nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/01 00:49:15

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-01 09:49:15 +09:00
1 parent 01a646369b
commit e5d5a2ffdc
76 files changed
+395 -392
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-2523.json
+4 -4
View File
@@ -318,10 +318,10 @@
"description": "Python exploit for vsftpd 2.3.4 - Backdoor Command Execution",
"fork": false,
"created_at": "2023-05-09T18:44:05Z",
"updated_at": "2026-05-25T05:04:17Z",
"updated_at": "2026-05-31T23:22:44Z",
"pushed_at": "2023-05-09T19:14:25Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -341,7 +341,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-05-31T17:14:38Z",
"pushed_at": "2026-05-31T17:14:34Z",
"updated_at": "2026-06-01T00:05:22Z",
"pushed_at": "2026-06-01T00:05:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-05-31T17:43:31Z",
"pushed_at": "2026-05-31T17:43:28Z",
"updated_at": "2026-05-31T23:32:25Z",
"pushed_at": "2026-05-31T23:32:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-2215.json
+1 -1
View File
@@ -247,7 +247,7 @@
"description": "Triggering and Analyzing Android Kernel Vulnerability CVE-2019-2215",
"fork": false,
"created_at": "2020-06-07T15:03:07Z",
"updated_at": "2026-05-31T17:08:21Z",
"updated_at": "2026-05-31T23:22:31Z",
"pushed_at": "2022-09-04T14:16:50Z",
"stargazers_count": 70,
"watchers_count": 70,
2019/CVE-2019-6340.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "This exploit is based on CVE-2019-6340 and was built upon the original exploit by leonjza and the Metasploit module, extending it can be executed multiple times against the same target without waiting for cache expiration.",
"fork": false,
"created_at": "2026-05-27T01:16:33Z",
"updated_at": "2026-05-27T01:28:32Z",
"pushed_at": "2026-05-27T01:28:29Z",
"updated_at": "2026-05-31T19:35:32Z",
"pushed_at": "2026-05-31T19:35:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-05-31T17:14:09Z",
"pushed_at": "2026-05-31T17:14:06Z",
"updated_at": "2026-06-01T00:05:16Z",
"pushed_at": "2026-06-01T00:05:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+6 -6
View File
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-05-30T08:21:26Z",
"updated_at": "2026-05-31T23:09:43Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1298,
"watchers_count": 1298,
"stargazers_count": 1300,
"watchers_count": 1300,
"has_discussions": false,
"forks_count": 280,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 280,
"watchers": 1298,
"watchers": 1300,
"score": 0,
"subscribers_count": 32
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-05-31T17:41:24Z",
"pushed_at": "2026-05-31T17:41:20Z",
"updated_at": "2026-05-31T23:41:24Z",
"pushed_at": "2026-05-31T23:41:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-17103.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 17,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"forks": 18,
"watchers": 18,
"score": 0,
"subscribers_count": 0
2020/CVE-2020-6864.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "checks if zte ips are vunverable to cve-2020-6864",
"fork": false,
"created_at": "2026-04-13T17:08:02Z",
"updated_at": "2026-05-21T11:15:48Z",
"updated_at": "2026-05-31T19:28:07Z",
"pushed_at": "2026-04-13T17:13:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-1675.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527",
"fork": false,
"created_at": "2021-06-29T17:24:14Z",
"updated_at": "2026-05-31T14:24:40Z",
"updated_at": "2026-05-31T21:39:53Z",
"pushed_at": "2021-07-20T15:28:13Z",
"stargazers_count": 1984,
"watchers_count": 1984,
"stargazers_count": 1985,
"watchers_count": 1985,
"has_discussions": false,
"forks_count": 577,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 577,
"watchers": 1984,
"watchers": 1985,
"score": 0,
"subscribers_count": 39
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-05-31T17:52:38Z",
"pushed_at": "2026-05-31T17:52:34Z",
"updated_at": "2026-05-31T23:43:13Z",
"pushed_at": "2026-05-31T23:43:09Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-34527.json
+2 -2
View File
@@ -91,7 +91,7 @@
"stargazers_count": 317,
"watchers_count": 317,
"has_discussions": false,
"forks_count": 74,
"forks_count": 75,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 74,
"forks": 75,
"watchers": 317,
"score": 0,
"subscribers_count": 10
2021/CVE-2021-3493.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Ubuntu OverlayFS Local Privesc",
"fork": false,
"created_at": "2021-04-19T20:07:01Z",
"updated_at": "2026-05-30T05:56:42Z",
"updated_at": "2026-05-31T20:53:35Z",
"pushed_at": "2024-04-02T02:48:18Z",
"stargazers_count": 442,
"watchers_count": 442,
"stargazers_count": 443,
"watchers_count": 443,
"has_discussions": false,
"forks_count": 137,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 137,
"watchers": 442,
"watchers": 443,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-3972.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484005758,
"name": "CVE-2021-3972",
"full_name": "killvxk\/CVE-2021-3972",
"owner": {
"login": "killvxk",
"id": 309424,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/309424?v=4",
"html_url": "https:\/\/github.com\/killvxk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/killvxk\/CVE-2021-3972",
"description": "just poc",
"fork": false,
"created_at": "2022-04-21T10:25:32Z",
"updated_at": "2022-05-13T08:58:40Z",
"pushed_at": "2022-04-21T11:02:15Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-4034.json
+6 -6
View File
@@ -150,10 +150,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-05-30T16:45:18Z",
"updated_at": "2026-05-31T21:40:42Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1308,
"watchers_count": 1308,
"stargazers_count": 1309,
"watchers_count": 1309,
"has_discussions": false,
"forks_count": 206,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 206,
"watchers": 1308,
"watchers": 1309,
"score": 0,
"subscribers_count": 12
},
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-05-31T17:22:11Z",
"pushed_at": "2026-05-31T17:22:07Z",
"updated_at": "2026-06-01T00:11:54Z",
"pushed_at": "2026-06-01T00:11:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+51
View File
@@ -14080,5 +14080,56 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255516094,
"name": "Log4ShellAuditor",
"full_name": "C00LN3T\/Log4ShellAuditor",
"owner": {
"login": "C00LN3T",
"id": 217349927,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217349927?v=4",
"html_url": "https:\/\/github.com\/C00LN3T",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/C00LN3T\/Log4ShellAuditor",
"description": "An autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and compliance reporting for CVE-2021-44228 (Log4Shell).",
"fork": false,
"created_at": "2026-05-31T23:20:17Z",
"updated_at": "2026-05-31T23:55:12Z",
"pushed_at": "2026-05-31T23:55:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent",
"agentic",
"audit",
"auto-audit",
"automation",
"autonomous-agent",
"cve-2021-44228",
"cyber-security",
"cybersecurity",
"cybersecurity-tools",
"devsecops",
"golang",
"log4shell",
"oob-verification",
"pentesting",
"remediation",
"security-agent"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-22947.json
+2 -2
View File
@@ -1972,8 +1972,8 @@
"description": "Technical report about CVE-2022-22947 in Spring Cloud Gateway and its exploitation through exposed Actuator endpoints.",
"fork": false,
"created_at": "2026-05-29T17:34:32Z",
"updated_at": "2026-05-31T17:19:35Z",
"pushed_at": "2026-05-31T17:19:32Z",
"updated_at": "2026-05-31T21:31:10Z",
"pushed_at": "2026-05-31T21:31:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-42005.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Vulnerability research on Tesla Model 3\/Y infotainment systems. 6 vulnerabilities, 4 CVEs (CVE-2022-42005 through CVE-2022-42008). Root shell, persistent access, insurance telemetry spoofing.",
"fork": false,
"created_at": "2026-05-31T18:16:43Z",
"updated_at": "2026-05-31T18:21:14Z",
"pushed_at": "2026-05-31T18:21:11Z",
"updated_at": "2026-05-31T18:34:18Z",
"pushed_at": "2026-05-31T18:34:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-05-31T17:09:44Z",
"pushed_at": "2026-05-31T17:09:40Z",
"updated_at": "2026-06-01T00:01:50Z",
"pushed_at": "2026-06-01T00:01:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38709.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 20,
"forks": 21,
"watchers": 133,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-05-31T18:19:46Z",
"pushed_at": "2026-05-31T18:19:43Z",
"updated_at": "2026-05-31T22:11:55Z",
"pushed_at": "2026-05-31T22:11:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-51467.json
-33
View File
@@ -188,39 +188,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 742705000,
"name": "BadBizness-CVE-2023-51467",
"full_name": "jakeotte\/BadBizness-CVE-2023-51467",
"owner": {
"login": "jakeotte",
"id": 39099220,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39099220?v=4",
"html_url": "https:\/\/github.com\/jakeotte",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jakeotte\/BadBizness-CVE-2023-51467",
"description": "Auto exploit script for the Java web framework OF Biz under CVE-2023-51467. ",
"fork": false,
"created_at": "2024-01-13T05:40:38Z",
"updated_at": "2024-01-14T14:17:16Z",
"pushed_at": "2024-01-13T06:43:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 856884125,
"name": "Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-",
2023/CVE-2023-6553.json
+42
View File
@@ -177,5 +177,47 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255375558,
"name": "WordPress_Backup_Migration-RCE_Unauthenticated",
"full_name": "joaoaugustom\/WordPress_Backup_Migration-RCE_Unauthenticated",
"owner": {
"login": "joaoaugustom",
"id": 34131293,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34131293?v=4",
"html_url": "https:\/\/github.com\/joaoaugustom",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaoaugustom\/WordPress_Backup_Migration-RCE_Unauthenticated",
"description": "This exploit is based on CVE-2023-6553 and was built upon the original exploit by Chocapik, it was added that a direct reverse shell can be obtained.",
"fork": false,
"created_at": "2026-05-31T18:50:36Z",
"updated_at": "2026-05-31T19:27:01Z",
"pushed_at": "2026-05-31T19:26:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"backup",
"backup-migration",
"cve",
"cve-2023-6553",
"exploit",
"penetration-testing",
"plugin",
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-05-31T18:19:43Z",
"pushed_at": "2026-05-31T18:19:40Z",
"updated_at": "2026-05-31T22:12:16Z",
"pushed_at": "2026-05-31T22:12:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-05-31T16:06:54Z",
"pushed_at": "2026-05-31T16:06:50Z",
"updated_at": "2026-05-31T23:01:24Z",
"pushed_at": "2026-05-31T23:01:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-38472.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 20,
"forks": 21,
"watchers": 133,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-38475.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "CVE-2024-38475 exploitation & scanning tool with Mullvad VPN rotation",
"fork": false,
"created_at": "2026-05-31T18:12:18Z",
"updated_at": "2026-05-31T18:12:23Z",
"pushed_at": "2026-05-31T18:12:19Z",
"updated_at": "2026-05-31T21:43:45Z",
"pushed_at": "2026-05-31T21:43:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-46987.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive server files via the MediaController. Intended for authorized security auditing and educational research only. ",
"fork": false,
"created_at": "2026-02-01T02:06:33Z",
"updated_at": "2026-05-10T15:02:18Z",
"updated_at": "2026-05-31T23:00:35Z",
"pushed_at": "2026-05-10T15:02:14Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-05-31T18:25:01Z",
"pushed_at": "2026-05-31T18:24:58Z",
"updated_at": "2026-05-31T22:17:12Z",
"pushed_at": "2026-05-31T22:17:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-05-31T18:23:55Z",
"pushed_at": "2026-05-31T18:23:51Z",
"updated_at": "2026-05-31T22:16:30Z",
"pushed_at": "2026-05-31T22:16:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-05-31T18:46:37Z",
"pushed_at": "2026-05-31T18:46:34Z",
"updated_at": "2026-05-31T22:40:31Z",
"pushed_at": "2026-05-31T22:40:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-05-31T16:18:55Z",
"pushed_at": "2026-05-31T16:18:51Z",
"updated_at": "2026-05-31T23:12:56Z",
"pushed_at": "2026-05-31T23:12:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-05-31T17:16:21Z",
"pushed_at": "2026-05-31T17:16:18Z",
"updated_at": "2026-06-01T00:07:00Z",
"pushed_at": "2026-06-01T00:06:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-05-31T17:08:17Z",
"pushed_at": "2026-05-31T17:08:13Z",
"updated_at": "2026-06-01T00:00:22Z",
"pushed_at": "2026-06-01T00:00:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-05-31T17:17:44Z",
"pushed_at": "2026-05-31T17:17:40Z",
"updated_at": "2026-06-01T00:08:09Z",
"pushed_at": "2026-06-01T00:08:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-05-31T17:17:51Z",
"pushed_at": "2026-05-31T17:17:48Z",
"updated_at": "2026-06-01T00:08:14Z",
"pushed_at": "2026-06-01T00:08:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-05-31T18:36:34Z",
"pushed_at": "2026-05-31T18:36:30Z",
"updated_at": "2026-05-31T22:28:32Z",
"pushed_at": "2026-05-31T22:28:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-05-31T17:17:49Z",
"pushed_at": "2026-05-31T17:17:46Z",
"updated_at": "2026-06-01T00:08:03Z",
"pushed_at": "2026-06-01T00:07:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-05-31T17:38:03Z",
"pushed_at": "2026-05-31T17:38:00Z",
"updated_at": "2026-06-01T00:25:25Z",
"pushed_at": "2026-06-01T00:25:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-05-31T17:38:52Z",
"pushed_at": "2026-05-31T17:38:48Z",
"updated_at": "2026-06-01T00:26:12Z",
"pushed_at": "2026-06-01T00:26:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-05-31T15:45:58Z",
"pushed_at": "2026-05-31T15:45:55Z",
"updated_at": "2026-05-31T22:38:35Z",
"pushed_at": "2026-05-31T22:38:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-05-31T17:11:05Z",
"pushed_at": "2026-05-31T17:11:01Z",
"updated_at": "2026-06-01T00:02:48Z",
"pushed_at": "2026-06-01T00:02:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-05-31T17:10:39Z",
"pushed_at": "2026-05-31T17:10:36Z",
"updated_at": "2026-06-01T00:02:25Z",
"pushed_at": "2026-06-01T00:02:21Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+36 -36
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-05-31T18:10:00Z",
"pushed_at": "2026-05-31T18:09:56Z",
"updated_at": "2026-05-31T22:02:56Z",
"pushed_at": "2026-05-31T22:02:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-05-31T18:09:38Z",
"pushed_at": "2026-05-31T18:09:35Z",
"updated_at": "2026-05-31T22:02:31Z",
"pushed_at": "2026-05-31T22:02:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-05-31T18:10:02Z",
"pushed_at": "2026-05-31T18:09:58Z",
"updated_at": "2026-05-31T22:02:53Z",
"pushed_at": "2026-05-31T22:02:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-05-31T18:10:42Z",
"pushed_at": "2026-05-31T18:10:38Z",
"updated_at": "2026-05-31T22:03:40Z",
"pushed_at": "2026-05-31T22:03:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-05-31T18:09:15Z",
"pushed_at": "2026-05-31T18:09:12Z",
"updated_at": "2026-05-31T22:02:12Z",
"pushed_at": "2026-05-31T22:02:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-05-31T18:10:22Z",
"pushed_at": "2026-05-31T18:10:19Z",
"updated_at": "2026-05-31T22:03:16Z",
"pushed_at": "2026-05-31T22:03:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-05-31T18:13:28Z",
"pushed_at": "2026-05-31T18:13:24Z",
"updated_at": "2026-05-31T22:06:08Z",
"pushed_at": "2026-05-31T22:06:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-05-31T18:09:57Z",
"pushed_at": "2026-05-31T18:09:52Z",
"updated_at": "2026-05-31T22:02:51Z",
"pushed_at": "2026-05-31T22:02:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-05-31T18:10:46Z",
"pushed_at": "2026-05-31T18:10:42Z",
"updated_at": "2026-05-31T22:03:43Z",
"pushed_at": "2026-05-31T22:03:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2464,10 +2464,10 @@
"description": "Next.js React Server Components RCE exploit for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T05:41:24Z",
"updated_at": "2026-05-28T18:32:36Z",
"updated_at": "2026-05-31T22:08:05Z",
"pushed_at": "2025-12-05T07:20:34Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -2487,7 +2487,7 @@
],
"visibility": "public",
"forks": 13,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 1
},
@@ -12251,8 +12251,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-05-31T18:09:32Z",
"pushed_at": "2026-05-31T18:09:28Z",
"updated_at": "2026-05-31T22:02:39Z",
"pushed_at": "2026-05-31T22:02:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12336,8 +12336,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-05-31T18:09:08Z",
"pushed_at": "2026-05-31T18:09:04Z",
"updated_at": "2026-05-31T22:01:48Z",
"pushed_at": "2026-05-31T22:01:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12385,8 +12385,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-05-31T18:08:53Z",
"pushed_at": "2026-05-31T18:08:49Z",
"updated_at": "2026-05-31T22:01:51Z",
"pushed_at": "2026-05-31T22:01:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12470,8 +12470,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-05-31T18:10:29Z",
"pushed_at": "2026-05-31T18:10:25Z",
"updated_at": "2026-05-31T22:03:23Z",
"pushed_at": "2026-05-31T22:03:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12672,8 +12672,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-05-31T18:10:17Z",
"pushed_at": "2026-05-31T18:10:13Z",
"updated_at": "2026-05-31T22:03:15Z",
"pushed_at": "2026-05-31T22:03:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12942,8 +12942,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-05-31T18:15:14Z",
"pushed_at": "2026-05-31T18:15:10Z",
"updated_at": "2026-05-31T22:07:50Z",
"pushed_at": "2026-05-31T22:07:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13463,8 +13463,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-05-31T18:20:38Z",
"pushed_at": "2026-05-31T18:20:34Z",
"updated_at": "2026-05-31T22:13:01Z",
"pushed_at": "2026-05-31T22:12:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-05-31T18:15:48Z",
"pushed_at": "2026-05-31T18:15:44Z",
"updated_at": "2026-05-31T22:08:13Z",
"pushed_at": "2026-05-31T22:08:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-05-31T18:36:29Z",
"pushed_at": "2026-05-31T18:36:26Z",
"updated_at": "2026-05-31T22:28:32Z",
"pushed_at": "2026-05-31T22:28:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-05-31T17:36:24Z",
"pushed_at": "2026-05-31T17:36:20Z",
"updated_at": "2026-06-01T00:24:06Z",
"pushed_at": "2026-06-01T00:24:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-05-31T18:04:42Z",
"pushed_at": "2026-05-31T18:04:39Z",
"updated_at": "2026-05-31T21:57:58Z",
"pushed_at": "2026-05-31T21:57:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-05-31T16:12:20Z",
"pushed_at": "2026-05-31T16:12:17Z",
"updated_at": "2026-05-31T23:06:26Z",
"pushed_at": "2026-05-31T23:06:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-05-31T18:11:07Z",
"pushed_at": "2026-05-31T18:11:03Z",
"updated_at": "2026-05-31T22:04:05Z",
"pushed_at": "2026-05-31T22:04:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-05-31T18:33:07Z",
"pushed_at": "2026-05-31T18:33:03Z",
"updated_at": "2026-05-31T22:25:13Z",
"pushed_at": "2026-05-31T22:25:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-05-31T15:59:24Z",
"pushed_at": "2026-05-31T15:59:20Z",
"updated_at": "2026-05-31T22:53:27Z",
"pushed_at": "2026-05-31T22:53:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-31T15:54:58Z",
"pushed_at": "2026-05-31T15:54:54Z",
"updated_at": "2026-05-31T22:48:39Z",
"pushed_at": "2026-05-31T22:48:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8088.json
+6 -6
View File
@@ -631,10 +631,10 @@
"description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.",
"fork": false,
"created_at": "2025-09-04T13:33:07Z",
"updated_at": "2026-05-22T10:32:29Z",
"updated_at": "2026-05-31T20:12:56Z",
"pushed_at": "2025-09-04T13:46:26Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -645,7 +645,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-05-31T18:05:54Z",
"pushed_at": "2026-05-31T18:05:51Z",
"updated_at": "2026-05-31T21:58:51Z",
"pushed_at": "2026-05-31T21:58:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-8110 PoC",
"fork": false,
"created_at": "2025-12-13T04:15:23Z",
"updated_at": "2026-05-30T07:14:40Z",
"updated_at": "2026-05-31T20:43:15Z",
"pushed_at": "2025-12-24T22:17:22Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 24,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-05-31T18:14:45Z",
"pushed_at": "2026-05-31T18:14:41Z",
"updated_at": "2026-05-31T22:07:29Z",
"pushed_at": "2026-05-31T22:07:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-05-31T18:16:21Z",
"pushed_at": "2026-05-31T18:16:17Z",
"updated_at": "2026-05-31T22:08:46Z",
"pushed_at": "2026-05-31T22:08:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+10 -10
View File
@@ -113,10 +113,10 @@
"description": "CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC",
"fork": false,
"created_at": "2026-05-06T17:44:38Z",
"updated_at": "2026-05-27T00:35:08Z",
"updated_at": "2026-05-31T18:53:17Z",
"pushed_at": "2026-05-06T17:53:25Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": true,
"forks_count": 10,
"allow_forking": true,
@@ -132,7 +132,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
@@ -151,12 +151,12 @@
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
"updated_at": "2026-05-21T04:56:49Z",
"updated_at": "2026-06-01T00:31:20Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -174,8 +174,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 4,
"watchers": 13,
"forks": 5,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0257.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255552142,
"name": "CVE-2026-0257",
"full_name": "jennydokumi30\/CVE-2026-0257",
"owner": {
"login": "jennydokumi30",
"id": 246604704,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/246604704?v=4",
"html_url": "https:\/\/github.com\/jennydokumi30",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jennydokumi30\/CVE-2026-0257",
"description": null,
"fork": false,
"created_at": "2026-06-01T00:41:09Z",
"updated_at": "2026-06-01T00:41:14Z",
"pushed_at": "2026-06-01T00:41:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-31T15:54:58Z",
"pushed_at": "2026-05-31T15:54:54Z",
"updated_at": "2026-05-31T22:48:39Z",
"pushed_at": "2026-05-31T22:48:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-05-31T15:54:22Z",
"pushed_at": "2026-05-31T15:54:18Z",
"updated_at": "2026-05-31T22:47:46Z",
"pushed_at": "2026-05-31T22:47:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-05-31T15:53:31Z",
"pushed_at": "2026-05-31T15:53:27Z",
"updated_at": "2026-05-31T22:46:37Z",
"pushed_at": "2026-05-31T22:46:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23744.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255392915,
"name": "CVE-2026-23744",
"full_name": "Least-Significant-Bit\/CVE-2026-23744",
"owner": {
"login": "Least-Significant-Bit",
"id": 124576617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124576617?v=4",
"html_url": "https:\/\/github.com\/Least-Significant-Bit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Least-Significant-Bit\/CVE-2026-23744",
"description": "Remote Code Execution in MCPJam 1.4.2 and older.",
"fork": false,
"created_at": "2026-05-31T19:17:49Z",
"updated_at": "2026-05-31T19:20:16Z",
"pushed_at": "2026-05-31T19:20:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23918.json
+1 -1
View File
@@ -220,7 +220,7 @@
"description": "Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE\/vulnerability detection for Apache 2.4.66.",
"fork": false,
"created_at": "2026-05-06T13:00:15Z",
"updated_at": "2026-05-28T02:09:16Z",
"updated_at": "2026-05-31T19:25:51Z",
"pushed_at": "2026-05-06T13:09:45Z",
"stargazers_count": 19,
"watchers_count": 19,
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-05-31T18:44:34Z",
"pushed_at": "2026-05-31T18:44:31Z",
"updated_at": "2026-05-31T22:37:55Z",
"pushed_at": "2026-05-31T22:37:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-05-31T18:40:56Z",
"pushed_at": "2026-05-31T18:40:53Z",
"updated_at": "2026-05-31T22:33:51Z",
"pushed_at": "2026-05-31T22:33:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-05-31T16:14:19Z",
"pushed_at": "2026-05-31T16:14:15Z",
"updated_at": "2026-05-31T23:08:16Z",
"pushed_at": "2026-05-31T23:08:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-05-31T15:56:48Z",
"pushed_at": "2026-05-31T15:56:45Z",
"updated_at": "2026-05-31T22:50:29Z",
"pushed_at": "2026-05-31T22:50:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-05-31T16:02:24Z",
"pushed_at": "2026-05-31T16:02:20Z",
"updated_at": "2026-05-31T22:56:00Z",
"pushed_at": "2026-05-31T22:55:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-05-31T16:00:38Z",
"pushed_at": "2026-05-31T16:00:34Z",
"updated_at": "2026-05-31T22:54:42Z",
"pushed_at": "2026-05-31T22:54:38Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-05-31T16:18:33Z",
"pushed_at": "2026-05-31T16:18:30Z",
"updated_at": "2026-05-31T23:12:29Z",
"pushed_at": "2026-05-31T23:12:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+12 -12
View File
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-05-31T18:28:28Z",
"updated_at": "2026-06-01T00:32:08Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 3923,
"watchers_count": 3923,
"stargazers_count": 3925,
"watchers_count": 3925,
"has_discussions": false,
"forks_count": 874,
"forks_count": 875,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"xint-code"
],
"visibility": "public",
"forks": 874,
"watchers": 3923,
"forks": 875,
"watchers": 3925,
"score": 0,
"subscribers_count": 32
},
@@ -129,7 +129,7 @@
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -137,7 +137,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 20,
"forks": 21,
"watchers": 97,
"score": 0,
"subscribers_count": 0
@@ -7799,8 +7799,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-05-31T16:38:00Z",
"pushed_at": "2026-05-31T16:37:57Z",
"updated_at": "2026-05-31T23:32:39Z",
"pushed_at": "2026-05-31T23:32:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8634,8 +8634,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-05-31T16:38:53Z",
"pushed_at": "2026-05-31T16:38:49Z",
"updated_at": "2026-05-31T23:33:26Z",
"pushed_at": "2026-05-31T23:33:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-05-31T16:15:26Z",
"pushed_at": "2026-05-31T16:15:22Z",
"updated_at": "2026-05-31T23:09:28Z",
"pushed_at": "2026-05-31T23:09:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-40369.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-05-31T16:29:53Z",
"updated_at": "2026-05-31T21:33:34Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 215,
"watchers_count": 215,
"stargazers_count": 216,
"watchers_count": 216,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 215,
"watchers": 216,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-41940.json
+2 -2
View File
@@ -1812,8 +1812,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-05-31T16:39:22Z",
"pushed_at": "2026-05-31T16:39:18Z",
"updated_at": "2026-05-31T23:33:49Z",
"pushed_at": "2026-05-31T23:33:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42945.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-05-31T13:28:02Z",
"updated_at": "2026-06-01T00:43:41Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 822,
"watchers_count": 822,
"stargazers_count": 823,
"watchers_count": 823,
"has_discussions": false,
"forks_count": 154,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 154,
"watchers": 822,
"watchers": 823,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-45585.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
"updated_at": "2026-05-31T18:15:54Z",
"updated_at": "2026-06-01T00:36:17Z",
"pushed_at": "2026-05-23T17:24:38Z",
"stargazers_count": 453,
"watchers_count": 453,
"stargazers_count": 458,
"watchers_count": 458,
"has_discussions": false,
"forks_count": 16,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -108,8 +108,8 @@
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 16,
"watchers": 453,
"forks": 17,
"watchers": 458,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-4802.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Arbitrary command execution on Cockpit",
"fork": false,
"created_at": "2026-05-11T20:18:53Z",
"updated_at": "2026-05-14T11:42:32Z",
"updated_at": "2026-06-01T00:35:52Z",
"pushed_at": "2026-05-11T22:30:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-6644.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1224119798,
"name": "CVE-2026-6644",
"full_name": "uky007\/CVE-2026-6644",
"owner": {
"login": "uky007",
"id": 38967345,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38967345?v=4",
"html_url": "https:\/\/github.com\/uky007",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/uky007\/CVE-2026-6644",
"description": null,
"fork": false,
"created_at": "2026-04-29T01:27:42Z",
"updated_at": "2026-04-29T01:34:04Z",
"pushed_at": "2026-04-29T01:34:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-6770.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1224021535,
"name": "CVE-2026-6770",
"full_name": "nightcorefan94\/CVE-2026-6770",
"owner": {
"login": "nightcorefan94",
"id": 274578546,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/274578546?v=4",
"html_url": "https:\/\/github.com\/nightcorefan94",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nightcorefan94\/CVE-2026-6770",
"description": "CVE-2026-6770 PoC for Firefox\/Tor",
"fork": false,
"created_at": "2026-04-28T22:12:30Z",
"updated_at": "2026-04-28T22:14:26Z",
"pushed_at": "2026-04-28T22:14:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9082.json
+4 -4
View File
@@ -249,10 +249,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-26T17:09:20Z",
"updated_at": "2026-05-29T10:19:29Z",
"updated_at": "2026-05-31T20:43:46Z",
"pushed_at": "2026-05-27T15:47:08Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -263,7 +263,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
README.md
+4 -22
View File
@@ -48,6 +48,7 @@
- [akashsingh0454/CVE-2026-0257-PoC](https://github.com/akashsingh0454/CVE-2026-0257-PoC)
- [HORKimhab/CVE-2026-0257](https://github.com/HORKimhab/CVE-2026-0257)
- [0xBlackash/CVE-2026-0257](https://github.com/0xBlackash/CVE-2026-0257)
- [jennydokumi30/CVE-2026-0257](https://github.com/jennydokumi30/CVE-2026-0257)
### CVE-2026-0265 (2026-05-13)
@@ -480,13 +481,6 @@
- [murrez/CVE-2026-6433](https://github.com/murrez/CVE-2026-6433)
### CVE-2026-6644 (2026-04-20)
<code>A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation of user-supplied input before it is passed to a system shell. Successful exploitation allows an attacker to achieve Remote Code Execution (RCE) and fully compromise the system.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.
</code>
- [uky007/CVE-2026-6644](https://github.com/uky007/CVE-2026-6644)
### CVE-2026-6664 (2026-05-09)
<code>An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
@@ -501,13 +495,6 @@
- [xxconi/CVE-2026-6741](https://github.com/xxconi/CVE-2026-6741)
### CVE-2026-6770 (2026-04-21)
<code>Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
</code>
- [nightcorefan94/CVE-2026-6770](https://github.com/nightcorefan94/CVE-2026-6770)
### CVE-2026-6857 (2026-04-22)
<code>A flaw was found in camel-infinispan. This vulnerability involves unsafe deserialization in the ProtoStream remote aggregation repository. A remote attacker with low privileges could exploit this by sending specially crafted data, leading to arbitrary code execution. This allows the attacker to gain full control over the affected system, impacting its confidentiality, integrity, and availability.
@@ -869,6 +856,7 @@
- [thisisish/HTB-DevHub](https://github.com/thisisish/HTB-DevHub)
- [SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2](https://github.com/SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2)
- [sbouabid-sec/CVE-2026-23744-POC](https://github.com/sbouabid-sec/CVE-2026-23744-POC)
- [Least-Significant-Bit/CVE-2026-23744](https://github.com/Least-Significant-Bit/CVE-2026-23744)
### CVE-2026-23813 (2026-03-11)
@@ -27136,6 +27124,7 @@
- [cc3305/CVE-2023-6553](https://github.com/cc3305/CVE-2023-6553)
- [Harshit-Mashru/CVE-2023-6553](https://github.com/Harshit-Mashru/CVE-2023-6553)
- [0x00phantom-hat/CVE-2023-6553-RCE-Exploit](https://github.com/0x00phantom-hat/CVE-2023-6553-RCE-Exploit)
- [joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated](https://github.com/joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated)
### CVE-2023-6595 (2023-12-14)
@@ -34638,7 +34627,6 @@
- [K3ysTr0K3R/CVE-2023-51467-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-51467-EXPLOIT)
- [jakabakos/Apache-OFBiz-Authentication-Bypass](https://github.com/jakabakos/Apache-OFBiz-Authentication-Bypass)
- [vulncheck-oss/cve-2023-51467](https://github.com/vulncheck-oss/cve-2023-51467)
- [jakeotte/BadBizness-CVE-2023-51467](https://github.com/jakeotte/BadBizness-CVE-2023-51467)
- [AhmedMansour93/Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-](https://github.com/AhmedMansour93/Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-)
### CVE-2023-51504 (2024-02-05)
@@ -43183,13 +43171,6 @@
- [QiuhaoLi/CVE-2021-3929-3947](https://github.com/QiuhaoLi/CVE-2021-3929-3947)
### CVE-2021-3972 (2022-04-22)
<code>A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
</code>
- [killvxk/CVE-2021-3972](https://github.com/killvxk/CVE-2021-3972)
### CVE-2021-4034 (2022-01-28)
<code>A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
@@ -48351,6 +48332,7 @@
- [MAFO-sec/mi-laboratorio-log4shell](https://github.com/MAFO-sec/mi-laboratorio-log4shell)
- [felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-](https://github.com/felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-)
- [jomjosh17/Log4Shell-CVE-2021-44228-](https://github.com/jomjosh17/Log4Shell-CVE-2021-44228-)
- [C00LN3T/Log4ShellAuditor](https://github.com/C00LN3T/Log4ShellAuditor)
### CVE-2021-44255 (2022-01-31)