CVE-2018-3260.json @@ -14,10 +14,10 @@ "description": "SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)", "fork": false, "created_at": "2018-01-04T04:32:26Z", - "updated_at": "2026-05-20T09:36:08Z", + "updated_at": "2026-06-19T19:44:38Z", "pushed_at": "2019-11-19T03:36:46Z", - "stargazers_count": 584, - "watchers_count": 584, + "stargazers_count": 585, + "watchers_count": 585, "has_discussions": false, "forks_count": 77, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 77, - "watchers": 584, + "watchers": 585, "score": 0, "subscribers_count": 51 } diff --git a/2018/CVE-2018-9995.json b/2018/CVE-2018-9995.json index 12189252fa..96d169d08d 100644 --- a/2018/CVE-2018-9995.json +++ b/2018/CVE-2018-9995.json @@ -19,7 +19,7 @@ "stargazers_count": 555, "watchers_count": 555, "has_discussions": false, - "forks_count": 201, + "forks_count": 200, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 201, + "forks": 200, "watchers": 555, "score": 0, "subscribers_count": 32 diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index ae4a01b0d5..de1109c3be 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-06-19T17:01:35Z", - "pushed_at": "2026-06-19T17:01:24Z", + "updated_at": "2026-06-19T23:51:18Z", + "pushed_at": "2026-06-19T23:51:15Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2019/CVE-2019-15107.json b/2019/CVE-2019-15107.json index 45cb6c2c8c..a9aeab1f14 100644 --- a/2019/CVE-2019-15107.json +++ b/2019/CVE-2019-15107.json @@ -976,45 +976,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 716571164, - "name": "Webmin-CVE-2019-15107", - "full_name": "aamfrk\/Webmin-CVE-2019-15107", - "owner": { - "login": "aamfrk", - "id": 112669603, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112669603?v=4", - "html_url": "https:\/\/github.com\/aamfrk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aamfrk\/Webmin-CVE-2019-15107", - "description": "Exploit for Webmin servers, versions 1.890 through 1.920", - "fork": false, - "created_at": "2023-11-09T12:19:09Z", - "updated_at": "2024-04-28T21:04:26Z", - "pushed_at": "2024-04-28T21:04:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2019-15107", - "exploit", - "python", - "rce", - "webmin" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 730844328, "name": "Webmin-CVE-2019-15107", diff --git a/2019/CVE-2019-2618.json b/2019/CVE-2019-2618.json index 8f9a44bbf9..a134bd9ad2 100644 --- a/2019/CVE-2019-2618.json +++ b/2019/CVE-2019-2618.json @@ -217,7 +217,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -246,7 +246,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 8ad96cbbea..53cf503ee2 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -1095,7 +1095,7 @@ "forks": 7, "watchers": 22, "score": 0, - "subscribers_count": 0 + "subscribers_count": 4 }, { "id": 299845895, @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-06-19T16:55:52Z", - "pushed_at": "2026-06-19T16:55:47Z", + "updated_at": "2026-06-19T23:14:37Z", + "pushed_at": "2026-06-19T23:14:33Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index 9059f43319..9145ecc8d4 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -50,7 +50,7 @@ "forks": 1083, "watchers": 4281, "score": 0, - "subscribers_count": 147 + "subscribers_count": 148 }, { "id": 307998445, diff --git a/2020/CVE-2020-2551.json b/2020/CVE-2020-2551.json index 9fb133199f..114acb3d1a 100644 --- a/2020/CVE-2020-2551.json +++ b/2020/CVE-2020-2551.json @@ -19,7 +19,7 @@ "stargazers_count": 2070, "watchers_count": 2070, "has_discussions": true, - "forks_count": 329, + "forks_count": 328, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -48,7 +48,7 @@ "cve-2020-2883" ], "visibility": "public", - "forks": 329, + "forks": 328, "watchers": 2070, "score": 0, "subscribers_count": 33 diff --git a/2021/CVE-2021-0481.json b/2021/CVE-2021-0481.json deleted file mode 100644 index 6de03c0331..0000000000 --- a/2021/CVE-2021-0481.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 484368544, - "name": "packages_apps_settings_AOSP10_r33_CVE-2021-0481", - "full_name": "ShaikUsaf\/packages_apps_settings_AOSP10_r33_CVE-2021-0481", - "owner": { - "login": "ShaikUsaf", - "id": 100413972, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100413972?v=4", - "html_url": "https:\/\/github.com\/ShaikUsaf", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ShaikUsaf\/packages_apps_settings_AOSP10_r33_CVE-2021-0481", - "description": null, - "fork": false, - "created_at": "2022-04-22T09:10:38Z", - "updated_at": "2022-04-22T10:05:57Z", - "pushed_at": "2022-04-22T10:06:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-22204.json b/2021/CVE-2021-22204.json index fae4c7cb60..d2027fc88b 100644 --- a/2021/CVE-2021-22204.json +++ b/2021/CVE-2021-22204.json @@ -281,7 +281,7 @@ "description": "Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution", "fork": false, "created_at": "2022-04-16T22:49:47Z", - "updated_at": "2026-06-06T19:24:28Z", + "updated_at": "2026-06-19T19:18:47Z", "pushed_at": "2025-01-14T18:36:34Z", "stargazers_count": 52, "watchers_count": 52, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index f3cf0716d3..252792b5a2 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-06-19T17:08:44Z", - "pushed_at": "2026-06-19T17:08:40Z", + "updated_at": "2026-06-20T00:15:59Z", + "pushed_at": "2026-06-20T00:15:55Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-3560.json b/2021/CVE-2021-3560.json index 8d652d2998..512b191781 100644 --- a/2021/CVE-2021-3560.json +++ b/2021/CVE-2021-3560.json @@ -1013,5 +1013,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1274678239, + "name": "CVE-2021-3560", + "full_name": "adakoifman\/CVE-2021-3560", + "owner": { + "login": "adakoifman", + "id": 23316198, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23316198?v=4", + "html_url": "https:\/\/github.com\/adakoifman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/adakoifman\/CVE-2021-3560", + "description": "Повышение привилегий через race condition в polkit", + "fork": false, + "created_at": "2026-06-19T19:16:01Z", + "updated_at": "2026-06-19T20:26:55Z", + "pushed_at": "2026-06-19T20:26:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-38647.json b/2021/CVE-2021-38647.json index 4d123d1d1f..f0111c397c 100644 --- a/2021/CVE-2021-38647.json +++ b/2021/CVE-2021-38647.json @@ -85,7 +85,7 @@ "stargazers_count": 233, "watchers_count": 233, "has_discussions": false, - "forks_count": 53, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, + "forks": 54, "watchers": 233, "score": 0, "subscribers_count": 11 diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index c9a8e108fe..271b265ac5 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -907,7 +907,7 @@ "stargazers_count": 950, "watchers_count": 950, "has_discussions": false, - "forks_count": 136, + "forks_count": 135, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -935,7 +935,7 @@ "writeups" ], "visibility": "public", - "forks": 136, + "forks": 135, "watchers": 950, "score": 0, "subscribers_count": 22 @@ -3878,7 +3878,7 @@ "stargazers_count": 3427, "watchers_count": 3427, "has_discussions": true, - "forks_count": 727, + "forks_count": 726, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3886,7 +3886,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 727, + "forks": 726, "watchers": 3427, "score": 0, "subscribers_count": 54 diff --git a/2022/CVE-2022-0543.json b/2022/CVE-2022-0543.json index c60e6f0387..583414bb5b 100644 --- a/2022/CVE-2022-0543.json +++ b/2022/CVE-2022-0543.json @@ -163,5 +163,50 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1274730503, + "name": "CVE-2022-0543", + "full_name": "K3ysTr0K3R\/CVE-2022-0543", + "owner": { + "login": "K3ysTr0K3R", + "id": 70909693, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", + "html_url": "https:\/\/github.com\/K3ysTr0K3R", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2022-0543", + "description": "PoC for CVE-2022-0543 – Redis Remote Code Execution (RCE)", + "fork": false, + "created_at": "2026-06-19T20:39:56Z", + "updated_at": "2026-06-19T21:22:09Z", + "pushed_at": "2026-06-19T21:18:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2022-0543", + "exploit", + "exploitation", + "hacking", + "lua", + "poc", + "proof-of-concept", + "redis", + "remote-code-execution", + "remote-code-execution-rce", + "sandbox" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-22077.json b/2022/CVE-2022-22077.json index c20a5ad9f7..9e83399e6e 100644 --- a/2022/CVE-2022-22077.json +++ b/2022/CVE-2022-22077.json @@ -14,10 +14,10 @@ "description": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center", "fork": false, "created_at": "2025-09-08T21:12:19Z", - "updated_at": "2026-04-14T04:06:29Z", + "updated_at": "2026-06-19T21:56:25Z", "pushed_at": "2025-10-19T02:17:04Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 } diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json index ab1eff5c7c..f08ac12d64 100644 --- a/2022/CVE-2022-29799.json +++ b/2022/CVE-2022-29799.json @@ -14,10 +14,10 @@ "description": "NimbusPwn (CVE-2022-29799\/29800) local privilege escalation PoC in C.", "fork": false, "created_at": "2026-06-17T19:44:47Z", - "updated_at": "2026-06-18T08:45:49Z", + "updated_at": "2026-06-19T22:56:11Z", "pushed_at": "2026-06-17T20:06:23Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -40,7 +40,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2022/CVE-2022-37706.json b/2022/CVE-2022-37706.json index 00105d1ee4..c1921a784c 100644 --- a/2022/CVE-2022-37706.json +++ b/2022/CVE-2022-37706.json @@ -14,10 +14,10 @@ "description": "A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)", "fork": false, "created_at": "2022-09-12T19:22:44Z", - "updated_at": "2026-05-13T19:49:43Z", + "updated_at": "2026-06-19T20:16:52Z", "pushed_at": "2022-09-19T19:41:34Z", - "stargazers_count": 324, - "watchers_count": 324, + "stargazers_count": 323, + "watchers_count": 323, "has_discussions": false, "forks_count": 43, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 43, - "watchers": 324, + "watchers": 323, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-42475.json b/2022/CVE-2022-42475.json index 12df171113..b92305d604 100644 --- a/2022/CVE-2022-42475.json +++ b/2022/CVE-2022-42475.json @@ -216,7 +216,7 @@ "description": "An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products", "fork": false, "created_at": "2023-06-21T21:22:35Z", - "updated_at": "2026-05-16T19:46:33Z", + "updated_at": "2026-06-19T21:55:04Z", "pushed_at": "2023-06-21T21:24:52Z", "stargazers_count": 34, "watchers_count": 34, diff --git a/2023/CVE-2023-22515.json b/2023/CVE-2023-22515.json index 9e3c1f80ea..603c968551 100644 --- a/2023/CVE-2023-22515.json +++ b/2023/CVE-2023-22515.json @@ -14,10 +14,10 @@ "description": "Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence", "fork": false, "created_at": "2023-10-06T20:29:44Z", - "updated_at": "2026-03-24T21:55:44Z", + "updated_at": "2026-06-19T22:39:00Z", "pushed_at": "2023-10-06T21:59:30Z", - "stargazers_count": 78, - "watchers_count": 78, + "stargazers_count": 79, + "watchers_count": 79, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 78, + "watchers": 79, "score": 0, "subscribers_count": 2 }, @@ -80,10 +80,10 @@ "description": "CVE-2023-22515: Confluence Broken Access Control Exploit", "fork": false, "created_at": "2023-10-10T21:40:09Z", - "updated_at": "2026-04-26T08:17:35Z", + "updated_at": "2026-06-19T22:39:05Z", "pushed_at": "2025-11-12T20:42:37Z", - "stargazers_count": 151, - "watchers_count": 151, + "stargazers_count": 152, + "watchers_count": 152, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -103,7 +103,7 @@ ], "visibility": "public", "forks": 32, - "watchers": 151, + "watchers": 152, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-23752.json b/2023/CVE-2023-23752.json index f429f0c463..b13d657e72 100644 --- a/2023/CVE-2023-23752.json +++ b/2023/CVE-2023-23752.json @@ -452,7 +452,7 @@ "stargazers_count": 93, "watchers_count": 93, "has_discussions": false, - "forks_count": 17, + "forks_count": 16, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -467,7 +467,7 @@ "vulnerability" ], "visibility": "public", - "forks": 17, + "forks": 16, "watchers": 93, "score": 0, "subscribers_count": 1 diff --git a/2023/CVE-2023-26035.json b/2023/CVE-2023-26035.json index 16b1b822a7..0f1b4fde8f 100644 --- a/2023/CVE-2023-26035.json +++ b/2023/CVE-2023-26035.json @@ -14,10 +14,10 @@ "description": "Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit", "fork": false, "created_at": "2023-12-11T19:23:13Z", - "updated_at": "2026-05-21T00:29:25Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2024-05-07T03:32:04Z", - "stargazers_count": 24, - "watchers_count": 24, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 24, + "watchers": 23, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-2640.json b/2023/CVE-2023-2640.json index 99ab8ceeee..b3edc7fde9 100644 --- a/2023/CVE-2023-2640.json +++ b/2023/CVE-2023-2640.json @@ -80,10 +80,10 @@ "description": "GameOver(lay) Ubuntu Privilege Escalation", "fork": false, "created_at": "2023-10-09T22:02:42Z", - "updated_at": "2026-06-12T06:01:35Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2023-10-09T22:44:21Z", - "stargazers_count": 135, - "watchers_count": 135, + "stargazers_count": 132, + "watchers_count": 132, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 22, - "watchers": 135, + "watchers": 132, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-31756.json b/2023/CVE-2023-31756.json deleted file mode 100644 index 0c32503e0a..0000000000 --- a/2023/CVE-2023-31756.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 743551741, - "name": "LongBow", - "full_name": "StanleyJobsonAU\/LongBow", - "owner": { - "login": "StanleyJobsonAU", - "id": 123927299, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123927299?v=4", - "html_url": "https:\/\/github.com\/StanleyJobsonAU", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/StanleyJobsonAU\/LongBow", - "description": "CVE-2023-31756 Proof of Concept - Remote Code Execution for Archer V1\/V2 Routers", - "fork": false, - "created_at": "2024-01-15T13:32:38Z", - "updated_at": "2025-07-17T06:06:42Z", - "pushed_at": "2024-01-17T12:20:03Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-36664.json b/2023/CVE-2023-36664.json index 64e602dff8..ccc72179aa 100644 --- a/2023/CVE-2023-36664.json +++ b/2023/CVE-2023-36664.json @@ -14,10 +14,10 @@ "description": "Ghostscript command injection vulnerability PoC (CVE-2023-36664)", "fork": false, "created_at": "2023-08-12T18:33:57Z", - "updated_at": "2026-05-26T17:52:33Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2023-09-07T08:37:04Z", - "stargazers_count": 130, - "watchers_count": 130, + "stargazers_count": 129, + "watchers_count": 129, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 130, + "watchers": 129, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-51467.json b/2023/CVE-2023-51467.json index 96fd616ae1..7d1ca7c492 100644 --- a/2023/CVE-2023-51467.json +++ b/2023/CVE-2023-51467.json @@ -139,7 +139,7 @@ "stargazers_count": 74, "watchers_count": 74, "has_discussions": false, - "forks_count": 12, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -147,7 +147,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, + "forks": 11, "watchers": 74, "score": 0, "subscribers_count": 1 diff --git a/2023/CVE-2023-6019.json b/2023/CVE-2023-6019.json index addbb31d75..fca2e1e947 100644 --- a/2023/CVE-2023-6019.json +++ b/2023/CVE-2023-6019.json @@ -97,5 +97,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1274673377, + "name": "CVE-2023-6019", + "full_name": "joaquinrrr\/CVE-2023-6019", + "owner": { + "login": "joaquinrrr", + "id": 86880893, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86880893?v=4", + "html_url": "https:\/\/github.com\/joaquinrrr", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/joaquinrrr\/CVE-2023-6019", + "description": "PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API.", + "fork": false, + "created_at": "2026-06-19T19:08:58Z", + "updated_at": "2026-06-19T21:12:56Z", + "pushed_at": "2026-06-19T19:11:03Z", + "stargazers_count": 5, + "watchers_count": 5, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 5, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json index 0a56d86aa7..30443e8535 100644 --- a/2024/CVE-2024-21413.json +++ b/2024/CVE-2024-21413.json @@ -47,10 +47,10 @@ "description": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability", "fork": false, "created_at": "2024-02-16T15:17:59Z", - "updated_at": "2026-06-07T07:57:09Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2024-02-19T20:00:35Z", - "stargazers_count": 767, - "watchers_count": 767, + "stargazers_count": 764, + "watchers_count": 764, "has_discussions": false, "forks_count": 165, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 165, - "watchers": 767, + "watchers": 764, "score": 0, "subscribers_count": 10 }, @@ -113,10 +113,10 @@ "description": "CVE-2024-21413 PoC for THM Lab", "fork": false, "created_at": "2024-02-17T14:52:52Z", - "updated_at": "2026-06-16T22:15:16Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2024-03-13T02:44:28Z", - "stargazers_count": 258, - "watchers_count": 258, + "stargazers_count": 256, + "watchers_count": 256, "has_discussions": false, "forks_count": 59, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 59, - "watchers": 258, + "watchers": 256, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-22274.json b/2024/CVE-2024-22274.json index 774cc1cce9..05ef6750f8 100644 --- a/2024/CVE-2024-22274.json +++ b/2024/CVE-2024-22274.json @@ -87,10 +87,10 @@ "description": "PoC - Authenticated Remote Code Execution in VMware vCenter Server (Exploit)", "fork": false, "created_at": "2024-07-15T07:26:59Z", - "updated_at": "2026-04-16T07:10:32Z", + "updated_at": "2026-06-19T20:16:54Z", "pushed_at": "2024-07-16T23:22:14Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -112,7 +112,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 46, + "watchers": 45, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-24945.json b/2024/CVE-2024-24945.json index 37dfadeb83..ac6be2fe47 100644 --- a/2024/CVE-2024-24945.json +++ b/2024/CVE-2024-24945.json @@ -14,8 +14,8 @@ "description": "This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution (RCE) and gain practical experience in exploitation, detection, and mitigation techniques.", "fork": false, "created_at": "2026-06-18T14:12:08Z", - "updated_at": "2026-06-18T14:12:38Z", - "pushed_at": "2026-06-18T14:12:09Z", + "updated_at": "2026-06-19T21:25:01Z", + "pushed_at": "2026-06-19T21:24:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-25600.json b/2024/CVE-2024-25600.json index 2f846c35d8..857e353e66 100644 --- a/2024/CVE-2024-25600.json +++ b/2024/CVE-2024-25600.json @@ -14,10 +14,10 @@ "description": "Unauthenticated Remote Code Execution – Bricks <= 1.9.6", "fork": false, "created_at": "2024-02-20T20:16:09Z", - "updated_at": "2026-06-16T13:26:00Z", + "updated_at": "2026-06-19T20:16:53Z", "pushed_at": "2024-02-25T21:50:09Z", - "stargazers_count": 181, - "watchers_count": 181, + "stargazers_count": 180, + "watchers_count": 180, "has_discussions": false, "forks_count": 38, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 38, - "watchers": 181, + "watchers": 180, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-27198.json b/2024/CVE-2024-27198.json index 7dabe71c2e..e47ad3c15e 100644 --- a/2024/CVE-2024-27198.json +++ b/2024/CVE-2024-27198.json @@ -612,8 +612,8 @@ "description": null, "fork": false, "created_at": "2026-06-19T05:53:59Z", - "updated_at": "2026-06-19T18:41:13Z", - "pushed_at": "2026-06-19T18:41:08Z", + "updated_at": "2026-06-19T18:44:33Z", + "pushed_at": "2026-06-19T18:44:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-40725.json b/2024/CVE-2024-40725.json index d83ecc5246..4643dddff5 100644 --- a/2024/CVE-2024-40725.json +++ b/2024/CVE-2024-40725.json @@ -14,10 +14,10 @@ "description": "CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers worldwide, potentially leading to source code disclosure and server-side request forgery (SSRF) attacks.", "fork": false, "created_at": "2024-07-19T03:51:54Z", - "updated_at": "2026-06-11T10:28:10Z", + "updated_at": "2026-06-19T20:16:54Z", "pushed_at": "2024-07-19T04:01:13Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 22, - "watchers": 87, + "watchers": 86, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-46987.json b/2024/CVE-2024-46987.json index f73c45c611..8b84215638 100644 --- a/2024/CVE-2024-46987.json +++ b/2024/CVE-2024-46987.json @@ -14,10 +14,10 @@ "description": "This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive server files via the MediaController. Intended for authorized security auditing and educational research only. ", "fork": false, "created_at": "2026-02-01T02:06:33Z", - "updated_at": "2026-05-31T23:00:35Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2026-05-10T15:02:14Z", - "stargazers_count": 28, - "watchers_count": 28, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 28, + "watchers": 27, "score": 0, "subscribers_count": 0 }, diff --git a/2024/CVE-2024-51482.json b/2024/CVE-2024-51482.json index dd8553854a..4c631d1d6e 100644 --- a/2024/CVE-2024-51482.json +++ b/2024/CVE-2024-51482.json @@ -80,10 +80,10 @@ "description": "ZenoMinder Blind SQL Injection PoC", "fork": false, "created_at": "2026-03-08T01:42:21Z", - "updated_at": "2026-06-11T08:13:11Z", + "updated_at": "2026-06-19T21:18:58Z", "pushed_at": "2026-03-08T02:49:57Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-24367.json b/2025/CVE-2025-24367.json index b0afc62a50..c5d229eb14 100644 --- a/2025/CVE-2025-24367.json +++ b/2025/CVE-2025-24367.json @@ -14,10 +14,10 @@ "description": "Proof of Concept for CVE-2025-24367", "fork": false, "created_at": "2025-10-30T19:41:59Z", - "updated_at": "2026-06-07T19:42:19Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2025-12-08T16:33:46Z", - "stargazers_count": 38, - "watchers_count": 38, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 38, + "watchers": 37, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-27591.json b/2025/CVE-2025-27591.json index 08878ed9c5..8dfd9a90a6 100644 --- a/2025/CVE-2025-27591.json +++ b/2025/CVE-2025-27591.json @@ -85,10 +85,10 @@ "description": "CVE-2025-27591 is a privilege escalation vulnerability that affected the Below service before version 0.9.0", "fork": false, "created_at": "2025-07-13T08:41:06Z", - "updated_at": "2026-05-01T18:54:25Z", + "updated_at": "2026-06-19T21:19:03Z", "pushed_at": "2025-07-16T09:01:14Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -99,7 +99,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-30208.json b/2025/CVE-2025-30208.json index 5cf14e3045..691f7d30b7 100644 --- a/2025/CVE-2025-30208.json +++ b/2025/CVE-2025-30208.json @@ -263,10 +263,10 @@ "description": "A PoC of the exploit script for the Arbitrary File Read vulnerability of Vite \/@fs\/ Path Traversal in the transformMiddleware (CVE-2025-30208). ", "fork": false, "created_at": "2025-03-27T12:55:01Z", - "updated_at": "2026-02-17T22:47:37Z", + "updated_at": "2026-06-19T20:16:54Z", "pushed_at": "2025-04-09T00:49:24Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -277,7 +277,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 10, + "watchers": 9, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-43529.json b/2025/CVE-2025-43529.json index b87c1fd42b..2ba8ec2d9b 100644 --- a/2025/CVE-2025-43529.json +++ b/2025/CVE-2025-43529.json @@ -245,10 +245,10 @@ "description": "A demonstration of read write using cve-2025-43529 on iOS 26.1", "fork": false, "created_at": "2026-06-11T04:48:56Z", - "updated_at": "2026-06-19T07:23:46Z", + "updated_at": "2026-06-19T22:57:21Z", "pushed_at": "2026-06-18T15:45:39Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-4517.json b/2025/CVE-2025-4517.json index d2fe4dfd8e..df02e56332 100644 --- a/2025/CVE-2025-4517.json +++ b/2025/CVE-2025-4517.json @@ -115,10 +115,10 @@ "description": "Privilege Escalation script for CVE-2025-4517", "fork": false, "created_at": "2026-02-15T22:09:53Z", - "updated_at": "2026-05-12T17:56:25Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2026-03-14T17:19:26Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -129,7 +129,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 9, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json index 475a23319a..a19b23d0c3 100644 --- a/2025/CVE-2025-53770.json +++ b/2025/CVE-2025-53770.json @@ -216,10 +216,10 @@ "description": "SharePoint WebPart Injection Exploit Tool", "fork": false, "created_at": "2025-07-21T13:48:37Z", - "updated_at": "2026-05-30T05:57:29Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2025-11-28T20:11:11Z", - "stargazers_count": 311, - "watchers_count": 311, + "stargazers_count": 310, + "watchers_count": 310, "has_discussions": false, "forks_count": 79, "allow_forking": true, @@ -230,7 +230,7 @@ "topics": [], "visibility": "public", "forks": 79, - "watchers": 311, + "watchers": 310, "score": 0, "subscribers_count": 5 }, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index c9abc638b9..ebfa9ef23c 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-06-17T16:25:23Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2453, - "watchers_count": 2453, + "stargazers_count": 2451, + "watchers_count": 2451, "has_discussions": false, "forks_count": 269, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 269, - "watchers": 2453, + "watchers": 2451, "score": 0, "subscribers_count": 11 }, @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-06-18T15:55:28Z", + "updated_at": "2026-06-19T22:38:59Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1420, - "watchers_count": 1420, + "stargazers_count": 1421, + "watchers_count": 1421, "has_discussions": false, "forks_count": 197, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 197, - "watchers": 1420, + "watchers": 1421, "score": 0, "subscribers_count": 10 }, @@ -2168,7 +2168,7 @@ "stargazers_count": 575, "watchers_count": 575, "has_discussions": false, - "forks_count": 90, + "forks_count": 89, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2176,7 +2176,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 90, + "forks": 89, "watchers": 575, "score": 0, "subscribers_count": 3 @@ -14835,10 +14835,10 @@ "description": "CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.", "fork": false, "created_at": "2026-05-24T00:29:42Z", - "updated_at": "2026-05-27T19:07:06Z", + "updated_at": "2026-06-19T20:16:56Z", "pushed_at": "2026-05-24T00:30:44Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -14863,7 +14863,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 0, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-57819.json b/2025/CVE-2025-57819.json index cfb82c6ada..a69014ee41 100644 --- a/2025/CVE-2025-57819.json +++ b/2025/CVE-2025-57819.json @@ -373,7 +373,7 @@ "description": null, "fork": false, "created_at": "2026-06-06T20:49:03Z", - "updated_at": "2026-06-15T11:19:29Z", + "updated_at": "2026-06-19T19:52:08Z", "pushed_at": "2026-06-06T21:39:52Z", "stargazers_count": 7, "watchers_count": 7, diff --git a/2025/CVE-2025-58434.json b/2025/CVE-2025-58434.json index 82bf40b46f..3001244910 100644 --- a/2025/CVE-2025-58434.json +++ b/2025/CVE-2025-58434.json @@ -98,47 +98,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1208350607, - "name": "CVE-2025-58434-59528", - "full_name": "TYehan\/CVE-2025-58434-59528", - "owner": { - "login": "TYehan", - "id": 85949077, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4", - "html_url": "https:\/\/github.com\/TYehan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TYehan\/CVE-2025-58434-59528", - "description": "CVE-2025-58434 and CVE-2025-59528 chain POC - FlowiseAI Remote Code Execution", - "fork": false, - "created_at": "2026-04-12T06:39:37Z", - "updated_at": "2026-04-23T11:13:04Z", - "pushed_at": "2026-04-13T07:41:31Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "chain-attack", - "flowise", - "flowiseai", - "htb", - "rce-exploit", - "remotecodeexecution", - "silentium" - ], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, { "id": 1208548123, "name": "CVE-2025-58434", diff --git a/2025/CVE-2025-59213.json b/2025/CVE-2025-59213.json index 09ba40e61b..45ccea9740 100644 --- a/2025/CVE-2025-59213.json +++ b/2025/CVE-2025-59213.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-04-07T09:11:40Z", - "updated_at": "2026-06-08T14:21:55Z", + "updated_at": "2026-06-19T18:50:55Z", "pushed_at": "2026-05-19T11:57:00Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-6018.json b/2025/CVE-2025-6018.json index f78f5acb27..f1d456608b 100644 --- a/2025/CVE-2025-6018.json +++ b/2025/CVE-2025-6018.json @@ -250,7 +250,7 @@ "stargazers_count": 16, "watchers_count": 16, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -258,7 +258,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 16, "score": 0, "subscribers_count": 0 @@ -344,12 +344,12 @@ "description": "CVE-2025-6018 CVE-2025-6019 PoC Exploit - Local Privilege Escalation in openSUSE\/SUSE Linux Enterprise 15 - PAM bypass + udisks2 XFS race condition LPE to root", "fork": false, "created_at": "2026-02-12T20:40:19Z", - "updated_at": "2026-04-27T05:29:28Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2026-03-24T08:28:15Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -372,8 +372,8 @@ "udisks2" ], "visibility": "public", - "forks": 2, - "watchers": 5, + "forks": 1, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-63389.json b/2025/CVE-2025-63389.json deleted file mode 100644 index 14964d345e..0000000000 --- a/2025/CVE-2025-63389.json +++ /dev/null @@ -1,56 +0,0 @@ -[ - { - "id": 1227613427, - "name": "VisorGoose", - "full_name": "nuclide-research\/VisorGoose", - "owner": { - "login": "nuclide-research", - "id": 288779681, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288779681?v=4", - "html_url": "https:\/\/github.com\/nuclide-research", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nuclide-research\/VisorGoose", - "description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, RAG\/distilled models across 25 government TLD patterns.", - "fork": false, - "created_at": "2026-05-02T23:31:26Z", - "updated_at": "2026-06-08T23:22:37Z", - "pushed_at": "2026-06-08T23:21:54Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ai-infrastructure", - "ai-security", - "bug-bounty", - "certificate-transparency", - "cli", - "cloud-takeover", - "ct-logs", - "cve-2025-63389", - "golang", - "government", - "llm", - "llm-security", - "mullvad", - "nuclide", - "ollama", - "osint", - "reconnaissance", - "security", - "shodan", - "visor" - ], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 3dd56cfc6d..522b9c439d 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -47,10 +47,10 @@ "description": "CVE-2025-8110 PoC", "fork": false, "created_at": "2025-12-13T04:15:23Z", - "updated_at": "2026-06-03T10:09:33Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2025-12-24T22:17:22Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 27, + "watchers": 26, "score": 0, "subscribers_count": 0 }, @@ -263,46 +263,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1208526575, - "name": "CVE-2025-8110-Gogs-RCE-Exploit", - "full_name": "TYehan\/CVE-2025-8110-Gogs-RCE-Exploit", - "owner": { - "login": "TYehan", - "id": 85949077, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4", - "html_url": "https:\/\/github.com\/TYehan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TYehan\/CVE-2025-8110-Gogs-RCE-Exploit", - "description": "Gogs CVE-2025-8110 RCE Exploit", - "fork": false, - "created_at": "2026-04-12T12:06:42Z", - "updated_at": "2026-06-19T11:01:01Z", - "pushed_at": "2026-04-12T12:12:18Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "gogs-api", - "htb", - "rce", - "remotecodeexecution", - "silentium" - ], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 0 - }, { "id": 1208812451, "name": "CVE-2025-8110", @@ -435,6 +395,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1225991105, + "name": "CVE-2025-8110-Gogs-RCE-Exploit", + "full_name": "AdityaInnovates\/CVE-2025-8110-Gogs-RCE-Exploit", + "owner": { + "login": "AdityaInnovates", + "id": 68176618, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68176618?v=4", + "html_url": "https:\/\/github.com\/AdityaInnovates", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AdityaInnovates\/CVE-2025-8110-Gogs-RCE-Exploit", + "description": "Gogs CVE-2025-8110 RCE Exploit", + "fork": false, + "created_at": "2026-04-30T21:27:09Z", + "updated_at": "2026-04-30T21:27:09Z", + "pushed_at": "2026-04-12T12:12:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1244586606, "name": "coreweave-demo-2026-05", diff --git a/2025/CVE-2025-81110.json b/2025/CVE-2025-81110.json index 77107834a4..4cbeedecd1 100644 --- a/2025/CVE-2025-81110.json +++ b/2025/CVE-2025-81110.json @@ -14,10 +14,10 @@ "description": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.", "fork": false, "created_at": "2026-04-11T22:22:37Z", - "updated_at": "2026-06-08T14:45:05Z", + "updated_at": "2026-06-19T21:18:40Z", "pushed_at": "2026-04-12T09:18:24Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json index f5cc887628..701cf9ab2d 100644 --- a/2025/CVE-2025-9074.json +++ b/2025/CVE-2025-9074.json @@ -150,10 +150,10 @@ "description": "A vulnerability has been identified in Docker Desktop. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.", "fork": false, "created_at": "2025-12-06T21:38:19Z", - "updated_at": "2026-04-15T09:43:34Z", + "updated_at": "2026-06-19T21:19:00Z", "pushed_at": "2025-12-07T12:16:59Z", - "stargazers_count": 48, - "watchers_count": 48, + "stargazers_count": 49, + "watchers_count": 49, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -164,7 +164,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 48, + "watchers": 49, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-0300.json b/2026/CVE-2026-0300.json index ab3736610d..ba9ed51952 100644 --- a/2026/CVE-2026-0300.json +++ b/2026/CVE-2026-0300.json @@ -1,37 +1,4 @@ [ - { - "id": 1230771282, - "name": "CVE-2026-0300", - "full_name": "0xBlackash\/CVE-2026-0300", - "owner": { - "login": "0xBlackash", - "id": 259905299, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", - "html_url": "https:\/\/github.com\/0xBlackash", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-0300", - "description": "CVE-2026-0300", - "fork": false, - "created_at": "2026-05-06T09:57:04Z", - "updated_at": "2026-05-18T15:24:04Z", - "pushed_at": "2026-05-06T10:21:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1230819812, "name": "cve-2026-0300-audit", diff --git a/2026/CVE-2026-10520.json b/2026/CVE-2026-10520.json index 7e2c9e3e15..6010641022 100644 --- a/2026/CVE-2026-10520.json +++ b/2026/CVE-2026-10520.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-09T21:55:07Z", - "updated_at": "2026-06-13T16:31:04Z", + "updated_at": "2026-06-19T19:33:16Z", "pushed_at": "2026-06-09T21:58:08Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-11551.json b/2026/CVE-2026-11551.json index a4031e98c0..4bd5039720 100644 --- a/2026/CVE-2026-11551.json +++ b/2026/CVE-2026-11551.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1274765654, + "name": "2026-11551", + "full_name": "xxconi\/2026-11551", + "owner": { + "login": "xxconi", + "id": 283740552, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/283740552?v=4", + "html_url": "https:\/\/github.com\/xxconi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/xxconi\/2026-11551", + "description": "CVE-2026-11551: Branda Plugin - Unauthenticated Privilege Escalation via Account Takeover", + "fork": false, + "created_at": "2026-06-19T21:43:46Z", + "updated_at": "2026-06-19T21:44:18Z", + "pushed_at": "2026-06-19T21:44:14Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-23744.json b/2026/CVE-2026-23744.json index f84e129bb8..67e6b77359 100644 --- a/2026/CVE-2026-23744.json +++ b/2026/CVE-2026-23744.json @@ -14,10 +14,10 @@ "description": "CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.", "fork": false, "created_at": "2026-01-20T06:55:53Z", - "updated_at": "2026-06-14T14:01:03Z", + "updated_at": "2026-06-19T20:16:55Z", "pushed_at": "2026-06-14T14:00:59Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 9, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -306,39 +306,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1257420096, - "name": "CVE-2026-23744", - "full_name": "TYehan\/CVE-2026-23744", - "owner": { - "login": "TYehan", - "id": 85949077, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85949077?v=4", - "html_url": "https:\/\/github.com\/TYehan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TYehan\/CVE-2026-23744", - "description": "Proof of Concept exploit for CVE-2026-23744: Remote Code Execution vulnerability in MCPJam Inspector <= 1.4.2", - "fork": false, - "created_at": "2026-06-02T16:57:56Z", - "updated_at": "2026-06-02T16:59:00Z", - "pushed_at": "2026-06-02T16:58:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1257689021, "name": "CVE-2026-23744-PoC", diff --git a/2026/CVE-2026-23918.json b/2026/CVE-2026-23918.json index 4d7dd94c80..66611ef820 100644 --- a/2026/CVE-2026-23918.json +++ b/2026/CVE-2026-23918.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1230844266, - "name": "CVE-2026-23918", - "full_name": "seguridadentrerios\/CVE-2026-23918", - "owner": { - "login": "seguridadentrerios", - "id": 282223302, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282223302?v=4", - "html_url": "https:\/\/github.com\/seguridadentrerios", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/seguridadentrerios\/CVE-2026-23918", - "description": null, - "fork": false, - "created_at": "2026-05-06T11:28:44Z", - "updated_at": "2026-05-06T11:37:12Z", - "pushed_at": "2026-05-06T11:37:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1230922026, "name": "CVE-2026-23918-Apache-H2-PoC", diff --git a/2026/CVE-2026-25212.json b/2026/CVE-2026-25212.json new file mode 100644 index 0000000000..1a8dd7f996 --- /dev/null +++ b/2026/CVE-2026-25212.json @@ -0,0 +1,44 @@ +[ + { + "id": 1274736245, + "name": "CVE-2026-25212", + "full_name": "5170Temp\/CVE-2026-25212", + "owner": { + "login": "5170Temp", + "id": 224469844, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224469844?v=4", + "html_url": "https:\/\/github.com\/5170Temp", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/5170Temp\/CVE-2026-25212", + "description": "POC for CVE-2026-25212", + "fork": false, + "created_at": "2026-06-19T20:50:00Z", + "updated_at": "2026-06-19T21:08:04Z", + "pushed_at": "2026-06-19T20:55:17Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-25212", + "grafana", + "percona", + "pmm", + "poc", + "postgres", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index cb91345747..b41e7888a6 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.", "fork": false, "created_at": "2026-04-29T23:29:14Z", - "updated_at": "2026-06-18T14:52:16Z", + "updated_at": "2026-06-19T20:05:31Z", "pushed_at": "2026-05-22T11:51:03Z", - "stargazers_count": 428, - "watchers_count": 428, + "stargazers_count": 429, + "watchers_count": 429, "has_discussions": true, "forks_count": 120, "allow_forking": true, @@ -74,7 +74,7 @@ ], "visibility": "public", "forks": 120, - "watchers": 428, + "watchers": 429, "score": 0, "subscribers_count": 2 }, @@ -3910,7 +3910,7 @@ "fork": false, "created_at": "2026-06-01T18:53:44Z", "updated_at": "2026-06-19T07:54:21Z", - "pushed_at": "2026-06-19T11:16:01Z", + "pushed_at": "2026-06-19T19:58:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-32710.json b/2026/CVE-2026-32710.json deleted file mode 100644 index 0f1bf4467d..0000000000 --- a/2026/CVE-2026-32710.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1230796715, - "name": "CVE-2026-32710", - "full_name": "dinosn\/CVE-2026-32710", - "owner": { - "login": "dinosn", - "id": 3851678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4", - "html_url": "https:\/\/github.com\/dinosn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dinosn\/CVE-2026-32710", - "description": "Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)", - "fork": false, - "created_at": "2026-05-06T10:28:11Z", - "updated_at": "2026-05-19T07:42:53Z", - "pushed_at": "2026-05-06T11:41:57Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 14, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-39813.json b/2026/CVE-2026-39813.json index 1a5ca97ff4..c2a52d05a6 100644 --- a/2026/CVE-2026-39813.json +++ b/2026/CVE-2026-39813.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json index ae1b67e647..44507a37e3 100644 --- a/2026/CVE-2026-40369.json +++ b/2026/CVE-2026-40369.json @@ -19,7 +19,7 @@ "stargazers_count": 249, "watchers_count": 249, "has_discussions": false, - "forks_count": 53, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, + "forks": 54, "watchers": 249, "score": 0, "subscribers_count": 5 diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 5e16899181..9627f77293 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -698,10 +698,10 @@ "description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ", "fork": false, "created_at": "2026-05-12T14:47:21Z", - "updated_at": "2026-06-07T14:12:10Z", + "updated_at": "2026-06-19T19:57:26Z", "pushed_at": "2026-06-07T13:02:43Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -712,7 +712,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-42530.json b/2026/CVE-2026-42530.json index b89a21ceb3..6f996439a0 100644 --- a/2026/CVE-2026-42530.json +++ b/2026/CVE-2026-42530.json @@ -31,5 +31,71 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1274683290, + "name": "CVE-2026-42530", + "full_name": "v4ltonn\/CVE-2026-42530", + "owner": { + "login": "v4ltonn", + "id": 286500569, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286500569?v=4", + "html_url": "https:\/\/github.com\/v4ltonn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/v4ltonn\/CVE-2026-42530", + "description": "Scanner PoC for CVE-2026-42530 -- nginx 1.31.0-1.31.1 HTTP\/3 QPACK encoder stream Use-After-Free (CVSS 9.2)", + "fork": false, + "created_at": "2026-06-19T19:23:58Z", + "updated_at": "2026-06-19T21:23:08Z", + "pushed_at": "2026-06-19T21:23:05Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1274723768, + "name": "CVE-2026-42530", + "full_name": "0xBlackash\/CVE-2026-42530", + "owner": { + "login": "0xBlackash", + "id": 259905299, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", + "html_url": "https:\/\/github.com\/0xBlackash", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-42530", + "description": "CVE-2026-42530", + "fork": false, + "created_at": "2026-06-19T20:28:17Z", + "updated_at": "2026-06-19T21:15:34Z", + "pushed_at": "2026-06-19T21:15:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-4480.json b/2026/CVE-2026-4480.json index f2aedc5510..bf293c7b4e 100644 --- a/2026/CVE-2026-4480.json +++ b/2026/CVE-2026-4480.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-05T11:05:55Z", - "updated_at": "2026-06-11T22:45:47Z", + "updated_at": "2026-06-19T20:07:50Z", "pushed_at": "2026-06-05T11:31:22Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-46391.json b/2026/CVE-2026-46391.json index 3765c2ce4e..924b942b6d 100644 --- a/2026/CVE-2026-46391.json +++ b/2026/CVE-2026-46391.json @@ -14,8 +14,8 @@ "description": "Proof of concept exploit for CVE-2026-46391", "fork": false, "created_at": "2026-05-14T03:43:36Z", - "updated_at": "2026-05-19T04:44:20Z", - "pushed_at": "2026-05-14T04:51:43Z", + "updated_at": "2026-06-19T21:52:26Z", + "pushed_at": "2026-06-19T21:52:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/README.md b/README.md index 301e278942..0d61e15222 100644 --- a/README.md +++ b/README.md @@ -67,7 +67,6 @@ A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability. -- [0xBlackash/CVE-2026-0300](https://github.com/0xBlackash/CVE-2026-0300) - [TailwindRG/cve-2026-0300-audit](https://github.com/TailwindRG/cve-2026-0300-audit) - [bannned-bit/CVE-2026-0300-PANOS](https://github.com/bannned-bit/CVE-2026-0300-PANOS) - [shizuku198411/CVE-2026-0300](https://github.com/shizuku198411/CVE-2026-0300) @@ -1019,8 +1018,13 @@ - [Xmyronn/CVE-2026-11518-XSS](https://github.com/Xmyronn/CVE-2026-11518-XSS) -### CVE-2026-11551 +### CVE-2026-11551 (2026-06-19) + +The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. + + - [Polosss/By-Poloss..-..CVE-2026-11551-PoC](https://github.com/Polosss/By-Poloss..-..CVE-2026-11551-PoC) +- [xxconi/2026-11551](https://github.com/xxconi/2026-11551) ### CVE-2026-11645 (2026-06-08) @@ -1253,7 +1257,6 @@ - [afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744](https://github.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744) - [alisster00/CVE-2026-23744-RCE](https://github.com/alisster00/CVE-2026-23744-RCE) - [m2sousa/CVE-2026-23744](https://github.com/m2sousa/CVE-2026-23744) -- [TYehan/CVE-2026-23744](https://github.com/TYehan/CVE-2026-23744) - [MrR0b0t19/CVE-2026-23744-PoC](https://github.com/MrR0b0t19/CVE-2026-23744-PoC) - [jf-gondim/mcp-pwn](https://github.com/jf-gondim/mcp-pwn) - [avivyap/CVE-2026-23744](https://github.com/avivyap/CVE-2026-23744) @@ -1291,7 +1294,6 @@ - [aa022/CVE-2026-23918-Passive-Audit](https://github.com/aa022/CVE-2026-23918-Passive-Audit) -- [seguridadentrerios/CVE-2026-23918](https://github.com/seguridadentrerios/CVE-2026-23918) - [xeloxa/CVE-2026-23918-Apache-H2-PoC](https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC) - [hackervlogofficial/CVE-2026-23918](https://github.com/hackervlogofficial/CVE-2026-23918) - [CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC](https://github.com/CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC) @@ -1408,6 +1410,13 @@ - [MichaelAdamGroberman/CVE-2026-25197](https://github.com/MichaelAdamGroberman/CVE-2026-25197) +### CVE-2026-25212 (2026-04-02) + +An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system. + + +- [5170Temp/CVE-2026-25212](https://github.com/5170Temp/CVE-2026-25212) + ### CVE-2026-25253 (2026-02-01) OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value. @@ -1833,13 +1842,6 @@ - [mbanyamer/CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-](https://github.com/mbanyamer/CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-) -### CVE-2026-32710 (2026-03-20) - -MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code execution. These conditions require tight control over memory layout which is generally only attainable in a lab environment. This issue is fixed in MariaDB 11.4.10, MariaDB 11.8.6, and MariaDB 12.2.2. - - -- [dinosn/CVE-2026-32710](https://github.com/dinosn/CVE-2026-32710) - ### CVE-2026-32743 (2026-03-18) PX4 is an open-source autopilot stack for drones and unmanned vehicles. Versions 1.17.0-rc2 and below are vulnerable to Stack-based Buffer Overflow through the MavlinkLogHandler, and are triggered via MAVLink log request. The LogEntry.filepath buffer is 60 bytes, but the sscanf function parses paths from the log list file with no width specifier, allowing a path longer than 60 characters to overflow the buffer. An attacker with MAVLink link access can trigger this by first creating deeply nested directories via MAVLink FTP, then requesting the log list. The flight controller MAVLink task crashes, losing telemetry and command capability and causing DoS. This issue has been fixed in this commit: https://github.com/PX4/PX4-Autopilot/commit/616b25a280e229c24d5cf12a03dbf248df89c474. @@ -2658,6 +2660,8 @@ - [HORKimhab/CVE-2026-42530](https://github.com/HORKimhab/CVE-2026-42530) +- [v4ltonn/CVE-2026-42530](https://github.com/v4ltonn/CVE-2026-42530) +- [0xBlackash/CVE-2026-42530](https://github.com/0xBlackash/CVE-2026-42530) ### CVE-2026-42568 (2026-06-10) @@ -3428,10 +3432,18 @@ - [dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys](https://github.com/dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys) -### CVE-2026-49344 +### CVE-2026-49344 (2026-06-19) + +Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine (`/admin/queries/execute`) accepts a JSON DSL (`from` / `select` / `filters` / `traverse` / `output`), translates it into an Eloquent query, and returns results as JSON. The controller method `QueryController::execute()` does not enforce an authorization gate, unlike `store()` and `massDestroy()` in the same controller which are correctly protected. As a result, any authenticated account — including the read-only Auditor role — can query models beyond its intended scope, including the `User` model. Additionally, the `password` column, although declared `$hidden`, is not excluded from filter predicates, which allows it to be used in `LIKE` conditions. The `schema()` and `schemaModel()` endpoints of the same controller are similarly unguarded. The Query Engine is read-only; integrity and availability are not affected. Version 2025.05.19 patches the issue. + + - [hadhub/CVE-2026-49344-Mercator-JSON-DSL](https://github.com/hadhub/CVE-2026-49344-Mercator-JSON-DSL) -### CVE-2026-49345 +### CVE-2026-49345 (2026-06-19) + +Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery (SSRF) vulnerability exists in Mercator's CVE configuration panel (`/admin/config/parameters`). The `testProvider()` method in `ConfigurationController` passes user-supplied input directly to `curl_init()` without validating the scheme, hostname, or destination IP address. An authenticated user with the `configure` permission can force the Mercator server to issue arbitrary outbound network requests. The suffix `/api/dbInfo` appended to the URL can be bypassed by injecting a `#` fragment character (e.g. `http://TARGET/PATH#`), allowing full control over the target URL. No scheme whitelist, host whitelist, or private/loopback IP block is applied. The `telnet://` scheme can be used for internal port scanning; the `gopher://` scheme enables interaction with unauthenticated internal services (Redis, Memcached), potentially leading to Remote Code Execution under specific deployment conditions. Version 2025.05.19 patches the issue. + + - [hadhub/CVE-2026-49345-Mercator-SSRF](https://github.com/hadhub/CVE-2026-49345-Mercator-SSRF) ### CVE-2026-49413 @@ -5454,11 +5466,11 @@ - [3jee/CVE-2025-8110](https://github.com/3jee/CVE-2025-8110) - [Ghxstsec/CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) - [kayl22/cve-2025-8110-GOGS-RCE](https://github.com/kayl22/cve-2025-8110-GOGS-RCE) -- [TYehan/CVE-2025-8110-Gogs-RCE-Exploit](https://github.com/TYehan/CVE-2025-8110-Gogs-RCE-Exploit) - [0dgt/CVE-2025-8110](https://github.com/0dgt/CVE-2025-8110) - [popyue/CVE-2025-8110](https://github.com/popyue/CVE-2025-8110) - [X4BROZER/CVE-2025-8110](https://github.com/X4BROZER/CVE-2025-8110) - [hassan-hamadi/CVE-2025-8110-Silentium-HTB](https://github.com/hassan-hamadi/CVE-2025-8110-Silentium-HTB) +- [AdityaInnovates/CVE-2025-8110-Gogs-RCE-Exploit](https://github.com/AdityaInnovates/CVE-2025-8110-Gogs-RCE-Exploit) - [get-xor/coreweave-demo-2026-05](https://github.com/get-xor/coreweave-demo-2026-05) - [mananispiwpiw/CVE-2025-8110-PoC](https://github.com/mananispiwpiw/CVE-2025-8110-PoC) @@ -12952,7 +12964,6 @@ - [AzureADTrent/CVE-2025-58434-59528](https://github.com/AzureADTrent/CVE-2025-58434-59528) - [Kamigold/Flowise-RCE](https://github.com/Kamigold/Flowise-RCE) - [CVETeam/FlowiseAI-Critical-KillChain](https://github.com/CVETeam/FlowiseAI-Critical-KillChain) -- [TYehan/CVE-2025-58434-59528](https://github.com/TYehan/CVE-2025-58434-59528) - [p1ctur3p3rf3ct/CVE-2025-58434](https://github.com/p1ctur3p3rf3ct/CVE-2025-58434) - [jwsly12/CVE-2025-58434-59528-htb-ctf](https://github.com/jwsly12/CVE-2025-58434-59528-htb-ctf) - [kartik2005221/CVE-2025-58434-poc](https://github.com/kartik2005221/CVE-2025-58434-poc) @@ -13577,13 +13588,6 @@ - [r0otk3r/CVE-2025-63353](https://github.com/r0otk3r/CVE-2025-63353) - [Zvckster/CVE-2025-63353](https://github.com/Zvckster/CVE-2025-63353) -### CVE-2025-63389 (2025-12-18) - -A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations. - - -- [nuclide-research/VisorGoose](https://github.com/nuclide-research/VisorGoose) - ### CVE-2025-63406 (2025-11-13) An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php @@ -27789,6 +27793,7 @@ - [FireWolfWang/CVE-2023-6019](https://github.com/FireWolfWang/CVE-2023-6019) - [Clydeston/CVE-2023-6019](https://github.com/Clydeston/CVE-2023-6019) - [Zohaibkhan1472/cve-2023-6019](https://github.com/Zohaibkhan1472/cve-2023-6019) +- [joaquinrrr/CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) ### CVE-2023-6036 (2024-02-12) @@ -30763,13 +30768,6 @@ - [KIL0BYT3X/CVE-2023-31753](https://github.com/KIL0BYT3X/CVE-2023-31753) -### CVE-2023-31756 (2023-05-19) - -A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions <= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter. - - -- [StanleyJobsonAU/LongBow](https://github.com/StanleyJobsonAU/LongBow) - ### CVE-2023-31779 (2023-05-22) Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature. @@ -35696,6 +35694,7 @@ - [OpsCipher/CVE-2022-0543](https://github.com/OpsCipher/CVE-2022-0543) - [SiennaSkies/redisHack](https://github.com/SiennaSkies/redisHack) - [netw0rk7/CVE-2022-0543-Home-Lab](https://github.com/netw0rk7/CVE-2022-0543-Home-Lab) +- [K3ysTr0K3R/CVE-2022-0543](https://github.com/K3ysTr0K3R/CVE-2022-0543) ### CVE-2022-0591 (2022-03-21) @@ -43124,13 +43123,6 @@ - [uthrasri/frameworks_opt_net_wifi_CVE-2021-0466](https://github.com/uthrasri/frameworks_opt_net_wifi_CVE-2021-0466) -### CVE-2021-0481 (2021-06-11) - -In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpected URI handler. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-172939189 - - -- [ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2021-0481](https://github.com/ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2021-0481) - ### CVE-2021-0511 (2021-06-21) In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-178055795 @@ -43840,6 +43832,7 @@ - [realatharva15/polkit-CVE-2021-3560_writeup](https://github.com/realatharva15/polkit-CVE-2021-3560_writeup) - [yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation](https://github.com/yutasato88/CVE-2021-3560-PolkitPrivilegeEsclation) - [Jeanback1/CVE-2021-3560-exploit](https://github.com/Jeanback1/CVE-2021-3560-exploit) +- [adakoifman/CVE-2021-3560](https://github.com/adakoifman/CVE-2021-3560) ### CVE-2021-3572 (2021-11-10) @@ -58598,7 +58591,6 @@ - [gozn/detect-CVE-2019-15107-by-pyshark](https://github.com/gozn/detect-CVE-2019-15107-by-pyshark) - [h4ck0rman/CVE-2019-15107](https://github.com/h4ck0rman/CVE-2019-15107) - [olingo99/CVE-2019-15107](https://github.com/olingo99/CVE-2019-15107) -- [aamfrk/Webmin-CVE-2019-15107](https://github.com/aamfrk/Webmin-CVE-2019-15107) - [0x4r2/Webmin-CVE-2019-15107](https://github.com/0x4r2/Webmin-CVE-2019-15107) - [NasrallahBaadi/CVE-2019-15107](https://github.com/NasrallahBaadi/CVE-2019-15107) - [D4rkScare/CVE-2019-15107](https://github.com/D4rkScare/CVE-2019-15107)