nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/27 14:09:04

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-27 23:09:04 +09:00
1 parent ecc3266bde
commit ea6bb37d72
65 files changed
+691 -315
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2004/CVE-2004-2687.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1348366488,
"name": "hacktivity-vulns-exploits-lab",
"full_name": "ocfagb\/hacktivity-vulns-exploits-lab",
"owner": {
"login": "ocfagb",
"id": 94186772,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94186772?v=4",
"html_url": "https:\/\/github.com\/ocfagb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ocfagb\/hacktivity-vulns-exploits-lab",
"description": "Writeup + CVE analysis + countermeasures for the Hacktivity 'Vulnerabilities, Exploits, and Remote Access Payloads' lab (netcat shells, Metasploit, CVE-2010-1240, CVE-2004-2687).",
"fork": false,
"created_at": "2026-08-27T10:40:13Z",
"updated_at": "2026-08-27T10:42:08Z",
"pushed_at": "2026-08-27T10:40:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2010/CVE-2010-1240.json
+33
View File
@@ -137,5 +137,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1348366488,
"name": "hacktivity-vulns-exploits-lab",
"full_name": "ocfagb\/hacktivity-vulns-exploits-lab",
"owner": {
"login": "ocfagb",
"id": 94186772,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94186772?v=4",
"html_url": "https:\/\/github.com\/ocfagb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ocfagb\/hacktivity-vulns-exploits-lab",
"description": "Writeup + CVE analysis + countermeasures for the Hacktivity 'Vulnerabilities, Exploits, and Remote Access Payloads' lab (netcat shells, Metasploit, CVE-2010-1240, CVE-2004-2687).",
"fork": false,
"created_at": "2026-08-27T10:40:13Z",
"updated_at": "2026-08-27T10:42:08Z",
"pushed_at": "2026-08-27T10:40:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2015/CVE-2015-3246.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1348250857,
"name": "CVE-2015-3246",
"full_name": "HORKimhab\/CVE-2015-3246",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2015-3246",
"description": "CVE-2015-3246",
"fork": false,
"created_at": "2026-08-27T08:30:01Z",
"updated_at": "2026-08-27T09:31:22Z",
"pushed_at": "2026-08-27T08:33:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2015/CVE-2015-5287.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1348234026,
"name": "CVE-2015-5287",
"full_name": "HORKimhab\/CVE-2015-5287",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2015-5287",
"description": "CVE-2015-5287",
"fork": false,
"created_at": "2026-08-27T08:14:20Z",
"updated_at": "2026-08-27T08:26:38Z",
"pushed_at": "2026-08-27T08:23:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-12615.json
+8 -8
View File
@@ -377,10 +377,10 @@
"description": "Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取\/包含",
"fork": false,
"created_at": "2022-11-13T11:01:41Z",
"updated_at": "2026-07-27T10:26:52Z",
"updated_at": "2026-08-27T08:50:08Z",
"pushed_at": "2022-11-15T09:05:50Z",
"stargazers_count": 257,
"watchers_count": 257,
"stargazers_count": 258,
"watchers_count": 258,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -391,7 +391,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 257,
"watchers": 258,
"score": 0,
"subscribers_count": 4
},
@@ -443,10 +443,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-08-25T05:18:23Z",
"updated_at": "2026-08-27T08:23:03Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 294,
"watchers_count": 294,
"stargazers_count": 295,
"watchers_count": 295,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -465,7 +465,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 294,
"watchers": 295,
"score": 0,
"subscribers_count": 2
},
2019/CVE-2019-1040.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "an impacket-dependent script exploiting CVE-2019-1040",
"fork": false,
"created_at": "2021-01-01T05:59:06Z",
"updated_at": "2025-05-31T23:32:19Z",
"updated_at": "2026-08-27T06:45:00Z",
"pushed_at": "2021-01-01T06:10:58Z",
"stargazers_count": 72,
"watchers_count": 72,
"stargazers_count": 73,
"watchers_count": 73,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 72,
"watchers": 73,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-11358.json
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-08-27T00:20:16Z",
"updated_at": "2026-08-27T08:11:54Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 306,
"watchers_count": 306,
"stargazers_count": 307,
"watchers_count": 307,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 92,
"watchers": 306,
"watchers": 307,
"score": 0,
"subscribers_count": 15
},
2019/CVE-2019-15126.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "PoC exploit for the CVE-2019-15126 kr00k vulnerability",
"fork": false,
"created_at": "2020-03-13T14:53:54Z",
"updated_at": "2026-07-29T10:33:54Z",
"updated_at": "2026-08-27T11:18:22Z",
"pushed_at": "2020-03-22T19:46:04Z",
"stargazers_count": 223,
"watchers_count": 223,
"stargazers_count": 224,
"watchers_count": 224,
"has_discussions": false,
"forks_count": 62,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 62,
"watchers": 223,
"watchers": 224,
"score": 0,
"subscribers_count": 15
},
2020/CVE-2020-0688.json
+4 -4
View File
@@ -655,10 +655,10 @@
"description": "事件: 微軟（Microsoft）上周公布了修補遭到駭客攻擊的 Exchange Server 漏洞，全球恐有數萬個組織受到影響。網域與被入侵的Exchange郵件伺服器有關，而這臺伺服器後來被駭客當作C&C中繼站使用，導致接下來發生加密攻擊事故。 嚴重性: 全球企業普遍使用微軟生態系執行日常業務，若遭受駭客攻擊，將造成用戶機敏資料外洩並導致極大損失。雖然微軟已推出更新補釘，但阿戴爾強調這尚未去除儲存在受害伺服器內的後門殼層（webshell），因此就算尚未受到攻擊的企業可以免於被駭風險，駭客仍有時間入侵已被駭的伺服器留下「定時炸彈」。 從2020年開始，美國便不斷指控中國入侵多家醫藥公司及學術單位，試圖竊取疫苗研發機密，這次事件很可能將使中美之間的關係進一步惡化。至於華為、TikTok等中國服務是否會受到這次駭客事件波及，則暫時還不明朗。 漏洞通報程序: 在2年前，曾經拿下資安圈漏洞奧斯卡獎Pwnie Awards「最佳伺服器漏洞獎」戴夫寇爾首席資安研究員Orange Tsai（蔡政達），漏洞通報記錄不勝枚舉，後來因為針對企業常用的SSL VPN進行漏洞研究與通報，更是在全球資安圈聲名大噪。 不過，在今年3月2日卻發生讓Orange Tsai錯愕不已的事情。那就是，他在今年一月跟微軟通報的2個Exchange漏洞，微軟原訂在3月9日對外釋出修補程式，卻突然提前一週，在3月2日便緊急釋出修補程式。原來是因為，在2月26日到2月28日，這個週五下班後到週末這段期間，全球各地發生許多利用微軟Exchange漏洞發動攻擊的資安事件。 攻擊本質: 有人在網路上大量掃描微軟於本月修補的CVE-2020-0688安全漏洞，該漏洞攸關Microsoft Exchange伺服器，呼籲Exchange用戶應儘速修補。 CVE-2020-0688漏洞肇因於Exchange伺服器在安裝時沒能妥善建立唯一金鑰，將允許具備該知識及信箱的授權用戶以系統權限傳遞任意物件，屬於遠端程式攻擊漏洞，該漏洞影響Microsoft Exchange Server 2010 SP3、Microsoft Exchange Server 2013、Microsoft Exchange Server 2016與Microsoft Exchange Server 2019，但只被微軟列為重要（Important）等級的風險。",
"fork": false,
"created_at": "2021-05-03T09:44:25Z",
"updated_at": "2026-04-14T13:47:27Z",
"updated_at": "2026-08-27T11:28:34Z",
"pushed_at": "2021-05-03T09:44:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -669,7 +669,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
2020/CVE-2020-1472.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
"updated_at": "2026-08-22T11:00:45Z",
"updated_at": "2026-08-27T11:55:01Z",
"pushed_at": "2025-06-27T07:13:13Z",
"stargazers_count": 1830,
"watchers_count": 1830,
"stargazers_count": 1831,
"watchers_count": 1831,
"has_discussions": false,
"forks_count": 355,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 355,
"watchers": 1830,
"watchers": 1831,
"score": 0,
"subscribers_count": 84
},
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-08-24T02:23:53Z",
"updated_at": "2026-08-27T11:08:17Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1320,
"watchers_count": 1320,
"stargazers_count": 1321,
"watchers_count": 1321,
"has_discussions": false,
"forks_count": 281,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 281,
"watchers": 1320,
"watchers": 1321,
"score": 0,
"subscribers_count": 34
},
2020/CVE-2020-1938.json
+8 -8
View File
@@ -878,10 +878,10 @@
"description": "Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取\/包含",
"fork": false,
"created_at": "2022-11-13T11:01:41Z",
"updated_at": "2026-07-27T10:26:52Z",
"updated_at": "2026-08-27T08:50:08Z",
"pushed_at": "2022-11-15T09:05:50Z",
"stargazers_count": 257,
"watchers_count": 257,
"stargazers_count": 258,
"watchers_count": 258,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -892,7 +892,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 257,
"watchers": 258,
"score": 0,
"subscribers_count": 4
},
@@ -977,10 +977,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-08-25T05:18:23Z",
"updated_at": "2026-08-27T08:23:03Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 294,
"watchers_count": 294,
"stargazers_count": 295,
"watchers_count": 295,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -999,7 +999,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 294,
"watchers": 295,
"score": 0,
"subscribers_count": 2
},
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-08-27T03:55:45Z",
"updated_at": "2026-08-27T12:18:38Z",
"pushed_at": "2026-08-26T08:08:30Z",
"stargazers_count": 131,
"watchers_count": 131,
"stargazers_count": 135,
"watchers_count": 135,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 131,
"watchers": 135,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-27876.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1348474330,
"name": "CVE-2021-27876-veritas-backup",
"full_name": "hyderpwn\/CVE-2021-27876-veritas-backup",
"owner": {
"login": "hyderpwn",
"id": 105069125,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105069125?v=4",
"html_url": "https:\/\/github.com\/hyderpwn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hyderpwn\/CVE-2021-27876-veritas-backup",
"description": "Metasploit module: Veritas Backup Exec Agent SHA-auth NDMP remote code execution (CVE-2021-27876\/27877\/27878)",
"fork": false,
"created_at": "2026-08-27T12:37:03Z",
"updated_at": "2026-08-27T12:45:41Z",
"pushed_at": "2026-08-27T12:38:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-34527.json
+4 -4
View File
@@ -119,10 +119,10 @@
"description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits",
"fork": false,
"created_at": "2021-07-03T15:15:12Z",
"updated_at": "2026-08-15T23:12:25Z",
"updated_at": "2026-08-27T11:18:45Z",
"pushed_at": "2021-09-13T12:12:17Z",
"stargazers_count": 174,
"watchers_count": 174,
"stargazers_count": 175,
"watchers_count": 175,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -140,7 +140,7 @@
],
"visibility": "public",
"forks": 41,
"watchers": 174,
"watchers": 175,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-4034.json
+8 -8
View File
@@ -51,10 +51,10 @@
"description": "CVE-2021-4034 1day",
"fork": false,
"created_at": "2022-01-25T23:51:37Z",
"updated_at": "2026-08-26T21:59:56Z",
"updated_at": "2026-08-27T08:55:40Z",
"pushed_at": "2022-06-08T04:00:28Z",
"stargazers_count": 2048,
"watchers_count": 2048,
"stargazers_count": 2047,
"watchers_count": 2047,
"has_discussions": false,
"forks_count": 507,
"allow_forking": true,
@@ -65,7 +65,7 @@
"topics": [],
"visibility": "public",
"forks": 507,
"watchers": 2048,
"watchers": 2047,
"score": 0,
"subscribers_count": 18
},
@@ -994,10 +994,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-08-26T22:00:00Z",
"updated_at": "2026-08-27T07:49:16Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1327,
"watchers_count": 1327,
"stargazers_count": 1328,
"watchers_count": 1328,
"has_discussions": false,
"forks_count": 206,
"allow_forking": true,
@@ -1010,7 +1010,7 @@
],
"visibility": "public",
"forks": 206,
"watchers": 1327,
"watchers": 1328,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-0337.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337",
"fork": false,
"created_at": "2022-03-19T08:10:46Z",
"updated_at": "2026-08-07T05:29:44Z",
"updated_at": "2026-08-27T08:55:54Z",
"pushed_at": "2022-09-04T17:28:56Z",
"stargazers_count": 341,
"watchers_count": 341,
"stargazers_count": 340,
"watchers_count": 340,
"has_discussions": false,
"forks_count": 31,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 31,
"watchers": 341,
"watchers": 340,
"score": 0,
"subscribers_count": 3
},
2022/CVE-2022-26134.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。",
"fork": false,
"created_at": "2022-05-31T07:44:01Z",
"updated_at": "2026-08-21T11:19:30Z",
"updated_at": "2026-08-27T12:42:02Z",
"pushed_at": "2023-02-26T14:06:05Z",
"stargazers_count": 1250,
"watchers_count": 1250,
"stargazers_count": 1251,
"watchers_count": 1251,
"has_discussions": true,
"forks_count": 186,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 186,
"watchers": 1250,
"watchers": 1251,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-38831.json
+33
View File
@@ -1123,6 +1123,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 727188390,
"name": "CVE-2023-38831-POC",
"full_name": "MyStuffYT\/CVE-2023-38831-POC",
"owner": {
"login": "MyStuffYT",
"id": 73236689,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73236689?v=4",
"html_url": "https:\/\/github.com\/MyStuffYT",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MyStuffYT\/CVE-2023-38831-POC",
"description": "Proof-of-concept of CVE-2023-38831",
"fork": false,
"created_at": "2023-12-04T11:13:43Z",
"updated_at": "2026-08-27T08:01:56Z",
"pushed_at": "2024-03-01T20:54:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 730732165,
"name": "CVE-2023-38831",
2023/CVE-2023-43208.json
+4 -4
View File
@@ -298,10 +298,10 @@
"description": "PoC for CVE-2023-43208 RCE exploitation.",
"fork": false,
"created_at": "2026-02-25T09:45:48Z",
"updated_at": "2026-08-25T08:21:50Z",
"updated_at": "2026-08-27T09:38:25Z",
"pushed_at": "2026-02-25T09:51:21Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -312,7 +312,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-3094.json
+2 -2
View File
@@ -2848,8 +2848,8 @@
"description": "CS50 Cybersecurity Final Project - Analysis of CVE-2024-3094",
"fork": false,
"created_at": "2026-08-10T04:18:04Z",
"updated_at": "2026-08-25T21:45:03Z",
"pushed_at": "2026-08-25T21:43:03Z",
"updated_at": "2026-08-27T07:27:14Z",
"pushed_at": "2026-08-27T07:24:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-08-18T11:43:52Z",
"updated_at": "2026-08-27T10:18:16Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 76,
"watchers_count": 76,
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 76,
"watchers": 77,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-34740.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-08-05T04:54:19Z",
"updated_at": "2026-08-27T10:55:50Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 68,
"watchers_count": 68,
"stargazers_count": 69,
"watchers_count": 69,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
"watchers": 68,
"watchers": 69,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-40507.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "OpenPetra v.2023.02 Use CVE-2024-40507",
"fork": false,
"created_at": "2024-07-13T21:50:57Z",
"updated_at": "2024-07-13T22:09:08Z",
"updated_at": "2026-08-27T08:35:05Z",
"pushed_at": "2024-07-13T22:09:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-42327.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "cve-2024-42327 ZBX-25623",
"fork": false,
"created_at": "2024-12-01T00:15:27Z",
"updated_at": "2026-07-08T18:09:19Z",
"updated_at": "2026-08-27T08:16:37Z",
"pushed_at": "2024-12-01T01:18:36Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 37,
"watchers": 38,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-4367.json
-33
View File
@@ -895,38 +895,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321858523,
"name": "pdfjs-cve-2024-4367-poc",
"full_name": "DharmarajPS\/pdfjs-cve-2024-4367-poc",
"owner": {
"login": "DharmarajPS",
"id": 38908133,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38908133?v=4",
"html_url": "https:\/\/github.com\/DharmarajPS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DharmarajPS\/pdfjs-cve-2024-4367-poc",
"description": null,
"fork": false,
"created_at": "2026-08-03T14:09:31Z",
"updated_at": "2026-08-03T14:33:38Z",
"pushed_at": "2026-08-03T14:30:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-2304.json
+4 -4
View File
@@ -214,10 +214,10 @@
"description": "Python script to exploit Privilege Escalation in Camaleon CMS.",
"fork": false,
"created_at": "2026-02-01T09:37:13Z",
"updated_at": "2026-08-18T08:44:06Z",
"updated_at": "2026-08-27T09:38:25Z",
"pushed_at": "2026-02-01T09:47:35Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 16,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24071.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File",
"fork": false,
"created_at": "2025-03-16T20:10:19Z",
"updated_at": "2026-08-22T18:41:07Z",
"updated_at": "2026-08-27T09:38:44Z",
"pushed_at": "2025-03-20T21:22:23Z",
"stargazers_count": 406,
"watchers_count": 406,
"stargazers_count": 407,
"watchers_count": 407,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 68,
"watchers": 406,
"watchers": 407,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24203.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.",
"fork": false,
"created_at": "2025-05-09T07:18:55Z",
"updated_at": "2026-08-26T01:26:21Z",
"updated_at": "2026-08-27T11:25:50Z",
"pushed_at": "2026-06-30T02:22:50Z",
"stargazers_count": 417,
"watchers_count": 417,
"stargazers_count": 418,
"watchers_count": 418,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 417,
"watchers": 418,
"score": 0,
"subscribers_count": 11
},
2025/CVE-2025-24813.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.",
"fork": false,
"created_at": "2025-03-14T07:36:58Z",
"updated_at": "2026-08-25T12:36:08Z",
"updated_at": "2026-08-27T11:19:26Z",
"pushed_at": "2025-03-14T07:57:27Z",
"stargazers_count": 196,
"watchers_count": 196,
"stargazers_count": 197,
"watchers_count": 197,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 196,
"watchers": 197,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-31200.json
+4 -4
View File
@@ -122,10 +122,10 @@
"description": "IOS audio buffer overflow CVE-2025-31200 POC",
"fork": false,
"created_at": "2025-08-28T13:53:14Z",
"updated_at": "2026-08-13T07:18:10Z",
"updated_at": "2026-08-27T12:02:00Z",
"pushed_at": "2025-08-28T14:10:23Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -136,7 +136,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-36911.json
+28 -28
View File
@@ -14,10 +14,10 @@
"description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit",
"fork": false,
"created_at": "2026-01-17T01:18:36Z",
"updated_at": "2026-08-24T13:44:48Z",
"updated_at": "2026-08-27T11:16:05Z",
"pushed_at": "2026-05-28T08:12:40Z",
"stargazers_count": 104,
"watchers_count": 104,
"stargazers_count": 105,
"watchers_count": 105,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 17,
"watchers": 104,
"watchers": 105,
"score": 0,
"subscribers_count": 5
},
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-08-23T21:31:38Z",
"updated_at": "2026-08-27T11:16:15Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 833,
"watchers_count": 833,
"stargazers_count": 834,
"watchers_count": 834,
"has_discussions": false,
"forks_count": 93,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 93,
"watchers": 833,
"watchers": 834,
"score": 0,
"subscribers_count": 23
},
@@ -152,10 +152,10 @@
"description": "WhisperPair (CVE-2025-36911) POC for ESP32 device ",
"fork": false,
"created_at": "2026-01-20T05:50:37Z",
"updated_at": "2026-07-07T16:52:05Z",
"updated_at": "2026-08-27T10:53:32Z",
"pushed_at": "2026-01-31T03:16:06Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -173,7 +173,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -225,10 +225,10 @@
"description": "A security research tool that identifies and demonstrates the CVE-2025-36911: Fast Pair Pairing Mode Bypass vulnerability",
"fork": false,
"created_at": "2026-01-25T19:48:05Z",
"updated_at": "2026-06-13T15:33:01Z",
"updated_at": "2026-08-27T11:17:47Z",
"pushed_at": "2026-01-25T20:52:36Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -239,7 +239,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
@@ -258,10 +258,10 @@
"description": "Exploit of the CVE-2025-36911 vulnerability in Python for testing our own equipment",
"fork": false,
"created_at": "2026-01-27T10:18:07Z",
"updated_at": "2026-07-13T12:10:06Z",
"updated_at": "2026-08-27T11:16:37Z",
"pushed_at": "2026-01-28T17:42:44Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -275,7 +275,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 1
},
@@ -294,10 +294,10 @@
"description": "BLUE-SPY (Bluetooth Low Energy Universal Exploit - Security Penetration Testing) is a professional security assessment tool for analyzing CVE-2025-36911 vulnerabilities in Google's Fast Pair protocol implementation.",
"fork": false,
"created_at": "2026-02-19T20:27:53Z",
"updated_at": "2026-08-16T21:21:40Z",
"updated_at": "2026-08-27T11:17:46Z",
"pushed_at": "2026-02-19T20:30:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -308,7 +308,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -327,10 +327,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-08-27T04:35:05Z",
"updated_at": "2026-08-27T11:16:23Z",
"pushed_at": "2026-05-28T14:44:51Z",
"stargazers_count": 84,
"watchers_count": 84,
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -346,7 +346,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 84,
"watchers": 85,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-26T11:02:38Z",
"updated_at": "2026-08-27T11:28:05Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 924,
"watchers_count": 924,
"stargazers_count": 925,
"watchers_count": 925,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 136,
"watchers": 924,
"watchers": 925,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54068.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Fast Python scanner detects vulnerable Laravel Livewire v3 sites (CVE-2025-54068, CVSS 9.2). Separates risky sites into vuln.txt, safe sites into safe.txt.",
"fork": false,
"created_at": "2026-01-01T12:28:22Z",
"updated_at": "2026-01-26T00:31:10Z",
"pushed_at": "2026-01-01T12:32:56Z",
"updated_at": "2026-08-27T09:51:56Z",
"pushed_at": "2026-08-27T09:47:21Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-08-21T21:08:05Z",
"updated_at": "2026-08-27T08:18:20Z",
"pushed_at": "2026-08-08T15:41:31Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 38,
"watchers": 39,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-1529.json
+4 -4
View File
@@ -57,10 +57,10 @@
"description": "Keycloak: Unauthorized organization registration via improper invitation token validation",
"fork": false,
"created_at": "2026-02-11T06:24:21Z",
"updated_at": "2026-07-07T04:38:00Z",
"updated_at": "2026-08-27T08:37:01Z",
"pushed_at": "2026-02-11T06:59:10Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -71,7 +71,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-18963.json
+41 -8
View File
@@ -53,10 +53,10 @@
"description": "Exploit for KeyCloak CVE-2026-18963",
"fork": false,
"created_at": "2026-08-20T22:01:11Z",
"updated_at": "2026-08-27T00:28:41Z",
"updated_at": "2026-08-27T08:17:58Z",
"pushed_at": "2026-08-20T22:38:38Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -78,7 +78,7 @@
],
"visibility": "public",
"forks": 9,
"watchers": 30,
"watchers": 33,
"score": 0,
"subscribers_count": 1
},
@@ -163,10 +163,10 @@
"description": "CVE-2026-18963",
"fork": false,
"created_at": "2026-08-24T23:40:17Z",
"updated_at": "2026-08-26T12:33:22Z",
"updated_at": "2026-08-27T10:40:25Z",
"pushed_at": "2026-08-25T18:22:45Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -177,7 +177,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -214,6 +214,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1345727386,
"name": "Exploit-For-CVE-2026-18963",
"full_name": "BlackHatExploitation\/Exploit-For-CVE-2026-18963",
"owner": {
"login": "BlackHatExploitation",
"id": 188622654,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188622654?v=4",
"html_url": "https:\/\/github.com\/BlackHatExploitation",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BlackHatExploitation\/Exploit-For-CVE-2026-18963",
"description": "Exploit for CVE-2026-18963 by BlackHatExploitation",
"fork": false,
"created_at": "2026-08-25T05:39:39Z",
"updated_at": "2026-08-27T09:18:42Z",
"pushed_at": "2026-08-25T06:22:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1346278353,
"name": "keycloak-CVE-2026-18963",
2026/CVE-2026-19478.json
+2 -2
View File
@@ -184,8 +184,8 @@
"description": "GitLab Code injection",
"fork": false,
"created_at": "2026-08-27T06:30:36Z",
"updated_at": "2026-08-27T06:47:30Z",
"pushed_at": "2026-08-27T06:46:51Z",
"updated_at": "2026-08-27T08:26:47Z",
"pushed_at": "2026-08-27T08:20:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-21962.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": null,
"fork": false,
"created_at": "2026-03-08T07:20:13Z",
"updated_at": "2026-08-25T10:41:36Z",
"updated_at": "2026-08-27T12:40:36Z",
"pushed_at": "2026-03-09T05:04:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-23918.json
+4 -4
View File
@@ -220,10 +220,10 @@
"description": "Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE\/vulnerability detection for Apache 2.4.66.",
"fork": false,
"created_at": "2026-05-06T13:00:15Z",
"updated_at": "2026-07-13T12:12:44Z",
"updated_at": "2026-08-27T09:27:28Z",
"pushed_at": "2026-05-06T13:09:45Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -246,7 +246,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-26980.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)",
"fork": false,
"created_at": "2026-04-17T19:15:20Z",
"updated_at": "2026-08-14T05:12:05Z",
"updated_at": "2026-08-27T09:12:48Z",
"pushed_at": "2026-04-18T02:55:16Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-28318.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318",
"fork": false,
"created_at": "2026-06-12T20:09:57Z",
"updated_at": "2026-07-02T14:46:31Z",
"updated_at": "2026-08-27T11:26:00Z",
"pushed_at": "2026-06-12T20:38:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+8 -8
View File
@@ -124,10 +124,10 @@
"description": "Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or .c elf) roots every Linux distribution shipped since 2017.",
"fork": false,
"created_at": "2026-04-29T21:08:42Z",
"updated_at": "2026-08-24T15:16:36Z",
"updated_at": "2026-08-27T07:56:23Z",
"pushed_at": "2026-04-29T21:22:27Z",
"stargazers_count": 104,
"watchers_count": 104,
"stargazers_count": 105,
"watchers_count": 105,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -138,7 +138,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 104,
"watchers": 105,
"score": 0,
"subscribers_count": 0
},
@@ -190,10 +190,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-08-27T02:43:34Z",
"updated_at": "2026-08-27T09:40:03Z",
"pushed_at": "2026-07-17T13:24:28Z",
"stargazers_count": 442,
"watchers_count": 442,
"stargazers_count": 443,
"watchers_count": 443,
"has_discussions": true,
"forks_count": 121,
"allow_forking": true,
@@ -217,7 +217,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 442,
"watchers": 443,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-31721.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Backports of three published f_hid fixes (incl. CVE-2026-31721, CVE-2026-31606) to an EOL Linux 4.14.190 Android vendor kernel, with on-device verification records.",
"fork": false,
"created_at": "2026-08-26T16:50:40Z",
"updated_at": "2026-08-26T21:25:48Z",
"pushed_at": "2026-08-26T16:50:44Z",
"updated_at": "2026-08-27T12:03:21Z",
"pushed_at": "2026-08-27T12:01:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-26T11:02:38Z",
"updated_at": "2026-08-27T11:28:05Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 924,
"watchers_count": 924,
"stargazers_count": 925,
"watchers_count": 925,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 136,
"watchers": 924,
"watchers": 925,
"score": 0,
"subscribers_count": 20
},
2026/CVE-2026-3844.json
+6 -6
View File
@@ -302,10 +302,10 @@
"description": "CVE-2026-3844 — Unauthenticated Arbitrary File Upload to RCE in Breeze Cache (WordPress). CVSS 9.8 CRITICAL. Mass scanner + auto shell injector with multi-threading.",
"fork": false,
"created_at": "2026-08-08T11:43:54Z",
"updated_at": "2026-08-14T19:56:11Z",
"updated_at": "2026-08-27T09:45:46Z",
"pushed_at": "2026-08-08T12:05:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -316,7 +316,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -335,8 +335,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-26T10:13:09Z",
"updated_at": "2026-08-26T10:21:42Z",
"pushed_at": "2026-08-26T10:19:29Z",
"updated_at": "2026-08-27T09:12:38Z",
"pushed_at": "2026-08-27T09:03:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-38526.json
+22 -2
View File
@@ -320,7 +320,7 @@
"description": "Hack The Box Nexus machine write-up covering reconnaissance, Gitea credential discovery, Krayin CRM exploitation via CVE-2026-38526, initial access, and privilege escalation through a vulnerable Gitea template synchronization service.",
"fork": false,
"created_at": "2026-08-27T06:41:17Z",
"updated_at": "2026-08-27T07:21:33Z",
"updated_at": "2026-08-27T07:24:47Z",
"pushed_at": "2026-08-27T07:19:29Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -331,7 +331,27 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"burp-suite",
"ctf",
"cve-2026-38526",
"cybersecurity",
"git",
"gitea",
"gobuster",
"hackthebox",
"hackthebox-writeups",
"htb",
"htb-labs",
"krayin",
"linux",
"nexus",
"path-traversal",
"privilege-escalation",
"python",
"remote-code-execution",
"web-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-39902.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "5th RCE OS Command Injection on Data Input",
"fork": false,
"created_at": "2026-04-04T07:57:40Z",
"updated_at": "2026-08-26T03:48:30Z",
"updated_at": "2026-08-27T10:39:58Z",
"pushed_at": "2026-08-26T03:41:37Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-40369.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-08-19T23:45:37Z",
"updated_at": "2026-08-27T08:37:19Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 262,
"watchers_count": 262,
"stargazers_count": 263,
"watchers_count": 263,
"has_discussions": false,
"forks_count": 60,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 60,
"watchers": 262,
"watchers": 263,
"score": 0,
"subscribers_count": 6
},
2026/CVE-2026-41651.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-23T08:57:29Z",
"updated_at": "2026-08-20T18:32:17Z",
"updated_at": "2026-08-27T09:15:50Z",
"pushed_at": "2026-04-23T13:55:33Z",
"stargazers_count": 116,
"watchers_count": 116,
"stargazers_count": 117,
"watchers_count": 117,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 116,
"watchers": 117,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42945.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 9,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 8,
"watchers": 34,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43499.json
+87 -21
View File
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-27T04:34:10Z",
"updated_at": "2026-08-27T08:32:41Z",
"pushed_at": "2026-08-24T07:49:18Z",
"stargazers_count": 935,
"watchers_count": 935,
"has_discussions": false,
"forks_count": 186,
"forks_count": 187,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,7 +1094,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 186,
"forks": 187,
"watchers": 935,
"score": 0,
"subscribers_count": 28
@@ -1180,10 +1180,10 @@
"description": "CVE-2026-43499 (IonStack\/GhostLock) pure-C re-root POC for Samsung SM-T878U \/ gts7l (T878USQS8DXE1)",
"fork": false,
"created_at": "2026-07-18T08:18:28Z",
"updated_at": "2026-08-24T05:10:25Z",
"updated_at": "2026-08-27T07:47:21Z",
"pushed_at": "2026-07-21T13:45:47Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -1202,7 +1202,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -1712,6 +1712,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1315711042,
"name": "ghostlock-app",
"full_name": "YuKongA\/ghostlock-app",
"owner": {
"login": "YuKongA",
"id": 70465933,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70465933?v=4",
"html_url": "https:\/\/github.com\/YuKongA",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/YuKongA\/ghostlock-app",
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-08-27T12:55:39Z",
"pushed_at": "2026-08-27T12:18:36Z",
"stargazers_count": 508,
"watchers_count": 508,
"has_discussions": true,
"forks_count": 161,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 161,
"watchers": 508,
"score": 0,
"subscribers_count": 0
},
{
"id": 1315873501,
"name": "mt6985-CVE-2026-43499",
@@ -2037,12 +2070,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-26T20:36:57Z",
"updated_at": "2026-08-27T12:21:43Z",
"pushed_at": "2026-08-24T18:11:05Z",
"stargazers_count": 221,
"watchers_count": 221,
"stargazers_count": 223,
"watchers_count": 223,
"has_discussions": false,
"forks_count": 44,
"forks_count": 45,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2057,8 +2090,8 @@
"root"
],
"visibility": "public",
"forks": 44,
"watchers": 221,
"forks": 45,
"watchers": 223,
"score": 0,
"subscribers_count": 5
},
@@ -2247,7 +2280,7 @@
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": true,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2255,7 +2288,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 11,
"watchers": 54,
"score": 0,
"subscribers_count": 2
@@ -2539,10 +2572,10 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-08-25T16:50:45Z",
"updated_at": "2026-08-27T12:21:21Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2553,7 +2586,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -2847,8 +2880,8 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-08-25T13:24:24Z",
"pushed_at": "2026-08-25T13:13:24Z",
"updated_at": "2026-08-27T12:51:47Z",
"pushed_at": "2026-08-27T12:48:22Z",
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
@@ -3491,5 +3524,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1348470709,
"name": "rmg-s9180-fzg1",
"full_name": "hackyangwen-lgtm\/rmg-s9180-fzg1",
"owner": {
"login": "hackyangwen-lgtm",
"id": 282689754,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282689754?v=4",
"html_url": "https:\/\/github.com\/hackyangwen-lgtm",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hackyangwen-lgtm\/rmg-s9180-fzg1",
"description": "Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM",
"fork": false,
"created_at": "2026-08-27T12:33:18Z",
"updated_at": "2026-08-27T12:38:55Z",
"pushed_at": "2026-08-27T12:34:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-46331.json
+2 -2
View File
@@ -410,8 +410,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-30T07:57:24Z",
"updated_at": "2026-07-31T05:29:04Z",
"pushed_at": "2026-07-31T05:28:57Z",
"updated_at": "2026-08-27T08:59:30Z",
"pushed_at": "2026-08-27T08:56:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-49777.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-49777, CVE-2026-10735",
"fork": false,
"created_at": "2026-06-24T03:12:06Z",
"updated_at": "2026-08-08T03:09:32Z",
"updated_at": "2026-08-27T09:51:39Z",
"pushed_at": "2026-08-08T03:08:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49975.json
+4 -4
View File
@@ -291,10 +291,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-13T17:05:58Z",
"updated_at": "2026-07-09T11:05:28Z",
"updated_at": "2026-08-27T12:17:52Z",
"pushed_at": "2026-07-23T03:46:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -305,7 +305,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-55040.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1348325799,
"name": "CVE-2026-55040-Mass-Exploit",
"full_name": "maxprog-svg\/CVE-2026-55040-Mass-Exploit",
"owner": {
"login": "maxprog-svg",
"id": 180038121,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180038121?v=4",
"html_url": "https:\/\/github.com\/maxprog-svg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/maxprog-svg\/CVE-2026-55040-Mass-Exploit",
"description": "CVE-2026-55040",
"fork": false,
"created_at": "2026-08-27T09:53:30Z",
"updated_at": "2026-08-27T10:02:45Z",
"pushed_at": "2026-08-27T09:55:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-62911.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "POC pre-auth RCE on Exchange",
"fork": false,
"created_at": "2026-08-22T04:49:33Z",
"updated_at": "2026-08-27T07:16:56Z",
"updated_at": "2026-08-27T13:25:06Z",
"pushed_at": "2026-08-22T04:49:54Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 84,
"watchers_count": 84,
"has_discussions": false,
"forks_count": 7,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -29,8 +29,8 @@
"cve-2026-62911"
],
"visibility": "public",
"forks": 7,
"watchers": 52,
"forks": 12,
"watchers": 84,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+8 -8
View File
@@ -84,10 +84,10 @@
"description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner",
"fork": false,
"created_at": "2026-07-17T23:15:57Z",
"updated_at": "2026-08-23T13:14:52Z",
"updated_at": "2026-08-27T10:08:04Z",
"pushed_at": "2026-07-18T22:07:34Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 55,
"watchers": 56,
"score": 0,
"subscribers_count": 0
},
@@ -2385,10 +2385,10 @@
"description": "WordPress Core Pre-Auth RCE — Batch Route Confusion + SQL Injection",
"fork": false,
"created_at": "2026-08-05T21:21:12Z",
"updated_at": "2026-08-08T06:30:18Z",
"updated_at": "2026-08-27T09:50:11Z",
"pushed_at": "2026-08-08T06:30:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2399,7 +2399,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64638.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-64638",
"description": "CVE-2026-64638 - Draft or TODO",
"description": "CVE-2026-64638",
"fork": false,
"created_at": "2026-08-07T14:46:25Z",
"updated_at": "2026-08-08T01:18:26Z",
"updated_at": "2026-08-27T08:45:37Z",
"pushed_at": "2026-08-07T14:58:09Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-66066.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-30T21:06:00Z",
"updated_at": "2026-08-11T13:14:50Z",
"updated_at": "2026-08-27T10:13:25Z",
"pushed_at": "2026-07-31T15:27:43Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 25,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
"fork": false,
"created_at": "2026-08-11T22:22:22Z",
"updated_at": "2026-08-26T13:14:48Z",
"updated_at": "2026-08-27T08:17:07Z",
"pushed_at": "2026-08-12T15:31:34Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-72898.json
+5 -5
View File
@@ -263,10 +263,10 @@
"description": "Metabase SQLi",
"fork": false,
"created_at": "2026-08-27T06:51:58Z",
"updated_at": "2026-08-27T07:06:34Z",
"pushed_at": "2026-08-27T07:03:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-08-27T12:59:29Z",
"pushed_at": "2026-08-27T08:46:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-75604.json
+39 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-75604 Next.js Windows RCE poc",
"fork": false,
"created_at": "2026-08-25T19:06:37Z",
"updated_at": "2026-08-27T06:20:10Z",
"updated_at": "2026-08-27T11:54:04Z",
"pushed_at": "2026-08-26T02:23:42Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 19,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 44,
"forks": 22,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1348309970,
"name": "Project-CVE-2026-75604",
"full_name": "e4zyy\/Project-CVE-2026-75604",
"owner": {
"login": "e4zyy",
"id": 209747032,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209747032?v=4",
"html_url": "https:\/\/github.com\/e4zyy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/e4zyy\/Project-CVE-2026-75604",
"description": "A Python-based exploitation framework for CVE-2026-75604 that enables authorized penetration testers to validate Next.js Windows cache traversal vulnerabilities. Deploys reverse shells and webshells via path traversal, with built-in target verification and proxy support for seamless integration into standard pentest workflows.",
"fork": false,
"created_at": "2026-08-27T09:35:54Z",
"updated_at": "2026-08-27T09:49:20Z",
"pushed_at": "2026-08-27T09:44:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8452.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-8452 PreAuth RCE",
"fork": false,
"created_at": "2026-08-14T15:01:25Z",
"updated_at": "2026-08-27T04:23:35Z",
"updated_at": "2026-08-27T09:25:05Z",
"pushed_at": "2026-08-14T15:08:55Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 59,
"watchers": 60,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-08-27T03:03:42Z",
"updated_at": "2026-08-27T13:15:09Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 346,
"watchers_count": 346,
"stargazers_count": 348,
"watchers_count": 348,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 346,
"watchers": 348,
"score": 0,
"subscribers_count": 0
}
README.md
+23 -1
View File
@@ -3749,6 +3749,7 @@
- [T0w0T/POC-CVE-2026-18963](https://github.com/T0w0T/POC-CVE-2026-18963)
- [Red-Darkin/CVE-2026-18963-keycloak](https://github.com/Red-Darkin/CVE-2026-18963-keycloak)
- [prot0tw/Keycloak_CVE-2026-18963_PoC](https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC)
- [BlackHatExploitation/Exploit-For-CVE-2026-18963](https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963)
- [gman0x00/keycloak-CVE-2026-18963](https://github.com/gman0x00/keycloak-CVE-2026-18963)
- [debugactiveprocess/CVE-2026-18963](https://github.com/debugactiveprocess/CVE-2026-18963)
@@ -10268,6 +10269,7 @@
- [soralis0912/CVE-2026-43499-pmg110-root](https://github.com/soralis0912/CVE-2026-43499-pmg110-root)
- [dnlid/CVE-2026-43499](https://github.com/dnlid/CVE-2026-43499)
- [WitAqua-tools/Root-My-Device](https://github.com/WitAqua-tools/Root-My-Device)
- [YuKongA/ghostlock-app](https://github.com/YuKongA/ghostlock-app)
- [233laoliu/mt6985-CVE-2026-43499](https://github.com/233laoliu/mt6985-CVE-2026-43499)
- [2932796375github/CVE-2026-43499_OPPO-MT6835](https://github.com/2932796375github/CVE-2026-43499_OPPO-MT6835)
- [datfooldive/ghostlock-emerald](https://github.com/datfooldive/ghostlock-emerald)
@@ -10321,6 +10323,7 @@
- [JingMatrix/pixel-ksu-root](https://github.com/JingMatrix/pixel-ksu-root)
- [sgswzglwlx/vivo-root-build](https://github.com/sgswzglwlx/vivo-root-build)
- [rsyzee/ghostlock-infinix-hot70](https://github.com/rsyzee/ghostlock-infinix-hot70)
- [hackyangwen-lgtm/rmg-s9180-fzg1](https://github.com/hackyangwen-lgtm/rmg-s9180-fzg1)
### CVE-2026-43500 (2026-05-11)
@@ -12441,6 +12444,7 @@
- [l0ggg/CVE-2026-55040](https://github.com/l0ggg/CVE-2026-55040)
- [sfewer-r7/CVE-2026-55040](https://github.com/sfewer-r7/CVE-2026-55040)
- [zenzue/CVE-2026-55040](https://github.com/zenzue/CVE-2026-55040)
- [maxprog-svg/CVE-2026-55040-Mass-Exploit](https://github.com/maxprog-svg/CVE-2026-55040-Mass-Exploit)
### CVE-2026-55168 (2026-08-21)
@@ -14023,6 +14027,7 @@
### CVE-2026-75604
- [rafabd1/CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc)
- [HackSpeak/CVE-2026-75604](https://github.com/HackSpeak/CVE-2026-75604)
- [e4zyy/Project-CVE-2026-75604](https://github.com/e4zyy/Project-CVE-2026-75604)
### CVE-2026-75616 (2026-08-19)
@@ -28496,7 +28501,6 @@
- [veronimo669/pdf.js-CVE-2024-4367](https://github.com/veronimo669/pdf.js-CVE-2024-4367)
- [yuimamur/CVE-2024-4367-hands-on](https://github.com/yuimamur/CVE-2024-4367-hands-on)
- [yuimamur/CVE-2024-4367-hands-on-01](https://github.com/yuimamur/CVE-2024-4367-hands-on-01)
- [DharmarajPS/pdfjs-cve-2024-4367-poc](https://github.com/DharmarajPS/pdfjs-cve-2024-4367-poc)
### CVE-2024-4406 (2024-05-02)
@@ -45155,6 +45159,7 @@
- [h3xecute/SideCopy-Exploits-CVE-2023-38831](https://github.com/h3xecute/SideCopy-Exploits-CVE-2023-38831)
- [s4m98/winrar-cve-2023-38831-poc-gen](https://github.com/s4m98/winrar-cve-2023-38831-poc-gen)
- [xk-mt/WinRAR-Vulnerability-recurrence-tutorial](https://github.com/xk-mt/WinRAR-Vulnerability-recurrence-tutorial)
- [MyStuffYT/CVE-2023-38831-POC](https://github.com/MyStuffYT/CVE-2023-38831-POC)
- [SpamixOfficial/CVE-2023-38831](https://github.com/SpamixOfficial/CVE-2023-38831)
- [r1yaz/winDED](https://github.com/r1yaz/winDED)
- [youmulijiang/evil-winrar](https://github.com/youmulijiang/evil-winrar)
@@ -58968,6 +58973,7 @@
</code>
- [wingerbijay/CVE-2021-27876](https://github.com/wingerbijay/CVE-2021-27876)
- [hyderpwn/CVE-2021-27876-veritas-backup](https://github.com/hyderpwn/CVE-2021-27876-veritas-backup)
### CVE-2021-27877 (2021-03-01)
@@ -81945,6 +81951,13 @@
- [RenukaSelvar/libunwind_CVE-2015-3239_AfterPatch](https://github.com/RenukaSelvar/libunwind_CVE-2015-3239_AfterPatch)
- [RenukaSelvar/libunwind_CVE-2015-3239_After](https://github.com/RenukaSelvar/libunwind_CVE-2015-3239_After)
### CVE-2015-3246 (2015-08-11)
<code>libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.
</code>
- [HORKimhab/CVE-2015-3246](https://github.com/HORKimhab/CVE-2015-3246)
### CVE-2015-3256 (2015-10-26)
<code>PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to &quot;javascript rule evaluation.&quot;
@@ -82110,6 +82123,13 @@
- [guigui237/Exploitation-de-la-vuln-rabilit-CVE-2015-5254-](https://github.com/guigui237/Exploitation-de-la-vuln-rabilit-CVE-2015-5254-)
- [Catherines77/ActiveMQ-EXPtools](https://github.com/Catherines77/ActiveMQ-EXPtools)
### CVE-2015-5287 (2015-12-07)
<code>The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
</code>
- [HORKimhab/CVE-2015-5287](https://github.com/HORKimhab/CVE-2015-5287)
### CVE-2015-5347 (2016-04-12)
<code>Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title.
@@ -84719,6 +84739,7 @@
- [omarothmann/Embedded-Backdoor-Connection](https://github.com/omarothmann/Embedded-Backdoor-Connection)
- [asepsaepdin/CVE-2010-1240](https://github.com/asepsaepdin/CVE-2010-1240)
- [12345qwert123456/CVE-2010-1240](https://github.com/12345qwert123456/CVE-2010-1240)
- [ocfagb/hacktivity-vulns-exploits-lab](https://github.com/ocfagb/hacktivity-vulns-exploits-lab)
### CVE-2010-1411 (2010-06-17)
@@ -85711,6 +85732,7 @@
- [nulltrace1336/Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687](https://github.com/nulltrace1336/Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687)
- [micheaol/distccd_rce_CVE-2004-2687](https://github.com/micheaol/distccd_rce_CVE-2004-2687)
- [aish19siddiqua-commits/mtechweek_04](https://github.com/aish19siddiqua-commits/mtechweek_04)
- [ocfagb/hacktivity-vulns-exploits-lab](https://github.com/ocfagb/hacktivity-vulns-exploits-lab)
### CVE-2004-6768
- [yougboiz/Metasploit-CVE-2004-6768](https://github.com/yougboiz/Metasploit-CVE-2004-6768)