nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/17 18:53:35

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-18 03:53:35 +09:00
1 parent cbe4aa95d6
commit f2dc2cb857
52 files changed
+500 -481
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2018/CVE-2018-12533.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2025-04-22T19:23:36Z",
"updated_at": "2025-04-22T19:36:09Z",
"updated_at": "2026-06-17T14:16:39Z",
"pushed_at": "2025-04-22T19:36:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-17T11:26:19Z",
"pushed_at": "2026-06-17T11:26:15Z",
"updated_at": "2026-06-17T17:36:54Z",
"pushed_at": "2026-06-17T17:36:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-17T11:58:17Z",
"pushed_at": "2026-06-17T11:58:12Z",
"updated_at": "2026-06-17T18:02:08Z",
"pushed_at": "2026-06-17T17:58:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-8036.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1272471484,
"name": "ENV-CVE-2020-8036",
"full_name": "yan5ui\/ENV-CVE-2020-8036",
"owner": {
"login": "yan5ui",
"id": 107343580,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107343580?v=4",
"html_url": "https:\/\/github.com\/yan5ui",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yan5ui\/ENV-CVE-2020-8036",
"description": "Aritifacts of docker env of CVE-2020-8036",
"fork": false,
"created_at": "2026-06-17T16:32:49Z",
"updated_at": "2026-06-17T16:54:31Z",
"pushed_at": "2026-06-17T16:54:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-17T10:01:03Z",
"pushed_at": "2026-06-17T10:00:48Z",
"updated_at": "2026-06-17T16:53:25Z",
"pushed_at": "2026-06-17T16:53:21Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3975.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1272471992,
"name": "ENV-CVE-2021-3975",
"full_name": "yan5ui\/ENV-CVE-2021-3975",
"owner": {
"login": "yan5ui",
"id": 107343580,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107343580?v=4",
"html_url": "https:\/\/github.com\/yan5ui",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yan5ui\/ENV-CVE-2021-3975",
"description": "Aritifacts of docker env of CVE-2021-3975",
"fork": false,
"created_at": "2026-06-17T16:33:23Z",
"updated_at": "2026-06-17T16:51:18Z",
"pushed_at": "2026-06-17T16:50:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-43891.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
2021/CVE-2021-44228.json
-54
View File
@@ -14015,60 +14015,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1255516094,
"name": "Log4ShellAuditor",
"full_name": "C00LN3T\/Log4ShellAuditor",
"owner": {
"login": "C00LN3T",
"id": 217349927,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217349927?v=4",
"html_url": "https:\/\/github.com\/C00LN3T",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/C00LN3T\/Log4ShellAuditor",
"description": "An autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and compliance reporting for CVE-2021-44228 (Log4Shell).",
"fork": false,
"created_at": "2026-05-31T23:20:17Z",
"updated_at": "2026-06-10T17:31:23Z",
"pushed_at": "2026-06-17T04:48:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": true,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent",
"agentic",
"ai",
"ai-agent",
"audit",
"auto-audit",
"automation",
"autonomous-agent",
"cve-2021-44228",
"cyber-security",
"cybersecurity",
"cybersecurity-tools",
"devsecops",
"golang",
"log4shell",
"oob-verification",
"pentesting",
"remediation",
"security-agent",
"spring"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258372826,
"name": "vulnerable-java-app",
2022/CVE-2022-42864.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition",
"fork": false,
"created_at": "2023-01-19T20:36:49Z",
"updated_at": "2026-06-13T15:59:18Z",
"updated_at": "2026-06-17T16:37:03Z",
"pushed_at": "2023-01-20T17:58:39Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 67,
"watchers": 68,
"score": 0,
"subscribers_count": 4
}
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-06-13T04:20:54Z",
"updated_at": "2026-06-17T14:39:45Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1865,
"watchers_count": 1865,
"stargazers_count": 1866,
"watchers_count": 1866,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1865,
"watchers": 1866,
"score": 0,
"subscribers_count": 29
},
2023/CVE-2023-50226.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Parallels Desktop privilege escalation - CVE-2023-50226 \/ ZDI-CAN-21227",
"fork": false,
"created_at": "2023-10-28T10:29:53Z",
"updated_at": "2024-01-30T20:34:52Z",
"updated_at": "2026-06-17T13:56:42Z",
"pushed_at": "2023-12-31T08:48:26Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-24919.json
+4 -4
View File
@@ -526,10 +526,10 @@
"description": "CVE-2024-24919 exploit",
"fork": false,
"created_at": "2024-05-31T13:11:40Z",
"updated_at": "2025-07-30T16:03:32Z",
"updated_at": "2026-06-17T13:11:12Z",
"pushed_at": "2024-05-31T15:50:57Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -540,7 +540,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-3094.json
+4 -4
View File
@@ -1010,10 +1010,10 @@
"description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)",
"fork": false,
"created_at": "2024-04-01T14:28:09Z",
"updated_at": "2026-06-16T01:05:39Z",
"updated_at": "2026-06-17T13:03:26Z",
"pushed_at": "2024-04-03T04:58:50Z",
"stargazers_count": 3558,
"watchers_count": 3558,
"stargazers_count": 3557,
"watchers_count": 3557,
"has_discussions": false,
"forks_count": 235,
"allow_forking": true,
@@ -1024,7 +1024,7 @@
"topics": [],
"visibility": "public",
"forks": 235,
"watchers": 3558,
"watchers": 3557,
"score": 0,
"subscribers_count": 34
},
2024/CVE-2024-3400.json
+4 -4
View File
@@ -443,10 +443,10 @@
"description": "CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect",
"fork": false,
"created_at": "2024-04-16T21:24:15Z",
"updated_at": "2026-06-06T22:51:08Z",
"updated_at": "2026-06-17T13:13:54Z",
"pushed_at": "2024-04-17T11:03:32Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -457,7 +457,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-38819.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272339591,
"name": "cve-2024-38819-lab",
"full_name": "trevorputbrese\/cve-2024-38819-lab",
"owner": {
"login": "trevorputbrese",
"id": 9751456,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9751456?v=4",
"html_url": "https:\/\/github.com\/trevorputbrese",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/trevorputbrese\/cve-2024-38819-lab",
"description": null,
"fork": false,
"created_at": "2026-06-17T14:11:52Z",
"updated_at": "2026-06-17T14:16:16Z",
"pushed_at": "2026-06-17T14:14:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-4367.json
+1 -1
View File
@@ -229,7 +229,7 @@
"fork": false,
"created_at": "2024-06-17T11:39:41Z",
"updated_at": "2026-06-02T18:17:20Z",
"pushed_at": "2026-06-16T17:44:33Z",
"pushed_at": "2026-06-17T15:10:04Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
2024/CVE-2024-50603.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 913813364,
"name": "CVE-2024-50603",
"full_name": "newlinesec\/CVE-2024-50603",
"owner": {
"login": "newlinesec",
"id": 194232279,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194232279?v=4",
"html_url": "https:\/\/github.com\/newlinesec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/newlinesec\/CVE-2024-50603",
"description": "CVE-2024-50603-nuclei-poc",
"fork": false,
"created_at": "2025-01-08T12:00:38Z",
"updated_at": "2025-08-29T16:34:22Z",
"pushed_at": "2025-01-08T12:08:46Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
{
"id": 915623176,
"name": "CVE-2024-50603",
2024/CVE-2024-53677.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to execute arbitrary code remotely. This vulnerability arises from flaws in the file upload logic, which can be exploited to perform path traversal and malicious file uploads.",
"fork": false,
"created_at": "2024-12-13T17:42:55Z",
"updated_at": "2026-04-24T01:40:46Z",
"updated_at": "2026-06-17T12:51:52Z",
"pushed_at": "2024-12-20T10:05:15Z",
"stargazers_count": 94,
"watchers_count": 94,
"stargazers_count": 95,
"watchers_count": 95,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 94,
"watchers": 95,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-56426.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-06-16T20:54:29Z",
"pushed_at": "2026-06-16T20:54:16Z",
"updated_at": "2026-06-17T16:14:16Z",
"pushed_at": "2026-06-17T16:13:46Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
2025/CVE-2025-24132.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-32433.json
+2 -2
View File
@@ -1249,8 +1249,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-03T05:14:18Z",
"updated_at": "2026-06-16T11:09:51Z",
"pushed_at": "2026-06-16T11:09:46Z",
"updated_at": "2026-06-17T13:21:32Z",
"pushed_at": "2026-06-17T13:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-43529.json
+5 -5
View File
@@ -245,10 +245,10 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-06-16T03:17:42Z",
"pushed_at": "2026-06-15T16:29:50Z",
"stargazers_count": 15,
"watchers_count": 15,
"updated_at": "2026-06-17T18:22:00Z",
"pushed_at": "2026-06-17T15:38:54Z",
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 15,
"watchers": 21,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-17T09:23:36Z",
"updated_at": "2026-06-17T15:19:16Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 800,
"watchers_count": 800,
"stargazers_count": 802,
"watchers_count": 802,
"has_discussions": false,
"forks_count": 119,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 119,
"watchers": 800,
"watchers": 802,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-55182.json
+6 -6
View File
@@ -923,12 +923,12 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-06-16T21:30:45Z",
"updated_at": "2026-06-17T16:25:23Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2452,
"watchers_count": 2452,
"stargazers_count": 2453,
"watchers_count": 2453,
"has_discussions": false,
"forks_count": 268,
"forks_count": 269,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -936,8 +936,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 268,
"watchers": 2452,
"forks": 269,
"watchers": 2453,
"score": 0,
"subscribers_count": 11
},
2025/CVE-2025-57819.json
+4 -4
View File
@@ -224,10 +224,10 @@
"description": "FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.",
"fork": false,
"created_at": "2025-09-12T17:53:32Z",
"updated_at": "2026-06-14T21:25:01Z",
"updated_at": "2026-06-17T18:03:18Z",
"pushed_at": "2025-09-12T17:56:44Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -244,7 +244,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-62215.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-62215 is an Elevation of Privilege (EoP) vulnerability in the Windows Kernel, disclosed in November 2025 and confirmed to be actively exploited as a zero-day.",
"fork": false,
"created_at": "2025-11-14T06:04:02Z",
"updated_at": "2026-05-06T12:55:44Z",
"updated_at": "2026-06-17T13:16:04Z",
"pushed_at": "2025-11-14T06:07:19Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. The exploit uses multithreaded handle manipulation and heap spraying to trigger the flaw under controlled conditions.",
"fork": false,
"created_at": "2025-11-18T16:12:44Z",
"updated_at": "2026-06-17T03:57:31Z",
"updated_at": "2026-06-17T13:33:53Z",
"pushed_at": "2025-11-18T16:34:05Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 15,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0073.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1230308713,
"name": "CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"full_name": "SecTestAnnaQuinn\/CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"owner": {
"login": "SecTestAnnaQuinn",
"id": 88168208,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88168208?v=4",
"html_url": "https:\/\/github.com\/SecTestAnnaQuinn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SecTestAnnaQuinn\/CVE-2026-0073-Android-adbd-authentication-bypass-POC",
"description": null,
"fork": false,
"created_at": "2026-05-05T21:53:08Z",
"updated_at": "2026-06-10T05:06:20Z",
"pushed_at": "2026-05-05T22:11:24Z",
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 77,
"score": 0,
"subscribers_count": 1
},
{
"id": 1231149515,
"name": "CVE-2026-0073",
2026/CVE-2026-20262.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272474868,
"name": "CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-",
"full_name": "fevar54\/CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-",
"owner": {
"login": "fevar54",
"id": 80516843,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80516843?v=4",
"html_url": "https:\/\/github.com\/fevar54",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fevar54\/CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-",
"description": "CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal Vulnerability (CWE-22) - Authenticated Remote File Write",
"fork": false,
"created_at": "2026-06-17T16:36:33Z",
"updated_at": "2026-06-17T16:40:18Z",
"pushed_at": "2026-06-17T16:40:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2256.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "CVE-2026-2256 diagram",
"fork": false,
"created_at": "2026-06-04T01:27:37Z",
"updated_at": "2026-06-04T02:05:47Z",
"pushed_at": "2026-06-04T02:05:43Z",
"updated_at": "2026-06-17T18:03:43Z",
"pushed_at": "2026-06-17T18:01:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-25253.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "470 security tests for AI agent systems — MCP, A2A, x402\/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, CVE-2026-25253 reproduction. v4.4.2",
"fork": false,
"created_at": "2025-11-15T16:04:37Z",
"updated_at": "2026-06-09T22:09:52Z",
"pushed_at": "2026-06-09T22:09:50Z",
"updated_at": "2026-06-17T14:01:03Z",
"pushed_at": "2026-06-17T13:59:08Z",
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": true,
2026/CVE-2026-29000.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1230312536,
"name": "CVE-2026-29000",
"full_name": "zF-tm\/CVE-2026-29000",
"owner": {
"login": "zF-tm",
"id": 73698972,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73698972?v=4",
"html_url": "https:\/\/github.com\/zF-tm",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zF-tm\/CVE-2026-29000",
"description": "PoC of the CVE-2026-29000 ",
"fork": false,
"created_at": "2026-05-05T21:59:34Z",
"updated_at": "2026-05-05T22:13:26Z",
"pushed_at": "2026-05-05T22:13:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236831869,
"name": "CVE-2026-29000-PoC-Exploit",
2026/CVE-2026-31431.json
+4 -37
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -52,7 +52,7 @@
"stargazers_count": 427,
"watchers_count": 427,
"has_discussions": true,
"forks_count": 119,
"forks_count": 120,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -73,7 +73,7 @@
"security-research"
],
"visibility": "public",
"forks": 119,
"forks": 120,
"watchers": 427,
"score": 0,
"subscribers_count": 2
@@ -1452,39 +1452,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1229777395,
"name": "CVE-2026-31431-CopyFail-static-ELF--POC",
"full_name": "Rat5ak\/CVE-2026-31431-CopyFail-static-ELF--POC",
"owner": {
"login": "Rat5ak",
"id": 93318888,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93318888?v=4",
"html_url": "https:\/\/github.com\/Rat5ak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rat5ak\/CVE-2026-31431-CopyFail-static-ELF--POC",
"description": "587-byte x86_64 LPE for CVE-2026-31431",
"fork": false,
"created_at": "2026-05-05T11:26:41Z",
"updated_at": "2026-05-05T22:45:03Z",
"pushed_at": "2026-05-05T22:44:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229911854,
"name": "afalg-check",
2026/CVE-2026-33825.json
-47
View File
@@ -1,51 +1,4 @@
[
{
"id": 1213858543,
"name": "redsun-bluehammer-undefend-detection-pack",
"full_name": "Letlaka\/redsun-bluehammer-undefend-detection-pack",
"owner": {
"login": "Letlaka",
"id": 13654818,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13654818?v=4",
"html_url": "https:\/\/github.com\/Letlaka",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Letlaka\/redsun-bluehammer-undefend-detection-pack",
"description": "Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.",
"fork": false,
"created_at": "2026-04-17T20:52:08Z",
"updated_at": "2026-06-08T04:43:22Z",
"pushed_at": "2026-05-05T20:18:04Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"advanced-hunting",
"bluehammer",
"cve-2026-33825",
"defender-xdr",
"detection-engineering",
"kql-threathunting",
"microsoft-defender",
"microsoft-defender-xdr",
"privilege-escalation",
"redsun",
"threat-detection-windows",
"undefend",
"windows-security"
],
"visibility": "public",
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1242665975,
"name": "CVE-2026-33825",
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-17T12:48:48Z",
"updated_at": "2026-06-17T15:19:16Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 801,
"watchers_count": 801,
"stargazers_count": 802,
"watchers_count": 802,
"has_discussions": false,
"forks_count": 119,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 119,
"watchers": 801,
"watchers": 802,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-36356.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1228291497,
"name": "CVE-2026-36356",
"full_name": "totekuh\/CVE-2026-36356",
"owner": {
"login": "totekuh",
"id": 30957352,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30957352?v=4",
"html_url": "https:\/\/github.com\/totekuh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/totekuh\/CVE-2026-36356",
"description": "CVE-2026-36356: MeiG Smart FORGE_SLT711 GoAhead - Unauthenticated OS Command Injection (RCE as root)",
"fork": false,
"created_at": "2026-05-03T20:57:17Z",
"updated_at": "2026-05-25T11:54:24Z",
"pushed_at": "2026-05-05T22:51:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34220.json → 2026/CVE-2026-36425.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1222132979,
"name": "CVE-2026-34220",
"full_name": "EQSTLab\/CVE-2026-34220",
"id": 1272396502,
"name": "CVE-2026-36425",
"full_name": "redteamfortress\/CVE-2026-36425",
"owner": {
"login": "EQSTLab",
"id": 148991397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
"html_url": "https:\/\/github.com\/EQSTLab",
"login": "redteamfortress",
"id": 285915761,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285915761?v=4",
"html_url": "https:\/\/github.com\/redteamfortress",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-34220",
"description": "SQL Injection vulnerability in MikroORM",
"html_url": "https:\/\/github.com\/redteamfortress\/CVE-2026-36425",
"description": "CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory",
"fork": false,
"created_at": "2026-04-27T04:30:33Z",
"updated_at": "2026-05-06T01:13:24Z",
"pushed_at": "2026-05-06T01:10:59Z",
"created_at": "2026-06-17T15:11:22Z",
"updated_at": "2026-06-17T18:46:37Z",
"pushed_at": "2026-06-17T15:15:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-40369.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-06-16T11:28:00Z",
"updated_at": "2026-06-17T17:24:31Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 247,
"watchers_count": 247,
"stargazers_count": 248,
"watchers_count": 248,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 247,
"watchers": 248,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-41089.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 58,
"forks_count": 57,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"windows-server"
],
"visibility": "public",
"forks": 58,
"forks": 57,
"watchers": 163,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-41091.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41091",
"fork": false,
"created_at": "2026-05-21T19:16:25Z",
"updated_at": "2026-06-08T22:45:01Z",
"updated_at": "2026-06-17T13:02:22Z",
"pushed_at": "2026-05-21T19:28:46Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-41940.json
-33
View File
@@ -342,39 +342,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1230316885,
"name": "cpanel-pwn",
"full_name": "Richflexpix\/cpanel-pwn",
"owner": {
"login": "Richflexpix",
"id": 278217678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278217678?v=4",
"html_url": "https:\/\/github.com\/Richflexpix",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Richflexpix\/cpanel-pwn",
"description": "cPanel\/WHM CVE-2026-41940 CRLF injection auth bypass exploit",
"fork": false,
"created_at": "2026-05-05T22:06:49Z",
"updated_at": "2026-05-05T22:39:28Z",
"pushed_at": "2026-05-05T22:39:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230402730,
"name": "cpanelCVE-2026-41940",
2026/CVE-2026-42945.json
+33
View File
@@ -1397,5 +1397,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272400211,
"name": "DIY-CVE-2026-42945-POC",
"full_name": "hulina9900-boop\/DIY-CVE-2026-42945-POC",
"owner": {
"login": "hulina9900-boop",
"id": 290609649,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290609649?v=4",
"html_url": "https:\/\/github.com\/hulina9900-boop",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hulina9900-boop\/DIY-CVE-2026-42945-POC",
"description": null,
"fork": false,
"created_at": "2026-06-17T15:15:16Z",
"updated_at": "2026-06-17T18:46:42Z",
"pushed_at": "2026-06-17T18:46:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-06-16T14:48:38Z",
"pushed_at": "2026-06-16T14:39:59Z",
"updated_at": "2026-06-17T14:39:40Z",
"pushed_at": "2026-06-17T14:33:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-45777.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1272575188,
"name": "CVE-2026-45777",
"full_name": "morepoints\/CVE-2026-45777",
"owner": {
"login": "morepoints",
"id": 39632759,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39632759?v=4",
"html_url": "https:\/\/github.com\/morepoints",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/morepoints\/CVE-2026-45777",
"description": "CVE-2026-45777 PoC",
"fork": false,
"created_at": "2026-06-17T18:37:56Z",
"updated_at": "2026-06-17T18:38:58Z",
"pushed_at": "2026-06-17T18:37:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-46300.json
+70 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46300",
"fork": false,
"created_at": "2026-05-15T15:59:35Z",
"updated_at": "2026-06-16T07:29:56Z",
"updated_at": "2026-06-17T16:01:02Z",
"pushed_at": "2026-05-16T09:19:19Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -262,5 +262,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272547613,
"name": "CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough",
"full_name": "BenedictEjepu\/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough",
"owner": {
"login": "BenedictEjepu",
"id": 279521314,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/279521314?v=4",
"html_url": "https:\/\/github.com\/BenedictEjepu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BenedictEjepu\/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough",
"description": "This project documents the completion and analysis of the Fragnesia (CVE-2026-46300) TryHackMe lab, which demonstrates a Linux kernel page-cache corruption vulnerability capable of achieving local priviledge escalation through modification of cached file pages without altering files on disk.",
"fork": false,
"created_at": "2026-06-17T18:03:22Z",
"updated_at": "2026-06-17T18:03:23Z",
"pushed_at": "2026-06-17T18:03:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272566496,
"name": "CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project",
"full_name": "BenedictEjepu\/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project",
"owner": {
"login": "BenedictEjepu",
"id": 279521314,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/279521314?v=4",
"html_url": "https:\/\/github.com\/BenedictEjepu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BenedictEjepu\/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project",
"description": "The project documents the completion and analysis of the Fragnesia (CVE-2026-46300) TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached file pages without altering files on disk. ",
"fork": false,
"created_at": "2026-06-17T18:27:01Z",
"updated_at": "2026-06-17T18:28:32Z",
"pushed_at": "2026-06-17T18:27:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-46331.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-06-17T12:32:20Z",
"updated_at": "2026-06-17T18:53:01Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"forks": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48907.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272391607,
"name": "CVE-2026-48907",
"full_name": "wearehackers160\/CVE-2026-48907",
"owner": {
"login": "wearehackers160",
"id": 82085675,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82085675?v=4",
"html_url": "https:\/\/github.com\/wearehackers160",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wearehackers160\/CVE-2026-48907",
"description": "CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems",
"fork": false,
"created_at": "2026-06-17T15:06:09Z",
"updated_at": "2026-06-17T15:11:07Z",
"pushed_at": "2026-06-17T15:08:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49083.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1272359887,
"name": "CVE-2026-49083",
"full_name": "87achrafg-stack\/CVE-2026-49083",
"owner": {
"login": "87achrafg-stack",
"id": 234507645,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234507645?v=4",
"html_url": "https:\/\/github.com\/87achrafg-stack",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/87achrafg-stack\/CVE-2026-49083",
"description": null,
"fork": false,
"created_at": "2026-06-17T14:33:21Z",
"updated_at": "2026-06-17T14:38:08Z",
"pushed_at": "2026-06-17T14:34:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54686.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1271067862,
"name": "CVE-2026-54686",
"full_name": "87achrafg-stack\/CVE-2026-54686",
"owner": {
"login": "87achrafg-stack",
"id": 234507645,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/234507645?v=4",
"html_url": "https:\/\/github.com\/87achrafg-stack",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/87achrafg-stack\/CVE-2026-54686",
"description": "a command injection issue in Warp remote SSH session helper command handling. ",
"fork": false,
"created_at": "2026-06-16T09:54:53Z",
"updated_at": "2026-06-16T09:56:36Z",
"pushed_at": "2026-06-16T09:54:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5513.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "CVE-2026-5513 — Bookly ≤ 27.2 Stored XSS via Cookie",
"fork": false,
"created_at": "2026-06-14T22:33:14Z",
"updated_at": "2026-06-14T22:35:35Z",
"pushed_at": "2026-06-14T22:35:32Z",
"updated_at": "2026-06-17T14:13:25Z",
"pushed_at": "2026-06-17T14:10:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-9082.json
+1 -1
View File
@@ -183,7 +183,7 @@
"description": "Drupal CVE-2026-9082 Blind SQL Injection Checker",
"fork": false,
"created_at": "2026-05-24T02:00:04Z",
"updated_at": "2026-05-28T11:26:19Z",
"updated_at": "2026-06-17T17:31:55Z",
"pushed_at": "2026-05-24T09:00:30Z",
"stargazers_count": 6,
"watchers_count": 6,
2026/CVE-2026-9277.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": null,
"fork": false,
"created_at": "2026-06-15T13:37:09Z",
"updated_at": "2026-06-16T09:53:32Z",
"updated_at": "2026-06-17T14:16:09Z",
"pushed_at": "2026-06-15T13:43:21Z",
"stargazers_count": 2,
"watchers_count": 2,
README.md
+40 -23
View File
@@ -21,7 +21,6 @@
</code>
- [novaek/CVE-2026-0073-Research](https://github.com/novaek/CVE-2026-0073-Research)
- [SecTestAnnaQuinn/CVE-2026-0073-Android-adbd-authentication-bypass-POC](https://github.com/SecTestAnnaQuinn/CVE-2026-0073-Android-adbd-authentication-bypass-POC)
- [devtint/CVE-2026-0073](https://github.com/devtint/CVE-2026-0073)
- [adityatelange/poc-CVE-2026-0073](https://github.com/adityatelange/poc-CVE-2026-0073)
- [MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC](https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC)
@@ -1090,6 +1089,7 @@
</code>
- [HORKimhab/CVE-2026-20262](https://github.com/HORKimhab/CVE-2026-20262)
- [fevar54/CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-](https://github.com/fevar54/CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-)
### CVE-2026-20452 (2026-06-01)
@@ -1571,7 +1571,6 @@
<code>pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT with arbitrary subject and role claims, bypassing signature verification to authenticate as any user including administrators.
</code>
- [zF-tm/CVE-2026-29000](https://github.com/zF-tm/CVE-2026-29000)
- [tc4dy/CVE-2026-29000-PoC-Exploit](https://github.com/tc4dy/CVE-2026-29000-PoC-Exploit)
- [c0gnit00/CVE-2026-29000](https://github.com/c0gnit00/CVE-2026-29000)
- [lucastran05/CVE-2026-29000](https://github.com/lucastran05/CVE-2026-29000)
@@ -1697,7 +1696,6 @@
- [AdityaBhatt3010/CVE-2026-31431](https://github.com/AdityaBhatt3010/CVE-2026-31431)
- [6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284](https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284)
- [Liverwortenuresis371/copyfail-rs](https://github.com/Liverwortenuresis371/copyfail-rs)
- [Rat5ak/CVE-2026-31431-CopyFail-static-ELF--POC](https://github.com/Rat5ak/CVE-2026-31431-CopyFail-static-ELF--POC)
- [itsystem/afalg-check](https://github.com/itsystem/afalg-check)
- [RazvanDuda/GhostShell](https://github.com/RazvanDuda/GhostShell)
- [darioomatos/cve-2026-31431-copyfail](https://github.com/darioomatos/cve-2026-31431-copyfail)
@@ -1969,7 +1967,6 @@
<code>Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
</code>
- [Letlaka/redsun-bluehammer-undefend-detection-pack](https://github.com/Letlaka/redsun-bluehammer-undefend-detection-pack)
- [0xBlackash/CVE-2026-33825](https://github.com/0xBlackash/CVE-2026-33825)
### CVE-2026-33829 (2026-04-14)
@@ -2006,13 +2003,6 @@
- [hnytgl/CVE-2026-34197](https://github.com/hnytgl/CVE-2026-34197)
- [asdasddqwdq29-a11y/CVE-2026-34197](https://github.com/asdasddqwdq29-a11y/CVE-2026-34197)
### CVE-2026-34220 (2026-03-31)
<code>MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to versions 6.6.10 and 7.0.6, there is a SQL injection vulnerability when specially crafted objects are interpreted as raw SQL query fragments. This issue has been patched in versions 6.6.10 and 7.0.6.
</code>
- [EQSTLab/CVE-2026-34220](https://github.com/EQSTLab/CVE-2026-34220)
### CVE-2026-34234 (2026-05-19)
<code>CtrlPanel is open-source billing software for hosting providers. In versions 1.1.1 and prior, the web-based installer (public/installer/index.php) is vulnerable to unauthenticated Remote Code Execution (RCE) because it performs the install.lock check only after including and executing form handler files, leaving installer endpoints reachable on already-installed instances. The handlers also pass unsanitized user input directly into shell commands, allowing an attacker to submit crafted requests that execute arbitrary commands on the server. The vulnerability stems from two combined weaknesses: (1) premature form handler execution before the lock file gate, and (2) unsafe use of user input in shell command construction. This issue is reported to be actively exploited in the wild. The issue has been fixed in version 1.2.0.
@@ -2183,12 +2173,8 @@
- [TazmiDev/CVE-2026-36239](https://github.com/TazmiDev/CVE-2026-36239)
### CVE-2026-36356 (2026-05-05)
<code>The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint.
</code>
- [totekuh/CVE-2026-36356](https://github.com/totekuh/CVE-2026-36356)
### CVE-2026-36425
- [redteamfortress/CVE-2026-36425](https://github.com/redteamfortress/CVE-2026-36425)
### CVE-2026-36436
- [vtrmK/CVE-2026-36436-Public-Reference-Pack](https://github.com/vtrmK/CVE-2026-36436-Public-Reference-Pack)
@@ -2592,7 +2578,6 @@
- [MrOplus/CVE-2026-41940](https://github.com/MrOplus/CVE-2026-41940)
- [ZildanZ/CVE-2026-41940](https://github.com/ZildanZ/CVE-2026-41940)
- [Unfold-Security/CVE-2026-41940-Detection](https://github.com/Unfold-Security/CVE-2026-41940-Detection)
- [Richflexpix/cpanel-pwn](https://github.com/Richflexpix/cpanel-pwn)
- [bughunt4me/cpanelCVE-2026-41940](https://github.com/bughunt4me/cpanelCVE-2026-41940)
- [OhmGun/whmxploit---CVE-2026-41940](https://github.com/OhmGun/whmxploit---CVE-2026-41940)
- [Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC](https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC)
@@ -2793,6 +2778,7 @@
- [jenniferreire26/CVE-2026-42945](https://github.com/jenniferreire26/CVE-2026-42945)
- [LiaoZiqi-GZFLS/CVE-2026-42945](https://github.com/LiaoZiqi-GZFLS/CVE-2026-42945)
- [sec-sys/CVE-2026-42945-Reverse-Shell-POC](https://github.com/sec-sys/CVE-2026-42945-Reverse-Shell-POC)
- [hulina9900-boop/DIY-CVE-2026-42945-POC](https://github.com/hulina9900-boop/DIY-CVE-2026-42945-POC)
### CVE-2026-43284 (2026-05-08)
@@ -3058,6 +3044,13 @@
- [mistbarbarianspot/CVE-2026-45659-SharePoint-RCE](https://github.com/mistbarbarianspot/CVE-2026-45659-SharePoint-RCE)
- [jenniferreire26/CVE-2026-45659](https://github.com/jenniferreire26/CVE-2026-45659)
### CVE-2026-45777 (2026-06-05)
<code>OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remotely execute arbitrary system commands on the web server hosting Open XDMoD with the privileges of the web server process. This could allow an attacker to read or modify application data, alter system configuration, or disrupt service availability. All deployments of Open XDMoD versions 9.5.0 through 11.0.2 (inclusive) are impacted. This issue was reported privately on 2026-04-06, and at this time there is no evidence that this vulnerability has been exploited in the wild. The vulnerability was patched in Open XDMoD 11.0.3 on 2026-05-12. As a workaround, apply the patch manually.
</code>
- [morepoints/CVE-2026-45777](https://github.com/morepoints/CVE-2026-45777)
### CVE-2026-45829 (2026-05-18)
<code>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
@@ -3095,6 +3088,8 @@
- [Maxime288/Fragnesia-CVE-2026-46300](https://github.com/Maxime288/Fragnesia-CVE-2026-46300)
- [AzDevops143/FRAGNESIA-Charan-cve-2026-46300](https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300)
- [1neptune/Fragnesia](https://github.com/1neptune/Fragnesia)
- [BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough](https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough)
- [BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project](https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project)
### CVE-2026-46331 (2026-06-16)
@@ -3340,6 +3335,7 @@
- [0xBlackash/CVE-2026-48907](https://github.com/0xBlackash/CVE-2026-48907)
- [87achrafg-stack/CVE-2026-48907](https://github.com/87achrafg-stack/CVE-2026-48907)
- [HORKimhab/CVE-2026-48907](https://github.com/HORKimhab/CVE-2026-48907)
- [wearehackers160/CVE-2026-48907](https://github.com/wearehackers160/CVE-2026-48907)
### CVE-2026-48962 (2026-05-27)
@@ -3376,6 +3372,7 @@
</code>
- [izxci/CVE-2026-49083](https://github.com/izxci/CVE-2026-49083)
- [87achrafg-stack/CVE-2026-49083](https://github.com/87achrafg-stack/CVE-2026-49083)
### CVE-2026-49085 (2026-06-15)
@@ -3534,7 +3531,6 @@
### CVE-2026-54686
- [Saku0512/CVE-2026-54686-poc](https://github.com/Saku0512/CVE-2026-54686-poc)
- [87achrafg-stack/CVE-2026-54686](https://github.com/87achrafg-stack/CVE-2026-54686)
### CVE-2026-55168
- [KovachVL/CVE-2026-55168](https://github.com/KovachVL/CVE-2026-55168)
@@ -7840,7 +7836,11 @@
- [xibhi/CVE-2025-26206](https://github.com/xibhi/CVE-2025-26206)
### CVE-2025-26240
### CVE-2025-26240 (2026-06-17)
<code>In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files.
</code>
- [Habuon/CVE-2025-26240](https://github.com/Habuon/CVE-2025-26240)
### CVE-2025-26244
@@ -14240,7 +14240,11 @@
- [sid6224/CVE-2025-66249-POC](https://github.com/sid6224/CVE-2025-66249-POC)
### CVE-2025-66391
### CVE-2025-66391 (2026-06-17)
<code>In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account.
</code>
- [mandeepsohal/CVE-2025-66391](https://github.com/mandeepsohal/CVE-2025-66391)
### CVE-2025-66398 (2026-01-01)
@@ -22784,6 +22788,7 @@
- [GhostS3c/CVE-2024-38819](https://github.com/GhostS3c/CVE-2024-38819)
- [skrkcb2/cve-2024-38819](https://github.com/skrkcb2/cve-2024-38819)
- [vishalnoza/CVE-2024-38819-POC2](https://github.com/vishalnoza/CVE-2024-38819-POC2)
- [trevorputbrese/cve-2024-38819-lab](https://github.com/trevorputbrese/cve-2024-38819-lab)
### CVE-2024-38820 (2024-10-18)
@@ -24973,7 +24978,6 @@
<code>An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.
</code>
- [newlinesec/CVE-2024-50603](https://github.com/newlinesec/CVE-2024-50603)
- [th3gokul/CVE-2024-50603](https://github.com/th3gokul/CVE-2024-50603)
### CVE-2024-50623 (2024-10-27)
@@ -43865,6 +43869,13 @@
- [QiuhaoLi/CVE-2021-3929-3947](https://github.com/QiuhaoLi/CVE-2021-3929-3947)
### CVE-2021-3975 (2022-08-23)
<code>A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
</code>
- [yan5ui/ENV-CVE-2021-3975](https://github.com/yan5ui/ENV-CVE-2021-3975)
### CVE-2021-4034 (2022-01-28)
<code>A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
@@ -49018,7 +49029,6 @@
- [MAFO-sec/mi-laboratorio-log4shell](https://github.com/MAFO-sec/mi-laboratorio-log4shell)
- [felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-](https://github.com/felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-)
- [jomjosh17/Log4Shell-CVE-2021-44228-](https://github.com/jomjosh17/Log4Shell-CVE-2021-44228-)
- [C00LN3T/Log4ShellAuditor](https://github.com/C00LN3T/Log4ShellAuditor)
- [bhimsekhar/vulnerable-java-app](https://github.com/bhimsekhar/vulnerable-java-app)
- [horrister/log4shell-cve-2021-44228](https://github.com/horrister/log4shell-cve-2021-44228)
- [hmxh123/Log4Shell-Vulnerability-Replication](https://github.com/hmxh123/Log4Shell-Vulnerability-Replication)
@@ -51360,6 +51370,13 @@
- [wetw0rk/Exploit-Development](https://github.com/wetw0rk/Exploit-Development)
### CVE-2020-8036 (2020-11-04)
<code>The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.
</code>
- [yan5ui/ENV-CVE-2020-8036](https://github.com/yan5ui/ENV-CVE-2020-8036)
### CVE-2020-8103 (2020-06-05)
<code>A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178.