nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/11 13:47:02

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-11 22:47:02 +09:00
1 parent 0873146e9c
commit ea7d00bed6
78 files changed
+765 -360
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2009/CVE-2009-0658.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVSS v3.1 assessment of CVE-2009-0658 (Adobe Acrobat Buffer Overflow), including Base, Temporal, and Environmental scoring and remediation recommendations.",
"fork": false,
"created_at": "2026-08-23T08:54:58Z",
"updated_at": "2026-09-11T06:06:07Z",
"pushed_at": "2026-09-11T06:06:03Z",
"updated_at": "2026-09-11T06:40:22Z",
"pushed_at": "2026-09-11T06:40:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2010/CVE-2010-2075.json
+33
View File
@@ -270,5 +270,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1365725920,
"name": "Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation",
"full_name": "rhimavanth32-max\/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation",
"owner": {
"login": "rhimavanth32-max",
"id": 321633843,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/321633843?v=4",
"html_url": "https:\/\/github.com\/rhimavanth32-max",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rhimavanth32-max\/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation",
"description": "End-to-end recon and exploitation of a known backdoor (CVE-2010-2075) on Metasploitable2 using Nmap and Metasploit.",
"fork": false,
"created_at": "2026-09-11T09:08:59Z",
"updated_at": "2026-09-11T09:16:44Z",
"pushed_at": "2026-09-11T09:16:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2014/CVE-2014-0114.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 9,
"watchers": 12,
"score": 0,
"subscribers_count": 2
2017/CVE-2017-7494.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 380,
"watchers_count": 380,
"has_discussions": false,
"forks_count": 96,
"forks_count": 97,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"sambacry"
],
"visibility": "public",
"forks": 96,
"forks": 97,
"watchers": 380,
"score": 0,
"subscribers_count": 9
2019/CVE-2019-0232.json
+1 -1
View File
@@ -282,7 +282,7 @@
"description": "Hi this is a revised and enhanced code for CVE-2019-0232 ",
"fork": false,
"created_at": "2024-12-29T04:01:23Z",
"updated_at": "2026-02-22T22:41:17Z",
"updated_at": "2026-09-11T12:26:44Z",
"pushed_at": "2024-12-29T04:14:25Z",
"stargazers_count": 2,
"watchers_count": 2,
2019/CVE-2019-11358.json
+1 -1
View File
@@ -133,7 +133,7 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-09-05T10:54:30Z",
"updated_at": "2026-09-11T06:52:34Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 309,
"watchers_count": 309,
2020/CVE-2020-1938.json
+4 -4
View File
@@ -713,10 +713,10 @@
"description": null,
"fork": false,
"created_at": "2021-03-28T03:30:44Z",
"updated_at": "2026-08-04T17:34:24Z",
"updated_at": "2026-09-11T08:45:24Z",
"pushed_at": "2022-11-27T06:14:19Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -727,7 +727,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-4034.json
+8 -8
View File
@@ -1364,10 +1364,10 @@
"description": "Python exploit code for CVE-2021-4034 (pwnkit)",
"fork": false,
"created_at": "2022-01-26T17:53:16Z",
"updated_at": "2026-08-14T06:10:05Z",
"updated_at": "2026-09-11T07:20:54Z",
"pushed_at": "2022-01-28T00:29:15Z",
"stargazers_count": 180,
"watchers_count": 180,
"stargazers_count": 181,
"watchers_count": 181,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -1378,7 +1378,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 180,
"watchers": 181,
"score": 0,
"subscribers_count": 1
},
@@ -1964,10 +1964,10 @@
"description": "Proof of concept for pwnkit vulnerability",
"fork": false,
"created_at": "2022-01-27T14:43:57Z",
"updated_at": "2026-06-09T09:20:41Z",
"updated_at": "2026-09-11T07:14:46Z",
"pushed_at": "2023-01-12T19:23:29Z",
"stargazers_count": 351,
"watchers_count": 351,
"stargazers_count": 352,
"watchers_count": 352,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -1978,7 +1978,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 351,
"watchers": 352,
"score": 0,
"subscribers_count": 6
},
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-09-11T03:27:54Z",
"updated_at": "2026-09-11T08:54:28Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1814,
"watchers_count": 1814,
"stargazers_count": 1815,
"watchers_count": 1815,
"has_discussions": false,
"forks_count": 473,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 473,
"watchers": 1814,
"watchers": 1815,
"score": 0,
"subscribers_count": 27
},
2022/CVE-2022-0847.json
+4 -4
View File
@@ -1237,10 +1237,10 @@
"description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
"fork": false,
"created_at": "2022-03-12T20:57:24Z",
"updated_at": "2026-09-10T01:31:24Z",
"updated_at": "2026-09-11T10:55:24Z",
"pushed_at": "2023-05-20T05:55:45Z",
"stargazers_count": 733,
"watchers_count": 733,
"stargazers_count": 734,
"watchers_count": 734,
"has_discussions": false,
"forks_count": 160,
"allow_forking": true,
@@ -1251,7 +1251,7 @@
"topics": [],
"visibility": "public",
"forks": 160,
"watchers": 733,
"watchers": 734,
"score": 0,
"subscribers_count": 13
},
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-09-08T05:43:49Z",
"updated_at": "2026-09-11T10:16:42Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 599,
"watchers_count": 599,
"stargazers_count": 601,
"watchers_count": 601,
"has_discussions": true,
"forks_count": 81,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 81,
"watchers": 599,
"watchers": 601,
"score": 0,
"subscribers_count": 15
},
2023/CVE-2023-21554.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 28,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-23397.json
+1 -1
View File
@@ -956,7 +956,7 @@
"description": "Detection and mitigation research lab for CVE-2023-23397 using network and endpoint security telemetry.",
"fork": false,
"created_at": "2026-08-28T09:00:27Z",
"updated_at": "2026-09-11T06:13:45Z",
"updated_at": "2026-09-11T07:16:27Z",
"pushed_at": "2026-09-11T07:16:24Z",
"stargazers_count": 0,
"watchers_count": 0,
2023/CVE-2023-33246.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit",
"fork": false,
"created_at": "2023-06-01T14:48:26Z",
"updated_at": "2025-11-14T03:04:49Z",
"updated_at": "2026-09-11T12:17:43Z",
"pushed_at": "2023-06-07T13:07:30Z",
"stargazers_count": 104,
"watchers_count": 104,
"stargazers_count": 105,
"watchers_count": 105,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -164,7 +164,7 @@
],
"visibility": "public",
"forks": 20,
"watchers": 104,
"watchers": 105,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-37582.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache RocketMQ Arbitrary File Write Vulnerability Exploit",
"fork": false,
"created_at": "2023-07-14T12:22:45Z",
"updated_at": "2026-04-29T06:26:07Z",
"updated_at": "2026-09-11T11:12:52Z",
"pushed_at": "2023-07-19T02:29:39Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-38831.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2023-38831 winrar exploit generator",
"fork": false,
"created_at": "2023-08-25T09:44:08Z",
"updated_at": "2026-09-08T02:49:50Z",
"updated_at": "2026-09-11T11:31:26Z",
"pushed_at": "2023-11-26T06:46:44Z",
"stargazers_count": 783,
"watchers_count": 783,
"stargazers_count": 784,
"watchers_count": 784,
"has_discussions": false,
"forks_count": 130,
"allow_forking": true,
@@ -65,7 +65,7 @@
],
"visibility": "public",
"forks": 130,
"watchers": 783,
"watchers": 784,
"score": 0,
"subscribers_count": 7
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-09-09T04:54:58Z",
"pushed_at": "2026-09-09T04:54:43Z",
"updated_at": "2026-09-11T13:17:16Z",
"pushed_at": "2026-09-11T13:17:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23692.json
+4 -4
View File
@@ -311,10 +311,10 @@
"description": "POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 ",
"fork": false,
"created_at": "2024-09-15T12:15:35Z",
"updated_at": "2026-06-06T16:28:41Z",
"updated_at": "2026-09-11T10:28:58Z",
"pushed_at": "2025-03-24T10:08:18Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -330,7 +330,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 48,
"watchers": 49,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-36114.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Serpstat fork of housepower\/ClickHouse-Native-JDBC 2.7.1. Fixes the CityHash128 checksum defect behind \"Checksum doesn't match: corrupted data\" on INSERT, upgrades aircompressor to 0.27 (CVE-2024-36114). Drop-in: com.serpstat:clickhouse-native-jdbc-shaded:2.7.1-serpstat.1. Apache 2.0.",
"fork": false,
"created_at": "2026-09-08T20:52:02Z",
"updated_at": "2026-09-09T15:06:46Z",
"updated_at": "2026-09-11T09:13:52Z",
"pushed_at": "2026-09-09T15:00:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-6387.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 497,
"watchers_count": 497,
"has_discussions": false,
"forks_count": 184,
"forks_count": 185,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 184,
"forks": 185,
"watchers": 497,
"score": 0,
"subscribers_count": 7
2024/CVE-2024-7344.json
+79
View File
@@ -35,5 +35,84 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1270223520,
"name": "UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"full_name": "TheMalwareGuardian\/UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"description": "Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot bypass via the RxPE custom PE loader in BOOTia32.efi).",
"fork": false,
"created_at": "2026-06-15T14:00:01Z",
"updated_at": "2026-09-11T10:36:15Z",
"pushed_at": "2026-09-11T10:36:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2024-7344",
"cve-2026-79298",
"exploit",
"reverse-engineering",
"secure-boot-bypass",
"uefi"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1365703874,
"name": "CVE-2026-79298",
"full_name": "TheMalwareGuardian\/CVE-2026-79298",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/CVE-2026-79298",
"description": "CVE-2026-79298 - Incomplete remediation of UEFI Secure Boot bypass in Howyar SysReturn. The IA-32 boot path (BOOTia32.efi) was never patched after CVE-2024-7344, shipping the same revoked custom PE loader until July 2026.",
"fork": false,
"created_at": "2026-09-11T08:56:06Z",
"updated_at": "2026-09-11T10:28:01Z",
"pushed_at": "2026-09-11T10:25:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-79298",
"exploit",
"firmware-security",
"secure-boot-bypass",
"uefi"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-09-09T04:56:17Z",
"pushed_at": "2026-09-09T04:55:57Z",
"updated_at": "2026-09-11T13:18:35Z",
"pushed_at": "2026-09-11T13:18:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1093,8 +1093,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-09-09T04:55:42Z",
"pushed_at": "2026-09-09T04:55:38Z",
"updated_at": "2026-09-11T13:18:17Z",
"pushed_at": "2026-09-11T13:18:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-21479 proof-of-concept, I think",
"fork": false,
"created_at": "2025-06-19T19:47:52Z",
"updated_at": "2026-09-01T10:28:04Z",
"updated_at": "2026-09-11T09:56:02Z",
"pushed_at": "2025-08-16T06:52:13Z",
"stargazers_count": 274,
"watchers_count": 274,
"stargazers_count": 275,
"watchers_count": 275,
"has_discussions": false,
"forks_count": 60,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 60,
"watchers": 274,
"watchers": 275,
"score": 0,
"subscribers_count": 2
},
@@ -179,10 +179,10 @@
"description": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"fork": false,
"created_at": "2026-08-18T02:31:53Z",
"updated_at": "2026-08-28T08:05:54Z",
"updated_at": "2026-09-11T10:00:20Z",
"pushed_at": "2026-08-18T01:46:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24076.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-06-06T21:35:57Z",
"updated_at": "2026-09-05T06:47:19Z",
"updated_at": "2026-09-11T12:19:23Z",
"pushed_at": "2025-06-06T21:39:15Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-25296.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept (POC) for the CVE-2025-25296 vulnerability affecting Label Studio versions prior to 1.16.0",
"fork": false,
"created_at": "2025-03-01T02:08:01Z",
"updated_at": "2026-07-30T12:55:56Z",
"updated_at": "2026-09-11T12:33:14Z",
"pushed_at": "2025-03-01T02:09:07Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-3052.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1084668632,
"name": "TALKINGEBN",
"full_name": "yonatanasd232132\/TALKINGEBN",
"owner": {
"login": "yonatanasd232132",
"id": 110295650,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110295650?v=4",
"html_url": "https:\/\/github.com\/yonatanasd232132",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yonatanasd232132\/TALKINGEBN",
"description": "planned to be a root kit that is ingrained inside of the UEFI bootloader, but first does priviliage escalation and will be constantly update with probably a c2 server and anti EDR and AV's prevention measures for it to be real world applicable malware (looking for CVE-2025-3052)",
"fork": false,
"created_at": "2025-10-28T01:58:36Z",
"updated_at": "2026-03-04T02:03:27Z",
"pushed_at": "2025-10-28T21:40:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1086937526,
"name": "talkingBen",
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-09-10T18:19:22Z",
"updated_at": "2026-09-11T08:31:35Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 841,
"watchers_count": 841,
"stargazers_count": 840,
"watchers_count": 840,
"has_discussions": false,
"forks_count": 94,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 94,
"watchers": 841,
"watchers": 840,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-49619.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command.",
"fork": false,
"created_at": "2025-06-09T10:09:43Z",
"updated_at": "2025-12-15T06:45:40Z",
"updated_at": "2026-09-11T13:21:07Z",
"pushed_at": "2025-08-17T13:02:24Z",
"stargazers_count": 2,
"watchers_count": 2,
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-09-09T04:45:58Z",
"pushed_at": "2026-09-09T04:45:37Z",
"updated_at": "2026-09-11T13:07:43Z",
"pushed_at": "2026-09-11T13:07:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-09-09T04:53:33Z",
"pushed_at": "2026-09-09T04:53:13Z",
"updated_at": "2026-09-11T13:15:06Z",
"pushed_at": "2026-09-11T13:15:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-09-09T04:52:48Z",
"pushed_at": "2026-09-09T04:52:25Z",
"updated_at": "2026-09-11T13:14:57Z",
"pushed_at": "2026-09-11T13:14:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2295,10 +2295,10 @@
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T08:00:07Z",
"updated_at": "2026-09-08T08:57:19Z",
"updated_at": "2026-09-11T13:30:03Z",
"pushed_at": "2025-12-05T08:56:15Z",
"stargazers_count": 1059,
"watchers_count": 1059,
"stargazers_count": 1061,
"watchers_count": 1061,
"has_discussions": false,
"forks_count": 109,
"allow_forking": true,
@@ -2312,7 +2312,7 @@
],
"visibility": "public",
"forks": 109,
"watchers": 1059,
"watchers": 1061,
"score": 0,
"subscribers_count": 25
},
@@ -11976,8 +11976,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-09-09T04:54:01Z",
"pushed_at": "2026-09-09T04:53:42Z",
"updated_at": "2026-09-11T13:16:14Z",
"pushed_at": "2026-09-11T13:16:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-7771.json
+4 -4
View File
@@ -371,10 +371,10 @@
"description": "ThrottleStop.sys Arbitrary Physical Memory R\/W",
"fork": false,
"created_at": "2026-08-10T23:15:36Z",
"updated_at": "2026-08-26T06:43:31Z",
"updated_at": "2026-09-11T08:01:13Z",
"pushed_at": "2026-08-10T23:15:39Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -385,7 +385,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 20,
"watchers": 19,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-0073.json
+4 -4
View File
@@ -194,10 +194,10 @@
"description": "A PoC tool for the CVE-2026-0073 on android 11+ devices which allows instant zero click RCE on any unpatched device with adb over tcp enabled",
"fork": false,
"created_at": "2026-05-07T04:13:12Z",
"updated_at": "2026-07-18T18:19:10Z",
"updated_at": "2026-09-11T09:32:04Z",
"pushed_at": "2026-05-07T05:41:49Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -208,7 +208,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-18963.json
+4 -4
View File
@@ -460,10 +460,10 @@
"description": "**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.",
"fork": false,
"created_at": "2026-09-06T19:25:47Z",
"updated_at": "2026-09-11T05:22:05Z",
"updated_at": "2026-09-11T10:23:37Z",
"pushed_at": "2026-09-06T19:27:03Z",
"stargazers_count": 103,
"watchers_count": 103,
"stargazers_count": 104,
"watchers_count": 104,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -474,7 +474,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 103,
"watchers": 104,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-19598.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Custom Content Types and Fields plugin for WordPress",
"fork": false,
"created_at": "2026-08-21T13:06:49Z",
"updated_at": "2026-08-22T14:20:17Z",
"updated_at": "2026-09-11T11:43:51Z",
"pushed_at": "2026-08-21T13:10:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -98,7 +98,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20516.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1365732402,
"name": "CVE-2026-20516",
"full_name": "Dingo97\/CVE-2026-20516",
"owner": {
"login": "Dingo97",
"id": 142807020,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142807020?v=4",
"html_url": "https:\/\/github.com\/Dingo97",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dingo97\/CVE-2026-20516",
"description": "Write-up and proof of concept for CVE-2026-20516: MediaTek Android TV MiracastService confused deputy vulnerability.",
"fork": false,
"created_at": "2026-09-11T09:13:00Z",
"updated_at": "2026-09-11T09:13:16Z",
"pushed_at": "2026-09-11T09:13:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20805.json
+4 -4
View File
@@ -193,10 +193,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-10T11:28:38Z",
"updated_at": "2026-09-10T15:49:18Z",
"updated_at": "2026-09-11T13:18:00Z",
"pushed_at": "2026-09-10T11:28:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -207,7 +207,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-22732.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1366147285,
"name": "cve-2026-22732-poc",
"full_name": "dylan-chainguard\/cve-2026-22732-poc",
"owner": {
"login": "dylan-chainguard",
"id": 242306764,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242306764?v=4",
"html_url": "https:\/\/github.com\/dylan-chainguard",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dylan-chainguard\/cve-2026-22732-poc",
"description": null,
"fork": false,
"created_at": "2026-09-11T13:16:06Z",
"updated_at": "2026-09-11T13:16:21Z",
"pushed_at": "2026-09-11T13:16:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24301.json
+8 -2
View File
@@ -14,7 +14,7 @@
"description": "🧪 Measures memory-poisoning \/ prompt-injection deterministically — anchored to CVE-2026-24301 (CoSnitch), Inspect scorer, signed receipts. Measurement, not certification.",
"fork": false,
"created_at": "2026-08-20T11:25:55Z",
"updated_at": "2026-09-05T14:25:13Z",
"updated_at": "2026-09-11T13:11:29Z",
"pushed_at": "2026-09-05T14:25:09Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -25,7 +25,13 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"ai-safety",
"measurement",
"memory-poisoning",
"prompt-injection",
"signed-receipts"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-25177.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Production-safe scanner that detects CVE-2026-25177 (AD SPN Unicode Collision) exploitation on Active Directory Domain Controllers. Read-only.",
"fork": false,
"created_at": "2026-03-14T02:03:34Z",
"updated_at": "2026-08-07T16:29:25Z",
"updated_at": "2026-09-11T10:49:29Z",
"pushed_at": "2026-03-14T09:36:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-28576.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "SQL injection vulnerability in Android 17 (AOSP)",
"fork": false,
"created_at": "2026-09-07T09:25:30Z",
"updated_at": "2026-09-11T07:47:01Z",
"updated_at": "2026-09-11T12:57:13Z",
"pushed_at": "2026-09-07T09:32:54Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 31,
"forks": 11,
"watchers": 33,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+8 -8
View File
@@ -52,7 +52,7 @@
"stargazers_count": 4067,
"watchers_count": 4067,
"has_discussions": false,
"forks_count": 911,
"forks_count": 912,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"xint-code"
],
"visibility": "public",
"forks": 911,
"forks": 912,
"watchers": 4067,
"score": 0,
"subscribers_count": 34
@@ -7395,10 +7395,10 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-09-11T07:29:05Z",
"updated_at": "2026-09-11T08:18:28Z",
"pushed_at": "2026-09-11T07:29:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -7425,7 +7425,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -8197,8 +8197,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-09-09T05:15:42Z",
"pushed_at": "2026-09-09T05:15:13Z",
"updated_at": "2026-09-11T13:39:12Z",
"pushed_at": "2026-09-11T13:39:08Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-09-09T05:08:57Z",
"pushed_at": "2026-09-09T05:08:49Z",
"updated_at": "2026-09-11T13:32:30Z",
"pushed_at": "2026-09-11T13:32:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-33017.json
+33
View File
@@ -795,5 +795,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1366201247,
"name": "CVE-2026-33017",
"full_name": "MaximilianoMeyer\/CVE-2026-33017",
"owner": {
"login": "MaximilianoMeyer",
"id": 72791065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72791065?v=4",
"html_url": "https:\/\/github.com\/MaximilianoMeyer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MaximilianoMeyer\/CVE-2026-33017",
"description": "Simple Proof Of Concept about CVE 2026-33017",
"fork": false,
"created_at": "2026-09-11T13:44:25Z",
"updated_at": "2026-09-11T13:45:56Z",
"pushed_at": "2026-09-11T13:45:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34197.json
+4 -4
View File
@@ -493,10 +493,10 @@
"description": "CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)",
"fork": false,
"created_at": "2026-07-16T14:34:32Z",
"updated_at": "2026-07-26T17:58:52Z",
"updated_at": "2026-09-11T08:01:13Z",
"pushed_at": "2026-07-16T14:49:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -515,7 +515,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41089.json
+63 -9
View File
@@ -91,10 +91,10 @@
"description": "CVE-2026-41089",
"fork": false,
"created_at": "2026-06-02T10:35:26Z",
"updated_at": "2026-09-03T19:48:16Z",
"updated_at": "2026-09-11T08:01:13Z",
"pushed_at": "2026-06-05T00:49:43Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -105,7 +105,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 11,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -335,12 +335,12 @@
"description": "🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture, IoCs, and mitigation strategy.",
"fork": false,
"created_at": "2026-09-10T21:39:19Z",
"updated_at": "2026-09-10T21:55:43Z",
"updated_at": "2026-09-11T13:13:08Z",
"pushed_at": "2026-09-10T21:55:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -361,7 +361,61 @@
"windows-security"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1365867810,
"name": "CVE-2026-41089-Netlogon-RCE-PoC",
"full_name": "SyntaxMethod\/CVE-2026-41089-Netlogon-RCE-PoC",
"owner": {
"login": "SyntaxMethod",
"id": 327702698,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327702698?v=4",
"html_url": "https:\/\/github.com\/SyntaxMethod",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SyntaxMethod\/CVE-2026-41089-Netlogon-RCE-PoC",
"description": "CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.",
"fork": false,
"created_at": "2026-09-11T10:34:35Z",
"updated_at": "2026-09-11T13:47:26Z",
"pushed_at": "2026-09-11T13:47:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"active-directory",
"active-directory-security",
"cve",
"cve-2026-41089",
"cybersecurity",
"cybersecurity-education",
"cybersecurity-tools",
"netlogon",
"netlogon-rce",
"penetration-testing",
"rce",
"red-team-tools",
"security",
"security-researchers",
"vulnerability",
"vulnerability-scanner",
"vulnerability-scanners",
"windows",
"windows-11",
"windows-desktop"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-42978.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-02-07T17:30:57Z",
"updated_at": "2026-09-11T02:21:18Z",
"updated_at": "2026-09-11T13:01:57Z",
"pushed_at": "2026-02-07T17:31:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+54 -54
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-09-09T03:52:07Z",
"updated_at": "2026-09-11T10:13:13Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 158,
"watchers_count": 158,
"stargazers_count": 159,
"watchers_count": 159,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 38,
"watchers": 158,
"watchers": 159,
"score": 0,
"subscribers_count": 1
},
@@ -282,10 +282,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-09-08T21:49:15Z",
"updated_at": "2026-09-11T13:20:11Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 241,
"watchers_count": 241,
"stargazers_count": 240,
"watchers_count": 240,
"has_discussions": false,
"forks_count": 97,
"allow_forking": true,
@@ -296,7 +296,7 @@
"topics": [],
"visibility": "public",
"forks": 97,
"watchers": 241,
"watchers": 240,
"score": 0,
"subscribers_count": 3
},
@@ -685,10 +685,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-08-28T03:44:16Z",
"updated_at": "2026-09-11T13:20:13Z",
"pushed_at": "2026-07-31T03:13:27Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": true,
"forks_count": 16,
"allow_forking": true,
@@ -699,7 +699,7 @@
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 50,
"watchers": 49,
"score": 0,
"subscribers_count": 1
},
@@ -1048,10 +1048,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-11T05:57:29Z",
"updated_at": "2026-09-11T13:25:05Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1167,
"watchers_count": 1167,
"stargazers_count": 1168,
"watchers_count": 1168,
"has_discussions": false,
"forks_count": 229,
"allow_forking": true,
@@ -1062,7 +1062,7 @@
"topics": [],
"visibility": "public",
"forks": 229,
"watchers": 1167,
"watchers": 1168,
"score": 0,
"subscribers_count": 35
},
@@ -1081,10 +1081,10 @@
"description": "Use CVE-2026-43499 to disable SELinux on Android",
"fork": false,
"created_at": "2026-07-18T05:33:53Z",
"updated_at": "2026-09-09T19:19:51Z",
"updated_at": "2026-09-11T13:20:06Z",
"pushed_at": "2026-07-18T09:51:29Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -1095,7 +1095,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 17,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
@@ -1331,10 +1331,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-23T07:47:23Z",
"updated_at": "2026-08-02T22:26:35Z",
"updated_at": "2026-09-11T13:19:46Z",
"pushed_at": "2026-07-25T04:24:28Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1345,7 +1345,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
@@ -1430,10 +1430,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.",
"fork": false,
"created_at": "2026-07-25T03:02:29Z",
"updated_at": "2026-09-09T11:31:03Z",
"updated_at": "2026-09-11T13:19:42Z",
"pushed_at": "2026-07-25T04:13:46Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1444,7 +1444,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 19,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -1694,12 +1694,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-11T07:29:36Z",
"updated_at": "2026-09-11T13:14:09Z",
"pushed_at": "2026-09-11T03:26:53Z",
"stargazers_count": 824,
"watchers_count": 824,
"stargazers_count": 833,
"watchers_count": 833,
"has_discussions": true,
"forks_count": 259,
"forks_count": 261,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1707,8 +1707,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 259,
"watchers": 824,
"forks": 261,
"watchers": 833,
"score": 0,
"subscribers_count": 10
},
@@ -1892,7 +1892,7 @@
"description": "PD2229B的43499(ghostlock)可行性研究",
"fork": false,
"created_at": "2026-08-01T07:48:14Z",
"updated_at": "2026-08-04T07:41:35Z",
"updated_at": "2026-09-11T10:26:55Z",
"pushed_at": "2026-08-04T07:40:43Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -2280,7 +2280,7 @@
"stargazers_count": 71,
"watchers_count": 71,
"has_discussions": true,
"forks_count": 19,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2288,7 +2288,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 19,
"forks": 20,
"watchers": 71,
"score": 0,
"subscribers_count": 3
@@ -2440,10 +2440,10 @@
"description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.",
"fork": false,
"created_at": "2026-08-10T23:26:52Z",
"updated_at": "2026-09-10T16:24:51Z",
"updated_at": "2026-09-11T12:42:40Z",
"pushed_at": "2026-08-31T06:05:39Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -2454,7 +2454,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -2748,12 +2748,12 @@
"description": "KSuRoot 3.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。新增「载荷构建」：用本机 boot.img 解析内核偏移并打出适配本机的载荷（通用方案 \/ vivo 专用）；内核 6.6+ 免 ADB；内置载荷固定上游 v1.0.0。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-09-11T07:37:23Z",
"pushed_at": "2026-09-10T20:09:42Z",
"stargazers_count": 15,
"watchers_count": 15,
"updated_at": "2026-09-11T12:35:00Z",
"pushed_at": "2026-09-11T08:20:53Z",
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2761,8 +2761,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 15,
"forks": 4,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
@@ -2880,8 +2880,8 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-09-07T04:42:24Z",
"pushed_at": "2026-09-05T04:42:18Z",
"updated_at": "2026-09-11T13:37:00Z",
"pushed_at": "2026-09-11T13:36:55Z",
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
@@ -2946,10 +2946,10 @@
"description": "CVE-2026-43499 port for Samsung Galaxy A17",
"fork": false,
"created_at": "2026-08-17T21:18:27Z",
"updated_at": "2026-09-06T11:04:14Z",
"updated_at": "2026-09-11T09:45:49Z",
"pushed_at": "2026-08-21T20:24:40Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -2960,7 +2960,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-09-09T05:17:46Z",
"pushed_at": "2026-09-09T05:17:36Z",
"updated_at": "2026-09-11T13:41:42Z",
"pushed_at": "2026-09-11T13:41:38Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-09-09T05:21:37Z",
"pushed_at": "2026-09-09T05:21:27Z",
"updated_at": "2026-09-11T11:35:00Z",
"pushed_at": "2026-09-11T11:34:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-45674.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1365968549,
"name": "netty-resolver-dns-check",
"full_name": "xiaoqiMikko\/netty-resolver-dns-check",
"owner": {
"login": "xiaoqiMikko",
"id": 37316664,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
"html_url": "https:\/\/github.com\/xiaoqiMikko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xiaoqiMikko\/netty-resolver-dns-check",
"description": "CVE-2026-45674 \/ CVE-2026-47691 \/ CVE-2026-45673: offline checker for DNS cache poisoning in io.netty:netty-resolver-dns - and whether your app actually uses that resolver. Spring WebClient on Reactor Netty uses it by default, although it is not in your pom.xml.",
"fork": false,
"created_at": "2026-09-11T11:37:08Z",
"updated_at": "2026-09-11T12:39:07Z",
"pushed_at": "2026-09-11T12:39:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"dependency-security",
"dns",
"dns-cache-poisoning",
"java",
"netty",
"reactor-netty",
"security",
"spring-boot",
"vulnerability-scanner",
"webflux"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49881.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284",
"fork": false,
"created_at": "2026-07-23T07:01:34Z",
"updated_at": "2026-09-11T06:11:55Z",
"updated_at": "2026-09-11T13:31:04Z",
"pushed_at": "2026-09-09T00:47:49Z",
"stargazers_count": 337,
"watchers_count": 337,
"stargazers_count": 344,
"watchers_count": 344,
"has_discussions": false,
"forks_count": 63,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 63,
"watchers": 337,
"forks": 64,
"watchers": 344,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-09-09T05:23:01Z",
"pushed_at": "2026-09-09T05:22:05Z",
"updated_at": "2026-09-11T11:35:39Z",
"pushed_at": "2026-09-11T11:35:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-64560.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 11,
"watchers": 11,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-09-10T06:50:38Z",
"pushed_at": "2026-09-10T06:50:32Z",
"updated_at": "2026-09-11T08:46:38Z",
"pushed_at": "2026-09-11T08:46:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-65343.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 \/ 23G71)",
"fork": false,
"created_at": "2026-09-02T20:12:10Z",
"updated_at": "2026-09-07T15:42:00Z",
"updated_at": "2026-09-11T13:05:24Z",
"pushed_at": "2026-09-04T05:48:34Z",
"stargazers_count": 72,
"watchers_count": 72,
"stargazers_count": 73,
"watchers_count": 73,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -37,8 +37,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 6,
"watchers": 72,
"forks": 7,
"watchers": 73,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-65643.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red\/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, persistence, root passwd, file R\/W, mass scan, Tor), Blue Team PoC (detection, reporting, audit). w\/Python. 🦾 Only Use Ethically, Stay Legal <3 ",
"fork": false,
"created_at": "2026-09-03T18:13:54Z",
"updated_at": "2026-09-10T17:26:59Z",
"updated_at": "2026-09-11T11:21:21Z",
"pushed_at": "2026-09-04T21:47:20Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-66804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "sadsadsa",
"fork": false,
"created_at": "2026-07-19T23:37:27Z",
"updated_at": "2026-09-10T17:28:07Z",
"updated_at": "2026-09-11T12:36:24Z",
"pushed_at": "2026-07-20T05:15:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-67276.json
+3 -3
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC",
"fork": false,
"created_at": "2026-09-06T12:10:51Z",
"updated_at": "2026-09-11T07:10:47Z",
"updated_at": "2026-09-11T13:39:49Z",
"pushed_at": "2026-09-06T12:10:54Z",
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 22,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 22,
"forks": 23,
"watchers": 81,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-67401.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "CVE-2026-67401 cPanel & WHM EmailTrack SQL Injection — IOC scanner, compromise detection, patch verification, incident response and remediation toolkit.",
"fork": false,
"created_at": "2026-09-09T10:22:55Z",
"updated_at": "2026-09-10T11:27:20Z",
"pushed_at": "2026-09-10T11:26:49Z",
"updated_at": "2026-09-11T10:39:05Z",
"pushed_at": "2026-09-11T10:39:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-75650.json
+4 -4
View File
@@ -96,10 +96,10 @@
"description": "composer require delivery of Adobe's official APSB26-146 (CVE-2026-75650) fix for Magento, via cweagans\/composer-patches. Auto-selects the patch for your Magento version.",
"fork": false,
"created_at": "2026-09-08T07:59:02Z",
"updated_at": "2026-09-10T12:05:23Z",
"updated_at": "2026-09-11T10:29:23Z",
"pushed_at": "2026-09-08T10:56:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -110,7 +110,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-78997.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1365961766,
"name": "the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss",
"full_name": "Hunt-Benito\/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss",
"owner": {
"login": "Hunt-Benito",
"id": 174117057,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174117057?v=4",
"html_url": "https:\/\/github.com\/Hunt-Benito",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hunt-Benito\/the-callback-that-outlived-the-page-cve-2026-78997-uc-browser-android-universal-xss",
"description": null,
"fork": false,
"created_at": "2026-09-11T11:32:56Z",
"updated_at": "2026-09-11T11:33:54Z",
"pushed_at": "2026-09-11T11:33:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-79298.json
+81
View File
@@ -0,0 +1,81 @@
[
{
"id": 1270223520,
"name": "UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"full_name": "TheMalwareGuardian\/UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/UEFI-Security-Research-Howyar-SysReturn-NetCopy",
"description": "Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept tooling for CVE-2026-79298 (IA-32 Secure Boot bypass via the RxPE custom PE loader in BOOTia32.efi).",
"fork": false,
"created_at": "2026-06-15T14:00:01Z",
"updated_at": "2026-09-11T10:36:15Z",
"pushed_at": "2026-09-11T10:36:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2024-7344",
"cve-2026-79298",
"exploit",
"reverse-engineering",
"secure-boot-bypass",
"uefi"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1365703874,
"name": "CVE-2026-79298",
"full_name": "TheMalwareGuardian\/CVE-2026-79298",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/CVE-2026-79298",
"description": "CVE-2026-79298 - Incomplete remediation of UEFI Secure Boot bypass in Howyar SysReturn. The IA-32 boot path (BOOTia32.efi) was never patched after CVE-2024-7344, shipping the same revoked custom PE loader until July 2026.",
"fork": false,
"created_at": "2026-09-11T08:56:06Z",
"updated_at": "2026-09-11T10:28:01Z",
"pushed_at": "2026-09-11T10:25:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-79298",
"exploit",
"firmware-security",
"secure-boot-bypass",
"uefi"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-82222.json
-33
View File
@@ -176,38 +176,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1365511849,
"name": "CVE-2026-82222-PoC",
"full_name": "sajjadsiam\/CVE-2026-82222-PoC",
"owner": {
"login": "sajjadsiam",
"id": 86528048,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86528048?v=4",
"html_url": "https:\/\/github.com\/sajjadsiam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sajjadsiam\/CVE-2026-82222-PoC",
"description": null,
"fork": false,
"created_at": "2026-09-11T06:57:03Z",
"updated_at": "2026-09-11T06:59:12Z",
"pushed_at": "2026-09-11T06:59:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8452.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-8452 PreAuth RCE",
"fork": false,
"created_at": "2026-08-14T15:01:25Z",
"updated_at": "2026-09-06T18:13:41Z",
"updated_at": "2026-09-11T10:39:49Z",
"pushed_at": "2026-08-14T15:08:55Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 62,
"watchers": 63,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-37890.json → 2026/CVE-2026-85706.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1364665061,
"name": "OMG_KILLER",
"full_name": "RazdoruNET\/OMG_KILLER",
"id": 1365998227,
"name": "CVE-2026-85706_docker_exp",
"full_name": "FlowerWitch\/CVE-2026-85706_docker_exp",
"owner": {
"login": "RazdoruNET",
"id": 16811386,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16811386?v=4",
"html_url": "https:\/\/github.com\/RazdoruNET",
"login": "FlowerWitch",
"id": 19641363,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19641363?v=4",
"html_url": "https:\/\/github.com\/FlowerWitch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RazdoruNET\/OMG_KILLER",
"description": "Автоатакующий скрипт на базе эксплойтов CVE-2024-37890 и OOM 2026",
"html_url": "https:\/\/github.com\/FlowerWitch\/CVE-2026-85706_docker_exp",
"description": "CVE-2026-85706_docker_exp",
"fork": false,
"created_at": "2026-09-10T17:43:25Z",
"updated_at": "2026-09-10T23:59:40Z",
"pushed_at": "2026-09-10T23:59:36Z",
"created_at": "2026-09-11T11:55:07Z",
"updated_at": "2026-09-11T12:04:59Z",
"pushed_at": "2026-09-11T12:04:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-86998.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — cross-origin proxy abuse of configured provider API keys in PasteGuard (GHSA-q94x-p9rc-q89f, CVE-2026-86998, CVSS 7.6).",
"fork": false,
"created_at": "2026-09-03T07:46:56Z",
"updated_at": "2026-09-10T07:55:24Z",
"pushed_at": "2026-09-03T07:47:00Z",
"updated_at": "2026-09-11T09:52:03Z",
"pushed_at": "2026-09-11T09:51:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-86999.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — path traversal via malicious device sync in the Supernote Obsidian plugin (GHSA-3gx3-r874-5pp4, CVE-2026-86999, CVSS 5.6).",
"fork": false,
"created_at": "2026-09-03T07:47:23Z",
"updated_at": "2026-09-10T07:55:25Z",
"pushed_at": "2026-09-03T07:47:29Z",
"updated_at": "2026-09-11T09:52:07Z",
"pushed_at": "2026-09-11T09:52:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87000.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — attachment import copies files from unapproved local paths in ZotLit (GHSA-4qh7-66xv-h329, CVE-2026-87000, CVSS 5.5).",
"fork": false,
"created_at": "2026-09-03T07:47:35Z",
"updated_at": "2026-09-10T07:55:26Z",
"pushed_at": "2026-09-03T07:47:41Z",
"updated_at": "2026-09-11T09:52:18Z",
"pushed_at": "2026-09-11T09:52:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87001.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — path traversal via unsanitized LLM-derived domain field in OpenLore (GHSA-5j8x-q7q6-58j5, CVE-2026-87001, CVSS 4.7).",
"fork": false,
"created_at": "2026-09-03T07:47:13Z",
"updated_at": "2026-09-10T07:55:27Z",
"pushed_at": "2026-09-03T07:47:16Z",
"updated_at": "2026-09-11T09:52:00Z",
"pushed_at": "2026-09-11T09:51:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87002.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — frontmatter-driven arbitrary JavaScript execution in Note Toolbar for Obsidian (GHSA-q8cw-3m8c-5pf2, CVE-2026-87002, CVSS 7.0).",
"fork": false,
"created_at": "2026-09-03T07:47:02Z",
"updated_at": "2026-09-10T07:55:28Z",
"pushed_at": "2026-09-03T07:47:06Z",
"updated_at": "2026-09-11T09:51:56Z",
"pushed_at": "2026-09-11T09:51:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87003.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — symlink following to out-of-repo content disclosure via search_text in Gortex (GHSA-6vhf-4wcm-2r83, CVE-2026-87003, CVSS 5.5).",
"fork": false,
"created_at": "2026-09-03T07:46:51Z",
"updated_at": "2026-09-10T07:55:29Z",
"pushed_at": "2026-09-03T07:46:55Z",
"updated_at": "2026-09-11T09:51:46Z",
"pushed_at": "2026-09-11T09:51:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87004.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — OIDC id_token accepted without signature\/audience\/expiry check in Tugtainer (GHSA-crjc-6vc7-xrfh, CVE-2026-87004, CVSS 8.1).",
"fork": false,
"created_at": "2026-09-03T07:47:42Z",
"updated_at": "2026-09-10T07:55:30Z",
"pushed_at": "2026-09-03T07:47:49Z",
"updated_at": "2026-09-11T09:52:13Z",
"pushed_at": "2026-09-11T09:52:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87005.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — origin validation error enabling Entra ID PRT SSO cookie exfiltration in linux-entra-sso (GHSA-g9vc-5j77-f2cm, CVE-2026-87005, CVSS 5.3).",
"fork": false,
"created_at": "2026-09-03T07:46:46Z",
"updated_at": "2026-09-10T07:55:31Z",
"pushed_at": "2026-09-03T07:46:50Z",
"updated_at": "2026-09-11T09:51:49Z",
"pushed_at": "2026-09-11T09:51:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87006.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — missing authorization on the platform-wide GPG trust-anchor store in Terrapod (GHSA-6qrc-597p-mrp9, CVE-2026-87006, CVSS 6.5).",
"fork": false,
"created_at": "2026-09-03T07:47:18Z",
"updated_at": "2026-09-10T07:55:32Z",
"pushed_at": "2026-09-03T07:47:22Z",
"updated_at": "2026-09-11T09:52:11Z",
"pushed_at": "2026-09-11T09:52:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87007.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — SSRF via JS-rendering tier bypass of the URL safety filter in crw (GHSA-5jp3-339h-vxqw, CVE-2026-87007, CVSS 7.5).",
"fork": false,
"created_at": "2026-09-03T07:46:41Z",
"updated_at": "2026-09-10T07:55:33Z",
"pushed_at": "2026-09-03T07:46:45Z",
"updated_at": "2026-09-11T09:51:43Z",
"pushed_at": "2026-09-11T09:51:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87008.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC — symlink following to arbitrary file read\/write outside project root in code-graph-rag (GHSA-85gg-2gfq-q95m, CVE-2026-87008, CVSS 7.1).",
"fork": false,
"created_at": "2026-09-03T07:47:07Z",
"updated_at": "2026-09-10T07:55:34Z",
"pushed_at": "2026-09-03T07:47:11Z",
"updated_at": "2026-09-11T09:51:39Z",
"pushed_at": "2026-09-11T09:51:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-87491.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-88861.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1365856277,
"name": "secdim-assurance-drift-challenge",
"full_name": "franklincg\/secdim-assurance-drift-challenge",
"owner": {
"login": "franklincg",
"id": 64386813,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64386813?v=4",
"html_url": "https:\/\/github.com\/franklincg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/franklincg\/secdim-assurance-drift-challenge",
"description": "SecDim Challenge Builder repro inspired by CVE-2026-88861: AAL1 MFA bypass at privileged credential boundary",
"fork": false,
"created_at": "2026-09-11T10:27:37Z",
"updated_at": "2026-09-11T10:27:45Z",
"pushed_at": "2026-09-11T10:27:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9830.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-09-11T06:25:02Z",
"updated_at": "2026-09-11T12:59:27Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 508,
"watchers_count": 508,
"stargazers_count": 462,
"watchers_count": 462,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 4,
"watchers": 508,
"forks": 3,
"watchers": 462,
"score": 0,
"subscribers_count": 0
}