diff --git a/2019/CVE-2019-1405.json b/2019/CVE-2019-1405.json index 58f0201028..9ccee84117 100644 --- a/2019/CVE-2019-1405.json +++ b/2019/CVE-2019-1405.json @@ -14,10 +14,10 @@ "description": "Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322", "fork": false, "created_at": "2019-11-13T16:34:03Z", - "updated_at": "2026-09-15T19:42:59Z", + "updated_at": "2026-09-24T07:16:05Z", "pushed_at": "2019-11-14T14:16:54Z", - "stargazers_count": 346, - "watchers_count": 346, + "stargazers_count": 345, + "watchers_count": 345, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 72, - "watchers": 346, + "watchers": 345, "score": 0, "subscribers_count": 9 } diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index 32ea16a121..945a9b9dbd 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -1688,10 +1688,10 @@ "description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection", "fork": false, "created_at": "2020-06-10T16:44:39Z", - "updated_at": "2026-09-19T17:52:36Z", + "updated_at": "2026-09-24T07:16:08Z", "pushed_at": "2022-03-30T14:02:04Z", - "stargazers_count": 359, - "watchers_count": 359, + "stargazers_count": 358, + "watchers_count": 358, "has_discussions": false, "forks_count": 49, "allow_forking": true, @@ -1702,7 +1702,7 @@ "topics": [], "visibility": "public", "forks": 49, - "watchers": 359, + "watchers": 358, "score": 0, "subscribers_count": 6 }, diff --git a/2020/CVE-2020-12695.json b/2020/CVE-2020-12695.json index dca2f6026c..21e84d1eeb 100644 --- a/2020/CVE-2020-12695.json +++ b/2020/CVE-2020-12695.json @@ -19,7 +19,7 @@ "stargazers_count": 403, "watchers_count": 403, "has_discussions": false, - "forks_count": 62, + "forks_count": 61, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 62, + "forks": 61, "watchers": 403, "score": 0, "subscribers_count": 10 diff --git a/2021/CVE-2021-21972.json b/2021/CVE-2021-21972.json index 038aedbb59..21cb3ce3b5 100644 --- a/2021/CVE-2021-21972.json +++ b/2021/CVE-2021-21972.json @@ -836,10 +836,10 @@ "description": "一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972\/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接", "fork": false, "created_at": "2022-10-04T03:39:27Z", - "updated_at": "2026-09-17T02:56:15Z", + "updated_at": "2026-09-24T09:54:25Z", "pushed_at": "2024-04-25T06:09:38Z", - "stargazers_count": 1481, - "watchers_count": 1481, + "stargazers_count": 1482, + "watchers_count": 1482, "has_discussions": false, "forks_count": 163, "allow_forking": true, @@ -857,7 +857,7 @@ ], "visibility": "public", "forks": 163, - "watchers": 1481, + "watchers": 1482, "score": 0, "subscribers_count": 14 }, diff --git a/2021/CVE-2021-26084.json b/2021/CVE-2021-26084.json index 98bb9f7837..14c6565520 100644 --- a/2021/CVE-2021-26084.json +++ b/2021/CVE-2021-26084.json @@ -151,7 +151,7 @@ "stargazers_count": 316, "watchers_count": 316, "has_discussions": false, - "forks_count": 79, + "forks_count": 78, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 79, + "forks": 78, "watchers": 316, "score": 0, "subscribers_count": 2 diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index fd9bab43c2..672f4b4fd1 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -14,10 +14,10 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2021-10-11T22:08:47Z", - "updated_at": "2026-09-23T05:43:55Z", + "updated_at": "2026-09-24T08:52:46Z", "pushed_at": "2026-07-03T15:44:27Z", - "stargazers_count": 197, - "watchers_count": 197, + "stargazers_count": 198, + "watchers_count": 198, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 197, + "watchers": 198, "score": 0, "subscribers_count": 9 }, diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json index 9d6fd57497..ff1d69f0bb 100644 --- a/2021/CVE-2021-36260.json +++ b/2021/CVE-2021-36260.json @@ -47,10 +47,10 @@ "description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.", "fork": false, "created_at": "2021-10-27T15:51:12Z", - "updated_at": "2026-09-18T18:38:12Z", + "updated_at": "2026-09-24T12:17:56Z", "pushed_at": "2021-10-28T06:37:37Z", - "stargazers_count": 301, - "watchers_count": 301, + "stargazers_count": 302, + "watchers_count": 302, "has_discussions": false, "forks_count": 79, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 79, - "watchers": 301, + "watchers": 302, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index aa33878def..2978508b2e 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -935,10 +935,10 @@ "description": "🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks", "fork": false, "created_at": "2021-12-10T22:35:00Z", - "updated_at": "2026-09-18T10:00:04Z", + "updated_at": "2026-09-24T07:16:13Z", "pushed_at": "2022-01-15T16:18:44Z", - "stargazers_count": 949, - "watchers_count": 949, + "stargazers_count": 948, + "watchers_count": 948, "has_discussions": false, "forks_count": 133, "allow_forking": true, @@ -969,7 +969,7 @@ ], "visibility": "public", "forks": 133, - "watchers": 949, + "watchers": 948, "score": 0, "subscribers_count": 22 }, diff --git a/2022/CVE-2022-22954.json b/2022/CVE-2022-22954.json index 0aea7a495a..55a6dd3604 100644 --- a/2022/CVE-2022-22954.json +++ b/2022/CVE-2022-22954.json @@ -809,10 +809,10 @@ "description": "一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972\/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接", "fork": false, "created_at": "2022-10-04T03:39:27Z", - "updated_at": "2026-09-17T02:56:15Z", + "updated_at": "2026-09-24T09:54:25Z", "pushed_at": "2024-04-25T06:09:38Z", - "stargazers_count": 1481, - "watchers_count": 1481, + "stargazers_count": 1482, + "watchers_count": 1482, "has_discussions": false, "forks_count": 163, "allow_forking": true, @@ -830,7 +830,7 @@ ], "visibility": "public", "forks": 163, - "watchers": 1481, + "watchers": 1482, "score": 0, "subscribers_count": 14 }, diff --git a/2023/CVE-2023-21036.json b/2023/CVE-2023-21036.json index 70000727d6..ac20491e9e 100644 --- a/2023/CVE-2023-21036.json +++ b/2023/CVE-2023-21036.json @@ -54,10 +54,10 @@ "description": "Detection and sanitization for Acropalypse Now - CVE-2023-21036", "fork": false, "created_at": "2023-03-22T14:59:42Z", - "updated_at": "2026-06-02T12:40:16Z", + "updated_at": "2026-09-24T07:16:20Z", "pushed_at": "2023-05-15T12:12:33Z", - "stargazers_count": 81, - "watchers_count": 81, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -68,7 +68,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 81, + "watchers": 80, "score": 0, "subscribers_count": 9 }, diff --git a/2023/CVE-2023-21752.json b/2023/CVE-2023-21752.json index f1f8259869..c0f5f128d0 100644 --- a/2023/CVE-2023-21752.json +++ b/2023/CVE-2023-21752.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2023-01-10T15:59:26Z", - "updated_at": "2026-08-18T21:26:43Z", + "updated_at": "2026-09-24T07:16:18Z", "pushed_at": "2023-01-13T09:01:20Z", - "stargazers_count": 328, - "watchers_count": 328, + "stargazers_count": 327, + "watchers_count": 327, "has_discussions": false, "forks_count": 60, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 60, - "watchers": 328, + "watchers": 327, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index fd03d58944..51b93c7704 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-09-22T06:44:03Z", - "pushed_at": "2026-09-22T06:43:59Z", + "updated_at": "2026-09-24T12:30:10Z", + "pushed_at": "2026-09-24T12:30:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-32002.json b/2024/CVE-2024-32002.json index 2bc2f5b4ac..180c39141c 100644 --- a/2024/CVE-2024-32002.json +++ b/2024/CVE-2024-32002.json @@ -80,10 +80,10 @@ "description": "Exploit PoC for CVE-2024-32002", "fork": false, "created_at": "2024-05-17T19:33:08Z", - "updated_at": "2026-09-13T20:29:40Z", + "updated_at": "2026-09-24T07:16:28Z", "pushed_at": "2024-05-19T07:12:00Z", - "stargazers_count": 533, - "watchers_count": 533, + "stargazers_count": 532, + "watchers_count": 532, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -99,7 +99,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 533, + "watchers": 532, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-32022.json b/2024/CVE-2024-32022.json index 4250b91850..8a59efd07e 100644 --- a/2024/CVE-2024-32022.json +++ b/2024/CVE-2024-32022.json @@ -14,10 +14,10 @@ "description": "Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022", "fork": false, "created_at": "2025-09-22T16:44:32Z", - "updated_at": "2026-09-23T12:57:24Z", + "updated_at": "2026-09-24T12:51:41Z", "pushed_at": "2026-09-23T12:57:20Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 } diff --git a/2024/CVE-2024-4947.json b/2024/CVE-2024-4947.json index d72745e440..b3368bcb1e 100644 --- a/2024/CVE-2024-4947.json +++ b/2024/CVE-2024-4947.json @@ -14,10 +14,10 @@ "description": "A in-the-wild V8 type confusion bug.", "fork": false, "created_at": "2025-07-21T13:02:16Z", - "updated_at": "2026-08-23T23:34:33Z", + "updated_at": "2026-09-24T07:27:56Z", "pushed_at": "2025-08-08T04:59:44Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json index 3d7279bb58..261090bb8a 100644 --- a/2025/CVE-2025-24071.json +++ b/2025/CVE-2025-24071.json @@ -765,8 +765,8 @@ "description": "Dependency-free PoC generator for CVE-2025-24071 — Windows File Explorer .library-ms NTLM hash disclosure via crafted ZIP", "fork": false, "created_at": "2026-09-13T18:30:55Z", - "updated_at": "2026-09-14T15:00:28Z", - "pushed_at": "2026-09-13T18:32:52Z", + "updated_at": "2026-09-24T09:07:31Z", + "pushed_at": "2026-09-24T09:07:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 46788e5198..4949520d26 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-09-22T07:15:37Z", - "pushed_at": "2026-09-22T07:15:33Z", + "updated_at": "2026-09-24T13:01:33Z", + "pushed_at": "2026-09-24T13:01:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index b1c766c14f..4175d79487 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -1496,8 +1496,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-09-22T06:46:06Z", - "pushed_at": "2026-09-22T06:46:02Z", + "updated_at": "2026-09-24T12:32:30Z", + "pushed_at": "2026-09-24T12:32:11Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 15d33d295c..6f17c07a6c 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -86,12 +86,12 @@ "description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.", "fork": false, "created_at": "2026-01-17T05:28:08Z", - "updated_at": "2026-09-24T07:17:05Z", + "updated_at": "2026-09-24T12:15:00Z", "pushed_at": "2026-01-18T00:15:59Z", - "stargazers_count": 848, - "watchers_count": 848, + "stargazers_count": 847, + "watchers_count": 847, "has_discussions": false, - "forks_count": 94, + "forks_count": 93, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -99,8 +99,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 94, - "watchers": 848, + "forks": 93, + "watchers": 847, "score": 0, "subscribers_count": 23 }, diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json index 02e5515e46..deb957f0ab 100644 --- a/2025/CVE-2025-48804.json +++ b/2025/CVE-2025-48804.json @@ -14,10 +14,10 @@ "description": "Downgrade attack for CVE-2025-48804", "fork": false, "created_at": "2026-04-30T13:05:30Z", - "updated_at": "2026-09-20T18:59:18Z", + "updated_at": "2026-09-24T12:15:13Z", "pushed_at": "2026-09-12T18:03:56Z", - "stargazers_count": 241, - "watchers_count": 241, + "stargazers_count": 240, + "watchers_count": 240, "has_discussions": false, "forks_count": 44, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 44, - "watchers": 241, + "watchers": 240, "score": 0, "subscribers_count": 4 } diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 58ec3634da..b806a4e875 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-09-22T06:50:11Z", - "pushed_at": "2026-09-22T06:50:07Z", + "updated_at": "2026-09-24T12:37:40Z", + "pushed_at": "2026-09-24T12:36:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index dc1d05ea30..ee9cae8885 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-09-24T02:21:31Z", + "updated_at": "2026-09-24T13:03:36Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 955, - "watchers_count": 955, + "stargazers_count": 956, + "watchers_count": 956, "has_discussions": false, "forks_count": 140, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 140, - "watchers": 955, + "watchers": 956, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-54957.json b/2025/CVE-2025-54957.json index 9d3b337d87..f4c7db17da 100644 --- a/2025/CVE-2025-54957.json +++ b/2025/CVE-2025-54957.json @@ -19,7 +19,7 @@ "stargazers_count": 20, "watchers_count": 20, "has_discussions": false, - "forks_count": 8, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, + "forks": 9, "watchers": 20, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 80c21c46e7..7ab8d67366 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-09-23T05:30:51Z", + "updated_at": "2026-09-24T09:19:36Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2452, - "watchers_count": 2452, + "stargazers_count": 2451, + "watchers_count": 2451, "has_discussions": false, "forks_count": 269, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 269, - "watchers": 2452, + "watchers": 2451, "score": 0, "subscribers_count": 11 }, @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-09-21T12:54:19Z", + "updated_at": "2026-09-24T09:19:36Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1431, - "watchers_count": 1431, + "stargazers_count": 1430, + "watchers_count": 1430, "has_discussions": false, "forks_count": 198, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 198, - "watchers": 1431, + "watchers": 1430, "score": 0, "subscribers_count": 10 }, @@ -9481,10 +9481,10 @@ "description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)", "fork": false, "created_at": "2025-12-12T11:31:45Z", - "updated_at": "2026-09-23T11:30:51Z", + "updated_at": "2026-09-24T10:11:21Z", "pushed_at": "2025-12-12T11:52:59Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -9503,7 +9503,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 56, + "watchers": 55, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 23733b23c5..a4e3d89063 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-09-22T06:57:46Z", - "pushed_at": "2026-09-22T06:57:41Z", + "updated_at": "2026-09-24T12:44:00Z", + "pushed_at": "2026-09-24T12:43:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index 1ce4df8e98..8a10a53921 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-09-22T07:02:52Z", - "pushed_at": "2026-09-22T07:02:48Z", + "updated_at": "2026-09-24T12:49:05Z", + "pushed_at": "2026-09-24T12:49:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-7771.json b/2025/CVE-2025-7771.json index 6ec5491caa..b98de7f6c2 100644 --- a/2025/CVE-2025-7771.json +++ b/2025/CVE-2025-7771.json @@ -390,7 +390,7 @@ "subscribers_count": 0 }, { - "id": 1384956061, + "id": 1384963855, "name": "CVE-2025-7771", "full_name": "yulisec\/CVE-2025-7771", "owner": { @@ -403,11 +403,11 @@ "html_url": "https:\/\/github.com\/yulisec\/CVE-2025-7771", "description": null, "fork": false, - "created_at": "2026-09-24T07:30:52Z", - "updated_at": "2026-09-24T07:32:40Z", - "pushed_at": "2026-09-24T07:32:36Z", - "stargazers_count": 0, - "watchers_count": 0, + "created_at": "2026-09-24T07:35:25Z", + "updated_at": "2026-09-24T08:08:55Z", + "pushed_at": "2026-09-24T07:36:09Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -418,7 +418,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index a0abdcb46a..9c84fb5eef 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -603,7 +603,7 @@ "stargazers_count": 50, "watchers_count": 50, "has_discussions": false, - "forks_count": 18, + "forks_count": 19, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -611,7 +611,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 18, + "forks": 19, "watchers": 50, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-1357.json b/2026/CVE-2026-1357.json index 253ba7295a..138529888c 100644 --- a/2026/CVE-2026-1357.json +++ b/2026/CVE-2026-1357.json @@ -313,10 +313,10 @@ "description": null, "fork": false, "created_at": "2026-08-29T19:38:29Z", - "updated_at": "2026-08-29T20:20:39Z", + "updated_at": "2026-09-24T13:03:38Z", "pushed_at": "2026-08-29T20:20:35Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -327,7 +327,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-15015.json b/2026/CVE-2026-15015.json new file mode 100644 index 0000000000..0a781d6249 --- /dev/null +++ b/2026/CVE-2026-15015.json @@ -0,0 +1,35 @@ +[ + { + "id": 1385272580, + "name": "wp-secure-mcp", + "full_name": "les-k\/wp-secure-mcp", + "owner": { + "login": "les-k", + "id": 119639920, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119639920?v=4", + "html_url": "https:\/\/github.com\/les-k", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/les-k\/wp-secure-mcp", + "description": "A WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by never having that surface at all.", + "fork": false, + "created_at": "2026-09-24T10:45:37Z", + "updated_at": "2026-09-24T10:53:30Z", + "pushed_at": "2026-09-24T10:53:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index b6f6d87aee..14b9ce579c 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-09-22T07:08:35Z", - "pushed_at": "2026-09-22T07:08:31Z", + "updated_at": "2026-09-24T12:54:27Z", + "pushed_at": "2026-09-24T12:54:23Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-22732.json b/2026/CVE-2026-22732.json index 797b990820..c61b76fbd7 100644 --- a/2026/CVE-2026-22732.json +++ b/2026/CVE-2026-22732.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-04-15T02:08:40Z", - "updated_at": "2026-09-02T11:57:35Z", - "pushed_at": "2026-09-02T11:52:13Z", + "updated_at": "2026-09-24T08:55:08Z", + "pushed_at": "2026-09-24T08:55:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 274d2f30c7..a6e9faf4c0 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -80,8 +80,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-09-22T22:56:32Z", - "pushed_at": "2026-09-22T07:13:59Z", + "updated_at": "2026-09-24T12:59:59Z", + "pushed_at": "2026-09-24T12:59:55Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index e0921d29b9..cbc63ec12d 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -65,8 +65,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-09-22T07:10:30Z", - "pushed_at": "2026-09-22T07:10:26Z", + "updated_at": "2026-09-24T12:56:28Z", + "pushed_at": "2026-09-24T12:56:25Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-3008.json b/2026/CVE-2026-3008.json index 367312e33e..91ba910ef2 100644 --- a/2026/CVE-2026-3008.json +++ b/2026/CVE-2026-3008.json @@ -14,10 +14,10 @@ "description": "repo for cve-2026-3008", "fork": false, "created_at": "2026-04-20T12:16:23Z", - "updated_at": "2026-07-07T09:38:17Z", + "updated_at": "2026-09-24T07:58:48Z", "pushed_at": "2026-04-20T12:23:25Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 07b1c1bdd0..43861bd214 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-09-23T22:27:57Z", + "updated_at": "2026-09-24T12:53:37Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4071, - "watchers_count": 4071, + "stargazers_count": 4072, + "watchers_count": 4072, "has_discussions": false, "forks_count": 912, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 912, - "watchers": 4071, + "watchers": 4072, "score": 0, "subscribers_count": 34 }, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 3822bdc1ee..6f9e205ccb 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-09-24T02:21:31Z", + "updated_at": "2026-09-24T13:03:36Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 955, - "watchers_count": 955, + "stargazers_count": 956, + "watchers_count": 956, "has_discussions": false, "forks_count": 140, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 140, - "watchers": 955, + "watchers": 956, "score": 0, "subscribers_count": 22 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 78f083ac1a..01438dbfee 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -183,10 +183,10 @@ "description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation", "fork": false, "created_at": "2026-07-09T22:46:15Z", - "updated_at": "2026-09-16T12:47:38Z", + "updated_at": "2026-09-24T12:16:48Z", "pushed_at": "2026-09-08T15:56:53Z", - "stargazers_count": 65, - "watchers_count": 65, + "stargazers_count": 64, + "watchers_count": 64, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -197,7 +197,7 @@ "topics": [], "visibility": "public", "forks": 27, - "watchers": 65, + "watchers": 64, "score": 0, "subscribers_count": 1 }, @@ -348,12 +348,12 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-09-24T05:41:11Z", + "updated_at": "2026-09-24T13:00:45Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 357, - "watchers_count": 357, + "stargazers_count": 359, + "watchers_count": 359, "has_discussions": false, - "forks_count": 86, + "forks_count": 87, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -368,8 +368,8 @@ "root" ], "visibility": "public", - "forks": 86, - "watchers": 357, + "forks": 87, + "watchers": 359, "score": 0, "subscribers_count": 11 }, @@ -553,10 +553,10 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-09-23T07:39:48Z", + "updated_at": "2026-09-24T12:31:23Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 101, - "watchers_count": 101, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -567,7 +567,7 @@ "topics": [], "visibility": "public", "forks": 30, - "watchers": 101, + "watchers": 102, "score": 0, "subscribers_count": 0 }, @@ -1048,10 +1048,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-09-24T06:29:34Z", + "updated_at": "2026-09-24T12:16:49Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1273, - "watchers_count": 1273, + "stargazers_count": 1275, + "watchers_count": 1275, "has_discussions": false, "forks_count": 254, "allow_forking": true, @@ -1062,7 +1062,7 @@ "topics": [], "visibility": "public", "forks": 254, - "watchers": 1273, + "watchers": 1275, "score": 0, "subscribers_count": 38 }, @@ -1694,12 +1694,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-09-24T07:20:52Z", + "updated_at": "2026-09-24T12:06:40Z", "pushed_at": "2026-09-23T19:08:05Z", - "stargazers_count": 1057, - "watchers_count": 1057, + "stargazers_count": 1062, + "watchers_count": 1062, "has_discussions": false, - "forks_count": 327, + "forks_count": 332, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1707,8 +1707,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 327, - "watchers": 1057, + "forks": 332, + "watchers": 1062, "score": 0, "subscribers_count": 15 }, @@ -2773,10 +2773,10 @@ "description": "KSuRoot 3.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。新增「载荷构建」:用本机 boot.img 解析内核偏移并打出适配本机的载荷(通用方案 \/ vivo 专用);内核 6.6+ 免 ADB;内置载荷固定上游 v1.0.0。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-09-24T04:58:44Z", + "updated_at": "2026-09-24T11:27:53Z", "pushed_at": "2026-09-24T04:58:38Z", - "stargazers_count": 111, - "watchers_count": 111, + "stargazers_count": 113, + "watchers_count": 113, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -2787,7 +2787,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 111, + "watchers": 113, "score": 0, "subscribers_count": 1 }, @@ -3400,10 +3400,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-09-24T06:30:37Z", + "updated_at": "2026-09-24T09:44:56Z", "pushed_at": "2026-09-22T14:21:26Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -3414,7 +3414,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 0 }, @@ -4672,8 +4672,8 @@ "description": "GhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS \/ Android 16, kernel 5.15.170)", "fork": false, "created_at": "2026-09-23T04:09:51Z", - "updated_at": "2026-09-24T04:25:17Z", - "pushed_at": "2026-09-24T04:21:02Z", + "updated_at": "2026-09-24T10:29:54Z", + "pushed_at": "2026-09-24T10:33:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-62878.json b/2026/CVE-2026-62878.json index 911d010239..90ad144060 100644 --- a/2026/CVE-2026-62878.json +++ b/2026/CVE-2026-62878.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-09-24T01:34:28Z", - "updated_at": "2026-09-24T04:19:51Z", - "pushed_at": "2026-09-24T04:19:47Z", + "updated_at": "2026-09-24T13:32:55Z", + "pushed_at": "2026-09-24T13:32:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index ae242837d7..a69cb361b7 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-09-24T07:32:56Z", + "updated_at": "2026-09-24T12:31:17Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 778, - "watchers_count": 778, + "stargazers_count": 779, + "watchers_count": 779, "has_discussions": false, "forks_count": 174, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 174, - "watchers": 778, + "watchers": 779, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-64561.json b/2026/CVE-2026-64561.json index 7238d5d841..b17851e8d0 100644 --- a/2026/CVE-2026-64561.json +++ b/2026/CVE-2026-64561.json @@ -80,8 +80,8 @@ "description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.", "fork": false, "created_at": "2026-08-07T15:51:07Z", - "updated_at": "2026-09-22T07:28:51Z", - "pushed_at": "2026-09-22T07:28:47Z", + "updated_at": "2026-09-24T13:14:53Z", + "pushed_at": "2026-09-24T13:14:49Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-65349.json b/2026/CVE-2026-65349.json index b59383e91d..eb228744f3 100644 --- a/2026/CVE-2026-65349.json +++ b/2026/CVE-2026-65349.json @@ -14,10 +14,10 @@ "description": "CVE-2026-65349 PoC — getattrlist OOB write in vfs_attr_pack_internal (iOS 26.6 \/ 23G71)", "fork": false, "created_at": "2026-09-02T20:12:31Z", - "updated_at": "2026-09-04T05:59:51Z", + "updated_at": "2026-09-24T08:59:46Z", "pushed_at": "2026-09-04T05:58:47Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-66804.json b/2026/CVE-2026-66804.json index bbc7f442cb..5352c37ea1 100644 --- a/2026/CVE-2026-66804.json +++ b/2026/CVE-2026-66804.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2026-07-23T11:51:53Z", - "updated_at": "2026-09-20T16:13:34Z", + "updated_at": "2026-09-24T10:33:28Z", "pushed_at": "2026-08-11T18:49:46Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-67401.json b/2026/CVE-2026-67401.json index 1246e8f22e..18033ace8a 100644 --- a/2026/CVE-2026-67401.json +++ b/2026/CVE-2026-67401.json @@ -134,10 +134,10 @@ "description": "PoC for CVE-2026-67401 — cPanel\/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.", "fork": false, "created_at": "2026-09-17T06:53:22Z", - "updated_at": "2026-09-24T05:44:32Z", + "updated_at": "2026-09-24T12:05:14Z", "pushed_at": "2026-09-17T07:07:05Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -161,7 +161,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-78306.json b/2026/CVE-2026-78306.json index 91430a6b9e..89ff98c87f 100644 --- a/2026/CVE-2026-78306.json +++ b/2026/CVE-2026-78306.json @@ -14,12 +14,12 @@ "description": "DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306", "fork": false, "created_at": "2026-09-20T14:50:46Z", - "updated_at": "2026-09-24T05:24:49Z", - "pushed_at": "2026-09-23T18:39:09Z", + "updated_at": "2026-09-24T13:42:51Z", + "pushed_at": "2026-09-24T13:42:47Z", "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,9 +27,42 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 9, "score": 0, "subscribers_count": 0 + }, + { + "id": 1385260812, + "name": "Dji_ble_vuln", + "full_name": "FEEDBEEF\/Dji_ble_vuln", + "owner": { + "login": "FEEDBEEF", + "id": 12217486, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12217486?v=4", + "html_url": "https:\/\/github.com\/FEEDBEEF", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/FEEDBEEF\/Dji_ble_vuln", + "description": "DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306", + "fork": false, + "created_at": "2026-09-24T10:36:32Z", + "updated_at": "2026-09-24T10:38:06Z", + "pushed_at": "2026-09-23T18:39:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-80521.json b/2026/CVE-2026-80521.json index 32a8d5dd4a..7b37015dc7 100644 --- a/2026/CVE-2026-80521.json +++ b/2026/CVE-2026-80521.json @@ -14,12 +14,12 @@ "description": "container escape POCs for CVE-2026-80521 and CVE-2026-52910", "fork": false, "created_at": "2026-09-16T21:04:26Z", - "updated_at": "2026-09-24T07:32:03Z", + "updated_at": "2026-09-24T13:19:21Z", "pushed_at": "2026-09-22T19:41:59Z", - "stargazers_count": 29, - "watchers_count": 29, + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, - "forks_count": 8, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, - "watchers": 29, + "forks": 9, + "watchers": 33, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-84543.json b/2026/CVE-2026-84543.json index 321ed81f2c..33a472d1a2 100644 --- a/2026/CVE-2026-84543.json +++ b/2026/CVE-2026-84543.json @@ -14,10 +14,10 @@ "description": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability", "fork": false, "created_at": "2026-09-24T00:22:30Z", - "updated_at": "2026-09-24T07:20:49Z", + "updated_at": "2026-09-24T12:51:58Z", "pushed_at": "2026-09-24T02:56:43Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 17, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-85046.json b/2026/CVE-2026-85046.json index ad58af1889..79e03a6986 100644 --- a/2026/CVE-2026-85046.json +++ b/2026/CVE-2026-85046.json @@ -179,10 +179,10 @@ "description": "CVE-2026-85046 | Chrome V8 Type Confusion in Inline Array.prototype.sort (Maglev\/Turbofan) | CVSS 8.8 | CWE-843 | Chrome < 152.0.7977.82", "fork": false, "created_at": "2026-09-08T19:18:57Z", - "updated_at": "2026-09-19T18:25:32Z", + "updated_at": "2026-09-24T10:19:25Z", "pushed_at": "2026-09-08T19:19:04Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-86060.json b/2026/CVE-2026-86060.json index b84279a09e..de013642cf 100644 --- a/2026/CVE-2026-86060.json +++ b/2026/CVE-2026-86060.json @@ -47,10 +47,10 @@ "description": "cve-2026-86060 PoC", "fork": false, "created_at": "2026-09-22T13:23:54Z", - "updated_at": "2026-09-23T12:52:36Z", + "updated_at": "2026-09-24T08:52:21Z", "pushed_at": "2026-09-23T12:50:46Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-87902.json b/2026/CVE-2026-87902.json index 9e090bc3c8..ecb7ad0e46 100644 --- a/2026/CVE-2026-87902.json +++ b/2026/CVE-2026-87902.json @@ -47,10 +47,10 @@ "description": "Unauthenticated RCE on Wordpress", "fork": false, "created_at": "2026-09-22T18:32:56Z", - "updated_at": "2026-09-23T23:54:14Z", + "updated_at": "2026-09-24T09:54:04Z", "pushed_at": "2026-09-23T18:53:01Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -69,7 +69,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -88,12 +88,12 @@ "description": "PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab", "fork": false, "created_at": "2026-09-22T18:40:26Z", - "updated_at": "2026-09-24T06:30:33Z", + "updated_at": "2026-09-24T11:48:18Z", "pushed_at": "2026-09-22T19:36:48Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 29, + "watchers_count": 29, "has_discussions": false, - "forks_count": 3, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -110,8 +110,8 @@ "wordpress" ], "visibility": "public", - "forks": 3, - "watchers": 27, + "forks": 5, + "watchers": 29, "score": 0, "subscribers_count": 1 }, @@ -163,10 +163,10 @@ "description": "Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 \/ GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized\/defensive testing.", "fork": false, "created_at": "2026-09-23T05:20:08Z", - "updated_at": "2026-09-24T02:14:30Z", + "updated_at": "2026-09-24T13:16:20Z", "pushed_at": "2026-09-23T05:20:12Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -177,7 +177,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -328,12 +328,12 @@ "description": "CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red\/Blue Team suite for WordPress 4.7–7.1.1. 🛠️ 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). 🔨 Use Ethically & Authorized Enviorement, Stay Legal <3", "fork": false, "created_at": "2026-09-23T19:21:48Z", - "updated_at": "2026-09-24T04:10:22Z", + "updated_at": "2026-09-24T13:41:10Z", "pushed_at": "2026-09-24T04:10:18Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -362,8 +362,8 @@ "wordpress-vulnerable" ], "visibility": "public", - "forks": 1, - "watchers": 1, + "forks": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-90817.json b/2026/CVE-2026-90817.json index 0dc2765ad0..caebd24e44 100644 --- a/2026/CVE-2026-90817.json +++ b/2026/CVE-2026-90817.json @@ -87,10 +87,10 @@ "description": null, "fork": false, "created_at": "2026-09-24T07:39:38Z", - "updated_at": "2026-09-24T07:40:09Z", + "updated_at": "2026-09-24T08:08:54Z", "pushed_at": "2026-09-24T07:40:05Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -101,7 +101,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-92680.json b/2026/CVE-2026-92680.json index 8a6d51ac96..60cdffb53b 100644 --- a/2026/CVE-2026-92680.json +++ b/2026/CVE-2026-92680.json @@ -14,8 +14,8 @@ "description": "Proof-of-Concept for CVE-2026-92680, the insecurely protected credentials vulnerability affecting Araxis Merge", "fork": false, "created_at": "2026-09-16T23:50:38Z", - "updated_at": "2026-09-23T23:50:30Z", - "pushed_at": "2026-09-23T22:03:15Z", + "updated_at": "2026-09-24T10:38:26Z", + "pushed_at": "2026-09-24T10:38:23Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-92701.json b/2026/CVE-2026-92701.json index 69ac1de3c2..cfe984d5eb 100644 --- a/2026/CVE-2026-92701.json +++ b/2026/CVE-2026-92701.json @@ -14,8 +14,8 @@ "description": "Early Attestation Considered Very Harmful (CVE-2026-92701, CVE-2026-92702, and CVE-2026-33697)", "fork": false, "created_at": "2026-07-06T22:13:03Z", - "updated_at": "2026-09-23T05:59:55Z", - "pushed_at": "2026-09-23T06:02:18Z", + "updated_at": "2026-09-24T07:54:06Z", + "pushed_at": "2026-09-24T12:50:15Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-94545.json b/2026/CVE-2026-94545.json index 240951d368..49afa31a0b 100644 --- a/2026/CVE-2026-94545.json +++ b/2026/CVE-2026-94545.json @@ -47,7 +47,7 @@ "description": "CVE-2026-94545 \/ GHSA-vcvr-r3jv-pc5j — Next.js next\/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.", "fork": false, "created_at": "2026-09-23T14:51:59Z", - "updated_at": "2026-09-24T03:11:22Z", + "updated_at": "2026-09-24T12:15:16Z", "pushed_at": "2026-09-23T16:49:47Z", "stargazers_count": 2, "watchers_count": 2, diff --git a/2026/CVE-2026-96515.json b/2026/CVE-2026-96515.json new file mode 100644 index 0000000000..255ce1cc4c --- /dev/null +++ b/2026/CVE-2026-96515.json @@ -0,0 +1,35 @@ +[ + { + "id": 1385499801, + "name": "CVE-2026-96515", + "full_name": "whoami-012\/CVE-2026-96515", + "owner": { + "login": "whoami-012", + "id": 25679004, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25679004?v=4", + "html_url": "https:\/\/github.com\/whoami-012", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/whoami-012\/CVE-2026-96515", + "description": null, + "fork": false, + "created_at": "2026-09-24T12:54:43Z", + "updated_at": "2026-09-24T13:38:31Z", + "pushed_at": "2026-09-24T13:44:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-9830.json b/2026/CVE-2026-9830.json index d4144bd90c..d14cc68d8a 100644 --- a/2026/CVE-2026-9830.json +++ b/2026/CVE-2026-9830.json @@ -47,10 +47,10 @@ "description": "CVE-2026-9830 Proof of Concept", "fork": false, "created_at": "2026-08-15T20:57:13Z", - "updated_at": "2026-09-24T06:06:39Z", + "updated_at": "2026-09-24T11:28:53Z", "pushed_at": "2026-08-20T21:56:15Z", - "stargazers_count": 569, - "watchers_count": 569, + "stargazers_count": 572, + "watchers_count": 572, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 569, + "watchers": 572, "score": 0, "subscribers_count": 0 }