nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/28 06:48:36

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-28 15:48:36 +09:00
1 parent bed70a0a2e
commit e6e8b9ac06
62 files changed
+588 -376
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-4210.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2016/CVE-2016-0638.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2016/CVE-2016-6187.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "cve-2016-6187",
"fork": false,
"created_at": "2019-07-23T12:30:02Z",
"updated_at": "2022-02-21T11:33:21Z",
"updated_at": "2026-07-28T05:45:53Z",
"pushed_at": "2019-07-23T12:30:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2017/CVE-2017-3248.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2018/CVE-2018-2628.json
+4 -4
View File
@@ -612,10 +612,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -647,7 +647,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-27T23:30:12Z",
"pushed_at": "2026-07-27T23:30:07Z",
"updated_at": "2026-07-28T04:16:54Z",
"pushed_at": "2026-07-28T04:16:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-11358.json
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-07-27T21:00:55Z",
"updated_at": "2026-07-28T02:23:13Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 298,
"watchers_count": 298,
"stargazers_count": 297,
"watchers_count": 297,
"has_discussions": false,
"forks_count": 89,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 89,
"watchers": 298,
"watchers": 297,
"score": 0,
"subscribers_count": 14
},
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-07-27T00:03:15Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4292,
"watchers_count": 4292,
"stargazers_count": 4291,
"watchers_count": 4291,
"has_discussions": false,
"forks_count": 1082,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1082,
"watchers": 4292,
"watchers": 4291,
"score": 0,
"subscribers_count": 148
},
2019/CVE-2019-2618.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -247,7 +247,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
}
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-27T23:39:20Z",
"pushed_at": "2026-07-27T23:39:16Z",
"updated_at": "2026-07-28T04:13:09Z",
"pushed_at": "2026-07-28T04:12:56Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-07-27T00:03:15Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4292,
"watchers_count": 4292,
"stargazers_count": 4291,
"watchers_count": 4291,
"has_discussions": false,
"forks_count": 1082,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1082,
"watchers": 4292,
"watchers": 4291,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-17519.json
+4 -4
View File
@@ -313,10 +313,10 @@
"description": "Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519",
"fork": false,
"created_at": "2021-10-13T17:03:56Z",
"updated_at": "2026-03-12T18:56:27Z",
"updated_at": "2026-07-28T02:56:48Z",
"pushed_at": "2024-08-14T14:41:14Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -331,7 +331,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 62,
"watchers": 61,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-2551.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-07-27T05:54:29Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2075,
"watchers_count": 2075,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 326,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 326,
"watchers": 2075,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2021/CVE-2021-3129.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Laravel debug rce",
"fork": false,
"created_at": "2021-01-22T05:12:21Z",
"updated_at": "2026-07-13T08:55:48Z",
"updated_at": "2026-07-28T05:38:36Z",
"pushed_at": "2021-01-24T05:28:07Z",
"stargazers_count": 134,
"watchers_count": 134,
"stargazers_count": 135,
"watchers_count": 135,
"has_discussions": false,
"forks_count": 50,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 50,
"watchers": 134,
"watchers": 135,
"score": 0,
"subscribers_count": 3
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-27T23:39:39Z",
"pushed_at": "2026-07-27T23:39:35Z",
"updated_at": "2026-07-28T04:23:01Z",
"pushed_at": "2026-07-28T04:22:47Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3560.json
+4 -4
View File
@@ -221,10 +221,10 @@
"description": "Privilege escalation with polkit - CVE-2021-3560",
"fork": false,
"created_at": "2021-06-19T08:15:17Z",
"updated_at": "2026-06-20T14:53:53Z",
"updated_at": "2026-07-28T02:56:50Z",
"pushed_at": "2021-06-20T07:38:13Z",
"stargazers_count": 127,
"watchers_count": 127,
"stargazers_count": 126,
"watchers_count": 126,
"has_discussions": false,
"forks_count": 52,
"allow_forking": true,
@@ -235,7 +235,7 @@
"topics": [],
"visibility": "public",
"forks": 52,
"watchers": 127,
"watchers": 126,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-4034.json
+12 -12
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-4034 1day",
"fork": false,
"created_at": "2022-01-25T23:51:37Z",
"updated_at": "2026-07-27T21:39:33Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2022-06-08T04:00:28Z",
"stargazers_count": 2045,
"watchers_count": 2045,
"stargazers_count": 2044,
"watchers_count": 2044,
"has_discussions": false,
"forks_count": 507,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 507,
"watchers": 2045,
"watchers": 2044,
"score": 0,
"subscribers_count": 18
},
@@ -47,10 +47,10 @@
"description": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)",
"fork": false,
"created_at": "2022-01-26T00:56:36Z",
"updated_at": "2026-07-01T02:02:48Z",
"updated_at": "2026-07-28T02:56:49Z",
"pushed_at": "2023-05-04T19:24:39Z",
"stargazers_count": 1157,
"watchers_count": 1157,
"stargazers_count": 1156,
"watchers_count": 1156,
"has_discussions": false,
"forks_count": 314,
"allow_forking": true,
@@ -65,7 +65,7 @@
],
"visibility": "public",
"forks": 314,
"watchers": 1157,
"watchers": 1156,
"score": 0,
"subscribers_count": 13
},
@@ -150,10 +150,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-07-27T07:41:34Z",
"updated_at": "2026-07-28T03:55:33Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1317,
"watchers_count": 1317,
"stargazers_count": 1318,
"watchers_count": 1318,
"has_discussions": false,
"forks_count": 207,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 207,
"watchers": 1317,
"watchers": 1318,
"score": 0,
"subscribers_count": 13
},
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-27T20:47:25Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1778,
"watchers_count": 1778,
"stargazers_count": 1777,
"watchers_count": 1777,
"has_discussions": false,
"forks_count": 475,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 475,
"watchers": 1778,
"watchers": 1777,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-41773.json
+6 -6
View File
@@ -1704,10 +1704,10 @@
"description": "Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519",
"fork": false,
"created_at": "2021-10-13T17:03:56Z",
"updated_at": "2026-03-12T18:56:27Z",
"updated_at": "2026-07-28T02:56:48Z",
"pushed_at": "2024-08-14T14:41:14Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -1722,7 +1722,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 62,
"watchers": 61,
"score": 0,
"subscribers_count": 2
},
@@ -4992,8 +4992,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-27T06:32:26Z",
"updated_at": "2026-07-27T10:30:12Z",
"pushed_at": "2026-07-27T10:28:53Z",
"updated_at": "2026-07-28T05:31:57Z",
"pushed_at": "2026-07-28T05:31:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-42287.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.",
"fork": false,
"created_at": "2021-12-11T19:27:30Z",
"updated_at": "2026-07-24T00:54:45Z",
"updated_at": "2026-07-28T02:56:47Z",
"pushed_at": "2021-12-16T09:50:15Z",
"stargazers_count": 1410,
"watchers_count": 1410,
"stargazers_count": 1409,
"watchers_count": 1409,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1410,
"watchers": 1409,
"score": 0,
"subscribers_count": 24
},
2021/CVE-2021-44228.json
+6 -6
View File
@@ -187,10 +187,10 @@
"description": "一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-44228) defense.",
"fork": false,
"created_at": "2021-12-10T06:42:37Z",
"updated_at": "2026-05-14T13:10:10Z",
"updated_at": "2026-07-28T01:38:29Z",
"pushed_at": "2021-12-11T02:49:41Z",
"stargazers_count": 125,
"watchers_count": 125,
"stargazers_count": 126,
"watchers_count": 126,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -214,7 +214,7 @@
],
"visibility": "public",
"forks": 20,
"watchers": 125,
"watchers": 126,
"score": 0,
"subscribers_count": 6
},
@@ -14166,8 +14166,8 @@
"description": "Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).",
"fork": false,
"created_at": "2026-07-16T18:23:36Z",
"updated_at": "2026-07-27T12:33:41Z",
"pushed_at": "2026-07-27T12:47:22Z",
"updated_at": "2026-07-28T02:27:17Z",
"pushed_at": "2026-07-28T02:27:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-21907.json
+4 -4
View File
@@ -100,10 +100,10 @@
"description": "HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907",
"fork": false,
"created_at": "2022-01-17T02:28:50Z",
"updated_at": "2026-05-13T19:49:18Z",
"updated_at": "2026-07-28T02:56:48Z",
"pushed_at": "2022-01-20T02:07:59Z",
"stargazers_count": 362,
"watchers_count": 362,
"stargazers_count": 361,
"watchers_count": 361,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -114,7 +114,7 @@
"topics": [],
"visibility": "public",
"forks": 92,
"watchers": 362,
"watchers": 361,
"score": 0,
"subscribers_count": 8
},
2022/CVE-2022-26134.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。",
"fork": false,
"created_at": "2022-05-31T07:44:01Z",
"updated_at": "2026-07-26T08:39:36Z",
"updated_at": "2026-07-28T02:54:47Z",
"pushed_at": "2023-02-26T14:06:05Z",
"stargazers_count": 1249,
"watchers_count": 1249,
"stargazers_count": 1250,
"watchers_count": 1250,
"has_discussions": true,
"forks_count": 187,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 187,
"watchers": 1249,
"watchers": 1250,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-27255.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-07-06T17:29:04Z",
"updated_at": "2026-07-26T10:43:45Z",
"updated_at": "2026-07-28T06:25:07Z",
"pushed_at": "2022-08-30T13:23:51Z",
"stargazers_count": 285,
"watchers_count": 285,
"stargazers_count": 284,
"watchers_count": 284,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 285,
"watchers": 284,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-38694.json
+6 -6
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-07-22T03:19:15Z",
"updated_at": "2026-07-28T05:13:10Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 575,
"watchers_count": 575,
"stargazers_count": 576,
"watchers_count": 576,
"has_discussions": true,
"forks_count": 74,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 74,
"watchers": 575,
"watchers": 576,
"score": 0,
"subscribers_count": 13
},
@@ -187,7 +187,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -195,7 +195,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-6664.json → 2024/CVE-2024-23659.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1236864518,
"name": "bouncer-overflow",
"full_name": "nicolasjulian\/bouncer-overflow",
"id": 1314405716,
"name": "SPIP-CVE-2024-23659-",
"full_name": "amis13\/SPIP-CVE-2024-23659-",
"owner": {
"login": "nicolasjulian",
"id": 33948000,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33948000?v=4",
"html_url": "https:\/\/github.com\/nicolasjulian",
"login": "amis13",
"id": 119992979,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119992979?v=4",
"html_url": "https:\/\/github.com\/amis13",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nicolasjulian\/bouncer-overflow",
"description": "Working POC of CVE-2026-6664 written by Sonnet 4.6",
"html_url": "https:\/\/github.com\/amis13\/SPIP-CVE-2024-23659-",
"description": "SPIP (CVE-2024-23659) script with native python3 dependencies",
"fork": false,
"created_at": "2026-05-12T16:39:59Z",
"updated_at": "2026-05-12T17:01:47Z",
"pushed_at": "2026-05-12T16:44:57Z",
"created_at": "2026-07-28T01:03:05Z",
"updated_at": "2026-07-28T01:08:57Z",
"pushed_at": "2026-07-28T01:08:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-55591.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 917542108,
"name": "fortios-auth-bypass-check-CVE-2024-55591",
"full_name": "watchtowrlabs\/fortios-auth-bypass-check-CVE-2024-55591",
"owner": {
"login": "watchtowrlabs",
"id": 99977116,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
"html_url": "https:\/\/github.com\/watchtowrlabs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/watchtowrlabs\/fortios-auth-bypass-check-CVE-2024-55591",
"description": null,
"fork": false,
"created_at": "2025-01-16T07:26:15Z",
"updated_at": "2026-04-20T07:24:01Z",
"pushed_at": "2025-01-16T08:58:49Z",
"stargazers_count": 66,
"watchers_count": 66,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 66,
"score": 0,
"subscribers_count": 1
},
{
"id": 920020499,
"name": "fortios-auth-bypass-poc-CVE-2024-55591",
2025/CVE-2025-21333.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I\/O ring IOP_MC_BUFFER_ENTRY",
"fork": false,
"created_at": "2025-02-27T12:36:55Z",
"updated_at": "2026-07-17T15:00:48Z",
"updated_at": "2026-07-28T02:23:45Z",
"pushed_at": "2025-04-12T22:14:58Z",
"stargazers_count": 233,
"watchers_count": 233,
"stargazers_count": 232,
"watchers_count": 232,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 233,
"watchers": 232,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-21479.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
{
"id": 1314634307,
"name": "SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479",
"full_name": "CamsShaft\/SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479",
"owner": {
"login": "CamsShaft",
"id": 141678661,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141678661?v=4",
"html_url": "https:\/\/github.com\/CamsShaft",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CamsShaft\/SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479",
"description": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"fork": false,
"created_at": "2026-07-28T06:41:38Z",
"updated_at": "2026-07-28T06:41:57Z",
"pushed_at": "2026-07-28T06:41:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-24204.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC and technical details of CVE-2025-24204",
"fork": false,
"created_at": "2025-08-15T08:48:37Z",
"updated_at": "2026-07-17T15:01:12Z",
"updated_at": "2026-07-28T03:26:32Z",
"pushed_at": "2025-10-07T01:54:24Z",
"stargazers_count": 112,
"watchers_count": 112,
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 112,
"watchers": 113,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24367.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 37,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-27T16:34:11Z",
"updated_at": "2026-07-28T03:08:50Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 869,
"watchers_count": 869,
"stargazers_count": 871,
"watchers_count": 871,
"has_discussions": false,
"forks_count": 129,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 129,
"watchers": 869,
"watchers": 871,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-07-27T23:21:31Z",
"updated_at": "2026-07-28T05:50:03Z",
"pushed_at": "2026-07-27T12:19:44Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-67158.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1126177242,
"name": "CVE-2025-67158",
"full_name": "Remenis\/CVE-2025-67158",
"owner": {
"login": "Remenis",
"id": 97015958,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
"html_url": "https:\/\/github.com\/Remenis",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Remenis\/CVE-2025-67158",
"description": "Revotech I6032W-FHW IP camera firmware fails to validate authentication fields in API requests, allowing attackers to bypass authentication and retrieve administrative information.",
"fork": false,
"created_at": "2026-01-01T10:05:31Z",
"updated_at": "2026-01-01T10:09:24Z",
"pushed_at": "2026-01-01T10:09:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69212.json
+4 -4
View File
@@ -217,10 +217,10 @@
"description": "OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function.",
"fork": false,
"created_at": "2026-06-30T13:38:40Z",
"updated_at": "2026-07-23T02:19:29Z",
"updated_at": "2026-07-28T03:24:47Z",
"pushed_at": "2026-07-02T20:41:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -231,7 +231,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-15013.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zer0dayf\/CVE-2026-15013",
"description": null,
"description": " CVE-2026-15013",
"fork": false,
"created_at": "2026-07-27T08:54:38Z",
"updated_at": "2026-07-27T14:29:59Z",
"updated_at": "2026-07-28T05:27:40Z",
"pushed_at": "2026-07-27T14:23:18Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-15409.json
+2 -2
View File
@@ -151,7 +151,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-16723.json
+40 -7
View File
@@ -14,12 +14,12 @@
"description": "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) \/ Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.",
"fork": false,
"created_at": "2026-07-20T17:00:03Z",
"updated_at": "2026-07-27T19:52:30Z",
"updated_at": "2026-07-28T06:12:56Z",
"pushed_at": "2026-07-27T11:16:07Z",
"stargazers_count": 178,
"watchers_count": 178,
"stargazers_count": 182,
"watchers_count": 182,
"has_discussions": false,
"forks_count": 85,
"forks_count": 86,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -43,10 +43,10 @@
"vulnerability"
],
"visibility": "public",
"forks": 85,
"watchers": 178,
"forks": 86,
"watchers": 182,
"score": 0,
"subscribers_count": 0
"subscribers_count": 2
},
{
"id": 1312067314,
@@ -80,5 +80,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1314475688,
"name": "fastjson-rce-lab",
"full_name": "why-success\/fastjson-rce-lab",
"owner": {
"login": "why-success",
"id": 290895331,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290895331?v=4",
"html_url": "https:\/\/github.com\/why-success",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/why-success\/fastjson-rce-lab",
"description": "Fastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723)",
"fork": false,
"created_at": "2026-07-28T02:58:02Z",
"updated_at": "2026-07-28T03:03:23Z",
"pushed_at": "2026-07-28T03:03:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20182.json
+2 -2
View File
@@ -98,7 +98,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -106,7 +106,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-20245.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-27577.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1314440938,
"name": "CVE-2026-27577",
"full_name": "HORKimhab\/CVE-2026-27577",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-27577",
"description": "CVE-2026-27577 - Draft or Todo",
"fork": false,
"created_at": "2026-07-28T02:01:58Z",
"updated_at": "2026-07-28T02:02:05Z",
"pushed_at": "2026-07-28T02:02:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-33634.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 1191125516,
"name": "teampcp-supply-chain-attack",
"full_name": "ugurrates\/teampcp-supply-chain-attack",
"owner": {
"login": "ugurrates",
"id": 199730397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199730397?v=4",
"html_url": "https:\/\/github.com\/ugurrates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ugurrates\/teampcp-supply-chain-attack",
"description": "CVE-2026-33634 (CVSS 9.4) — The most impactful CI\/CD supply chain attack of 2026 so far.",
"fork": false,
"created_at": "2026-03-25T00:08:43Z",
"updated_at": "2026-07-28T05:14:00Z",
"pushed_at": "2026-07-28T05:13:39Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301295412,
"name": "trivysupplychainanalysis",
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-27T16:34:11Z",
"updated_at": "2026-07-28T03:08:50Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 869,
"watchers_count": 869,
"stargazers_count": 871,
"watchers_count": 871,
"has_discussions": false,
"forks_count": 129,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 129,
"watchers": 869,
"watchers": 871,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-36425.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory",
"fork": false,
"created_at": "2026-06-17T15:11:22Z",
"updated_at": "2026-07-26T15:16:44Z",
"updated_at": "2026-07-28T01:39:18Z",
"pushed_at": "2026-07-17T12:52:36Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41089.json
+11 -11
View File
@@ -58,10 +58,10 @@
"description": "CVE-2026-41089",
"fork": false,
"created_at": "2026-06-02T10:35:26Z",
"updated_at": "2026-07-21T09:59:49Z",
"updated_at": "2026-07-28T01:21:31Z",
"pushed_at": "2026-06-05T00:49:43Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -72,7 +72,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -210,12 +210,12 @@
"description": "Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.",
"fork": false,
"created_at": "2026-07-21T02:05:07Z",
"updated_at": "2026-07-21T17:44:58Z",
"pushed_at": "2026-07-21T02:58:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-07-28T06:47:56Z",
"pushed_at": "2026-07-28T06:46:57Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -236,8 +236,8 @@
"zero-day"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"forks": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+2 -2
View File
@@ -340,7 +340,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -348,7 +348,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-42533.json
+10 -10
View File
@@ -14,10 +14,10 @@
"description": "Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow \/ info leak).",
"fork": false,
"created_at": "2026-07-04T11:05:56Z",
"updated_at": "2026-07-27T02:43:40Z",
"updated_at": "2026-07-28T03:15:42Z",
"pushed_at": "2026-07-20T15:12:42Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
@@ -229,12 +229,12 @@
"description": "nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.",
"fork": false,
"created_at": "2026-07-27T08:03:07Z",
"updated_at": "2026-07-28T00:38:04Z",
"updated_at": "2026-07-28T05:02:57Z",
"pushed_at": "2026-07-27T08:09:53Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -242,8 +242,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"forks": 3,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42978.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.",
"fork": false,
"created_at": "2026-06-23T21:05:55Z",
"updated_at": "2026-07-27T14:00:04Z",
"updated_at": "2026-07-28T05:26:49Z",
"pushed_at": "2026-06-23T21:08:36Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 11,
"forks": 3,
"watchers": 13,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-43499.json
+67 -34
View File
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-28T00:11:22Z",
"updated_at": "2026-07-28T01:33:32Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 198,
"watchers_count": 198,
"stargazers_count": 199,
"watchers_count": 199,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 68,
"watchers": 198,
"watchers": 199,
"score": 0,
"subscribers_count": 1
},
@@ -311,10 +311,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-27T23:50:10Z",
"updated_at": "2026-07-28T01:57:00Z",
"pushed_at": "2026-07-27T14:35:22Z",
"stargazers_count": 85,
"watchers_count": 85,
"stargazers_count": 88,
"watchers_count": 88,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -332,7 +332,7 @@
],
"visibility": "public",
"forks": 16,
"watchers": 85,
"watchers": 88,
"score": 0,
"subscribers_count": 3
},
@@ -582,10 +582,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T17:24:44Z",
"updated_at": "2026-07-27T16:48:49Z",
"updated_at": "2026-07-28T04:48:04Z",
"pushed_at": "2026-07-14T16:28:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -596,7 +596,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -648,10 +648,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-26T17:27:55Z",
"pushed_at": "2026-07-26T03:08:21Z",
"stargazers_count": 33,
"watchers_count": 33,
"updated_at": "2026-07-28T04:05:13Z",
"pushed_at": "2026-07-28T04:05:51Z",
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": true,
"forks_count": 11,
"allow_forking": true,
@@ -662,7 +662,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
@@ -780,7 +780,7 @@
"description": "CvE-2026-43499偏移量计算",
"fork": false,
"created_at": "2026-07-15T09:34:51Z",
"updated_at": "2026-07-27T09:00:05Z",
"updated_at": "2026-07-28T06:36:02Z",
"pushed_at": "2026-07-15T09:50:24Z",
"stargazers_count": 5,
"watchers_count": 5,
@@ -846,10 +846,10 @@
"description": "Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1",
"fork": false,
"created_at": "2026-07-16T08:02:46Z",
"updated_at": "2026-07-26T15:18:19Z",
"updated_at": "2026-07-28T05:30:14Z",
"pushed_at": "2026-07-17T14:41:41Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -860,7 +860,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 30,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
@@ -1044,10 +1044,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-27T19:55:07Z",
"updated_at": "2026-07-28T03:45:30Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 147,
"watchers_count": 147,
"stargazers_count": 150,
"watchers_count": 150,
"has_discussions": false,
"forks_count": 31,
"allow_forking": true,
@@ -1058,7 +1058,7 @@
"topics": [],
"visibility": "public",
"forks": 31,
"watchers": 147,
"watchers": 150,
"score": 0,
"subscribers_count": 5
},
@@ -1110,10 +1110,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-07-27T18:42:06Z",
"updated_at": "2026-07-28T01:44:22Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -1124,7 +1124,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
@@ -1591,10 +1591,10 @@
"description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ",
"fork": false,
"created_at": "2026-07-26T12:39:00Z",
"updated_at": "2026-07-27T21:47:33Z",
"updated_at": "2026-07-28T05:04:44Z",
"pushed_at": "2026-07-26T14:04:57Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1605,7 +1605,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
@@ -1674,5 +1674,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1314094000,
"name": "CVE-2026-43499-pkb110",
"full_name": "KawaiiHachimi\/CVE-2026-43499-pkb110",
"owner": {
"login": "KawaiiHachimi",
"id": 49330826,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49330826?v=4",
"html_url": "https:\/\/github.com\/KawaiiHachimi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KawaiiHachimi\/CVE-2026-43499-pkb110",
"description": null,
"fork": false,
"created_at": "2026-07-27T17:14:16Z",
"updated_at": "2026-07-28T04:41:09Z",
"pushed_at": "2026-07-28T00:50:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43501.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Termux Privilege Escalation Tool & Root Manager - CVE-2026-43501",
"fork": false,
"created_at": "2026-07-11T03:46:50Z",
"updated_at": "2026-07-20T08:07:13Z",
"updated_at": "2026-07-28T04:52:47Z",
"pushed_at": "2026-07-11T04:30:20Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+4 -4
View File
@@ -316,10 +316,10 @@
"description": "YellowKey free tool for the CVE-2026-45585 BitLocker bypass vulnerability on Windows 10\/11. Covered on Tom's Hardware: extract recovery keys, apply remediation, test bypass mitigation and manage BitLocker encryption state. Download YellowKey",
"fork": false,
"created_at": "2026-07-23T20:08:02Z",
"updated_at": "2026-07-28T00:45:07Z",
"updated_at": "2026-07-28T01:35:38Z",
"pushed_at": "2026-07-23T20:30:55Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -351,7 +351,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 28,
"watchers": 38,
"score": 0,
"subscribers_count": 14
},
2026/CVE-2026-46215.json
+9 -9
View File
@@ -47,10 +47,10 @@
"description": "This is an exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n \/ sw0rdm4n)",
"fork": false,
"created_at": "2026-07-11T16:16:51Z",
"updated_at": "2026-07-18T11:23:22Z",
"updated_at": "2026-07-28T05:38:51Z",
"pushed_at": "2026-07-18T11:23:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -77,13 +77,13 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bluedragonsecurity\/CVE-2026-46215-exploit-linux-7.0-uaf-stable",
"description": "CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n)",
"description": "CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - The first working PoC for linux kernel 7 use after free- by Antonius (sw0rdm4n, w1sdom, ev1lut10n)",
"fork": false,
"created_at": "2026-07-19T05:37:45Z",
"updated_at": "2026-07-24T07:19:41Z",
"updated_at": "2026-07-28T05:44:06Z",
"pushed_at": "2026-07-22T13:45:00Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48907.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 15,
"score": 0,
"subscribers_count": 2
2026/CVE-2026-49176.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.",
"fork": false,
"created_at": "2026-07-16T13:36:10Z",
"updated_at": "2026-07-27T23:58:36Z",
"updated_at": "2026-07-28T03:38:36Z",
"pushed_at": "2026-07-20T09:43:27Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 26,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-50522.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-50522 PoC",
"fork": false,
"created_at": "2026-07-25T08:23:28Z",
"updated_at": "2026-07-27T21:12:28Z",
"updated_at": "2026-07-28T06:39:54Z",
"pushed_at": "2026-07-25T09:39:40Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 11,
"forks": 4,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-54121.json
+43 -10
View File
@@ -14,12 +14,12 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-07-27T23:33:53Z",
"updated_at": "2026-07-28T06:46:57Z",
"pushed_at": "2026-07-27T19:12:19Z",
"stargazers_count": 258,
"watchers_count": 258,
"stargazers_count": 267,
"watchers_count": 267,
"has_discussions": false,
"forks_count": 55,
"forks_count": 60,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 55,
"watchers": 258,
"forks": 60,
"watchers": 267,
"score": 0,
"subscribers_count": 0
},
@@ -113,10 +113,10 @@
"description": "👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework ⚡Weaponized tool with rogue DC\/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒",
"fork": false,
"created_at": "2026-07-25T18:01:04Z",
"updated_at": "2026-07-27T19:21:30Z",
"updated_at": "2026-07-28T02:02:29Z",
"pushed_at": "2026-07-26T13:10:01Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 25,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
@@ -196,5 +196,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1314488271,
"name": "CVE-2026-54121",
"full_name": "ChPratik\/CVE-2026-54121",
"owner": {
"login": "ChPratik",
"id": 106569779,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106569779?v=4",
"html_url": "https:\/\/github.com\/ChPratik",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChPratik\/CVE-2026-54121",
"description": "Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.",
"fork": false,
"created_at": "2026-07-28T03:18:14Z",
"updated_at": "2026-07-28T03:20:20Z",
"pushed_at": "2026-07-28T03:20:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-61511.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1314432433,
"name": "CVE-2026-61511",
"full_name": "HORKimhab\/CVE-2026-61511",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-61511",
"description": "CVE-2026-61511 - Draft or Todo",
"fork": false,
"created_at": "2026-07-28T01:47:47Z",
"updated_at": "2026-07-28T01:48:00Z",
"pushed_at": "2026-07-28T01:47:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+20 -20
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-28T00:49:12Z",
"updated_at": "2026-07-28T06:44:01Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 587,
"watchers_count": 587,
"stargazers_count": 598,
"watchers_count": 598,
"has_discussions": false,
"forks_count": 136,
"forks_count": 138,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 136,
"watchers": 587,
"forks": 138,
"watchers": 598,
"score": 0,
"subscribers_count": 2
},
@@ -183,10 +183,10 @@
"description": "Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST \/batch\/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 \/ 7.0.0-7.0.1",
"fork": false,
"created_at": "2026-07-18T03:04:50Z",
"updated_at": "2026-07-27T18:29:34Z",
"updated_at": "2026-07-28T01:08:09Z",
"pushed_at": "2026-07-22T11:36:51Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -205,7 +205,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 1
},
@@ -224,10 +224,10 @@
"description": "Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion",
"fork": false,
"created_at": "2026-07-18T03:16:37Z",
"updated_at": "2026-07-24T07:08:21Z",
"updated_at": "2026-07-28T06:22:05Z",
"pushed_at": "2026-07-18T03:53:29Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -238,7 +238,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
@@ -518,7 +518,7 @@
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -526,7 +526,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"forks": 22,
"watchers": 68,
"score": 0,
"subscribers_count": 0
@@ -1854,10 +1854,10 @@
"description": "Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST \/batch\/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.",
"fork": false,
"created_at": "2026-07-22T10:53:51Z",
"updated_at": "2026-07-27T04:41:55Z",
"updated_at": "2026-07-28T05:39:31Z",
"pushed_at": "2026-07-22T11:01:23Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1868,7 +1868,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64600.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.",
"fork": false,
"created_at": "2026-07-26T12:22:52Z",
"updated_at": "2026-07-27T17:38:14Z",
"updated_at": "2026-07-28T05:38:43Z",
"pushed_at": "2026-07-26T12:46:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -140,7 +140,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-65008.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zer0dayf\/CVE-2026-65008",
"description": null,
"description": " CVE-2026-65008",
"fork": false,
"created_at": "2026-07-27T13:27:53Z",
"updated_at": "2026-07-27T14:32:46Z",
"updated_at": "2026-07-28T05:27:29Z",
"pushed_at": "2026-07-27T14:28:30Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-8206.json
+33
View File
@@ -106,5 +106,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1314541402,
"name": "CVE-2026-8206",
"full_name": "Dungsocool\/CVE-2026-8206",
"owner": {
"login": "Dungsocool",
"id": 214970996,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214970996?v=4",
"html_url": "https:\/\/github.com\/Dungsocool",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dungsocool\/CVE-2026-8206",
"description": "CVE-2026-8206: Kirki Customizer Framework - Unauthenticated Account Takeover (CVSS 9.8)",
"fork": false,
"created_at": "2026-07-28T04:40:42Z",
"updated_at": "2026-07-28T04:48:42Z",
"pushed_at": "2026-07-28T04:48:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+27 -15
View File
@@ -706,13 +706,6 @@
- [jackalkarlos/EvilAhenk](https://github.com/jackalkarlos/EvilAhenk)
### CVE-2026-6664 (2026-05-09)
<code>An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
</code>
- [nicolasjulian/bouncer-overflow](https://github.com/nicolasjulian/bouncer-overflow)
### CVE-2026-6741 (2026-04-27)
<code>The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1. This is due to a missing authorization check in the execute() method of the connect-customer-to-wp-user ability, which only requires the customer__edit capability granted to the latepoint_agent role by default, without verifying whether the target WordPress user ID belongs to a privileged account. This makes it possible for authenticated attackers with the latepoint_agent role to link any LatePoint customer record to an administrator's WordPress account and subsequently reset the administrator's password via the normal customer password-reset flow, resulting in full site takeover.
@@ -909,6 +902,7 @@
- [Jenderal92/CVE-2026-8206](https://github.com/Jenderal92/CVE-2026-8206)
- [rootdirective-sec/CVE-2026-8206-Lab](https://github.com/rootdirective-sec/CVE-2026-8206-Lab)
- [izxci/CVE-2026-8206](https://github.com/izxci/CVE-2026-8206)
- [Dungsocool/CVE-2026-8206](https://github.com/Dungsocool/CVE-2026-8206)
### CVE-2026-8380 (2026-06-26)
@@ -1586,6 +1580,7 @@
- [dinosn/fastjson-jsontype-rce-lab](https://github.com/dinosn/fastjson-jsontype-rce-lab)
- [HORKimhab/CVE-2026-16723](https://github.com/HORKimhab/CVE-2026-16723)
- [why-success/fastjson-rce-lab](https://github.com/why-success/fastjson-rce-lab)
### CVE-2026-20127 (2026-02-25)
@@ -2306,6 +2301,13 @@
- [DexSemon/CVE-2026-27495](https://github.com/DexSemon/CVE-2026-27495)
### CVE-2026-27577 (2026-02-25)
<code>n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of n8n have been identified and patched following CVE-2025-68613. An authenticated user with permission to create or modify workflows could abuse crafted expressions in workflow parameters to trigger unintended system command execution on the host running n8n. The issues have been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate all known vulnerabilities. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or deploy n8n in a hardened environment with restricted operating system privileges and network access to reduce the impact of potential exploitation. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
</code>
- [HORKimhab/CVE-2026-27577](https://github.com/HORKimhab/CVE-2026-27577)
### CVE-2026-27626 (2026-02-25)
<code>OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) blocks several dangerous argument types but not `password`. A user supplying a `password`-typed argument can inject shell metacharacters that execute arbitrary OS commands. A second independent vector allows unauthenticated RCE via webhook-extracted JSON values that skip type safety checks entirely before reaching `sh -c`. When exploiting vector 1, any authenticated user (registration enabled by default, `authType: none` by default) can execute arbitrary OS commands on the OliveTin host with the permissions of the OliveTin process. When exploiting vector 2, an unauthenticated attacker can achieve the same if the instance receives webhooks from external sources, which is a primary OliveTin use case. When an attacker exploits both vectors, this results in unauthenticated RCE on any OliveTin instance using Shell mode with webhook-triggered actions. As of time of publication, a patched version is not available.
@@ -2796,6 +2798,7 @@
<code>Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.2.0 – 0.2.6, prior to the recreation of 0.2.6 with a safe commit. Known safe versions include versions 0.69.2 and 0.69.3 of the Trivy binary, version 0.35.0 of trivy-action, and version 0.2.6 of setup-trivy. Additionally, take other mitigations to ensure the safety of secrets. If there is any possibility that a compromised version ran in one's environment, all secrets accessible to affected pipelines must be treated as exposed and rotated immediately. Check whether one's organization pulled or executed Trivy v0.69.4 from any source. Remove any affected artifacts immediately. Review all workflows using `aquasecurity/trivy-action` or `aquasecurity/setup-trivy`. Those who referenced a version tag rather than a full commit SHA should check workflow run logs from March 19–20, 2026 for signs of compromise. Look for repositories named `tpcp-docs` in one's GitHub organization. The presence of such a repository may indicate that the fallback exfiltration mechanism was triggered and secrets were successfully stolen. Pin GitHub Actions to full, immutable commit SHA hashes, don't use mutable version tags.
</code>
- [ugurrates/teampcp-supply-chain-attack](https://github.com/ugurrates/teampcp-supply-chain-attack)
- [dfs333/trivysupplychainanalysis](https://github.com/dfs333/trivysupplychainanalysis)
### CVE-2026-33697 (2026-03-26)
@@ -4004,6 +4007,7 @@
- [woshimaniubi8/CVE-2026-43499-root-KernelSU](https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU)
- [soralis0912/CVE-2026-43499-pmg110-root](https://github.com/soralis0912/CVE-2026-43499-pmg110-root)
- [dnlid/CVE-2026-43499](https://github.com/dnlid/CVE-2026-43499)
- [KawaiiHachimi/CVE-2026-43499-pkb110](https://github.com/KawaiiHachimi/CVE-2026-43499-pkb110)
### CVE-2026-43500 (2026-05-11)
@@ -5589,6 +5593,7 @@
- [tc4dy/CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit)
- [GlendonNotGlen/certighost-cve-2026-54121-slides](https://github.com/GlendonNotGlen/certighost-cve-2026-54121-slides)
- [marcgoam/CVE-2026-54121-CertiGhost](https://github.com/marcgoam/CVE-2026-54121-CertiGhost)
- [ChPratik/CVE-2026-54121](https://github.com/ChPratik/CVE-2026-54121)
### CVE-2026-54161
- [ja-errorpro/CVE-2026-54161](https://github.com/ja-errorpro/CVE-2026-54161)
@@ -6014,6 +6019,13 @@
- [nmagill123/CVE-2026-61343-poc-librebooking-rce](https://github.com/nmagill123/CVE-2026-61343-poc-librebooking-rce)
### CVE-2026-61511 (2026-07-27)
<code>vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style encoding with permitted characters to inject and execute arbitrary PHP code via the unauthenticated ajax/render template route without any authentication.
</code>
- [HORKimhab/CVE-2026-61511](https://github.com/HORKimhab/CVE-2026-61511)
### CVE-2026-61946 (2026-07-23)
<code>Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments &lt;= 3.12.27 versions.
@@ -9550,6 +9562,7 @@
- [zhuowei/cheese](https://github.com/zhuowei/cheese)
- [sarabpal-dev/cheese-cake](https://github.com/sarabpal-dev/cheese-cake)
- [ma4the/omae-wa-cheese-da](https://github.com/ma4the/omae-wa-cheese-da)
- [CamsShaft/SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479)
### CVE-2025-21574 (2025-04-15)
@@ -17256,13 +17269,6 @@
- [sivaadityacoder/CVE-2025-67146-CVE-2025-67147](https://github.com/sivaadityacoder/CVE-2025-67146-CVE-2025-67147)
### CVE-2025-67158 (2026-01-02)
<code>An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request.
</code>
- [Remenis/CVE-2025-67158](https://github.com/Remenis/CVE-2025-67158)
### CVE-2025-67159 (2026-01-02)
<code>Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.
@@ -22369,6 +22375,13 @@
- [666asd/CVE-2024-23653](https://github.com/666asd/CVE-2024-23653)
### CVE-2024-23659 (2024-01-19)
<code>SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is related to javascript/bigup.js and javascript/bigup.utils.js.
</code>
- [amis13/SPIP-CVE-2024-23659-](https://github.com/amis13/SPIP-CVE-2024-23659-)
### CVE-2024-23666 (2024-11-12)
<code>A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData \r\nat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests.
@@ -28670,7 +28683,6 @@
<code>An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
</code>
- [watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591](https://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591)
- [sysirq/fortios-auth-bypass-poc-CVE-2024-55591](https://github.com/sysirq/fortios-auth-bypass-poc-CVE-2024-55591)
- [sysirq/fortios-auth-bypass-exploit-CVE-2024-55591](https://github.com/sysirq/fortios-auth-bypass-exploit-CVE-2024-55591)
- [virus-or-not/CVE-2024-55591](https://github.com/virus-or-not/CVE-2024-55591)