mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
Auto Update 2026/05/23 18:49:32
This commit is contained in:
1 parent
348de54d43
commit
ec970d2627
100 files changed
+618
-536
No files matched your search
@@ -1529,5 +1529,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247616948,
|
||||
"name": "ethical-hacking-CVE-2011-2523",
|
||||
"full_name": "Chathura123git\/ethical-hacking-CVE-2011-2523",
|
||||
"owner": {
|
||||
"login": "Chathura123git",
|
||||
"id": 203700158,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/203700158?v=4",
|
||||
"html_url": "https:\/\/github.com\/Chathura123git",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Chathura123git\/ethical-hacking-CVE-2011-2523",
|
||||
"description": "CC6051NU Ethical Hacking Assessment | Practical vulnerability testing of vsftpd 2.3.4 backdoor (CVE-2011-2523) on Metasploitable2 using Kali Linux & Metasploit",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T14:56:06Z",
|
||||
"updated_at": "2026-05-23T16:23:26Z",
|
||||
"pushed_at": "2026-05-23T16:23:22Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
|
||||
"fork": false,
|
||||
"created_at": "2023-10-23T05:54:10Z",
|
||||
"updated_at": "2026-05-23T09:54:45Z",
|
||||
"pushed_at": "2026-05-23T09:54:42Z",
|
||||
"updated_at": "2026-05-23T14:17:26Z",
|
||||
"pushed_at": "2026-05-23T14:17:23Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "Apache Tomcat < 9.0.1 (Beta) \/ < 8.5.23 \/ < 8.0.47 \/ < 7.0.8 - JSP Upload Bypass \/ Remote Code Execution ",
|
||||
"fork": false,
|
||||
"created_at": "2017-10-05T23:41:52Z",
|
||||
"updated_at": "2026-05-18T16:03:46Z",
|
||||
"updated_at": "2026-05-23T15:48:04Z",
|
||||
"pushed_at": "2017-10-11T07:43:50Z",
|
||||
"stargazers_count": 397,
|
||||
"watchers_count": 397,
|
||||
"stargazers_count": 398,
|
||||
"watchers_count": 398,
|
||||
"has_discussions": false,
|
||||
"forks_count": 120,
|
||||
"forks_count": 121,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 120,
|
||||
"watchers": 397,
|
||||
"forks": 121,
|
||||
"watchers": 398,
|
||||
"score": 0,
|
||||
"subscribers_count": 13
|
||||
},
|
||||
|
||||
@@ -401,5 +401,38 @@
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247555356,
|
||||
"name": "Multi-threaded-mass-exploiter-CVE-2018-13379-POC",
|
||||
"full_name": "Instructor-Admin\/Multi-threaded-mass-exploiter-CVE-2018-13379-POC",
|
||||
"owner": {
|
||||
"login": "Instructor-Admin",
|
||||
"id": 61094918,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61094918?v=4",
|
||||
"html_url": "https:\/\/github.com\/Instructor-Admin",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Instructor-Admin\/Multi-threaded-mass-exploiter-CVE-2018-13379-POC",
|
||||
"description": "CVE-2018-13379 mass exploiter for Fortinet FortiOS SSL VPN. Extracts credentials instantly, saves to CSV + PostgreSQL. Multi-threaded, no bullshit warnings.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T13:25:08Z",
|
||||
"updated_at": "2026-05-23T14:21:09Z",
|
||||
"pushed_at": "2026-05-23T14:03:56Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.",
|
||||
"fork": false,
|
||||
"created_at": "2018-02-23T00:19:05Z",
|
||||
"updated_at": "2026-05-08T13:05:20Z",
|
||||
"updated_at": "2026-05-23T15:53:32Z",
|
||||
"pushed_at": "2018-11-13T00:26:18Z",
|
||||
"stargazers_count": 259,
|
||||
"watchers_count": 259,
|
||||
"stargazers_count": 260,
|
||||
"watchers_count": 260,
|
||||
"has_discussions": false,
|
||||
"forks_count": 43,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 43,
|
||||
"watchers": 259,
|
||||
"watchers": 260,
|
||||
"score": 0,
|
||||
"subscribers_count": 12
|
||||
}
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019",
|
||||
"fork": false,
|
||||
"created_at": "2019-02-07T06:45:27Z",
|
||||
"updated_at": "2026-01-13T11:19:44Z",
|
||||
"updated_at": "2026-05-23T16:53:32Z",
|
||||
"pushed_at": "2022-06-26T06:08:02Z",
|
||||
"stargazers_count": 106,
|
||||
"watchers_count": 106,
|
||||
"stargazers_count": 107,
|
||||
"watchers_count": 107,
|
||||
"has_discussions": false,
|
||||
"forks_count": 20,
|
||||
"allow_forking": true,
|
||||
@@ -36,7 +36,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 20,
|
||||
"watchers": 106,
|
||||
"watchers": 107,
|
||||
"score": 0,
|
||||
"subscribers_count": 11
|
||||
}
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T19:56:12Z",
|
||||
"updated_at": "2026-05-23T11:57:45Z",
|
||||
"pushed_at": "2026-05-23T11:57:42Z",
|
||||
"updated_at": "2026-05-23T17:13:19Z",
|
||||
"pushed_at": "2026-05-23T17:13:15Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -73,15 +73,15 @@
|
||||
{
|
||||
"id": 381078333,
|
||||
"name": "CVE-2019-6447",
|
||||
"full_name": "Nehal-Zaman\/CVE-2019-6447",
|
||||
"full_name": "shadowedcreds\/CVE-2019-6447",
|
||||
"owner": {
|
||||
"login": "Nehal-Zaman",
|
||||
"login": "shadowedcreds",
|
||||
"id": 70776749,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70776749?v=4",
|
||||
"html_url": "https:\/\/github.com\/Nehal-Zaman",
|
||||
"html_url": "https:\/\/github.com\/shadowedcreds",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Nehal-Zaman\/CVE-2019-6447",
|
||||
"html_url": "https:\/\/github.com\/shadowedcreds\/CVE-2019-6447",
|
||||
"description": "My exploit for ES Explorer Android App open port vulnerability.",
|
||||
"fork": false,
|
||||
"created_at": "2021-06-28T15:25:49Z",
|
||||
|
||||
@@ -58,8 +58,8 @@
|
||||
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-04T13:21:35Z",
|
||||
"updated_at": "2026-05-23T09:54:37Z",
|
||||
"pushed_at": "2026-05-23T09:54:33Z",
|
||||
"updated_at": "2026-05-23T14:17:25Z",
|
||||
"pushed_at": "2026-05-23T14:17:21Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -2383,8 +2383,8 @@
|
||||
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T10:17:38Z",
|
||||
"updated_at": "2026-05-23T11:35:08Z",
|
||||
"pushed_at": "2026-05-23T11:35:04Z",
|
||||
"updated_at": "2026-05-23T18:10:16Z",
|
||||
"pushed_at": "2026-05-23T18:10:13Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
+10
-10
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"forks": 1,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
@@ -52,7 +52,7 @@
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -60,7 +60,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"forks": 1,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
@@ -80,12 +80,12 @@
|
||||
"description": "CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-18T15:36:34Z",
|
||||
"updated_at": "2026-05-22T19:58:12Z",
|
||||
"updated_at": "2026-05-23T12:46:56Z",
|
||||
"pushed_at": "2026-05-20T13:07:06Z",
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"stargazers_count": 5,
|
||||
"watchers_count": 5,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -93,8 +93,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 4,
|
||||
"forks": 2,
|
||||
"watchers": 5,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung Device, and if the victim's device is from the US or Korea region.",
|
||||
"fork": false,
|
||||
"created_at": "2021-04-10T09:23:52Z",
|
||||
"updated_at": "2026-04-15T21:00:28Z",
|
||||
"updated_at": "2026-05-23T12:21:46Z",
|
||||
"pushed_at": "2024-02-25T02:15:22Z",
|
||||
"stargazers_count": 30,
|
||||
"watchers_count": 30,
|
||||
"stargazers_count": 31,
|
||||
"watchers_count": 31,
|
||||
"has_discussions": false,
|
||||
"forks_count": 19,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 19,
|
||||
"watchers": 30,
|
||||
"watchers": 31,
|
||||
"score": 0,
|
||||
"subscribers_count": 5
|
||||
}
|
||||
|
||||
@@ -212,8 +212,8 @@
|
||||
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T17:42:44Z",
|
||||
"updated_at": "2026-05-23T12:06:43Z",
|
||||
"pushed_at": "2026-05-23T12:06:39Z",
|
||||
"updated_at": "2026-05-23T17:29:56Z",
|
||||
"pushed_at": "2026-05-23T17:29:53Z",
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -119,10 +119,10 @@
|
||||
"description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits",
|
||||
"fork": false,
|
||||
"created_at": "2021-07-03T15:15:12Z",
|
||||
"updated_at": "2026-05-23T10:52:05Z",
|
||||
"updated_at": "2026-05-23T17:35:27Z",
|
||||
"pushed_at": "2021-09-13T12:12:17Z",
|
||||
"stargazers_count": 171,
|
||||
"watchers_count": 171,
|
||||
"stargazers_count": 172,
|
||||
"watchers_count": 172,
|
||||
"has_discussions": false,
|
||||
"forks_count": 41,
|
||||
"allow_forking": true,
|
||||
@@ -140,7 +140,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 41,
|
||||
"watchers": 171,
|
||||
"watchers": 172,
|
||||
"score": 0,
|
||||
"subscribers_count": 5
|
||||
},
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "Zyxel super-admin credential exposure write-up across CPE\/ONT\/LTE\/5G firmware, with an adapted VMG8825-B50B genpass lab.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-19T11:22:20Z",
|
||||
"updated_at": "2026-05-22T21:40:57Z",
|
||||
"updated_at": "2026-05-23T18:13:25Z",
|
||||
"pushed_at": "2026-05-22T21:40:50Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -35,8 +35,8 @@
|
||||
"zyxel"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 0,
|
||||
"forks": 2,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -431,7 +431,7 @@
|
||||
"stargazers_count": 8,
|
||||
"watchers_count": 8,
|
||||
"has_discussions": false,
|
||||
"forks_count": 4,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -444,7 +444,7 @@
|
||||
"python3"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 4,
|
||||
"forks": 3,
|
||||
"watchers": 8,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
@@ -2017,8 +2017,8 @@
|
||||
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
|
||||
"fork": false,
|
||||
"created_at": "2025-10-01T09:53:03Z",
|
||||
"updated_at": "2026-05-23T10:01:53Z",
|
||||
"pushed_at": "2026-05-23T10:01:50Z",
|
||||
"updated_at": "2026-05-23T14:25:00Z",
|
||||
"pushed_at": "2026-05-23T14:24:56Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -3906,10 +3906,10 @@
|
||||
"description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ",
|
||||
"fork": false,
|
||||
"created_at": "2021-12-13T03:57:50Z",
|
||||
"updated_at": "2026-05-20T20:04:23Z",
|
||||
"updated_at": "2026-05-23T14:00:04Z",
|
||||
"pushed_at": "2022-11-23T18:23:24Z",
|
||||
"stargazers_count": 3432,
|
||||
"watchers_count": 3432,
|
||||
"stargazers_count": 3431,
|
||||
"watchers_count": 3431,
|
||||
"has_discussions": true,
|
||||
"forks_count": 728,
|
||||
"allow_forking": true,
|
||||
@@ -3920,7 +3920,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 728,
|
||||
"watchers": 3432,
|
||||
"watchers": 3431,
|
||||
"score": 0,
|
||||
"subscribers_count": 55
|
||||
},
|
||||
|
||||
@@ -448,7 +448,7 @@
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -456,7 +456,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"forks": 2,
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 50,
|
||||
"watchers_count": 50,
|
||||
"has_discussions": false,
|
||||
"forks_count": 12,
|
||||
"forks_count": 11,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 12,
|
||||
"forks": 11,
|
||||
"watchers": 50,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
|
||||
@@ -50,10 +50,10 @@
|
||||
"description": "Bootloader unlock using CVE-2022-38694 for Anbernic Unisoc T820 devices",
|
||||
"fork": false,
|
||||
"created_at": "2024-06-27T14:28:13Z",
|
||||
"updated_at": "2026-05-19T00:48:41Z",
|
||||
"updated_at": "2026-05-23T15:20:16Z",
|
||||
"pushed_at": "2025-09-19T15:48:29Z",
|
||||
"stargazers_count": 61,
|
||||
"watchers_count": 61,
|
||||
"stargazers_count": 62,
|
||||
"watchers_count": 62,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -64,7 +64,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 61,
|
||||
"watchers": 62,
|
||||
"score": 0,
|
||||
"subscribers_count": 5
|
||||
},
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2023-08-17T17:16:46Z",
|
||||
"updated_at": "2026-03-13T18:20:47Z",
|
||||
"updated_at": "2026-05-23T17:30:19Z",
|
||||
"pushed_at": "2023-08-21T21:22:40Z",
|
||||
"stargazers_count": 25,
|
||||
"watchers_count": 25,
|
||||
"stargazers_count": 26,
|
||||
"watchers_count": 26,
|
||||
"has_discussions": false,
|
||||
"forks_count": 5,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 5,
|
||||
"watchers": 25,
|
||||
"watchers": 26,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
|
||||
@@ -31,5 +31,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247609790,
|
||||
"name": "bitpixie",
|
||||
"full_name": "LR2006-Robot\/bitpixie",
|
||||
"owner": {
|
||||
"login": "LR2006-Robot",
|
||||
"id": 219590584,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219590584?v=4",
|
||||
"html_url": "https:\/\/github.com\/LR2006-Robot",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/LR2006-Robot\/bitpixie",
|
||||
"description": "Cracking BitLocker encryption based on CVE-2023-21563 vulnerability",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T14:45:27Z",
|
||||
"updated_at": "2026-05-23T14:45:31Z",
|
||||
"pushed_at": "2026-05-23T14:45:28Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-13T09:19:29Z",
|
||||
"updated_at": "2026-05-23T09:50:42Z",
|
||||
"pushed_at": "2026-05-23T09:50:39Z",
|
||||
"updated_at": "2026-05-23T14:13:12Z",
|
||||
"pushed_at": "2026-05-23T14:13:08Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Android App Pin Security Issue Allowing Unauthorized Payments via Google Wallet",
|
||||
"fork": false,
|
||||
"created_at": "2023-09-01T20:16:28Z",
|
||||
"updated_at": "2025-08-13T03:15:48Z",
|
||||
"updated_at": "2026-05-23T16:47:21Z",
|
||||
"pushed_at": "2024-02-12T03:18:54Z",
|
||||
"stargazers_count": 73,
|
||||
"watchers_count": 73,
|
||||
"stargazers_count": 74,
|
||||
"watchers_count": 74,
|
||||
"has_discussions": false,
|
||||
"forks_count": 5,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 5,
|
||||
"watchers": 73,
|
||||
"watchers": 74,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
}
|
||||
|
||||
@@ -1,35 +0,0 @@
|
||||
[
|
||||
{
|
||||
"id": 742105767,
|
||||
"name": "CVE-2023-36003-POC",
|
||||
"full_name": "m417z\/CVE-2023-36003-POC",
|
||||
"owner": {
|
||||
"login": "m417z",
|
||||
"id": 4129781,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4129781?v=4",
|
||||
"html_url": "https:\/\/github.com\/m417z",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/m417z\/CVE-2023-36003-POC",
|
||||
"description": "Privilege escalation using the XAML diagnostics API (CVE-2023-36003)",
|
||||
"fork": false,
|
||||
"created_at": "2024-01-11T19:17:13Z",
|
||||
"updated_at": "2026-03-01T21:09:07Z",
|
||||
"pushed_at": "2024-01-11T19:42:03Z",
|
||||
"stargazers_count": 94,
|
||||
"watchers_count": 94,
|
||||
"has_discussions": false,
|
||||
"forks_count": 23,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 23,
|
||||
"watchers": 94,
|
||||
"score": 0,
|
||||
"subscribers_count": 3
|
||||
}
|
||||
]
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-07T14:24:08Z",
|
||||
"updated_at": "2026-05-23T10:59:02Z",
|
||||
"pushed_at": "2026-05-23T10:58:58Z",
|
||||
"updated_at": "2026-05-23T16:02:09Z",
|
||||
"pushed_at": "2026-05-23T16:02:06Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "PoC educativo del exploit CVE-2023-4147 (Linux kernel Netfilter UAF) — solo para entornos autorizados",
|
||||
"fork": false,
|
||||
"created_at": "2024-12-30T18:08:46Z",
|
||||
"updated_at": "2026-05-21T19:32:46Z",
|
||||
"pushed_at": "2026-05-21T19:32:23Z",
|
||||
"updated_at": "2026-05-23T13:46:48Z",
|
||||
"pushed_at": "2026-05-23T13:46:44Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -172,8 +172,8 @@
|
||||
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-08T01:32:09Z",
|
||||
"updated_at": "2026-05-23T10:59:43Z",
|
||||
"pushed_at": "2026-05-23T10:59:40Z",
|
||||
"updated_at": "2026-05-23T16:02:17Z",
|
||||
"pushed_at": "2026-05-23T16:02:13Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -80,8 +80,8 @@
|
||||
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-15T16:36:07Z",
|
||||
"updated_at": "2026-05-23T11:47:57Z",
|
||||
"pushed_at": "2026-05-23T11:47:53Z",
|
||||
"updated_at": "2026-05-23T16:50:08Z",
|
||||
"pushed_at": "2026-05-23T16:50:05Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1607,15 +1607,15 @@
|
||||
{
|
||||
"id": 870254088,
|
||||
"name": "CVE-2024-24919",
|
||||
"full_name": "voidbroker\/CVE-2024-24919",
|
||||
"full_name": "kernel364\/CVE-2024-24919",
|
||||
"owner": {
|
||||
"login": "voidbroker",
|
||||
"login": "kernel364",
|
||||
"id": 156471538,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
|
||||
"html_url": "https:\/\/github.com\/voidbroker",
|
||||
"html_url": "https:\/\/github.com\/kernel364",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-24919",
|
||||
"html_url": "https:\/\/github.com\/kernel364\/CVE-2024-24919",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-10-09T17:54:28Z",
|
||||
|
||||
@@ -101,15 +101,15 @@
|
||||
{
|
||||
"id": 870293883,
|
||||
"name": "CVE-2024-2876",
|
||||
"full_name": "voidbroker\/CVE-2024-2876",
|
||||
"full_name": "kernel364\/CVE-2024-2876",
|
||||
"owner": {
|
||||
"login": "voidbroker",
|
||||
"login": "kernel364",
|
||||
"id": 156471538,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
|
||||
"html_url": "https:\/\/github.com\/voidbroker",
|
||||
"html_url": "https:\/\/github.com\/kernel364",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-2876",
|
||||
"html_url": "https:\/\/github.com\/kernel364\/CVE-2024-2876",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-10-09T19:24:53Z",
|
||||
|
||||
@@ -167,15 +167,15 @@
|
||||
{
|
||||
"id": 870929719,
|
||||
"name": "CVE-2024-29973",
|
||||
"full_name": "voidbroker\/CVE-2024-29973",
|
||||
"full_name": "kernel364\/CVE-2024-29973",
|
||||
"owner": {
|
||||
"login": "voidbroker",
|
||||
"login": "kernel364",
|
||||
"id": 156471538,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
|
||||
"html_url": "https:\/\/github.com\/voidbroker",
|
||||
"html_url": "https:\/\/github.com\/kernel364",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-29973",
|
||||
"html_url": "https:\/\/github.com\/kernel364\/CVE-2024-29973",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-10-10T23:48:55Z",
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": " Exploit en Python diseñado para aprovechar la vulnerabilidad de elevación de privilegios CVE-2024-30085",
|
||||
"fork": false,
|
||||
"created_at": "2024-12-28T10:03:26Z",
|
||||
"updated_at": "2026-05-21T19:32:31Z",
|
||||
"pushed_at": "2026-05-21T19:32:29Z",
|
||||
"updated_at": "2026-05-23T13:46:48Z",
|
||||
"pushed_at": "2026-05-23T13:46:45Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1010,10 +1010,10 @@
|
||||
"description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-01T14:28:09Z",
|
||||
"updated_at": "2026-05-20T23:13:48Z",
|
||||
"updated_at": "2026-05-23T14:22:49Z",
|
||||
"pushed_at": "2024-04-03T04:58:50Z",
|
||||
"stargazers_count": 3558,
|
||||
"watchers_count": 3558,
|
||||
"stargazers_count": 3557,
|
||||
"watchers_count": 3557,
|
||||
"has_discussions": false,
|
||||
"forks_count": 236,
|
||||
"allow_forking": true,
|
||||
@@ -1024,7 +1024,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 236,
|
||||
"watchers": 3558,
|
||||
"watchers": 3557,
|
||||
"score": 0,
|
||||
"subscribers_count": 34
|
||||
},
|
||||
|
||||
@@ -64,38 +64,5 @@
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
{
|
||||
"id": 1237228334,
|
||||
"name": "SparstanBoogie-CVE-2024-44258",
|
||||
"full_name": "fuzzlove\/SparstanBoogie-CVE-2024-44258",
|
||||
"owner": {
|
||||
"login": "fuzzlove",
|
||||
"id": 44779781,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44779781?v=4",
|
||||
"html_url": "https:\/\/github.com\/fuzzlove",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/fuzzlove\/SparstanBoogie-CVE-2024-44258",
|
||||
"description": "CVE-2024-44258",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-13T01:57:49Z",
|
||||
"updated_at": "2026-05-13T18:51:02Z",
|
||||
"pushed_at": "2026-05-13T18:50:38Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "A proof of concept of traefik CVE to understand the impact",
|
||||
"fork": false,
|
||||
"created_at": "2024-09-26T09:58:27Z",
|
||||
"updated_at": "2025-03-17T10:35:14Z",
|
||||
"updated_at": "2026-05-23T17:42:30Z",
|
||||
"pushed_at": "2024-09-26T13:45:09Z",
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"stargazers_count": 5,
|
||||
"watchers_count": 5,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 4,
|
||||
"watchers": 5,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
|
||||
@@ -0,0 +1,35 @@
|
||||
[
|
||||
{
|
||||
"id": 911576506,
|
||||
"name": "CVE-2024-55988",
|
||||
"full_name": "RandomRobbieBF\/CVE-2024-55988",
|
||||
"owner": {
|
||||
"login": "RandomRobbieBF",
|
||||
"id": 51722811,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
|
||||
"html_url": "https:\/\/github.com\/RandomRobbieBF",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-55988",
|
||||
"description": "Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection",
|
||||
"fork": false,
|
||||
"created_at": "2025-01-03T10:45:42Z",
|
||||
"updated_at": "2026-02-24T12:59:58Z",
|
||||
"pushed_at": "2025-01-03T11:02:23Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
]
|
||||
@@ -73,15 +73,15 @@
|
||||
{
|
||||
"id": 871449363,
|
||||
"name": "CVE-2024-7593",
|
||||
"full_name": "voidbroker\/CVE-2024-7593",
|
||||
"full_name": "kernel364\/CVE-2024-7593",
|
||||
"owner": {
|
||||
"login": "voidbroker",
|
||||
"login": "kernel364",
|
||||
"id": 156471538,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156471538?v=4",
|
||||
"html_url": "https:\/\/github.com\/voidbroker",
|
||||
"html_url": "https:\/\/github.com\/kernel364",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/voidbroker\/CVE-2024-7593",
|
||||
"html_url": "https:\/\/github.com\/kernel364\/CVE-2024-7593",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-10-12T02:17:14Z",
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "ColorOS短信漏洞,以及用户自救方案",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-24T11:48:03Z",
|
||||
"updated_at": "2026-05-17T03:32:15Z",
|
||||
"updated_at": "2026-05-23T14:11:15Z",
|
||||
"pushed_at": "2025-10-15T11:32:43Z",
|
||||
"stargazers_count": 387,
|
||||
"watchers_count": 387,
|
||||
"stargazers_count": 386,
|
||||
"watchers_count": 386,
|
||||
"has_discussions": true,
|
||||
"forks_count": 42,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 42,
|
||||
"watchers": 387,
|
||||
"watchers": 386,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-30T15:52:00Z",
|
||||
"updated_at": "2026-05-23T11:04:55Z",
|
||||
"pushed_at": "2026-05-23T11:04:52Z",
|
||||
"updated_at": "2026-05-23T16:07:53Z",
|
||||
"pushed_at": "2026-05-23T16:07:50Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -1129,8 +1129,8 @@
|
||||
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-14T06:05:44Z",
|
||||
"updated_at": "2026-05-23T11:03:40Z",
|
||||
"pushed_at": "2026-05-23T11:03:36Z",
|
||||
"updated_at": "2026-05-23T16:06:52Z",
|
||||
"pushed_at": "2026-05-23T16:06:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -412,8 +412,8 @@
|
||||
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-14T20:01:20Z",
|
||||
"updated_at": "2026-05-23T11:26:59Z",
|
||||
"pushed_at": "2026-05-23T11:26:55Z",
|
||||
"updated_at": "2026-05-23T16:29:51Z",
|
||||
"pushed_at": "2026-05-23T16:29:47Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-04T03:42:55Z",
|
||||
"updated_at": "2026-05-23T12:00:18Z",
|
||||
"pushed_at": "2026-05-23T12:00:14Z",
|
||||
"updated_at": "2026-05-23T17:02:21Z",
|
||||
"pushed_at": "2026-05-23T17:02:17Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -80,10 +80,10 @@
|
||||
"description": "A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability",
|
||||
"fork": false,
|
||||
"created_at": "2025-03-23T08:11:09Z",
|
||||
"updated_at": "2026-01-30T21:20:46Z",
|
||||
"updated_at": "2026-05-23T13:10:46Z",
|
||||
"pushed_at": "2025-03-23T23:14:15Z",
|
||||
"stargazers_count": 18,
|
||||
"watchers_count": 18,
|
||||
"stargazers_count": 19,
|
||||
"watchers_count": 19,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -94,7 +94,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 18,
|
||||
"watchers": 19,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
|
||||
"fork": false,
|
||||
"created_at": "2020-06-23T15:20:11Z",
|
||||
"updated_at": "2026-05-23T09:56:33Z",
|
||||
"pushed_at": "2026-05-23T09:56:30Z",
|
||||
"updated_at": "2026-05-23T14:19:26Z",
|
||||
"pushed_at": "2026-05-23T14:19:22Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 20,
|
||||
"watchers_count": 20,
|
||||
"has_discussions": false,
|
||||
"forks_count": 4,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 4,
|
||||
"forks": 3,
|
||||
"watchers": 20,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
|
||||
@@ -645,8 +645,8 @@
|
||||
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-04T18:20:09Z",
|
||||
"updated_at": "2026-05-23T09:49:10Z",
|
||||
"pushed_at": "2026-05-23T09:49:07Z",
|
||||
"updated_at": "2026-05-23T14:11:33Z",
|
||||
"pushed_at": "2026-05-23T14:11:29Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -1628,8 +1628,8 @@
|
||||
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-20T00:42:07Z",
|
||||
"updated_at": "2026-05-23T09:57:54Z",
|
||||
"pushed_at": "2026-05-23T09:57:50Z",
|
||||
"updated_at": "2026-05-23T14:20:45Z",
|
||||
"pushed_at": "2026-05-23T14:20:42Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -1680,8 +1680,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2025-09-20T02:01:08Z",
|
||||
"updated_at": "2026-05-23T09:57:53Z",
|
||||
"pushed_at": "2026-05-23T09:57:49Z",
|
||||
"updated_at": "2026-05-23T14:20:45Z",
|
||||
"pushed_at": "2026-05-23T14:20:41Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -294,8 +294,8 @@
|
||||
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-29T01:59:47Z",
|
||||
"updated_at": "2026-05-23T11:16:32Z",
|
||||
"pushed_at": "2026-05-23T11:16:29Z",
|
||||
"updated_at": "2026-05-23T16:19:18Z",
|
||||
"pushed_at": "2026-05-23T16:19:14Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -118,7 +118,7 @@
|
||||
"stargazers_count": 33,
|
||||
"watchers_count": 33,
|
||||
"has_discussions": false,
|
||||
"forks_count": 5,
|
||||
"forks_count": 6,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -126,7 +126,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 5,
|
||||
"forks": 6,
|
||||
"watchers": 33,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -516,10 +516,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-02-24T05:07:09Z",
|
||||
"updated_at": "2026-02-24T05:10:38Z",
|
||||
"updated_at": "2026-05-23T16:18:05Z",
|
||||
"pushed_at": "2026-02-24T05:10:34Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -530,7 +530,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -251,8 +251,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2025-09-19T17:17:19Z",
|
||||
"updated_at": "2026-05-23T09:57:46Z",
|
||||
"pushed_at": "2026-05-23T09:57:42Z",
|
||||
"updated_at": "2026-05-23T14:20:33Z",
|
||||
"pushed_at": "2026-05-23T14:20:29Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
|
||||
"fork": false,
|
||||
"created_at": "2019-04-13T07:51:09Z",
|
||||
"updated_at": "2026-05-23T10:17:25Z",
|
||||
"pushed_at": "2026-05-23T10:17:22Z",
|
||||
"updated_at": "2026-05-23T14:41:00Z",
|
||||
"pushed_at": "2026-05-23T14:40:56Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).",
|
||||
"fork": false,
|
||||
"created_at": "2023-12-05T14:52:11Z",
|
||||
"updated_at": "2026-05-23T10:12:56Z",
|
||||
"updated_at": "2026-05-23T17:36:29Z",
|
||||
"pushed_at": "2026-05-19T07:17:52Z",
|
||||
"stargazers_count": 757,
|
||||
"watchers_count": 757,
|
||||
"stargazers_count": 758,
|
||||
"watchers_count": 758,
|
||||
"has_discussions": false,
|
||||
"forks_count": 113,
|
||||
"allow_forking": true,
|
||||
@@ -37,7 +37,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 113,
|
||||
"watchers": 757,
|
||||
"watchers": 758,
|
||||
"score": 0,
|
||||
"subscribers_count": 18
|
||||
}
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
|
||||
"fork": false,
|
||||
"created_at": "2023-01-25T04:41:49Z",
|
||||
"updated_at": "2026-05-23T11:25:29Z",
|
||||
"pushed_at": "2026-05-23T11:25:25Z",
|
||||
"updated_at": "2026-05-23T16:28:05Z",
|
||||
"pushed_at": "2026-05-23T16:28:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -67,8 +67,8 @@
|
||||
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-17T22:04:33Z",
|
||||
"updated_at": "2026-05-23T09:51:56Z",
|
||||
"pushed_at": "2026-05-23T09:51:52Z",
|
||||
"updated_at": "2026-05-23T14:14:37Z",
|
||||
"pushed_at": "2026-05-23T14:14:33Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -53,8 +53,8 @@
|
||||
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-14T05:16:16Z",
|
||||
"updated_at": "2026-05-23T09:51:30Z",
|
||||
"pushed_at": "2026-05-23T09:51:27Z",
|
||||
"updated_at": "2026-05-23T14:14:00Z",
|
||||
"pushed_at": "2026-05-23T14:13:57Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
|
||||
+32
-32
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
|
||||
"fork": false,
|
||||
"created_at": "2021-09-18T02:04:33Z",
|
||||
"updated_at": "2026-05-23T10:49:17Z",
|
||||
"pushed_at": "2026-05-23T10:49:14Z",
|
||||
"updated_at": "2026-05-23T15:52:15Z",
|
||||
"pushed_at": "2026-05-23T15:52:12Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
|
||||
"fork": false,
|
||||
"created_at": "2022-06-17T10:19:10Z",
|
||||
"updated_at": "2026-05-23T10:49:06Z",
|
||||
"pushed_at": "2026-05-23T10:49:03Z",
|
||||
"updated_at": "2026-05-23T15:51:53Z",
|
||||
"pushed_at": "2026-05-23T15:51:49Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -151,8 +151,8 @@
|
||||
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
|
||||
"fork": false,
|
||||
"created_at": "2023-11-27T18:17:43Z",
|
||||
"updated_at": "2026-05-23T10:49:03Z",
|
||||
"pushed_at": "2026-05-23T10:49:00Z",
|
||||
"updated_at": "2026-05-23T15:52:15Z",
|
||||
"pushed_at": "2026-05-23T15:52:11Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -203,8 +203,8 @@
|
||||
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-24T02:36:56Z",
|
||||
"updated_at": "2026-05-23T10:50:03Z",
|
||||
"pushed_at": "2026-05-23T10:49:59Z",
|
||||
"updated_at": "2026-05-23T15:52:56Z",
|
||||
"pushed_at": "2026-05-23T15:52:52Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -251,8 +251,8 @@
|
||||
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2024-05-28T16:48:51Z",
|
||||
"updated_at": "2026-05-23T10:48:33Z",
|
||||
"pushed_at": "2026-05-23T10:48:30Z",
|
||||
"updated_at": "2026-05-23T15:51:30Z",
|
||||
"pushed_at": "2026-05-23T15:51:27Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -303,8 +303,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-11-29T12:32:19Z",
|
||||
"updated_at": "2026-05-23T10:49:42Z",
|
||||
"pushed_at": "2026-05-23T10:49:38Z",
|
||||
"updated_at": "2026-05-23T15:52:37Z",
|
||||
"pushed_at": "2026-05-23T15:52:34Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -352,8 +352,8 @@
|
||||
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-21T22:04:31Z",
|
||||
"updated_at": "2026-05-23T10:52:43Z",
|
||||
"pushed_at": "2026-05-23T10:52:39Z",
|
||||
"updated_at": "2026-05-23T15:55:44Z",
|
||||
"pushed_at": "2026-05-23T15:55:40Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -406,8 +406,8 @@
|
||||
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
|
||||
"fork": false,
|
||||
"created_at": "2025-06-06T16:34:46Z",
|
||||
"updated_at": "2026-05-23T10:49:16Z",
|
||||
"pushed_at": "2026-05-23T10:49:13Z",
|
||||
"updated_at": "2026-05-23T15:52:11Z",
|
||||
"pushed_at": "2026-05-23T15:52:07Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -458,8 +458,8 @@
|
||||
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-15T18:33:34Z",
|
||||
"updated_at": "2026-05-23T10:50:06Z",
|
||||
"pushed_at": "2026-05-23T10:50:03Z",
|
||||
"updated_at": "2026-05-23T15:53:04Z",
|
||||
"pushed_at": "2026-05-23T15:53:01Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -12284,8 +12284,8 @@
|
||||
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T14:48:19Z",
|
||||
"updated_at": "2026-05-23T10:48:54Z",
|
||||
"pushed_at": "2026-05-23T10:48:50Z",
|
||||
"updated_at": "2026-05-23T15:51:51Z",
|
||||
"pushed_at": "2026-05-23T15:51:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12369,8 +12369,8 @@
|
||||
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T18:44:51Z",
|
||||
"updated_at": "2026-05-23T10:48:08Z",
|
||||
"pushed_at": "2026-05-23T10:48:05Z",
|
||||
"updated_at": "2026-05-23T15:51:05Z",
|
||||
"pushed_at": "2026-05-23T15:51:02Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12418,8 +12418,8 @@
|
||||
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T18:48:07Z",
|
||||
"updated_at": "2026-05-23T10:48:20Z",
|
||||
"pushed_at": "2026-05-23T10:48:17Z",
|
||||
"updated_at": "2026-05-23T15:51:05Z",
|
||||
"pushed_at": "2026-05-23T15:51:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12503,8 +12503,8 @@
|
||||
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-25T19:28:28Z",
|
||||
"updated_at": "2026-05-23T10:49:44Z",
|
||||
"pushed_at": "2026-05-23T10:49:40Z",
|
||||
"updated_at": "2026-05-23T15:52:37Z",
|
||||
"pushed_at": "2026-05-23T15:52:34Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12705,8 +12705,8 @@
|
||||
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-26T22:26:55Z",
|
||||
"updated_at": "2026-05-23T10:50:02Z",
|
||||
"pushed_at": "2026-05-23T10:49:58Z",
|
||||
"updated_at": "2026-05-23T15:52:33Z",
|
||||
"pushed_at": "2026-05-23T15:52:30Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12975,8 +12975,8 @@
|
||||
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-02T01:28:57Z",
|
||||
"updated_at": "2026-05-23T10:54:35Z",
|
||||
"pushed_at": "2026-05-23T10:54:31Z",
|
||||
"updated_at": "2026-05-23T15:57:28Z",
|
||||
"pushed_at": "2026-05-23T15:57:25Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -13496,8 +13496,8 @@
|
||||
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-08T16:28:04Z",
|
||||
"updated_at": "2026-05-23T11:00:12Z",
|
||||
"pushed_at": "2026-05-23T11:00:08Z",
|
||||
"updated_at": "2026-05-23T16:03:09Z",
|
||||
"pushed_at": "2026-05-23T16:03:05Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -289,8 +289,8 @@
|
||||
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-02T05:04:03Z",
|
||||
"updated_at": "2026-05-23T10:55:01Z",
|
||||
"pushed_at": "2026-05-23T10:54:57Z",
|
||||
"updated_at": "2026-05-23T15:58:02Z",
|
||||
"pushed_at": "2026-05-23T15:57:58Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -253,10 +253,10 @@
|
||||
"description": "Combined PoC for CVE-2025-28434 and CVE-2025-59528",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-13T01:54:37Z",
|
||||
"updated_at": "2026-05-05T03:42:58Z",
|
||||
"updated_at": "2026-05-23T18:21:24Z",
|
||||
"pushed_at": "2026-04-13T05:52:12Z",
|
||||
"stargazers_count": 15,
|
||||
"watchers_count": 15,
|
||||
"stargazers_count": 16,
|
||||
"watchers_count": 16,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -273,7 +273,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 15,
|
||||
"watchers": 16,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -200,8 +200,8 @@
|
||||
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-29T02:16:04Z",
|
||||
"updated_at": "2026-05-23T11:16:42Z",
|
||||
"pushed_at": "2026-05-23T11:16:38Z",
|
||||
"updated_at": "2026-05-23T16:19:18Z",
|
||||
"pushed_at": "2026-05-23T16:19:14Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
|
||||
"fork": false,
|
||||
"created_at": "2025-03-04T15:38:32Z",
|
||||
"updated_at": "2026-05-23T10:16:00Z",
|
||||
"pushed_at": "2026-05-23T10:15:56Z",
|
||||
"updated_at": "2026-05-23T14:39:28Z",
|
||||
"pushed_at": "2026-05-23T14:39:25Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -146,10 +146,10 @@
|
||||
"description": "CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-10T01:37:39Z",
|
||||
"updated_at": "2026-04-11T13:14:58Z",
|
||||
"updated_at": "2026-05-23T18:25:57Z",
|
||||
"pushed_at": "2025-07-10T02:31:38Z",
|
||||
"stargazers_count": 17,
|
||||
"watchers_count": 17,
|
||||
"stargazers_count": 18,
|
||||
"watchers_count": 18,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -160,7 +160,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 17,
|
||||
"watchers": 18,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-10T21:07:43Z",
|
||||
"updated_at": "2026-05-23T10:43:55Z",
|
||||
"pushed_at": "2026-05-23T10:43:51Z",
|
||||
"updated_at": "2026-05-23T15:46:46Z",
|
||||
"pushed_at": "2026-05-23T15:46:43Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -64,8 +64,8 @@
|
||||
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-23T09:09:21Z",
|
||||
"updated_at": "2026-05-23T11:53:27Z",
|
||||
"pushed_at": "2026-05-23T11:53:24Z",
|
||||
"updated_at": "2026-05-23T16:55:31Z",
|
||||
"pushed_at": "2026-05-23T16:55:27Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
|
||||
"fork": false,
|
||||
"created_at": "2025-10-01T07:40:09Z",
|
||||
"updated_at": "2026-05-23T10:50:43Z",
|
||||
"pushed_at": "2026-05-23T10:50:39Z",
|
||||
"updated_at": "2026-05-23T15:53:54Z",
|
||||
"pushed_at": "2026-05-23T15:53:51Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-24T21:00:41Z",
|
||||
"updated_at": "2026-05-23T11:13:19Z",
|
||||
"pushed_at": "2026-05-23T11:13:16Z",
|
||||
"updated_at": "2026-05-23T16:16:14Z",
|
||||
"pushed_at": "2026-05-23T16:16:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-10T09:18:30Z",
|
||||
"updated_at": "2026-05-23T11:39:55Z",
|
||||
"pushed_at": "2026-05-23T11:39:51Z",
|
||||
"updated_at": "2026-05-23T16:42:15Z",
|
||||
"pushed_at": "2026-05-23T16:42:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-20T04:18:24Z",
|
||||
"updated_at": "2026-05-23T11:35:18Z",
|
||||
"pushed_at": "2026-05-23T11:35:14Z",
|
||||
"updated_at": "2026-05-23T16:37:49Z",
|
||||
"pushed_at": "2026-05-23T16:37:46Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -838,8 +838,8 @@
|
||||
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-20T13:52:21Z",
|
||||
"updated_at": "2026-05-23T10:45:19Z",
|
||||
"pushed_at": "2026-05-23T10:45:16Z",
|
||||
"updated_at": "2026-05-23T15:48:21Z",
|
||||
"pushed_at": "2026-05-23T15:48:17Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -146,8 +146,8 @@
|
||||
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-31T13:25:07Z",
|
||||
"updated_at": "2026-05-23T10:54:12Z",
|
||||
"pushed_at": "2026-05-23T10:54:09Z",
|
||||
"updated_at": "2026-05-23T15:57:05Z",
|
||||
"pushed_at": "2026-05-23T15:57:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
|
||||
"fork": false,
|
||||
"created_at": "2024-06-19T23:21:41Z",
|
||||
"updated_at": "2026-05-23T10:55:45Z",
|
||||
"pushed_at": "2026-05-23T10:55:41Z",
|
||||
"updated_at": "2026-05-23T15:58:51Z",
|
||||
"pushed_at": "2026-05-23T15:58:47Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-18T20:05:22Z",
|
||||
"updated_at": "2026-05-22T12:03:41Z",
|
||||
"updated_at": "2026-05-23T16:11:42Z",
|
||||
"pushed_at": "2026-04-22T10:09:20Z",
|
||||
"stargazers_count": 7,
|
||||
"watchers_count": 7,
|
||||
"stargazers_count": 8,
|
||||
"watchers_count": 8,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 7,
|
||||
"watchers": 8,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-20T04:18:24Z",
|
||||
"updated_at": "2026-05-23T11:35:18Z",
|
||||
"pushed_at": "2026-05-23T11:35:14Z",
|
||||
"updated_at": "2026-05-23T16:37:49Z",
|
||||
"pushed_at": "2026-05-23T16:37:46Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
|
||||
"fork": false,
|
||||
"created_at": "2024-09-22T12:19:06Z",
|
||||
"updated_at": "2026-05-23T11:34:27Z",
|
||||
"pushed_at": "2026-05-23T11:34:24Z",
|
||||
"updated_at": "2026-05-23T16:37:01Z",
|
||||
"pushed_at": "2026-05-23T16:36:57Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-26T05:21:28Z",
|
||||
"updated_at": "2026-05-23T11:33:50Z",
|
||||
"pushed_at": "2026-05-23T11:33:47Z",
|
||||
"updated_at": "2026-05-23T16:36:05Z",
|
||||
"pushed_at": "2026-05-23T16:36:02Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -32,39 +32,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1212846415,
|
||||
"name": "PoC-CVE-2026-21858",
|
||||
"full_name": "masterwok\/PoC-CVE-2026-21858",
|
||||
"owner": {
|
||||
"login": "masterwok",
|
||||
"id": 5054978,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5054978?v=4",
|
||||
"html_url": "https:\/\/github.com\/masterwok",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/masterwok\/PoC-CVE-2026-21858",
|
||||
"description": "Proof-of-concept exploit for CVE-2026-21858 (ni8mare) impacting n8n versions < 1.121.0",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-16T19:42:25Z",
|
||||
"updated_at": "2026-04-16T20:31:01Z",
|
||||
"pushed_at": "2026-04-16T20:25:05Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1232709196,
|
||||
"name": "Research-CVE-2026-21858",
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-16T07:20:12Z",
|
||||
"updated_at": "2026-05-23T11:24:39Z",
|
||||
"pushed_at": "2026-05-23T11:24:36Z",
|
||||
"updated_at": "2026-05-23T16:27:29Z",
|
||||
"pushed_at": "2026-05-23T16:27:26Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-03T19:46:10Z",
|
||||
"updated_at": "2026-05-23T11:21:04Z",
|
||||
"pushed_at": "2026-05-23T11:21:00Z",
|
||||
"updated_at": "2026-05-23T16:24:04Z",
|
||||
"pushed_at": "2026-05-23T16:24:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-26T04:38:27Z",
|
||||
"updated_at": "2026-05-23T11:55:39Z",
|
||||
"pushed_at": "2026-05-23T11:55:35Z",
|
||||
"updated_at": "2026-05-23T16:57:45Z",
|
||||
"pushed_at": "2026-05-23T16:57:41Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-03T14:19:18Z",
|
||||
"updated_at": "2026-05-23T11:37:07Z",
|
||||
"pushed_at": "2026-05-23T11:37:03Z",
|
||||
"updated_at": "2026-05-23T16:39:34Z",
|
||||
"pushed_at": "2026-05-23T16:39:30Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-10T14:40:04Z",
|
||||
"updated_at": "2026-05-23T11:42:42Z",
|
||||
"pushed_at": "2026-05-23T11:42:39Z",
|
||||
"updated_at": "2026-05-23T16:45:01Z",
|
||||
"pushed_at": "2026-05-23T16:44:57Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-07T20:23:08Z",
|
||||
"updated_at": "2026-05-23T11:41:22Z",
|
||||
"pushed_at": "2026-05-23T11:41:18Z",
|
||||
"updated_at": "2026-05-23T16:43:39Z",
|
||||
"pushed_at": "2026-05-23T16:43:36Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -32,39 +32,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1213015916,
|
||||
"name": "CVE-2026-29000",
|
||||
"full_name": "cipher1x1\/CVE-2026-29000",
|
||||
"owner": {
|
||||
"login": "cipher1x1",
|
||||
"id": 261354360,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261354360?v=4",
|
||||
"html_url": "https:\/\/github.com\/cipher1x1",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/cipher1x1\/CVE-2026-29000",
|
||||
"description": "Proof of Concept for CVE-2026-29000, a vulnerability in pac4j-jwt",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-17T00:51:16Z",
|
||||
"updated_at": "2026-05-05T09:04:59Z",
|
||||
"pushed_at": "2026-04-17T00:53:04Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1225836828,
|
||||
"name": "CVE-2026-29000",
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-03T20:26:43Z",
|
||||
"updated_at": "2026-05-23T11:59:54Z",
|
||||
"pushed_at": "2026-05-23T11:59:51Z",
|
||||
"updated_at": "2026-05-23T17:02:00Z",
|
||||
"pushed_at": "2026-05-23T17:01:56Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T12:15:28Z",
|
||||
"updated_at": "2026-05-23T12:34:20Z",
|
||||
"updated_at": "2026-05-23T16:30:10Z",
|
||||
"pushed_at": "2026-04-29T21:21:46Z",
|
||||
"stargazers_count": 3884,
|
||||
"watchers_count": 3884,
|
||||
"stargazers_count": 3886,
|
||||
"watchers_count": 3886,
|
||||
"has_discussions": false,
|
||||
"forks_count": 860,
|
||||
"allow_forking": true,
|
||||
@@ -72,7 +72,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 860,
|
||||
"watchers": 3884,
|
||||
"watchers": 3886,
|
||||
"score": 0,
|
||||
"subscribers_count": 32
|
||||
},
|
||||
@@ -2603,47 +2603,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1225689944,
|
||||
"name": "copyfail",
|
||||
"full_name": "rfxn\/copyfail",
|
||||
"owner": {
|
||||
"login": "rfxn",
|
||||
"id": 1923826,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1923826?v=4",
|
||||
"html_url": "https:\/\/github.com\/rfxn",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/rfxn\/copyfail",
|
||||
"description": "Defense-in-depth primitives for CVE-2026-31431 (Copy Fail) — kernel detection probe and LD_PRELOAD AF_ALG block",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-30T14:33:36Z",
|
||||
"updated_at": "2026-05-23T06:54:20Z",
|
||||
"pushed_at": "2026-05-23T06:54:27Z",
|
||||
"stargazers_count": 11,
|
||||
"watchers_count": 11,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"af-alg",
|
||||
"copyfail",
|
||||
"cve-2026-31431",
|
||||
"defense-in-depth",
|
||||
"ld-preload",
|
||||
"linux-security",
|
||||
"privilege-escalation"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 11,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1225711440,
|
||||
"name": "PATCH-CVE-2026-31431-Ubuntu_Debian",
|
||||
@@ -3108,47 +3067,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1225824731,
|
||||
"name": "Copyfail-rust",
|
||||
"full_name": "ShorterKing\/Copyfail-rust",
|
||||
"owner": {
|
||||
"login": "ShorterKing",
|
||||
"id": 84120105,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84120105?v=4",
|
||||
"html_url": "https:\/\/github.com\/ShorterKing",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/ShorterKing\/Copyfail-rust",
|
||||
"description": "Rust implementation of copyfail (CVE-2026-31431) (Cause why not 😁)",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-30T17:20:00Z",
|
||||
"updated_at": "2026-05-09T08:56:37Z",
|
||||
"pushed_at": "2026-04-30T17:53:57Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"copy-fail",
|
||||
"copyfail",
|
||||
"cve-2026-31431",
|
||||
"kernel-exploit",
|
||||
"local-privilege-escalation",
|
||||
"proof-of-concept",
|
||||
"rust"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1225862219,
|
||||
"name": "CVE-2026-31431",
|
||||
@@ -7848,8 +7766,8 @@
|
||||
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-05T04:58:21Z",
|
||||
"updated_at": "2026-05-23T12:21:04Z",
|
||||
"pushed_at": "2026-05-23T12:21:01Z",
|
||||
"updated_at": "2026-05-23T17:22:19Z",
|
||||
"pushed_at": "2026-05-23T17:22:15Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -8683,8 +8601,8 @@
|
||||
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-06T09:49:14Z",
|
||||
"updated_at": "2026-05-23T12:22:01Z",
|
||||
"pushed_at": "2026-05-23T12:21:57Z",
|
||||
"updated_at": "2026-05-23T17:23:20Z",
|
||||
"pushed_at": "2026-05-23T17:23:17Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T20:49:46Z",
|
||||
"updated_at": "2026-05-23T11:56:45Z",
|
||||
"pushed_at": "2026-05-23T11:56:42Z",
|
||||
"updated_at": "2026-05-23T16:59:04Z",
|
||||
"pushed_at": "2026-05-23T16:59:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-06T12:10:07Z",
|
||||
"updated_at": "2026-05-20T15:23:13Z",
|
||||
"updated_at": "2026-05-23T14:40:39Z",
|
||||
"pushed_at": "2026-04-23T17:47:53Z",
|
||||
"stargazers_count": 23,
|
||||
"watchers_count": 23,
|
||||
"stargazers_count": 24,
|
||||
"watchers_count": 24,
|
||||
"has_discussions": false,
|
||||
"forks_count": 5,
|
||||
"forks_count": 6,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 5,
|
||||
"watchers": 23,
|
||||
"forks": 6,
|
||||
"watchers": 24,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking, shellcode, reverse shell",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-18T13:44:31Z",
|
||||
"updated_at": "2026-05-19T21:11:25Z",
|
||||
"pushed_at": "2026-05-18T13:45:09Z",
|
||||
"updated_at": "2026-05-23T14:46:42Z",
|
||||
"pushed_at": "2026-05-23T14:46:39Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": true,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-13T20:56:15Z",
|
||||
"updated_at": "2026-05-23T09:18:18Z",
|
||||
"updated_at": "2026-05-23T16:59:29Z",
|
||||
"pushed_at": "2026-05-18T21:29:59Z",
|
||||
"stargazers_count": 145,
|
||||
"watchers_count": 145,
|
||||
"stargazers_count": 147,
|
||||
"watchers_count": 147,
|
||||
"has_discussions": false,
|
||||
"forks_count": 28,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 28,
|
||||
"watchers": 145,
|
||||
"watchers": 147,
|
||||
"score": 0,
|
||||
"subscribers_count": 3
|
||||
},
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "CVE-2026-41091 \/ CVE-2026-45498 Microsoft Defender vulnerability scanner",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-22T23:42:50Z",
|
||||
"updated_at": "2026-05-23T10:15:08Z",
|
||||
"pushed_at": "2026-05-23T10:15:04Z",
|
||||
"updated_at": "2026-05-23T13:57:22Z",
|
||||
"pushed_at": "2026-05-23T13:57:19Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -738,12 +738,12 @@
|
||||
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-01T12:09:26Z",
|
||||
"updated_at": "2026-05-23T03:38:30Z",
|
||||
"updated_at": "2026-05-23T13:38:41Z",
|
||||
"pushed_at": "2026-05-01T12:10:32Z",
|
||||
"stargazers_count": 433,
|
||||
"watchers_count": 433,
|
||||
"stargazers_count": 434,
|
||||
"watchers_count": 434,
|
||||
"has_discussions": false,
|
||||
"forks_count": 129,
|
||||
"forks_count": 130,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -751,8 +751,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 129,
|
||||
"watchers": 433,
|
||||
"forks": 130,
|
||||
"watchers": 434,
|
||||
"score": 0,
|
||||
"subscribers_count": 6
|
||||
},
|
||||
@@ -1845,8 +1845,8 @@
|
||||
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-06T18:08:48Z",
|
||||
"updated_at": "2026-05-23T12:22:26Z",
|
||||
"pushed_at": "2026-05-23T12:22:22Z",
|
||||
"updated_at": "2026-05-23T17:23:37Z",
|
||||
"pushed_at": "2026-05-23T17:23:33Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -156,8 +156,8 @@
|
||||
"description": "CVE-2026-42208 - LiteLLM SQL Injection vulnerability scanner for BerriAI LiteLLM proxy instances",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-22T23:22:04Z",
|
||||
"updated_at": "2026-05-23T10:15:09Z",
|
||||
"pushed_at": "2026-05-23T10:15:06Z",
|
||||
"updated_at": "2026-05-23T13:57:24Z",
|
||||
"pushed_at": "2026-05-23T13:57:21Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "exploit for CVE-2026-42945",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-12T23:05:32Z",
|
||||
"updated_at": "2026-05-23T09:30:40Z",
|
||||
"updated_at": "2026-05-23T18:22:46Z",
|
||||
"pushed_at": "2026-05-13T18:40:57Z",
|
||||
"stargazers_count": 792,
|
||||
"watchers_count": 792,
|
||||
"stargazers_count": 795,
|
||||
"watchers_count": 795,
|
||||
"has_discussions": false,
|
||||
"forks_count": 142,
|
||||
"forks_count": 143,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 142,
|
||||
"watchers": 792,
|
||||
"forks": 143,
|
||||
"watchers": 795,
|
||||
"score": 0,
|
||||
"subscribers_count": 5
|
||||
},
|
||||
@@ -975,5 +975,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247634020,
|
||||
"name": "nginx-rce-cve-2026-42945",
|
||||
"full_name": "webdev75950-ux\/nginx-rce-cve-2026-42945",
|
||||
"owner": {
|
||||
"login": "webdev75950-ux",
|
||||
"id": 255519417,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/255519417?v=4",
|
||||
"html_url": "https:\/\/github.com\/webdev75950-ux",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/webdev75950-ux\/nginx-rce-cve-2026-42945",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T15:21:51Z",
|
||||
"updated_at": "2026-05-23T15:21:58Z",
|
||||
"pushed_at": "2026-05-23T15:21:54Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -64,5 +64,53 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247712932,
|
||||
"name": "yellowkey-bitlocker",
|
||||
"full_name": "Mclisterjoeh2o\/yellowkey-bitlocker",
|
||||
"owner": {
|
||||
"login": "Mclisterjoeh2o",
|
||||
"id": 87401817,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87401817?v=4",
|
||||
"html_url": "https:\/\/github.com\/Mclisterjoeh2o",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Mclisterjoeh2o\/yellowkey-bitlocker",
|
||||
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T17:19:03Z",
|
||||
"updated_at": "2026-05-23T18:40:32Z",
|
||||
"pushed_at": "2026-05-23T17:24:38Z",
|
||||
"stargazers_count": 41,
|
||||
"watchers_count": 41,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"bitlocker",
|
||||
"bitlocker-bypass",
|
||||
"bitlocker-drive-encryption",
|
||||
"bitlocker-drive-management",
|
||||
"bitlocker-lock",
|
||||
"bitlocker-yellowkey",
|
||||
"cve-2026-45585",
|
||||
"nightmare-eclipse",
|
||||
"yellow-key",
|
||||
"yellowkey",
|
||||
"yellowkey-bitlocker",
|
||||
"yellowkey-cve",
|
||||
"yellowkey-exploit",
|
||||
"yellowkey-vulnerability"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 41,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -151,7 +151,7 @@
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -165,7 +165,7 @@
|
||||
"hotfix"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"forks": 1,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -80,10 +80,10 @@
|
||||
"description": "CVE-2026-46333",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-17T10:14:44Z",
|
||||
"updated_at": "2026-05-23T05:26:23Z",
|
||||
"updated_at": "2026-05-23T14:45:38Z",
|
||||
"pushed_at": "2026-05-17T10:38:48Z",
|
||||
"stargazers_count": 19,
|
||||
"watchers_count": 19,
|
||||
"stargazers_count": 20,
|
||||
"watchers_count": 20,
|
||||
"has_discussions": false,
|
||||
"forks_count": 4,
|
||||
"allow_forking": true,
|
||||
@@ -94,7 +94,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 4,
|
||||
"watchers": 19,
|
||||
"watchers": 20,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -31,5 +31,45 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1247729544,
|
||||
"name": "CVE-2026-4885",
|
||||
"full_name": "Jenderal92\/CVE-2026-4885",
|
||||
"owner": {
|
||||
"login": "Jenderal92",
|
||||
"id": 59664965,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59664965?v=4",
|
||||
"html_url": "https:\/\/github.com\/Jenderal92",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Jenderal92\/CVE-2026-4885",
|
||||
"description": "Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T17:45:40Z",
|
||||
"updated_at": "2026-05-23T17:52:54Z",
|
||||
"pushed_at": "2026-05-23T17:50:09Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"cve-2026-4885",
|
||||
"exploit",
|
||||
"pentesting",
|
||||
"python",
|
||||
"vulnerability",
|
||||
"wordpress"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -0,0 +1,35 @@
|
||||
[
|
||||
{
|
||||
"id": 1246826415,
|
||||
"name": "CVE-2026-6009",
|
||||
"full_name": "Pumila03\/CVE-2026-6009",
|
||||
"owner": {
|
||||
"login": "Pumila03",
|
||||
"id": 143729369,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143729369?v=4",
|
||||
"html_url": "https:\/\/github.com\/Pumila03",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Pumila03\/CVE-2026-6009",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-05-22T15:43:22Z",
|
||||
"updated_at": "2026-05-23T17:08:19Z",
|
||||
"pushed_at": "2026-05-23T11:39:19Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "CVE-2026-6279 — Avada Builder <= 3.15.2 Unauthenticated RCE via call_user_func()",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T09:33:32Z",
|
||||
"updated_at": "2026-05-23T09:53:16Z",
|
||||
"pushed_at": "2026-05-23T09:53:13Z",
|
||||
"updated_at": "2026-05-23T17:40:45Z",
|
||||
"pushed_at": "2026-05-23T17:40:42Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized testing only. Maintainer: mürrez.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-15T09:35:52Z",
|
||||
"updated_at": "2026-05-16T12:16:30Z",
|
||||
"updated_at": "2026-05-23T17:33:44Z",
|
||||
"pushed_at": "2026-05-15T09:40:21Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 1,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Unauthenticated Privilege Escalation CVE-2026-9018: Easy Elements for Elementor",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-23T04:34:31Z",
|
||||
"updated_at": "2026-05-23T04:36:40Z",
|
||||
"pushed_at": "2026-05-23T04:36:37Z",
|
||||
"updated_at": "2026-05-23T16:58:04Z",
|
||||
"pushed_at": "2026-05-23T16:58:00Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -428,6 +428,7 @@
|
||||
</code>
|
||||
|
||||
- [xShadow-Here/CVE-2026-4885](https://github.com/xShadow-Here/CVE-2026-4885)
|
||||
- [Jenderal92/CVE-2026-4885](https://github.com/Jenderal92/CVE-2026-4885)
|
||||
|
||||
### CVE-2026-5027 (2026-03-27)
|
||||
|
||||
@@ -517,6 +518,13 @@
|
||||
|
||||
- [Crihexe/v8-poc-CVE-2026-5865](https://github.com/Crihexe/v8-poc-CVE-2026-5865)
|
||||
|
||||
### CVE-2026-6009 (2026-05-19)
|
||||
|
||||
<code>Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system
|
||||
</code>
|
||||
|
||||
- [Pumila03/CVE-2026-6009](https://github.com/Pumila03/CVE-2026-6009)
|
||||
|
||||
### CVE-2026-6018
|
||||
- [m0r4a/CVE-2026-6018-9-Local-Privilege-Escalation-Chain](https://github.com/m0r4a/CVE-2026-6018-9-Local-Privilege-Escalation-Chain)
|
||||
|
||||
@@ -873,7 +881,6 @@
|
||||
</code>
|
||||
|
||||
- [EQSTLab/CVE-2026-21858](https://github.com/EQSTLab/CVE-2026-21858)
|
||||
- [masterwok/PoC-CVE-2026-21858](https://github.com/masterwok/PoC-CVE-2026-21858)
|
||||
- [Bannt08/Research-CVE-2026-21858](https://github.com/Bannt08/Research-CVE-2026-21858)
|
||||
|
||||
### CVE-2026-21876 (2026-01-08)
|
||||
@@ -1246,7 +1253,6 @@
|
||||
</code>
|
||||
|
||||
- [Gajraj238/CVE-2026-29000](https://github.com/Gajraj238/CVE-2026-29000)
|
||||
- [cipher1x1/CVE-2026-29000](https://github.com/cipher1x1/CVE-2026-29000)
|
||||
- [jake-young-dev/CVE-2026-29000](https://github.com/jake-young-dev/CVE-2026-29000)
|
||||
- [strikoder/CVE-2026-29000-pac4j-jwt](https://github.com/strikoder/CVE-2026-29000-pac4j-jwt)
|
||||
- [ledksv/Principal-HackTheBox](https://github.com/ledksv/Principal-HackTheBox)
|
||||
@@ -1423,7 +1429,6 @@
|
||||
- [yxdm02/CVE-2026-31431](https://github.com/yxdm02/CVE-2026-31431)
|
||||
- [grishinpv/CVE-2026-31431-old-python](https://github.com/grishinpv/CVE-2026-31431-old-python)
|
||||
- [sammwyy/copyfail-rs](https://github.com/sammwyy/copyfail-rs)
|
||||
- [rfxn/copyfail](https://github.com/rfxn/copyfail)
|
||||
- [SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian](https://github.com/SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian)
|
||||
- [scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431](https://github.com/scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431)
|
||||
- [cozystack/copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker)
|
||||
@@ -1438,7 +1443,6 @@
|
||||
- [SeanRickerd/cve-2026-31431](https://github.com/SeanRickerd/cve-2026-31431)
|
||||
- [abdullaabdullazade/CVE-2026-31431](https://github.com/abdullaabdullazade/CVE-2026-31431)
|
||||
- [weirdindiankid/copy-fail](https://github.com/weirdindiankid/copy-fail)
|
||||
- [ShorterKing/Copyfail-rust](https://github.com/ShorterKing/Copyfail-rust)
|
||||
- [websecnl/CVE-2026-31431](https://github.com/websecnl/CVE-2026-31431)
|
||||
- [Dabbleam/CVE-2026-31431-mitigation](https://github.com/Dabbleam/CVE-2026-31431-mitigation)
|
||||
- [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation)
|
||||
@@ -2828,6 +2832,7 @@
|
||||
- [gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit](https://github.com/gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit)
|
||||
- [yusufdalbudak/CVE-2026-42945](https://github.com/yusufdalbudak/CVE-2026-42945)
|
||||
- [F2u0a0d3/CVE-2026-42945-nginx-rift-poc](https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc)
|
||||
- [webdev75950-ux/nginx-rce-cve-2026-42945](https://github.com/webdev75950-ux/nginx-rce-cve-2026-42945)
|
||||
|
||||
### CVE-2026-43284 (2026-05-08)
|
||||
|
||||
@@ -2987,6 +2992,7 @@
|
||||
|
||||
- [bjbakker1984/Yellowkey-mitigation](https://github.com/bjbakker1984/Yellowkey-mitigation)
|
||||
- [everest90909/YellowKey-WinRE-Remediation](https://github.com/everest90909/YellowKey-WinRE-Remediation)
|
||||
- [Mclisterjoeh2o/yellowkey-bitlocker](https://github.com/Mclisterjoeh2o/yellowkey-bitlocker)
|
||||
|
||||
### CVE-2026-45829 (2026-05-18)
|
||||
|
||||
@@ -2998,7 +3004,7 @@
|
||||
|
||||
### CVE-2026-46300 (2026-05-23)
|
||||
|
||||
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()->flags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft 'dup to <local>' rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()'d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb's frag descriptors into the\naccumulator's last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p's frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)->flags, and skb_segment_list() reuses each sub-skb's\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb's flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb's flag into nskb. Fold frag_skb's flag at both sites\nso segments drawing frags from frag_list members carry the marker.
|
||||
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: preserve shared-frag marker during coalescing\n\nskb_try_coalesce() can attach paged frags from @from to @to. If @from\nhas SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same\nexternally-owned or page-cache-backed frags, but the shared-frag marker\nis currently lost.\n\nThat breaks the invariant relied on by later in-place writers. In\nparticular, ESP input checks skb_has_shared_frag() before deciding\nwhether an uncloned nonlinear skb can skip skb_cow_data(). If TCP\nreceive coalescing has moved shared frags into an unmarked skb, ESP can\nsee skb_has_shared_frag() as false and decrypt in place over page-cache\nbacked frags.\n\nPropagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged\nfrags. The tailroom copy path does not need the marker because it copies\nbytes into @to's linear data rather than transferring frag descriptors.
|
||||
</code>
|
||||
|
||||
- [HORKimhab/CVE-2026-46300](https://github.com/HORKimhab/CVE-2026-46300)
|
||||
@@ -15236,7 +15242,7 @@
|
||||
- [c0d3zilla/CVE-2024-2876](https://github.com/c0d3zilla/CVE-2024-2876)
|
||||
- [chsxthwik/CVE-2024-2876](https://github.com/chsxthwik/CVE-2024-2876)
|
||||
- [0xAgun/CVE-2024-2876](https://github.com/0xAgun/CVE-2024-2876)
|
||||
- [voidbroker/CVE-2024-2876](https://github.com/voidbroker/CVE-2024-2876)
|
||||
- [kernel364/CVE-2024-2876](https://github.com/kernel364/CVE-2024-2876)
|
||||
|
||||
### CVE-2024-2879 (2024-04-03)
|
||||
|
||||
@@ -16574,7 +16580,7 @@
|
||||
|
||||
- [rxerium/CVE-2024-7593](https://github.com/rxerium/CVE-2024-7593)
|
||||
- [D3N14LD15K/CVE-2024-7593_PoC_Exploit](https://github.com/D3N14LD15K/CVE-2024-7593_PoC_Exploit)
|
||||
- [voidbroker/CVE-2024-7593](https://github.com/voidbroker/CVE-2024-7593)
|
||||
- [kernel364/CVE-2024-7593](https://github.com/kernel364/CVE-2024-7593)
|
||||
|
||||
### CVE-2024-7595 (2025-02-05)
|
||||
|
||||
@@ -19376,7 +19382,7 @@
|
||||
- [LuisMateo1/Arbitrary-File-Read-CVE-2024-24919](https://github.com/LuisMateo1/Arbitrary-File-Read-CVE-2024-24919)
|
||||
- [AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-](https://github.com/AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-)
|
||||
- [geniuszly/CVE-2024-24919](https://github.com/geniuszly/CVE-2024-24919)
|
||||
- [voidbroker/CVE-2024-24919](https://github.com/voidbroker/CVE-2024-24919)
|
||||
- [kernel364/CVE-2024-24919](https://github.com/kernel364/CVE-2024-24919)
|
||||
- [sar-3mar/CVE-2024-24919_POC](https://github.com/sar-3mar/CVE-2024-24919_POC)
|
||||
- [NingXin2002/Check-Point_poc](https://github.com/NingXin2002/Check-Point_poc)
|
||||
- [hashdr1ft/SOC_287](https://github.com/hashdr1ft/SOC_287)
|
||||
@@ -20384,7 +20390,7 @@
|
||||
- [NanoWraith/CVE-2024-29973](https://github.com/NanoWraith/CVE-2024-29973)
|
||||
- [p0et08/CVE-2024-29973](https://github.com/p0et08/CVE-2024-29973)
|
||||
- [RevoltSecurities/CVE-2024-29973](https://github.com/RevoltSecurities/CVE-2024-29973)
|
||||
- [voidbroker/CVE-2024-29973](https://github.com/voidbroker/CVE-2024-29973)
|
||||
- [kernel364/CVE-2024-29973](https://github.com/kernel364/CVE-2024-29973)
|
||||
|
||||
### CVE-2024-29988 (2024-04-09)
|
||||
|
||||
@@ -23086,7 +23092,6 @@
|
||||
|
||||
- [ifpdz/CVE-2024-44258](https://github.com/ifpdz/CVE-2024-44258)
|
||||
- [missaels235/POC-CVE-2024-44258-Py](https://github.com/missaels235/POC-CVE-2024-44258-Py)
|
||||
- [fuzzlove/SparstanBoogie-CVE-2024-44258](https://github.com/fuzzlove/SparstanBoogie-CVE-2024-44258)
|
||||
|
||||
### CVE-2024-44285 (2024-10-28)
|
||||
|
||||
@@ -25273,6 +25278,13 @@
|
||||
|
||||
- [RandomRobbieBF/CVE-2024-55982](https://github.com/RandomRobbieBF/CVE-2024-55982)
|
||||
|
||||
### CVE-2024-55988 (2024-12-16)
|
||||
|
||||
<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amol Nirmala Waman Navayan CSV Export navayan-csv-export allows Blind SQL Injection.This issue affects Navayan CSV Export: from n/a through <= 1.0.9.
|
||||
</code>
|
||||
|
||||
- [RandomRobbieBF/CVE-2024-55988](https://github.com/RandomRobbieBF/CVE-2024-55988)
|
||||
|
||||
### CVE-2024-56058 (2024-12-18)
|
||||
|
||||
<code>Deserialization of Untrusted Data vulnerability in denniskravetstns VRPConnector vrpconnector allows Object Injection.This issue affects VRPConnector: from n/a through <= 2.0.1.
|
||||
@@ -27837,6 +27849,7 @@
|
||||
</code>
|
||||
|
||||
- [c-sprinks/bitlocker-bypass-research](https://github.com/c-sprinks/bitlocker-bypass-research)
|
||||
- [LR2006-Robot/bitpixie](https://github.com/LR2006-Robot/bitpixie)
|
||||
|
||||
### CVE-2023-21608 (2023-01-18)
|
||||
|
||||
@@ -31167,13 +31180,6 @@
|
||||
- [SpiralBL0CK/-CVE-2023-35985](https://github.com/SpiralBL0CK/-CVE-2023-35985)
|
||||
- [N00BIER/CVE-2023-35985](https://github.com/N00BIER/CVE-2023-35985)
|
||||
|
||||
### CVE-2023-36003 (2023-12-12)
|
||||
|
||||
<code>XAML Diagnostics Elevation of Privilege Vulnerability
|
||||
</code>
|
||||
|
||||
- [m417z/CVE-2023-36003-POC](https://github.com/m417z/CVE-2023-36003-POC)
|
||||
|
||||
### CVE-2023-36025 (2023-11-14)
|
||||
|
||||
<code>Windows SmartScreen Security Feature Bypass Vulnerability
|
||||
@@ -55982,7 +55988,7 @@
|
||||
|
||||
- [fs0c131y/ESFileExplorerOpenPortVuln](https://github.com/fs0c131y/ESFileExplorerOpenPortVuln)
|
||||
- [SandaRuFdo/ES-File-Explorer-Open-Port-Vulnerability---CVE-2019-6447](https://github.com/SandaRuFdo/ES-File-Explorer-Open-Port-Vulnerability---CVE-2019-6447)
|
||||
- [Nehal-Zaman/CVE-2019-6447](https://github.com/Nehal-Zaman/CVE-2019-6447)
|
||||
- [shadowedcreds/CVE-2019-6447](https://github.com/shadowedcreds/CVE-2019-6447)
|
||||
- [h3x0v3rl0rd/CVE-2019-6447](https://github.com/h3x0v3rl0rd/CVE-2019-6447)
|
||||
- [julio-cfa/POC-ES-File-Explorer-CVE-2019-6447](https://github.com/julio-cfa/POC-ES-File-Explorer-CVE-2019-6447)
|
||||
- [febinrev/CVE-2019-6447-ESfile-explorer-exploit](https://github.com/febinrev/CVE-2019-6447-ESfile-explorer-exploit)
|
||||
@@ -61632,6 +61638,7 @@
|
||||
- [nivdolgin/CVE-2018-13379](https://github.com/nivdolgin/CVE-2018-13379)
|
||||
- [kh4sh3i/CVE-2018-13379](https://github.com/kh4sh3i/CVE-2018-13379)
|
||||
- [Zierax/CVE-2018-13379](https://github.com/Zierax/CVE-2018-13379)
|
||||
- [Instructor-Admin/Multi-threaded-mass-exploiter-CVE-2018-13379-POC](https://github.com/Instructor-Admin/Multi-threaded-mass-exploiter-CVE-2018-13379-POC)
|
||||
|
||||
### CVE-2018-13382 (2019-06-04)
|
||||
|
||||
@@ -70014,6 +70021,7 @@
|
||||
- [Taisa456/network-security-snort](https://github.com/Taisa456/network-security-snort)
|
||||
- [ByteForgeFr/CVE-2011-2523](https://github.com/ByteForgeFr/CVE-2011-2523)
|
||||
- [Jhatchi/NexaCorp-DFIR-INC-2026-001](https://github.com/Jhatchi/NexaCorp-DFIR-INC-2026-001)
|
||||
- [Chathura123git/ethical-hacking-CVE-2011-2523](https://github.com/Chathura123git/ethical-hacking-CVE-2011-2523)
|
||||
|
||||
### CVE-2011-2553
|
||||
- [carlosrpastrana/cve-2011-2553](https://github.com/carlosrpastrana/cve-2011-2553)
|
||||
|
||||
Reference in new issue
Block a user