From f326d042a8d64fb06c4f46efa67d0fa2804353ea Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Fri, 3 Jul 2026 10:00:02 +0900 Subject: [PATCH] Auto Update 2026/07/03 01:00:02 --- 2007/CVE-2007-6750.json | 35 + 2016/CVE-2016-6210.json | 4 +- 2017/CVE-2017-9506.json | 8 +- 2018/CVE-2018-16323.json | 8 +- 2019/CVE-2019-1040.json | 4 +- 2019/CVE-2019-11932.json | 8 +- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-1938.json | 16 +- .../CVE-2020-9529.json | 24 +- 2021/CVE-2021-1931.json | 14 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-40449.json | 8 +- 2021/CVE-2021-43798.json | 8 +- 2022/CVE-2022-0155.json | 35 - 2022/CVE-2022-0165.json | 76 - 2022/CVE-2022-0185.json | 33 - 2022/CVE-2022-0316.json | 44 - 2022/CVE-2022-0337.json | 66 - 2022/CVE-2022-0435.json | 33 - 2022/CVE-2022-0439.json | 35 - 2022/CVE-2022-0441.json | 70 - 2022/CVE-2022-0482.json | 33 - 2022/CVE-2022-0492.json | 40 - 2022/CVE-2022-0543.json | 33 - 2022/CVE-2022-0591.json | 42 - 2022/CVE-2022-0739.json | 99 - 2022/CVE-2022-0778.json | 66 - 2022/CVE-2022-0847.json | 660 --- 2022/CVE-2022-0944.json | 233 - 2022/CVE-2022-0952.json | 35 - 2022/CVE-2022-0995.json | 66 - 2022/CVE-2022-1011.json | 35 - 2022/CVE-2022-1015.json | 198 - 2022/CVE-2022-1026.json | 99 - 2022/CVE-2022-10270.json | 35 - 2022/CVE-2022-1040.json | 99 - 2022/CVE-2022-1068.json | 35 - 2022/CVE-2022-1203.json | 35 - 2022/CVE-2022-1227.json | 35 - 2022/CVE-2022-1329.json | 99 - 2022/CVE-2022-1364.json | 33 - 2022/CVE-2022-1386.json | 172 - 2022/CVE-2022-1388.json | 234 - 2022/CVE-2022-1442.json | 35 - 2022/CVE-2022-1471.json | 66 - 2022/CVE-2022-1565.json | 35 - 2022/CVE-2022-1609.json | 33 - 2022/CVE-2022-1679.json | 33 - 2022/CVE-2022-20009.json | 35 - 2022/CVE-2022-20120.json | 35 - 2022/CVE-2022-20140.json | 35 - 2022/CVE-2022-20186.json | 33 - 2022/CVE-2022-20338.json | 101 - 2022/CVE-2022-20360.json | 35 - 2022/CVE-2022-20413.json | 35 - 2022/CVE-2022-20421.json | 33 - 2022/CVE-2022-20452.json | 35 - 2022/CVE-2022-20470.json | 35 - 2022/CVE-2022-20473.json | 68 - 2022/CVE-2022-20493.json | 35 - 2022/CVE-2022-20494.json | 35 - 2022/CVE-2022-20607.json | 35 - 2022/CVE-2022-2078.json | 35 - 2022/CVE-2022-20818.json | 41 - 2022/CVE-2022-21306.json | 35 - 2022/CVE-2022-21340.json | 43 - 2022/CVE-2022-21371.json | 49 - 2022/CVE-2022-21392.json | 41 - 2022/CVE-2022-21445.json | 33 - 2022/CVE-2022-21500.json | 42 - 2022/CVE-2022-21587.json | 101 - 2022/CVE-2022-21661.json | 203 - 2022/CVE-2022-21839.json | 35 - 2022/CVE-2022-21894.json | 132 - 2022/CVE-2022-21907.json | 132 - 2022/CVE-2022-22057.json | 35 - 2022/CVE-2022-22274.json | 101 - 2022/CVE-2022-22555.json | 35 - 2022/CVE-2022-22720.json | 35 - 2022/CVE-2022-22733.json | 42 - 2022/CVE-2022-2274.json | 38 - 2022/CVE-2022-22947.json | 165 - 2022/CVE-2022-22963.json | 401 -- 2022/CVE-2022-22965.json | 454 -- 2022/CVE-2022-22970.json | 35 - 2022/CVE-2022-22978.json | 132 - 2022/CVE-2022-23093.json | 33 - 2022/CVE-2022-23131.json | 231 - 2022/CVE-2022-23303.json | 35 - 2022/CVE-2022-23305.json | 33 - 2022/CVE-2022-23529.json | 35 - 2022/CVE-2022-23614.json | 33 - 2022/CVE-2022-23773.json | 33 - 2022/CVE-2022-23861.json | 42 - 2022/CVE-2022-23862.json | 41 - 2022/CVE-2022-23935.json | 139 - 2022/CVE-2022-23988.json | 35 - 2022/CVE-2022-24086.json | 33 - 2022/CVE-2022-24112.json | 33 - 2022/CVE-2022-2414.json | 66 - 2022/CVE-2022-24227.json | 35 - 2022/CVE-2022-24439.json | 33 - 2022/CVE-2022-24442.json | 45 - 2022/CVE-2022-24481.json | 33 - 2022/CVE-2022-24500.json | 35 - 2022/CVE-2022-24637.json | 99 - 2022/CVE-2022-24638.json | 35 - 2022/CVE-2022-24715.json | 101 - 2022/CVE-2022-24716.json | 167 - 2022/CVE-2022-24816.json | 35 - 2022/CVE-2022-24818.json | 42 - 2022/CVE-2022-24834.json | 33 - 2022/CVE-2022-25012.json | 33 - 2022/CVE-2022-25313.json | 33 - 2022/CVE-2022-25365.json | 35 - 2022/CVE-2022-2546.json | 35 - 2022/CVE-2022-25479.json | 35 - 2022/CVE-2022-25765.json | 76 - 2022/CVE-2022-25813.json | 43 - 2022/CVE-2022-25845.json | 132 - 2022/CVE-2022-2588.json | 66 - 2022/CVE-2022-2590.json | 49 - 2022/CVE-2022-25927.json | 33 - 2022/CVE-2022-2602.json | 33 - 2022/CVE-2022-26134.json | 370 -- 2022/CVE-2022-26265.json | 33 - 2022/CVE-2022-26318.json | 33 - 2022/CVE-2022-26377.json | 35 - 2022/CVE-2022-2639.json | 66 - 2022/CVE-2022-26485.json | 35 - 2022/CVE-2022-26488.json | 35 - 2022/CVE-2022-26923.json | 99 - 2022/CVE-2022-26965.json | 35 - 2022/CVE-2022-27499.json | 35 - 2022/CVE-2022-27518.json | 35 - 2022/CVE-2022-27646.json | 43 - 2022/CVE-2022-27666.json | 33 - 2022/CVE-2022-27925.json | 33 - 2022/CVE-2022-27997.json | 35 - 2022/CVE-2022-28108.json | 35 - 2022/CVE-2022-28117.json | 33 - 2022/CVE-2022-28171.json | 68 - 2022/CVE-2022-28346.json | 66 - 2022/CVE-2022-28368.json | 106 - 2022/CVE-2022-28672.json | 33 - 2022/CVE-2022-29063.json | 42 - 2022/CVE-2022-29072.json | 33 - 2022/CVE-2022-29078.json | 105 - 2022/CVE-2022-29170.json | 35 - 2022/CVE-2022-29361.json | 68 - 2022/CVE-2022-29455.json | 66 - 2022/CVE-2022-29464.json | 169 - 2022/CVE-2022-29469.json | 35 - 2022/CVE-2022-29799.json | 4 +- 2022/CVE-2022-30114.json | 35 - 2022/CVE-2022-30136.json | 68 - 2022/CVE-2022-30190.json | 297 -- 2022/CVE-2022-30203.json | 46 - 2022/CVE-2022-30333.json | 33 - 2022/CVE-2022-30524.json | 35 - 2022/CVE-2022-30525.json | 66 - 2022/CVE-2022-30780.json | 33 - 2022/CVE-2022-31144.json | 35 - 2022/CVE-2022-31692.json | 33 - 2022/CVE-2022-31705.json | 35 - 2022/CVE-2022-3172.json | 35 - 2022/CVE-2022-31814.json | 241 - 2022/CVE-2022-31889.json | 35 - 2022/CVE-2022-31890.json | 35 - 2022/CVE-2022-32074.json | 35 - 2022/CVE-2022-32132.json | 35 - 2022/CVE-2022-32199.json | 35 - 2022/CVE-2022-32250.json | 132 - 2022/CVE-2022-32548.json | 35 - 2022/CVE-2022-32862.json | 35 - 2022/CVE-2022-32898.json | 35 - 2022/CVE-2022-32932.json | 35 - 2022/CVE-2022-32947.json | 35 - 2022/CVE-2022-32981.json | 35 - 2022/CVE-2022-33082.json | 35 - 2022/CVE-2022-3317.json | 35 - 2022/CVE-2022-3357.json | 35 - 2022/CVE-2022-3368.json | 33 - 2022/CVE-2022-33891.json | 74 - 2022/CVE-2022-33980.json | 33 - 2022/CVE-2022-34169.json | 66 - 2022/CVE-2022-34527.json | 35 - 2022/CVE-2022-34556.json | 35 - 2022/CVE-2022-34683.json | 35 - 2022/CVE-2022-34753.json | 39 - 2022/CVE-2022-34913.json | 35 - 2022/CVE-2022-35411.json | 33 - 2022/CVE-2022-3552.json | 33 - 2022/CVE-2022-3564.json | 35 - 2022/CVE-2022-35649.json | 35 - 2022/CVE-2022-35737.json | 33 - 2022/CVE-2022-3590.json | 66 - 2022/CVE-2022-35914.json | 132 - 2022/CVE-2022-35919.json | 35 - 2022/CVE-2022-36193.json | 35 - 2022/CVE-2022-36234.json | 35 - 2022/CVE-2022-36267.json | 45 - 2022/CVE-2022-36446.json | 33 - 2022/CVE-2022-36553.json | 43 - 2022/CVE-2022-3656.json | 35 - 2022/CVE-2022-36752.json | 35 - 2022/CVE-2022-36779.json | 66 - 2022/CVE-2022-36804.json | 66 - 2022/CVE-2022-36944.json | 35 - 2022/CVE-2022-3699.json | 33 - 2022/CVE-2022-37017.json | 35 - 2022/CVE-2022-37032.json | 35 - 2022/CVE-2022-37332.json | 35 - 2022/CVE-2022-37434.json | 66 - 2022/CVE-2022-37706.json | 165 - 2022/CVE-2022-3786.json | 35 - 2022/CVE-2022-37969.json | 33 - 2022/CVE-2022-38029.json | 35 - 2022/CVE-2022-38181.json | 101 - 2022/CVE-2022-38374.json | 33 - 2022/CVE-2022-38601.json | 35 - 2022/CVE-2022-38725.json | 35 - 2022/CVE-2022-3904.json | 35 - 2022/CVE-2022-39073.json | 44 - 2022/CVE-2022-3910.json | 33 - 2022/CVE-2022-39197.json | 70 - 2022/CVE-2022-39227.json | 75 - 2022/CVE-2022-39253.json | 33 - 2022/CVE-2022-39952.json | 134 - 2022/CVE-2022-39986.json | 35 - 2022/CVE-2022-40032.json | 35 - 2022/CVE-2022-40127.json | 33 - 2022/CVE-2022-40146.json | 33 - 2022/CVE-2022-40347.json | 35 - 2022/CVE-2022-40348.json | 35 - 2022/CVE-2022-40363.json | 35 - 2022/CVE-2022-4047.json | 79 - 2022/CVE-2022-4060.json | 45 - 2022/CVE-2022-4061.json | 44 - 2022/CVE-2022-4063.json | 42 - 2022/CVE-2022-40634.json | 45 - 2022/CVE-2022-40635.json | 44 - 2022/CVE-2022-40684.json | 198 - 2022/CVE-2022-40769.json | 33 - 2022/CVE-2022-40881.json | 35 - 2022/CVE-2022-4096.json | 35 - 2022/CVE-2022-41034.json | 35 - 2022/CVE-2022-41040.json | 33 - 2022/CVE-2022-41082.json | 135 - 2022/CVE-2022-41099.json | 134 - 2022/CVE-2022-41114.json | 35 - 2022/CVE-2022-41220.json | 35 - 2022/CVE-2022-41333.json | 35 - 2022/CVE-2022-41343.json | 40 - 2022/CVE-2022-41352.json | 33 - 2022/CVE-2022-41401.json | 35 - 2022/CVE-2022-41544.json | 33 - 2022/CVE-2022-41678.json | 41 - 2022/CVE-2022-41741.json | 33 - 2022/CVE-2022-41852.json | 33 - 2022/CVE-2022-41853.json | 40 - 2022/CVE-2022-41876.json | 35 - 2022/CVE-2022-41903.json | 35 - 2022/CVE-2022-41924.json | 35 - 2022/CVE-2022-41966.json | 35 - 2022/CVE-2022-42475.json | 235 - 2022/CVE-2022-4262.json | 66 - 2022/CVE-2022-42703.json | 68 - 2022/CVE-2022-42864.json | 35 - 2022/CVE-2022-42889.json | 297 -- 2022/CVE-2022-42896.json | 101 - 2022/CVE-2022-4304.json | 35 - 2022/CVE-2022-43293.json | 56 - 2022/CVE-2022-43343.json | 35 - 2022/CVE-2022-4395.json | 35 - 2022/CVE-2022-43980.json | 35 - 2022/CVE-2022-44118.json | 35 - 2022/CVE-2022-44136.json | 33 - 2022/CVE-2022-44149.json | 83 - 2022/CVE-2022-44268.json | 786 --- 2022/CVE-2022-44276.json | 35 - 2022/CVE-2022-44311.json | 73 - 2022/CVE-2022-44312.json | 35 - 2022/CVE-2022-44318.json | 35 - 2022/CVE-2022-44569.json | 35 - 2022/CVE-2022-44666.json | 35 - 2022/CVE-2022-44875.json | 35 - 2022/CVE-2022-44877.json | 271 -- 2022/CVE-2022-45003.json | 35 - 2022/CVE-2022-45004.json | 35 - 2022/CVE-2022-45025.json | 33 - 2022/CVE-2022-45047.json | 35 - 2022/CVE-2022-45059.json | 35 - 2022/CVE-2022-4510.json | 101 - 2022/CVE-2022-45354.json | 35 - 2022/CVE-2022-4539.json | 35 - 2022/CVE-2022-4543.json | 33 - 2022/CVE-2022-45436.json | 35 - 2022/CVE-2022-45477.json | 41 - 2022/CVE-2022-45599.json | 35 - 2022/CVE-2022-45600.json | 35 - 2022/CVE-2022-45688.json | 167 - 2022/CVE-2022-45701.json | 87 - 2022/CVE-2022-45728.json | 35 - 2022/CVE-2022-45729.json | 35 - 2022/CVE-2022-45770.json | 35 - 2022/CVE-2022-45771.json | 39 - 2022/CVE-2022-45808.json | 35 - 2022/CVE-2022-45934.json | 101 - 2022/CVE-2022-46080.json | 88 - 2022/CVE-2022-46087.json | 35 - 2022/CVE-2022-46104.json | 35 - 2022/CVE-2022-4611.json | 68 - 2022/CVE-2022-4616.json | 35 - 2022/CVE-2022-46164.json | 35 - 2022/CVE-2022-46169.json | 949 ---- 2022/CVE-2022-46175.json | 35 - 2022/CVE-2022-46196.json | 35 - 2022/CVE-2022-46395.json | 99 - 2022/CVE-2022-46463.json | 66 - 2022/CVE-2022-46505.json | 35 - 2022/CVE-2022-46604.json | 37 - 2022/CVE-2022-46622.json | 35 - 2022/CVE-2022-46623.json | 35 - 2022/CVE-2022-46689.json | 291 +- 2022/CVE-2022-46718.json | 35 - 2022/CVE-2022-47102.json | 35 - 2022/CVE-2022-47130.json | 35 - 2022/CVE-2022-47131.json | 35 - 2022/CVE-2022-47132.json | 35 - 2022/CVE-2022-47373.json | 35 - 2022/CVE-2022-47529.json | 35 - 2022/CVE-2022-47615.json | 35 - 2022/CVE-2022-47872.json | 35 - 2022/CVE-2022-47966.json | 139 - 2022/CVE-2022-47986.json | 83 - 2022/CVE-2022-48150.json | 35 - 2022/CVE-2022-48197.json | 35 - 2022/CVE-2022-48311.json | 35 - 2022/CVE-2022-48429.json | 35 - 2022/CVE-2022-48474.json | 35 - 2022/CVE-2022-48565.json | 35 - 2022/CVE-2022-4896.json | 35 - 2022/CVE-2022-4939.json | 35 - 2022/CVE-2022-4944.json | 35 - 2023/CVE-2023-0266.json | 35 - 2023/CVE-2023-0297.json | 66 - 2023/CVE-2023-0386.json | 165 - 2023/CVE-2023-0400.json | 35 - 2023/CVE-2023-0461.json | 35 - 2023/CVE-2023-0669.json | 33 - 2023/CVE-2023-1177.json | 105 - 2023/CVE-2023-1189.json | 35 - 2023/CVE-2023-1206.json | 35 - 2023/CVE-2023-1326.json | 99 - 2023/CVE-2023-1405.json | 35 - 2023/CVE-2023-1514.json | 35 - 2023/CVE-2023-1545.json | 134 - 2023/CVE-2023-1698.json | 66 - 2023/CVE-2023-1773.json | 68 - 2023/CVE-2023-1874.json | 41 - 2023/CVE-2023-1999.json | 35 - 2023/CVE-2023-20048.json | 72 - 2023/CVE-2023-20198.json | 264 - 2023/CVE-2023-2023.json | 33 - 2023/CVE-2023-20352.json | 35 - 2023/CVE-2023-20564.json | 35 - 2023/CVE-2023-20598.json | 35 - 2023/CVE-2023-20696.json | 8 +- 2023/CVE-2023-20872.json | 35 - 2023/CVE-2023-20904.json | 35 - 2023/CVE-2023-20938.json | 33 - 2023/CVE-2023-21118.json | 33 - 2023/CVE-2023-21125.json | 35 - 2023/CVE-2023-21173.json | 35 - 2023/CVE-2023-21282.json | 33 - 2023/CVE-2023-21537.json | 35 - 2023/CVE-2023-21554.json | 66 - 2023/CVE-2023-21560.json | 46 - 2023/CVE-2023-2163.json | 35 - 2023/CVE-2023-21674.json | 35 - 2023/CVE-2023-21716.json | 33 - 2023/CVE-2023-21768.json | 165 - 2023/CVE-2023-21839.json | 33 - 2023/CVE-2023-21987.json | 33 - 2023/CVE-2023-22047.json | 35 - 2023/CVE-2023-22077.json | 35 - 2023/CVE-2023-22098.json | 35 - 2023/CVE-2023-2245.json | 35 - 2023/CVE-2023-22493.json | 35 - 2023/CVE-2023-22515.json | 401 -- 2023/CVE-2023-22518.json | 99 - 2023/CVE-2023-22527.json | 696 --- 2023/CVE-2023-2255.json | 66 - 2023/CVE-2023-22622.json | 35 - 2023/CVE-2023-22809.json | 132 - 2023/CVE-2023-22894.json | 33 - 2023/CVE-2023-23388.json | 35 - 2023/CVE-2023-23397.json | 138 - 2023/CVE-2023-23638.json | 33 - 2023/CVE-2023-2375.json | 35 - 2023/CVE-2023-23752.json | 231 - 2023/CVE-2023-24044.json | 42 - 2023/CVE-2023-24057.json | 35 - 2023/CVE-2023-24203.json | 35 - 2023/CVE-2023-24249.json | 68 - 2023/CVE-2023-24278.json | 39 - 2023/CVE-2023-2437.json | 35 - 2023/CVE-2023-24871.json | 35 - 2023/CVE-2023-24932.json | 66 - 2023/CVE-2023-25136.json | 74 - 2023/CVE-2023-25157.json | 66 - 2023/CVE-2023-25194.json | 36 - 2023/CVE-2023-25202.json | 35 - 2023/CVE-2023-25203.json | 35 - 2023/CVE-2023-25355.json | 35 - 2023/CVE-2023-25581.json | 35 - 2023/CVE-2023-25690.json | 33 - 2023/CVE-2023-25813.json | 165 - 2023/CVE-2023-2598.json | 99 - 2023/CVE-2023-2603.json | 35 - 2023/CVE-2023-26136.json | 198 - 2023/CVE-2023-26208.json | 35 - 2023/CVE-2023-26209.json | 35 - 2023/CVE-2023-26326.json | 68 - 2023/CVE-2023-26360.json | 132 - 2023/CVE-2023-2640.json | 99 - 2023/CVE-2023-26469.json | 33 - 2023/CVE-2023-26785.json | 35 - 2023/CVE-2023-27100.json | 33 - 2023/CVE-2023-27163.json | 198 - 2023/CVE-2023-27216.json | 33 - 2023/CVE-2023-2728.json | 35 - 2023/CVE-2023-27350.json | 198 - 2023/CVE-2023-27372.json | 106 - 2023/CVE-2023-2745.json | 35 - 2023/CVE-2023-27524.json | 75 - 2023/CVE-2023-27532.json | 66 - 2023/CVE-2023-27564.json | 35 - 2023/CVE-2023-27997.json | 66 - 2023/CVE-2023-28121.json | 66 - 2023/CVE-2023-28205.json | 77 - 2023/CVE-2023-28229.json | 33 - 2023/CVE-2023-2825.json | 66 - 2023/CVE-2023-28252.json | 99 - 2023/CVE-2023-28303.json | 35 - 2023/CVE-2023-28324.json | 35 - 2023/CVE-2023-28354.json | 35 - 2023/CVE-2023-28432.json | 33 - 2023/CVE-2023-28465.json | 35 - 2023/CVE-2023-28588.json | 35 - 2023/CVE-2023-28753.json | 35 - 2023/CVE-2023-28771.json | 33 - 2023/CVE-2023-29201.json | 35 - 2023/CVE-2023-29357.json | 66 - 2023/CVE-2023-29360.json | 66 - 2023/CVE-2023-29384.json | 35 - 2023/CVE-2023-29386.json | 35 - 2023/CVE-2023-29489.json | 219 - 2023/CVE-2023-29528.json | 35 - 2023/CVE-2023-29689.json | 35 - 2023/CVE-2023-30212.json | 33 - 2023/CVE-2023-30253.json | 268 - 2023/CVE-2023-30258.json | 302 -- 2023/CVE-2023-3047.json | 68 - 2023/CVE-2023-30486.json | 35 - 2023/CVE-2023-30547.json | 99 - 2023/CVE-2023-30799.json | 35 - 2023/CVE-2023-30800.json | 108 - 2023/CVE-2023-30861.json | 35 - 2023/CVE-2023-30943.json | 33 - 2023/CVE-2023-30990.json | 36 - 2023/CVE-2023-31126.json | 68 - 2023/CVE-2023-3128.json | 35 - 2023/CVE-2023-31290.json | 37 - 2023/CVE-2023-32070.json | 35 - 2023/CVE-2023-32233.json | 66 - 2023/CVE-2023-32243.json | 33 - 2023/CVE-2023-32314.json | 35 - 2023/CVE-2023-32315.json | 99 - 2023/CVE-2023-32413.json | 35 - 2023/CVE-2023-32428.json | 35 - 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-32560.json | 33 - 2023/CVE-2023-32571.json | 33 - 2023/CVE-2023-32590.json | 35 - 2023/CVE-2023-32697.json | 35 - 2023/CVE-2023-32749.json | 37 - 2023/CVE-2023-32784.json | 132 - 2023/CVE-2023-3280.json | 35 - 2023/CVE-2023-33105.json | 35 - 2023/CVE-2023-33177.json | 33 - 2023/CVE-2023-33246.json | 99 - 2023/CVE-2023-33538.json | 66 - 2023/CVE-2023-33580.json | 43 - 2023/CVE-2023-33669.json | 33 - 2023/CVE-2023-33733.json | 132 - 2023/CVE-2023-33747.json | 35 - 2023/CVE-2023-33831.json | 33 - 2023/CVE-2023-3390.json | 35 - 2023/CVE-2023-33962.json | 35 - 2023/CVE-2023-34040.json | 66 - 2023/CVE-2023-34152.json | 33 - 2023/CVE-2023-34194.json | 35 - 2023/CVE-2023-34233.json | 35 - 2023/CVE-2023-34362.json | 99 - 2023/CVE-2023-34468.json | 33 - 2023/CVE-2023-34478.json | 35 - 2023/CVE-2023-34598.json | 33 - 2023/CVE-2023-3460.json | 66 - 2023/CVE-2023-34732.json | 35 - 2023/CVE-2023-34804.json | 35 - 2023/CVE-2023-34845.json | 35 - 2023/CVE-2023-34960.json | 33 - 2023/CVE-2023-34992.json | 68 - 2023/CVE-2023-35078.json | 39 - 2023/CVE-2023-35080.json | 33 - 2023/CVE-2023-35085.json | 35 - 2023/CVE-2023-35317.json | 46 - 2023/CVE-2023-35636.json | 35 - 2023/CVE-2023-35674.json | 33 - 2023/CVE-2023-35813.json | 33 - 2023/CVE-2023-35854.json | 35 - 2023/CVE-2023-35887.json | 35 - 2023/CVE-2023-35985.json | 33 - 2023/CVE-2023-36085.json | 35 - 2023/CVE-2023-3609.json | 35 - 2023/CVE-2023-36407.json | 68 - 2023/CVE-2023-36424.json | 35 - 2023/CVE-2023-36471.json | 35 - 2023/CVE-2023-36542.json | 35 - 2023/CVE-2023-36644.json | 35 - 2023/CVE-2023-36645.json | 35 - 2023/CVE-2023-36664.json | 33 - 2023/CVE-2023-36802.json | 33 - 2023/CVE-2023-36845.json | 363 -- 2023/CVE-2023-3722.json | 35 - 2023/CVE-2023-37273.json | 35 - 2023/CVE-2023-37456.json | 35 - 2023/CVE-2023-37460.json | 35 - 2023/CVE-2023-37467.json | 35 - 2023/CVE-2023-37582.json | 66 - 2023/CVE-2023-37635.json | 35 - 2023/CVE-2023-37790.json | 35 - 2023/CVE-2023-37908.json | 35 - 2023/CVE-2023-38039.json | 35 - 2023/CVE-2023-38041.json | 35 - 2023/CVE-2023-3824.json | 101 - 2023/CVE-2023-38408.json | 165 - 2023/CVE-2023-38545.json | 66 - 2023/CVE-2023-38600.json | 35 - 2023/CVE-2023-38646.json | 209 - 2023/CVE-2023-38709.json | 46 - 2023/CVE-2023-3881.json | 35 - 2023/CVE-2023-38829.json | 33 - 2023/CVE-2023-38831.json | 603 --- 2023/CVE-2023-38873.json | 35 - 2023/CVE-2023-38890.json | 33 - 2023/CVE-2023-3897.json | 35 - 2023/CVE-2023-39024.json | 35 - 2023/CVE-2023-39141.json | 35 - 2023/CVE-2023-39143.json | 35 - 2023/CVE-2023-39320.json | 35 - 2023/CVE-2023-39361.json | 68 - 2023/CVE-2023-39362.json | 33 - 2023/CVE-2023-39910.json | 52 - 2023/CVE-2023-40000.json | 110 - 2023/CVE-2023-40028.json | 306 -- 2023/CVE-2023-40029.json | 35 - 2023/CVE-2023-40109.json | 35 - 2023/CVE-2023-40127.json | 167 - 2023/CVE-2023-40130.json | 35 - 2023/CVE-2023-40133.json | 35 - 2023/CVE-2023-40167.json | 35 - 2023/CVE-2023-40289.json | 43 - 2023/CVE-2023-40355.json | 38 - 2023/CVE-2023-40404.json | 52 - 2023/CVE-2023-40448.json | 35 - 2023/CVE-2023-40459.json | 33 - 2023/CVE-2023-40931.json | 101 - 2023/CVE-2023-40933.json | 35 - 2023/CVE-2023-41044.json | 35 - 2023/CVE-2023-41064.json | 33 - 2023/CVE-2023-41425.json | 469 -- 2023/CVE-2023-41564.json | 35 - 2023/CVE-2023-41652.json | 35 - 2023/CVE-2023-41892.json | 136 - 2023/CVE-2023-4197.json | 35 - 2023/CVE-2023-41991.json | 33 - 2023/CVE-2023-41992.json | 35 - 2023/CVE-2023-41993.json | 33 - 2023/CVE-2023-42115.json | 33 - 2023/CVE-2023-422.json | 35 - 2023/CVE-2023-4220.json | 796 --- 2023/CVE-2023-4226.json | 68 - 2023/CVE-2023-42326.json | 35 - 2023/CVE-2023-42789.json | 35 - 2023/CVE-2023-42791.json | 35 - 2023/CVE-2023-42793.json | 406 -- 2023/CVE-2023-42829.json | 35 - 2023/CVE-2023-42860.json | 43 - 2023/CVE-2023-42931.json | 68 - 2023/CVE-2023-4300.json | 35 - 2023/CVE-2023-43040.json | 35 - 2023/CVE-2023-43208.json | 99 - 2023/CVE-2023-43317.json | 35 - 2023/CVE-2023-43318.json | 35 - 2023/CVE-2023-43364.json | 33 - 2023/CVE-2023-43482.json | 35 - 2023/CVE-2023-43494.json | 35 - 2023/CVE-2023-4357.json | 66 - 2023/CVE-2023-43622.json | 35 - 2023/CVE-2023-43646.json | 35 - 2023/CVE-2023-43654.json | 33 - 2023/CVE-2023-43757.json | 35 - 2023/CVE-2023-43770.json | 33 - 2023/CVE-2023-4427.json | 35 - 2023/CVE-2023-44487.json | 332 -- 2023/CVE-2023-4450.json | 35 - 2023/CVE-2023-4504.json | 35 - 2023/CVE-2023-45131.json | 35 - 2023/CVE-2023-45182.json | 35 - 2023/CVE-2023-45185.json | 35 - 2023/CVE-2023-45239.json | 35 - 2023/CVE-2023-45277.json | 35 - 2023/CVE-2023-45278.json | 35 - 2023/CVE-2023-45288.json | 35 - 2023/CVE-2023-45503.json | 35 - 2023/CVE-2023-45539.json | 35 - 2023/CVE-2023-45612.json | 244 - 2023/CVE-2023-4568.json | 42 - 2023/CVE-2023-45777.json | 68 - 2023/CVE-2023-45779.json | 35 - 2023/CVE-2023-45806.json | 35 - 2023/CVE-2023-45827.json | 35 - 2023/CVE-2023-45866.json | 269 - 2023/CVE-2023-45878.json | 266 - 2023/CVE-2023-4590.json | 35 - 2023/CVE-2023-4596.json | 66 - 2023/CVE-2023-46012.json | 35 - 2023/CVE-2023-46136.json | 35 - 2023/CVE-2023-4622.json | 35 - 2023/CVE-2023-46304.json | 35 - 2023/CVE-2023-46371.json | 35 - 2023/CVE-2023-46442.json | 35 - 2023/CVE-2023-46604.json | 399 -- 2023/CVE-2023-46694.json | 35 - 2023/CVE-2023-46747.json | 132 - 2023/CVE-2023-46749.json | 35 - 2023/CVE-2023-46805.json | 209 - 2023/CVE-2023-46818.json | 332 -- 2023/CVE-2023-46870.json | 35 - 2023/CVE-2023-46988.json | 43 - 2023/CVE-2023-47108.json | 35 - 2023/CVE-2023-47218.json | 35 - 2023/CVE-2023-47248.json | 35 - 2023/CVE-2023-47253.json | 68 - 2023/CVE-2023-47268.json | 68 - 2023/CVE-2023-47400.json | 39 - 2023/CVE-2023-47464.json | 35 - 2023/CVE-2023-47504.json | 35 - 2023/CVE-2023-47564.json | 39 - 2023/CVE-2023-47668.json | 33 - 2023/CVE-2023-4771.json | 35 - 2023/CVE-2023-48022.json | 35 - 2023/CVE-2023-48084.json | 68 - 2023/CVE-2023-4813.json | 35 - 2023/CVE-2023-48194.json | 35 - 2023/CVE-2023-4863.json | 33 - 2023/CVE-2023-48777.json | 35 - 2023/CVE-2023-48788.json | 35 - 2023/CVE-2023-48795.json | 66 - 2023/CVE-2023-49031.json | 35 - 2023/CVE-2023-49070.json | 103 - 2023/CVE-2023-49103.json | 33 - 2023/CVE-2023-49109.json | 68 - 2023/CVE-2023-4911.json | 99 - 2023/CVE-2023-49367.json | 35 - 2023/CVE-2023-49496.json | 35 - 2023/CVE-2023-49606.json | 35 - 2023/CVE-2023-4966.json | 66 - 2023/CVE-2023-49785.json | 35 - 2023/CVE-2023-49950.json | 35 - 2023/CVE-2023-49965.json | 35 - 2023/CVE-2023-50029.json | 35 - 2023/CVE-2023-50094.json | 35 - 2023/CVE-2023-50164.json | 204 - 2023/CVE-2023-50245.json | 35 - 2023/CVE-2023-50257.json | 35 - 2023/CVE-2023-50290.json | 35 - 2023/CVE-2023-50386.json | 35 - 2023/CVE-2023-50387.json | 101 - 2023/CVE-2023-5044.json | 66 - 2023/CVE-2023-50564.json | 231 - 2023/CVE-2023-50780.json | 42 - 2023/CVE-2023-50868.json | 35 - 2023/CVE-2023-5089.json | 42 - 2023/CVE-2023-51119.json | 35 - 2023/CVE-2023-51385.json | 369 -- 2023/CVE-2023-51409.json | 66 - 2023/CVE-2023-51444.json | 35 - 2023/CVE-2023-51448.json | 35 - 2023/CVE-2023-51467.json | 102 - 2023/CVE-2023-51518.json | 43 - 2023/CVE-2023-51770.json | 68 - 2023/CVE-2023-5178.json | 35 - 2023/CVE-2023-5180.json | 39 - 2023/CVE-2023-51800.json | 35 - 2023/CVE-2023-51801.json | 35 - 2023/CVE-2023-51802.json | 35 - 2023/CVE-2023-5204.json | 35 - 2023/CVE-2023-52160.json | 35 - 2023/CVE-2023-52251.json | 40 - 2023/CVE-2023-52268.json | 35 - 2023/CVE-2023-52440.json | 35 - 2023/CVE-2023-52654.json | 35 - 2023/CVE-2023-52709.json | 35 - 2023/CVE-2023-52927.json | 68 - 2023/CVE-2023-5359.json | 68 - 2023/CVE-2023-5360.json | 66 - 2023/CVE-2023-5561.json | 66 - 2023/CVE-2023-5612.json | 68 - 2023/CVE-2023-5717.json | 35 - 2023/CVE-2023-5961.json | 35 - 2023/CVE-2023-5965.json | 35 - 2023/CVE-2023-6000.json | 35 - 2023/CVE-2023-6019.json | 99 - 2023/CVE-2023-6036.json | 35 - 2023/CVE-2023-6063.json | 39 - 2023/CVE-2023-6199.json | 68 - 2023/CVE-2023-6241.json | 77 - 2023/CVE-2023-6246.json | 33 - 2023/CVE-2023-6275.json | 68 - 2023/CVE-2023-6319.json | 40 - 2023/CVE-2023-6350.json | 35 - 2023/CVE-2023-6360.json | 37 - 2023/CVE-2023-6387.json | 35 - 2023/CVE-2023-6401.json | 35 - 2023/CVE-2023-6421.json | 35 - 2023/CVE-2023-6444.json | 35 - 2023/CVE-2023-6546.json | 35 - 2023/CVE-2023-6553.json | 66 - 2023/CVE-2023-6595.json | 35 - 2023/CVE-2023-6634.json | 37 - 2023/CVE-2023-6654.json | 35 - 2023/CVE-2023-6700.json | 35 - 2023/CVE-2023-6702.json | 35 - 2023/CVE-2023-6875.json | 68 - 2023/CVE-2023-6895.json | 68 - 2023/CVE-2023-6931.json | 35 - 2023/CVE-2023-6933.json | 68 - 2023/CVE-2023-6985.json | 39 - 2023/CVE-2023-7016.json | 35 - 2023/CVE-2023-7024.json | 68 - 2023/CVE-2023-7028.json | 401 -- 2023/CVE-2023-7231.json | 35 - 2023/CVE-2023-7261.json | 35 - 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-27102.json | 8 +- 2024/CVE-2024-31317.json | 8 +- 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-15030.json | 4 +- 2025/CVE-2025-24203.json | 8 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-31258.json | 4 +- 2025/CVE-2025-32463.json | 20 +- 2025/CVE-2025-48804.json | 2 +- 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-54322.json | 2 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 20 +- 2025/CVE-2025-57819.json | 55 +- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-66680.json | 4 +- 2025/CVE-2025-68613.json | 8 +- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69212.json | 4 +- 2026/CVE-2026-0740.json | 33 + 2026/CVE-2026-10520.json | 8 +- 2026/CVE-2026-11450.json | 8 +- 2026/CVE-2026-13768.json | 45 + 2026/CVE-2026-20841.json | 8 +- 2026/CVE-2026-20896.json | 4 +- 2026/CVE-2026-24061.json | 4 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-25253.json | 4 +- 2026/CVE-2026-31431.json | 20 +- 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-3227.json | 4 +- 2026/CVE-2026-36027.json | 39 + 2026/CVE-2026-3609.json | 8 +- 2026/CVE-2026-38751.json | 41 +- 2026/CVE-2026-41940.json | 12 +- 2026/CVE-2026-42945.json | 8 +- 2026/CVE-2026-43284.json | 38 - 2026/CVE-2026-43499.json | 4 +- 2026/CVE-2026-43503.json | 8 +- 2026/CVE-2026-45585.json | 4 +- 2026/CVE-2026-46331.json | 12 +- 2026/CVE-2026-48558.json | 8 +- 2026/CVE-2026-51947.json | 4 +- 2026/CVE-2026-52217.json | 35 + .../CVE-2026-54424.json | 24 +- 2026/CVE-2026-54477.json | 45 + 2026/CVE-2026-55200.json | 4 +- 2026/CVE-2026-55726.json | 44 + 2026/CVE-2026-56782.json | 40 + 2026/CVE-2026-6307.json | 20 +- README.md | 4328 +---------------- 813 files changed, 678 insertions(+), 54003 deletions(-) create mode 100644 2007/CVE-2007-6750.json rename 2023/CVE-2023-36643.json => 2020/CVE-2020-9529.json (52%) delete mode 100644 2022/CVE-2022-0155.json delete mode 100644 2022/CVE-2022-0165.json delete mode 100644 2022/CVE-2022-0316.json delete mode 100644 2022/CVE-2022-0439.json delete mode 100644 2022/CVE-2022-0591.json delete mode 100644 2022/CVE-2022-0952.json delete mode 100644 2022/CVE-2022-1011.json delete mode 100644 2022/CVE-2022-10270.json delete mode 100644 2022/CVE-2022-1068.json delete mode 100644 2022/CVE-2022-1203.json delete mode 100644 2022/CVE-2022-1227.json delete mode 100644 2022/CVE-2022-1442.json delete mode 100644 2022/CVE-2022-1565.json delete mode 100644 2022/CVE-2022-20009.json delete mode 100644 2022/CVE-2022-20120.json delete mode 100644 2022/CVE-2022-20140.json delete mode 100644 2022/CVE-2022-20338.json delete mode 100644 2022/CVE-2022-20360.json delete mode 100644 2022/CVE-2022-20413.json delete mode 100644 2022/CVE-2022-20452.json delete mode 100644 2022/CVE-2022-20470.json delete mode 100644 2022/CVE-2022-20473.json delete mode 100644 2022/CVE-2022-20493.json delete mode 100644 2022/CVE-2022-20494.json delete mode 100644 2022/CVE-2022-20607.json delete mode 100644 2022/CVE-2022-2078.json delete mode 100644 2022/CVE-2022-20818.json delete mode 100644 2022/CVE-2022-21306.json delete mode 100644 2022/CVE-2022-21340.json delete mode 100644 2022/CVE-2022-21392.json delete mode 100644 2022/CVE-2022-21500.json delete mode 100644 2022/CVE-2022-21587.json delete mode 100644 2022/CVE-2022-21839.json delete mode 100644 2022/CVE-2022-22057.json delete mode 100644 2022/CVE-2022-22274.json delete mode 100644 2022/CVE-2022-22555.json delete mode 100644 2022/CVE-2022-22720.json delete mode 100644 2022/CVE-2022-22733.json delete mode 100644 2022/CVE-2022-22970.json delete mode 100644 2022/CVE-2022-23303.json delete mode 100644 2022/CVE-2022-23529.json delete mode 100644 2022/CVE-2022-23861.json delete mode 100644 2022/CVE-2022-23862.json delete mode 100644 2022/CVE-2022-23935.json delete mode 100644 2022/CVE-2022-23988.json delete mode 100644 2022/CVE-2022-24227.json delete mode 100644 2022/CVE-2022-24442.json delete mode 100644 2022/CVE-2022-24500.json delete mode 100644 2022/CVE-2022-24638.json delete mode 100644 2022/CVE-2022-24715.json delete mode 100644 2022/CVE-2022-24716.json delete mode 100644 2022/CVE-2022-24816.json delete mode 100644 2022/CVE-2022-24818.json delete mode 100644 2022/CVE-2022-25365.json delete mode 100644 2022/CVE-2022-2546.json delete mode 100644 2022/CVE-2022-25479.json delete mode 100644 2022/CVE-2022-25813.json delete mode 100644 2022/CVE-2022-2590.json delete mode 100644 2022/CVE-2022-26377.json delete mode 100644 2022/CVE-2022-26485.json delete mode 100644 2022/CVE-2022-26488.json delete mode 100644 2022/CVE-2022-26965.json delete mode 100644 2022/CVE-2022-27499.json delete mode 100644 2022/CVE-2022-27518.json delete mode 100644 2022/CVE-2022-27646.json delete mode 100644 2022/CVE-2022-27997.json delete mode 100644 2022/CVE-2022-28108.json delete mode 100644 2022/CVE-2022-28171.json delete mode 100644 2022/CVE-2022-28368.json delete mode 100644 2022/CVE-2022-29063.json delete mode 100644 2022/CVE-2022-29170.json delete mode 100644 2022/CVE-2022-29361.json delete mode 100644 2022/CVE-2022-29469.json delete mode 100644 2022/CVE-2022-30114.json delete mode 100644 2022/CVE-2022-30136.json delete mode 100644 2022/CVE-2022-30203.json delete mode 100644 2022/CVE-2022-30524.json delete mode 100644 2022/CVE-2022-31144.json delete mode 100644 2022/CVE-2022-31705.json delete mode 100644 2022/CVE-2022-3172.json delete mode 100644 2022/CVE-2022-31889.json delete mode 100644 2022/CVE-2022-31890.json delete mode 100644 2022/CVE-2022-32074.json delete mode 100644 2022/CVE-2022-32132.json delete mode 100644 2022/CVE-2022-32199.json delete mode 100644 2022/CVE-2022-32548.json delete mode 100644 2022/CVE-2022-32862.json delete mode 100644 2022/CVE-2022-32898.json delete mode 100644 2022/CVE-2022-32932.json delete mode 100644 2022/CVE-2022-32947.json delete mode 100644 2022/CVE-2022-32981.json delete mode 100644 2022/CVE-2022-33082.json delete mode 100644 2022/CVE-2022-3317.json delete mode 100644 2022/CVE-2022-3357.json delete mode 100644 2022/CVE-2022-34527.json delete mode 100644 2022/CVE-2022-34556.json delete mode 100644 2022/CVE-2022-34683.json delete mode 100644 2022/CVE-2022-34753.json delete mode 100644 2022/CVE-2022-34913.json delete mode 100644 2022/CVE-2022-3564.json delete mode 100644 2022/CVE-2022-35649.json delete mode 100644 2022/CVE-2022-35919.json delete mode 100644 2022/CVE-2022-36193.json delete mode 100644 2022/CVE-2022-36234.json delete mode 100644 2022/CVE-2022-36267.json delete mode 100644 2022/CVE-2022-36553.json delete mode 100644 2022/CVE-2022-3656.json delete mode 100644 2022/CVE-2022-36752.json delete mode 100644 2022/CVE-2022-36944.json delete mode 100644 2022/CVE-2022-37017.json delete mode 100644 2022/CVE-2022-37032.json delete mode 100644 2022/CVE-2022-37332.json delete mode 100644 2022/CVE-2022-3786.json delete mode 100644 2022/CVE-2022-38029.json delete mode 100644 2022/CVE-2022-38181.json delete mode 100644 2022/CVE-2022-38601.json delete mode 100644 2022/CVE-2022-38725.json delete mode 100644 2022/CVE-2022-3904.json delete mode 100644 2022/CVE-2022-39073.json delete mode 100644 2022/CVE-2022-39952.json delete mode 100644 2022/CVE-2022-39986.json delete mode 100644 2022/CVE-2022-40032.json delete mode 100644 2022/CVE-2022-40347.json delete mode 100644 2022/CVE-2022-40348.json delete mode 100644 2022/CVE-2022-40363.json delete mode 100644 2022/CVE-2022-4047.json delete mode 100644 2022/CVE-2022-4060.json delete mode 100644 2022/CVE-2022-4061.json delete mode 100644 2022/CVE-2022-4063.json delete mode 100644 2022/CVE-2022-40634.json delete mode 100644 2022/CVE-2022-40635.json delete mode 100644 2022/CVE-2022-40881.json delete mode 100644 2022/CVE-2022-4096.json delete mode 100644 2022/CVE-2022-41034.json delete mode 100644 2022/CVE-2022-41099.json delete mode 100644 2022/CVE-2022-41114.json delete mode 100644 2022/CVE-2022-41220.json delete mode 100644 2022/CVE-2022-41333.json delete mode 100644 2022/CVE-2022-41343.json delete mode 100644 2022/CVE-2022-41401.json delete mode 100644 2022/CVE-2022-41853.json delete mode 100644 2022/CVE-2022-41876.json delete mode 100644 2022/CVE-2022-41903.json delete mode 100644 2022/CVE-2022-41924.json delete mode 100644 2022/CVE-2022-41966.json delete mode 100644 2022/CVE-2022-42703.json delete mode 100644 2022/CVE-2022-42864.json delete mode 100644 2022/CVE-2022-42896.json delete mode 100644 2022/CVE-2022-4304.json delete mode 100644 2022/CVE-2022-43293.json delete mode 100644 2022/CVE-2022-43343.json delete mode 100644 2022/CVE-2022-4395.json delete mode 100644 2022/CVE-2022-43980.json delete mode 100644 2022/CVE-2022-44118.json delete mode 100644 2022/CVE-2022-44149.json delete mode 100644 2022/CVE-2022-44276.json delete mode 100644 2022/CVE-2022-44311.json delete mode 100644 2022/CVE-2022-44312.json delete mode 100644 2022/CVE-2022-44318.json delete mode 100644 2022/CVE-2022-44569.json delete mode 100644 2022/CVE-2022-44666.json delete mode 100644 2022/CVE-2022-44875.json delete mode 100644 2022/CVE-2022-44877.json delete mode 100644 2022/CVE-2022-45003.json delete mode 100644 2022/CVE-2022-45004.json delete mode 100644 2022/CVE-2022-45047.json delete mode 100644 2022/CVE-2022-45059.json delete mode 100644 2022/CVE-2022-4510.json delete mode 100644 2022/CVE-2022-45354.json delete mode 100644 2022/CVE-2022-4539.json delete mode 100644 2022/CVE-2022-45436.json delete mode 100644 2022/CVE-2022-45477.json delete mode 100644 2022/CVE-2022-45599.json delete mode 100644 2022/CVE-2022-45600.json delete mode 100644 2022/CVE-2022-45688.json delete mode 100644 2022/CVE-2022-45701.json delete mode 100644 2022/CVE-2022-45728.json delete mode 100644 2022/CVE-2022-45729.json delete mode 100644 2022/CVE-2022-45770.json delete mode 100644 2022/CVE-2022-45808.json delete mode 100644 2022/CVE-2022-45934.json delete mode 100644 2022/CVE-2022-46080.json delete mode 100644 2022/CVE-2022-46087.json delete mode 100644 2022/CVE-2022-46104.json delete mode 100644 2022/CVE-2022-4611.json delete mode 100644 2022/CVE-2022-4616.json delete mode 100644 2022/CVE-2022-46164.json delete mode 100644 2022/CVE-2022-46175.json delete mode 100644 2022/CVE-2022-46196.json delete mode 100644 2022/CVE-2022-46505.json delete mode 100644 2022/CVE-2022-46622.json delete mode 100644 2022/CVE-2022-46623.json delete mode 100644 2022/CVE-2022-46718.json delete mode 100644 2022/CVE-2022-47102.json delete mode 100644 2022/CVE-2022-47130.json delete mode 100644 2022/CVE-2022-47131.json delete mode 100644 2022/CVE-2022-47132.json delete mode 100644 2022/CVE-2022-47373.json delete mode 100644 2022/CVE-2022-47529.json delete mode 100644 2022/CVE-2022-47615.json delete mode 100644 2022/CVE-2022-47872.json delete mode 100644 2022/CVE-2022-47986.json delete mode 100644 2022/CVE-2022-48150.json delete mode 100644 2022/CVE-2022-48197.json delete mode 100644 2022/CVE-2022-48311.json delete mode 100644 2022/CVE-2022-48429.json delete mode 100644 2022/CVE-2022-48474.json delete mode 100644 2022/CVE-2022-48565.json delete mode 100644 2022/CVE-2022-4896.json delete mode 100644 2022/CVE-2022-4939.json delete mode 100644 2022/CVE-2022-4944.json delete mode 100644 2023/CVE-2023-0266.json delete mode 100644 2023/CVE-2023-0400.json delete mode 100644 2023/CVE-2023-0461.json delete mode 100644 2023/CVE-2023-1189.json delete mode 100644 2023/CVE-2023-1206.json delete mode 100644 2023/CVE-2023-1405.json delete mode 100644 2023/CVE-2023-1514.json delete mode 100644 2023/CVE-2023-1545.json delete mode 100644 2023/CVE-2023-1773.json delete mode 100644 2023/CVE-2023-1874.json delete mode 100644 2023/CVE-2023-1999.json delete mode 100644 2023/CVE-2023-20048.json delete mode 100644 2023/CVE-2023-20352.json delete mode 100644 2023/CVE-2023-20564.json delete mode 100644 2023/CVE-2023-20598.json delete mode 100644 2023/CVE-2023-20872.json delete mode 100644 2023/CVE-2023-20904.json delete mode 100644 2023/CVE-2023-21125.json delete mode 100644 2023/CVE-2023-21173.json delete mode 100644 2023/CVE-2023-21537.json delete mode 100644 2023/CVE-2023-21560.json delete mode 100644 2023/CVE-2023-2163.json delete mode 100644 2023/CVE-2023-21674.json delete mode 100644 2023/CVE-2023-22047.json delete mode 100644 2023/CVE-2023-22077.json delete mode 100644 2023/CVE-2023-22098.json delete mode 100644 2023/CVE-2023-2245.json delete mode 100644 2023/CVE-2023-22493.json delete mode 100644 2023/CVE-2023-22622.json delete mode 100644 2023/CVE-2023-23388.json delete mode 100644 2023/CVE-2023-2375.json delete mode 100644 2023/CVE-2023-24044.json delete mode 100644 2023/CVE-2023-24057.json delete mode 100644 2023/CVE-2023-24203.json delete mode 100644 2023/CVE-2023-24249.json delete mode 100644 2023/CVE-2023-24278.json delete mode 100644 2023/CVE-2023-2437.json delete mode 100644 2023/CVE-2023-24871.json delete mode 100644 2023/CVE-2023-25202.json delete mode 100644 2023/CVE-2023-25203.json delete mode 100644 2023/CVE-2023-25355.json delete mode 100644 2023/CVE-2023-25581.json delete mode 100644 2023/CVE-2023-2603.json delete mode 100644 2023/CVE-2023-26208.json delete mode 100644 2023/CVE-2023-26209.json delete mode 100644 2023/CVE-2023-26326.json delete mode 100644 2023/CVE-2023-26785.json delete mode 100644 2023/CVE-2023-2728.json delete mode 100644 2023/CVE-2023-2745.json delete mode 100644 2023/CVE-2023-27564.json delete mode 100644 2023/CVE-2023-28205.json delete mode 100644 2023/CVE-2023-28303.json delete mode 100644 2023/CVE-2023-28324.json delete mode 100644 2023/CVE-2023-28354.json delete mode 100644 2023/CVE-2023-28465.json delete mode 100644 2023/CVE-2023-28588.json delete mode 100644 2023/CVE-2023-28753.json delete mode 100644 2023/CVE-2023-29201.json delete mode 100644 2023/CVE-2023-29384.json delete mode 100644 2023/CVE-2023-29386.json delete mode 100644 2023/CVE-2023-29528.json delete mode 100644 2023/CVE-2023-29689.json delete mode 100644 2023/CVE-2023-3047.json delete mode 100644 2023/CVE-2023-30486.json delete mode 100644 2023/CVE-2023-30799.json delete mode 100644 2023/CVE-2023-30800.json delete mode 100644 2023/CVE-2023-30861.json delete mode 100644 2023/CVE-2023-31126.json delete mode 100644 2023/CVE-2023-3128.json delete mode 100644 2023/CVE-2023-32070.json delete mode 100644 2023/CVE-2023-32314.json delete mode 100644 2023/CVE-2023-32413.json delete mode 100644 2023/CVE-2023-32428.json delete mode 100644 2023/CVE-2023-32590.json delete mode 100644 2023/CVE-2023-32697.json delete mode 100644 2023/CVE-2023-3280.json delete mode 100644 2023/CVE-2023-33105.json delete mode 100644 2023/CVE-2023-33580.json delete mode 100644 2023/CVE-2023-33747.json delete mode 100644 2023/CVE-2023-3390.json delete mode 100644 2023/CVE-2023-33962.json delete mode 100644 2023/CVE-2023-34194.json delete mode 100644 2023/CVE-2023-34233.json delete mode 100644 2023/CVE-2023-34478.json delete mode 100644 2023/CVE-2023-34732.json delete mode 100644 2023/CVE-2023-34804.json delete mode 100644 2023/CVE-2023-34845.json delete mode 100644 2023/CVE-2023-34992.json delete mode 100644 2023/CVE-2023-35085.json delete mode 100644 2023/CVE-2023-35317.json delete mode 100644 2023/CVE-2023-35636.json delete mode 100644 2023/CVE-2023-35854.json delete mode 100644 2023/CVE-2023-35887.json delete mode 100644 2023/CVE-2023-36085.json delete mode 100644 2023/CVE-2023-3609.json delete mode 100644 2023/CVE-2023-36407.json delete mode 100644 2023/CVE-2023-36424.json delete mode 100644 2023/CVE-2023-36471.json delete mode 100644 2023/CVE-2023-36542.json delete mode 100644 2023/CVE-2023-36644.json delete mode 100644 2023/CVE-2023-36645.json delete mode 100644 2023/CVE-2023-3722.json delete mode 100644 2023/CVE-2023-37273.json delete mode 100644 2023/CVE-2023-37456.json delete mode 100644 2023/CVE-2023-37460.json delete mode 100644 2023/CVE-2023-37467.json delete mode 100644 2023/CVE-2023-37635.json delete mode 100644 2023/CVE-2023-37790.json delete mode 100644 2023/CVE-2023-37908.json delete mode 100644 2023/CVE-2023-38039.json delete mode 100644 2023/CVE-2023-38041.json delete mode 100644 2023/CVE-2023-3824.json delete mode 100644 2023/CVE-2023-38600.json delete mode 100644 2023/CVE-2023-38709.json delete mode 100644 2023/CVE-2023-3881.json delete mode 100644 2023/CVE-2023-38873.json delete mode 100644 2023/CVE-2023-3897.json delete mode 100644 2023/CVE-2023-39024.json delete mode 100644 2023/CVE-2023-39141.json delete mode 100644 2023/CVE-2023-39143.json delete mode 100644 2023/CVE-2023-39320.json delete mode 100644 2023/CVE-2023-39361.json delete mode 100644 2023/CVE-2023-40000.json delete mode 100644 2023/CVE-2023-40029.json delete mode 100644 2023/CVE-2023-40109.json delete mode 100644 2023/CVE-2023-40127.json delete mode 100644 2023/CVE-2023-40130.json delete mode 100644 2023/CVE-2023-40133.json delete mode 100644 2023/CVE-2023-40167.json delete mode 100644 2023/CVE-2023-40289.json delete mode 100644 2023/CVE-2023-40355.json delete mode 100644 2023/CVE-2023-40404.json delete mode 100644 2023/CVE-2023-40448.json delete mode 100644 2023/CVE-2023-40931.json delete mode 100644 2023/CVE-2023-40933.json delete mode 100644 2023/CVE-2023-41044.json delete mode 100644 2023/CVE-2023-41564.json delete mode 100644 2023/CVE-2023-41652.json delete mode 100644 2023/CVE-2023-4197.json delete mode 100644 2023/CVE-2023-41992.json delete mode 100644 2023/CVE-2023-422.json delete mode 100644 2023/CVE-2023-4226.json delete mode 100644 2023/CVE-2023-42326.json delete mode 100644 2023/CVE-2023-42789.json delete mode 100644 2023/CVE-2023-42791.json delete mode 100644 2023/CVE-2023-42829.json delete mode 100644 2023/CVE-2023-42860.json delete mode 100644 2023/CVE-2023-42931.json delete mode 100644 2023/CVE-2023-4300.json delete mode 100644 2023/CVE-2023-43040.json delete mode 100644 2023/CVE-2023-43317.json delete mode 100644 2023/CVE-2023-43318.json delete mode 100644 2023/CVE-2023-43482.json delete mode 100644 2023/CVE-2023-43494.json delete mode 100644 2023/CVE-2023-43622.json delete mode 100644 2023/CVE-2023-43646.json delete mode 100644 2023/CVE-2023-43757.json delete mode 100644 2023/CVE-2023-4427.json delete mode 100644 2023/CVE-2023-4450.json delete mode 100644 2023/CVE-2023-4504.json delete mode 100644 2023/CVE-2023-45131.json delete mode 100644 2023/CVE-2023-45182.json delete mode 100644 2023/CVE-2023-45185.json delete mode 100644 2023/CVE-2023-45239.json delete mode 100644 2023/CVE-2023-45277.json delete mode 100644 2023/CVE-2023-45278.json delete mode 100644 2023/CVE-2023-45288.json delete mode 100644 2023/CVE-2023-45503.json delete mode 100644 2023/CVE-2023-45539.json delete mode 100644 2023/CVE-2023-45612.json delete mode 100644 2023/CVE-2023-4568.json delete mode 100644 2023/CVE-2023-45777.json delete mode 100644 2023/CVE-2023-45779.json delete mode 100644 2023/CVE-2023-45806.json delete mode 100644 2023/CVE-2023-45827.json delete mode 100644 2023/CVE-2023-45878.json delete mode 100644 2023/CVE-2023-4590.json delete mode 100644 2023/CVE-2023-46012.json delete mode 100644 2023/CVE-2023-46136.json delete mode 100644 2023/CVE-2023-4622.json delete mode 100644 2023/CVE-2023-46304.json delete mode 100644 2023/CVE-2023-46371.json delete mode 100644 2023/CVE-2023-46442.json delete mode 100644 2023/CVE-2023-46694.json delete mode 100644 2023/CVE-2023-46749.json delete mode 100644 2023/CVE-2023-46805.json delete mode 100644 2023/CVE-2023-46818.json delete mode 100644 2023/CVE-2023-46870.json delete mode 100644 2023/CVE-2023-46988.json delete mode 100644 2023/CVE-2023-47108.json delete mode 100644 2023/CVE-2023-47218.json delete mode 100644 2023/CVE-2023-47248.json delete mode 100644 2023/CVE-2023-47253.json delete mode 100644 2023/CVE-2023-47268.json delete mode 100644 2023/CVE-2023-47400.json delete mode 100644 2023/CVE-2023-47464.json delete mode 100644 2023/CVE-2023-47504.json delete mode 100644 2023/CVE-2023-47564.json delete mode 100644 2023/CVE-2023-4771.json delete mode 100644 2023/CVE-2023-48022.json delete mode 100644 2023/CVE-2023-48084.json delete mode 100644 2023/CVE-2023-4813.json delete mode 100644 2023/CVE-2023-48194.json delete mode 100644 2023/CVE-2023-48777.json delete mode 100644 2023/CVE-2023-48788.json delete mode 100644 2023/CVE-2023-49031.json delete mode 100644 2023/CVE-2023-49109.json delete mode 100644 2023/CVE-2023-49367.json delete mode 100644 2023/CVE-2023-49496.json delete mode 100644 2023/CVE-2023-49606.json delete mode 100644 2023/CVE-2023-49785.json delete mode 100644 2023/CVE-2023-49950.json delete mode 100644 2023/CVE-2023-49965.json delete mode 100644 2023/CVE-2023-50029.json delete mode 100644 2023/CVE-2023-50094.json delete mode 100644 2023/CVE-2023-50245.json delete mode 100644 2023/CVE-2023-50257.json delete mode 100644 2023/CVE-2023-50290.json delete mode 100644 2023/CVE-2023-50386.json delete mode 100644 2023/CVE-2023-50387.json delete mode 100644 2023/CVE-2023-50780.json delete mode 100644 2023/CVE-2023-50868.json delete mode 100644 2023/CVE-2023-5089.json delete mode 100644 2023/CVE-2023-51119.json delete mode 100644 2023/CVE-2023-51444.json delete mode 100644 2023/CVE-2023-51448.json delete mode 100644 2023/CVE-2023-51518.json delete mode 100644 2023/CVE-2023-51770.json delete mode 100644 2023/CVE-2023-5178.json delete mode 100644 2023/CVE-2023-5180.json delete mode 100644 2023/CVE-2023-51800.json delete mode 100644 2023/CVE-2023-51801.json delete mode 100644 2023/CVE-2023-51802.json delete mode 100644 2023/CVE-2023-5204.json delete mode 100644 2023/CVE-2023-52160.json delete mode 100644 2023/CVE-2023-52251.json delete mode 100644 2023/CVE-2023-52268.json delete mode 100644 2023/CVE-2023-52440.json delete mode 100644 2023/CVE-2023-52654.json delete mode 100644 2023/CVE-2023-52709.json delete mode 100644 2023/CVE-2023-52927.json delete mode 100644 2023/CVE-2023-5359.json delete mode 100644 2023/CVE-2023-5612.json delete mode 100644 2023/CVE-2023-5717.json delete mode 100644 2023/CVE-2023-5961.json delete mode 100644 2023/CVE-2023-5965.json delete mode 100644 2023/CVE-2023-6000.json delete mode 100644 2023/CVE-2023-6036.json delete mode 100644 2023/CVE-2023-6199.json delete mode 100644 2023/CVE-2023-6241.json delete mode 100644 2023/CVE-2023-6275.json delete mode 100644 2023/CVE-2023-6319.json delete mode 100644 2023/CVE-2023-6350.json delete mode 100644 2023/CVE-2023-6360.json delete mode 100644 2023/CVE-2023-6387.json delete mode 100644 2023/CVE-2023-6401.json delete mode 100644 2023/CVE-2023-6421.json delete mode 100644 2023/CVE-2023-6444.json delete mode 100644 2023/CVE-2023-6546.json delete mode 100644 2023/CVE-2023-6595.json delete mode 100644 2023/CVE-2023-6634.json delete mode 100644 2023/CVE-2023-6654.json delete mode 100644 2023/CVE-2023-6700.json delete mode 100644 2023/CVE-2023-6702.json delete mode 100644 2023/CVE-2023-6875.json delete mode 100644 2023/CVE-2023-6895.json delete mode 100644 2023/CVE-2023-6931.json delete mode 100644 2023/CVE-2023-6933.json delete mode 100644 2023/CVE-2023-6985.json delete mode 100644 2023/CVE-2023-7016.json delete mode 100644 2023/CVE-2023-7024.json delete mode 100644 2023/CVE-2023-7028.json delete mode 100644 2023/CVE-2023-7231.json delete mode 100644 2023/CVE-2023-7261.json create mode 100644 2026/CVE-2026-13768.json create mode 100644 2026/CVE-2026-36027.json create mode 100644 2026/CVE-2026-52217.json rename 2022/CVE-2022-29380.json => 2026/CVE-2026-54424.json (53%) create mode 100644 2026/CVE-2026-54477.json create mode 100644 2026/CVE-2026-55726.json diff --git a/2007/CVE-2007-6750.json b/2007/CVE-2007-6750.json new file mode 100644 index 0000000000..d6a11b6e45 --- /dev/null +++ b/2007/CVE-2007-6750.json @@ -0,0 +1,35 @@ +[ + { + "id": 1240275861, + "name": "siem-threat-detection-lab", + "full_name": "sarjanpatel22\/siem-threat-detection-lab", + "owner": { + "login": "sarjanpatel22", + "id": 285092926, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285092926?v=4", + "html_url": "https:\/\/github.com\/sarjanpatel22", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sarjanpatel22\/siem-threat-detection-lab", + "description": "Blue-team SIEM lab: Wazuh 4.7.5 detecting 7 simulated attacks (SSH brute force, Slowloris DoS \/ CVE-2007-6750, web attacks) with real-time MITRE ATT&CK mapping — 3,726+ alerts.", + "fork": false, + "created_at": "2026-05-16T00:31:46Z", + "updated_at": "2026-07-02T20:31:59Z", + "pushed_at": "2026-07-02T20:31:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2016/CVE-2016-6210.json b/2016/CVE-2016-6210.json index 3de2e5a5e3..f6e54de31b 100644 --- a/2016/CVE-2016-6210.json +++ b/2016/CVE-2016-6210.json @@ -212,8 +212,8 @@ "description": "This project explores whether modern OpenSSH reveals valid usernames through subtle response or timing differences. CVE-2016-6210 user enumeration investigation ( Welch's t-test, Cohen's d, and detection engineering ) on a controlled lab on Ubuntu 22.04.5 LTS, it also examines the traces such attempts leave behind and how they can be detected..", "fork": false, "created_at": "2026-04-30T12:31:20Z", - "updated_at": "2026-06-30T16:32:14Z", - "pushed_at": "2026-06-30T16:32:01Z", + "updated_at": "2026-07-02T19:20:47Z", + "pushed_at": "2026-07-02T19:20:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-9506.json b/2017/CVE-2017-9506.json index 2797bb2c50..66b894e2c0 100644 --- a/2017/CVE-2017-9506.json +++ b/2017/CVE-2017-9506.json @@ -14,10 +14,10 @@ "description": "CVE-2017-9506 - SSRF", "fork": false, "created_at": "2018-04-25T11:25:18Z", - "updated_at": "2026-04-29T04:14:56Z", + "updated_at": "2026-07-02T22:01:49Z", "pushed_at": "2022-02-14T22:00:28Z", - "stargazers_count": 191, - "watchers_count": 191, + "stargazers_count": 192, + "watchers_count": 192, "has_discussions": false, "forks_count": 45, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 45, - "watchers": 191, + "watchers": 192, "score": 0, "subscribers_count": 4 }, diff --git a/2018/CVE-2018-16323.json b/2018/CVE-2018-16323.json index 2f6ede7630..7bbbfe14d7 100644 --- a/2018/CVE-2018-16323.json +++ b/2018/CVE-2018-16323.json @@ -14,10 +14,10 @@ "description": "Tool for CVE-2018-16323", "fork": false, "created_at": "2018-11-18T15:30:46Z", - "updated_at": "2025-11-05T07:04:03Z", + "updated_at": "2026-07-02T22:01:47Z", "pushed_at": "2019-01-17T21:01:56Z", - "stargazers_count": 82, - "watchers_count": 82, + "stargazers_count": 83, + "watchers_count": 83, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 82, + "watchers": 83, "score": 0, "subscribers_count": 4 } diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index cbb4980503..02b7a1fd94 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-07-02T18:15:18Z", - "pushed_at": "2026-07-02T18:15:09Z", + "updated_at": "2026-07-02T23:32:03Z", + "pushed_at": "2026-07-02T23:31:59Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2019/CVE-2019-11932.json b/2019/CVE-2019-11932.json index 2920225212..bd767e4824 100644 --- a/2019/CVE-2019-11932.json +++ b/2019/CVE-2019-11932.json @@ -350,10 +350,10 @@ "description": "Whatsapp Automatic Payload Generator [CVE-2019-11932]", "fork": false, "created_at": "2020-04-22T21:11:27Z", - "updated_at": "2026-04-29T18:11:38Z", + "updated_at": "2026-07-02T22:49:12Z", "pushed_at": "2022-01-02T20:40:58Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -374,7 +374,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 34, + "watchers": 35, "score": 0, "subscribers_count": 2 }, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 6e29c9803e..95fc74e4fe 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-07-02T17:05:54Z", - "pushed_at": "2026-07-02T17:05:21Z", + "updated_at": "2026-07-02T23:36:03Z", + "pushed_at": "2026-07-02T23:35:59Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-1938.json b/2020/CVE-2020-1938.json index b524840fd6..2cd098c09b 100644 --- a/2020/CVE-2020-1938.json +++ b/2020/CVE-2020-1938.json @@ -377,10 +377,10 @@ "description": "Ghostcat read file\/code execute,CNVD-2020-10487(CVE-2020-1938) ", "fork": false, "created_at": "2020-02-22T16:16:20Z", - "updated_at": "2026-06-26T06:33:35Z", + "updated_at": "2026-07-02T22:18:16Z", "pushed_at": "2020-03-09T14:51:43Z", - "stargazers_count": 418, - "watchers_count": 418, + "stargazers_count": 419, + "watchers_count": 419, "has_discussions": false, "forks_count": 112, "allow_forking": true, @@ -397,7 +397,7 @@ ], "visibility": "public", "forks": 112, - "watchers": 418, + "watchers": 419, "score": 0, "subscribers_count": 3 }, @@ -713,10 +713,10 @@ "description": null, "fork": false, "created_at": "2021-03-28T03:30:44Z", - "updated_at": "2026-04-01T05:19:34Z", + "updated_at": "2026-07-02T22:12:43Z", "pushed_at": "2022-11-27T06:14:19Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -727,7 +727,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 17, + "watchers": 18, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-36643.json b/2020/CVE-2020-9529.json similarity index 52% rename from 2023/CVE-2023-36643.json rename to 2020/CVE-2020-9529.json index d79141c942..b4fa6ca22d 100644 --- a/2023/CVE-2023-36643.json +++ b/2020/CVE-2020-9529.json @@ -1,21 +1,21 @@ [ { - "id": 780084094, - "name": "CVE-2023-36643", - "full_name": "caffeinated-labs\/CVE-2023-36643", + "id": 930467009, + "name": "hichipreset", + "full_name": "prisect\/hichipreset", "owner": { - "login": "caffeinated-labs", - "id": 111591049, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111591049?v=4", - "html_url": "https:\/\/github.com\/caffeinated-labs", + "login": "prisect", + "id": 78304878, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78304878?v=4", + "html_url": "https:\/\/github.com\/prisect", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/caffeinated-labs\/CVE-2023-36643", - "description": null, + "html_url": "https:\/\/github.com\/prisect\/hichipreset", + "description": "Hicip IP admin password reset script using CVE-2020-9529. This is made for educational purposes only of course.", "fork": false, - "created_at": "2024-03-31T16:55:17Z", - "updated_at": "2024-04-02T15:43:16Z", - "pushed_at": "2024-03-31T16:55:41Z", + "created_at": "2025-02-10T17:20:13Z", + "updated_at": "2026-07-02T23:19:23Z", + "pushed_at": "2025-02-10T18:49:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json index 74589f4d05..d1d3d4a2b7 100644 --- a/2021/CVE-2021-1931.json +++ b/2021/CVE-2021-1931.json @@ -47,12 +47,12 @@ "description": "My take on unlocking Xperia 5 SO-01M for p42 bootloader using CVE-2021-1931", "fork": false, "created_at": "2026-07-02T08:03:35Z", - "updated_at": "2026-07-02T08:42:32Z", - "pushed_at": "2026-07-02T08:29:02Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-07-02T23:51:50Z", + "pushed_at": "2026-07-02T23:05:15Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 1, + "forks": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index 8448f41978..2cc40e1625 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-07-02T18:21:06Z", - "pushed_at": "2026-07-02T18:21:02Z", + "updated_at": "2026-07-02T23:41:49Z", + "pushed_at": "2026-07-02T23:41:45Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-40449.json b/2021/CVE-2021-40449.json index 9f2cf8bdb4..6774868041 100644 --- a/2021/CVE-2021-40449.json +++ b/2021/CVE-2021-40449.json @@ -14,10 +14,10 @@ "description": "Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)", "fork": false, "created_at": "2021-10-16T16:17:44Z", - "updated_at": "2026-06-30T12:16:59Z", + "updated_at": "2026-07-02T18:40:15Z", "pushed_at": "2021-11-11T17:09:56Z", - "stargazers_count": 478, - "watchers_count": 478, + "stargazers_count": 479, + "watchers_count": 479, "has_discussions": false, "forks_count": 95, "allow_forking": true, @@ -30,7 +30,7 @@ ], "visibility": "public", "forks": 95, - "watchers": 478, + "watchers": 479, "score": 0, "subscribers_count": 11 }, diff --git a/2021/CVE-2021-43798.json b/2021/CVE-2021-43798.json index 323799b1de..72829a491f 100644 --- a/2021/CVE-2021-43798.json +++ b/2021/CVE-2021-43798.json @@ -220,10 +220,10 @@ "description": "A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins \/ extract secret_key \/ decrypt data_source info automatic.", "fork": false, "created_at": "2021-12-07T15:11:34Z", - "updated_at": "2026-05-30T05:56:49Z", + "updated_at": "2026-07-02T19:35:44Z", "pushed_at": "2025-10-17T02:24:00Z", - "stargazers_count": 268, - "watchers_count": 268, + "stargazers_count": 269, + "watchers_count": 269, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -238,7 +238,7 @@ ], "visibility": "public", "forks": 32, - "watchers": 268, + "watchers": 269, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-0155.json b/2022/CVE-2022-0155.json deleted file mode 100644 index 6f6b996556..0000000000 --- a/2022/CVE-2022-0155.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 830527219, - "name": "CVE-2022-0155-PoC", - "full_name": "coana-tech\/CVE-2022-0155-PoC", - "owner": { - "login": "coana-tech", - "id": 66076970, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66076970?v=4", - "html_url": "https:\/\/github.com\/coana-tech", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/coana-tech\/CVE-2022-0155-PoC", - "description": null, - "fork": false, - "created_at": "2024-07-18T12:57:18Z", - "updated_at": "2024-07-18T13:01:28Z", - "pushed_at": "2024-07-18T13:01:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0165.json b/2022/CVE-2022-0165.json deleted file mode 100644 index 4da9fb272f..0000000000 --- a/2022/CVE-2022-0165.json +++ /dev/null @@ -1,76 +0,0 @@ -[ - { - "id": 676524045, - "name": "CVE-2022-0165-EXPLOIT", - "full_name": "K3ysTr0K3R\/CVE-2022-0165-EXPLOIT", - "owner": { - "login": "K3ysTr0K3R", - "id": 70909693, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", - "html_url": "https:\/\/github.com\/K3ysTr0K3R", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2022-0165-EXPLOIT", - "description": "A PoC exploit for CVE-2022-0165 - Page Builder KingComposer WordPress Plugin - ID Parameter Validation Bypass", - "fork": false, - "created_at": "2023-08-09T11:53:18Z", - "updated_at": "2026-02-25T03:31:23Z", - "pushed_at": "2023-08-09T11:59:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 807412299, - "name": "CVE-2022-0165", - "full_name": "Cappricio-Securities\/CVE-2022-0165", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2022-0165", - "description": "WordPress Page Builder KingComposer <=2.9.6 - Open Redirect", - "fork": false, - "created_at": "2024-05-29T04:00:25Z", - "updated_at": "2024-06-24T09:29:49Z", - "pushed_at": "2024-06-24T09:29:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bugbounty", - "bugbounty-tools", - "cve-2022-0165", - "cve-2022-0165-poc", - "cve-2022-0165-scanner", - "open-redirect", - "wordpress-page-builder-kingcomposer" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0185.json b/2022/CVE-2022-0185.json index b2be4588d7..a206f27c3e 100644 --- a/2022/CVE-2022-0185.json +++ b/2022/CVE-2022-0185.json @@ -197,39 +197,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 786640173, - "name": "CVE-2022-0185-Case-Study", - "full_name": "dcheng69\/CVE-2022-0185-Case-Study", - "owner": { - "login": "dcheng69", - "id": 145501807, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145501807?v=4", - "html_url": "https:\/\/github.com\/dcheng69", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dcheng69\/CVE-2022-0185-Case-Study", - "description": null, - "fork": false, - "created_at": "2024-04-15T02:42:43Z", - "updated_at": "2026-02-28T15:42:47Z", - "pushed_at": "2024-05-09T17:07:15Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 1166801036, "name": "CVE-2022-0185-Analysis-and-Exploit", diff --git a/2022/CVE-2022-0316.json b/2022/CVE-2022-0316.json deleted file mode 100644 index 0c68f303f0..0000000000 --- a/2022/CVE-2022-0316.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "id": 599217584, - "name": "CVE-2022-0316_wordpress_multiple_themes_exploit", - "full_name": "KTN1990\/CVE-2022-0316_wordpress_multiple_themes_exploit", - "owner": { - "login": "KTN1990", - "id": 33407405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33407405?v=4", - "html_url": "https:\/\/github.com\/KTN1990", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KTN1990\/CVE-2022-0316_wordpress_multiple_themes_exploit", - "description": "( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload", - "fork": false, - "created_at": "2023-02-08T17:37:09Z", - "updated_at": "2026-05-18T02:43:57Z", - "pushed_at": "2023-02-09T15:59:30Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bot", - "botnet", - "exploit", - "hack", - "hacking", - "pentest", - "pentest-tool", - "shell" - ], - "visibility": "public", - "forks": 5, - "watchers": 10, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0337.json b/2022/CVE-2022-0337.json index 76b8376025..9cdcabb2b9 100644 --- a/2022/CVE-2022-0337.json +++ b/2022/CVE-2022-0337.json @@ -47,71 +47,5 @@ "watchers": 340, "score": 0, "subscribers_count": 3 - }, - { - "id": 608127887, - "name": "ChExp-CVE-2022-0337-", - "full_name": "maldev866\/ChExp-CVE-2022-0337-", - "owner": { - "login": "maldev866", - "id": 118355132, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118355132?v=4", - "html_url": "https:\/\/github.com\/maldev866", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/maldev866\/ChExp-CVE-2022-0337-", - "description": null, - "fork": false, - "created_at": "2023-03-01T11:31:45Z", - "updated_at": "2023-03-01T11:33:31Z", - "pushed_at": "2023-03-01T11:33:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 721416376, - "name": "CVE-2022-0337-RePoC", - "full_name": "zer0ne1\/CVE-2022-0337-RePoC", - "owner": { - "login": "zer0ne1", - "id": 71746399, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71746399?v=4", - "html_url": "https:\/\/github.com\/zer0ne1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zer0ne1\/CVE-2022-0337-RePoC", - "description": null, - "fork": false, - "created_at": "2023-11-21T02:34:32Z", - "updated_at": "2023-11-21T02:36:09Z", - "pushed_at": "2023-12-12T02:42:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-0435.json b/2022/CVE-2022-0435.json index 3393e5f03a..b46edd578f 100644 --- a/2022/CVE-2022-0435.json +++ b/2022/CVE-2022-0435.json @@ -1,37 +1,4 @@ [ - { - "id": 630581068, - "name": "CVE-2022-0435", - "full_name": "wlswotmd\/CVE-2022-0435", - "owner": { - "login": "wlswotmd", - "id": 80761172, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80761172?v=4", - "html_url": "https:\/\/github.com\/wlswotmd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wlswotmd\/CVE-2022-0435", - "description": null, - "fork": false, - "created_at": "2023-04-20T17:29:02Z", - "updated_at": "2023-07-03T13:45:44Z", - "pushed_at": "2023-04-26T09:45:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1148161182, "name": "CVE-2022-0435-Poc", diff --git a/2022/CVE-2022-0439.json b/2022/CVE-2022-0439.json deleted file mode 100644 index 6f0d296cfc..0000000000 --- a/2022/CVE-2022-0439.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 651257016, - "name": "CVE-2022-0439", - "full_name": "RandomRobbieBF\/CVE-2022-0439", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-0439", - "description": "CVE-2022-0439 - Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection", - "fork": false, - "created_at": "2023-06-08T21:20:22Z", - "updated_at": "2023-06-09T07:40:58Z", - "pushed_at": "2023-06-08T21:26:58Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0441.json b/2022/CVE-2022-0441.json index 03df0f01e3..3ba064f2af 100644 --- a/2022/CVE-2022-0441.json +++ b/2022/CVE-2022-0441.json @@ -70,75 +70,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 648445645, - "name": "CVE-2022-0441", - "full_name": "tegal1337\/CVE-2022-0441", - "owner": { - "login": "tegal1337", - "id": 58784189, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58784189?v=4", - "html_url": "https:\/\/github.com\/tegal1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tegal1337\/CVE-2022-0441", - "description": "The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin", - "fork": false, - "created_at": "2023-06-02T01:53:32Z", - "updated_at": "2024-08-12T20:31:34Z", - "pushed_at": "2023-06-02T02:24:56Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-0441", - "wordpress-exploit", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 699704500, - "name": "CVE-2022-0441", - "full_name": "kyukazamiqq\/CVE-2022-0441", - "owner": { - "login": "kyukazamiqq", - "id": 55656379, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55656379?v=4", - "html_url": "https:\/\/github.com\/kyukazamiqq", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kyukazamiqq\/CVE-2022-0441", - "description": "Checker for CVE-2022-0441", - "fork": false, - "created_at": "2023-10-03T07:07:40Z", - "updated_at": "2023-10-03T07:09:30Z", - "pushed_at": "2023-10-03T07:09:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-0482.json b/2022/CVE-2022-0482.json index ae3c41c2d6..5c5a2a9649 100644 --- a/2022/CVE-2022-0482.json +++ b/2022/CVE-2022-0482.json @@ -37,38 +37,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 790152234, - "name": "CVE-2022-0482_exploit", - "full_name": "mija-pilkaite\/CVE-2022-0482_exploit", - "owner": { - "login": "mija-pilkaite", - "id": 115141099, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115141099?v=4", - "html_url": "https:\/\/github.com\/mija-pilkaite", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mija-pilkaite\/CVE-2022-0482_exploit", - "description": "A final project for \"Network Security\" class at NYCU (National Yang Ming Chiao Tung University, Taiwan). Exploiting a CVE in \"EasyAppointments\" software. ", - "fork": false, - "created_at": "2024-04-22T11:10:33Z", - "updated_at": "2024-05-11T09:48:18Z", - "pushed_at": "2024-04-22T12:09:00Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-0492.json b/2022/CVE-2022-0492.json index 5e5dc1fd9e..bc7439f348 100644 --- a/2022/CVE-2022-0492.json +++ b/2022/CVE-2022-0492.json @@ -164,46 +164,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 603301567, - "name": "CVE-2022-0492-Docker-Breakout-Checker-and-PoC", - "full_name": "T1erno\/CVE-2022-0492-Docker-Breakout-Checker-and-PoC", - "owner": { - "login": "T1erno", - "id": 78065668, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78065668?v=4", - "html_url": "https:\/\/github.com\/T1erno", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/T1erno\/CVE-2022-0492-Docker-Breakout-Checker-and-PoC", - "description": "Docker Breakout Checker and PoC via CAP_SYS_ADMIN and via user namespaces (CVE-2022-0492)", - "fork": false, - "created_at": "2023-02-18T04:48:25Z", - "updated_at": "2026-05-10T10:41:28Z", - "pushed_at": "2023-02-18T05:28:02Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-0492", - "docker-breakout", - "hacking", - "pentesting", - "privesc" - ], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, { "id": 1023022728, "name": "cve_2022_0492", diff --git a/2022/CVE-2022-0543.json b/2022/CVE-2022-0543.json index 583414bb5b..6f66273364 100644 --- a/2022/CVE-2022-0543.json +++ b/2022/CVE-2022-0543.json @@ -98,39 +98,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 638780954, - "name": "redisHack", - "full_name": "SiennaSkies\/redisHack", - "owner": { - "login": "SiennaSkies", - "id": 105592340, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105592340?v=4", - "html_url": "https:\/\/github.com\/SiennaSkies", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SiennaSkies\/redisHack", - "description": "redis未授权、redis_CVE-2022-0543检测利用二合一脚本", - "fork": false, - "created_at": "2023-05-10T05:05:31Z", - "updated_at": "2024-12-08T15:52:10Z", - "pushed_at": "2023-05-11T09:23:28Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1098792841, "name": "CVE-2022-0543-Home-Lab", diff --git a/2022/CVE-2022-0591.json b/2022/CVE-2022-0591.json deleted file mode 100644 index 4dfaf31150..0000000000 --- a/2022/CVE-2022-0591.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 688625677, - "name": "FC3er", - "full_name": "im-hanzou\/FC3er", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/FC3er", - "description": "Automatic Mass Tool for checking vulnerability in CVE-2022-0591 - Formcraft3 < 3.8.28 - Unauthenticated SSRF", - "fork": false, - "created_at": "2023-09-07T18:41:43Z", - "updated_at": "2024-11-21T14:54:22Z", - "pushed_at": "2023-09-07T19:57:08Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "checker", - "cve-2022-0591", - "formcraft", - "formcraft3", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0739.json b/2022/CVE-2022-0739.json index dd68a26d53..4beb0fc674 100644 --- a/2022/CVE-2022-0739.json +++ b/2022/CVE-2022-0739.json @@ -169,105 +169,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 586035039, - "name": "CVE-2022-0739", - "full_name": "viardant\/CVE-2022-0739", - "owner": { - "login": "viardant", - "id": 84291326, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84291326?v=4", - "html_url": "https:\/\/github.com\/viardant", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/viardant\/CVE-2022-0739", - "description": "Exploit for WP BookingPress (< 1.0.11) based on destr4ct POC.", - "fork": false, - "created_at": "2023-01-06T19:07:11Z", - "updated_at": "2025-12-01T08:05:27Z", - "pushed_at": "2023-01-17T16:02:48Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 603458874, - "name": "CVE-2022-0739", - "full_name": "ElGanz0\/CVE-2022-0739", - "owner": { - "login": "ElGanz0", - "id": 103381132, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103381132?v=4", - "html_url": "https:\/\/github.com\/ElGanz0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ElGanz0\/CVE-2022-0739", - "description": "BookingPress < 1.0.11 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2023-02-18T15:23:49Z", - "updated_at": "2023-02-18T15:24:59Z", - "pushed_at": "2023-02-23T21:49:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 616018302, - "name": "Bash-exploit-for-CVE-2022-0739", - "full_name": "lhamouche\/Bash-exploit-for-CVE-2022-0739", - "owner": { - "login": "lhamouche", - "id": 125658579, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125658579?v=4", - "html_url": "https:\/\/github.com\/lhamouche", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lhamouche\/Bash-exploit-for-CVE-2022-0739", - "description": null, - "fork": false, - "created_at": "2023-03-19T11:35:03Z", - "updated_at": "2025-02-14T17:11:25Z", - "pushed_at": "2023-03-23T08:20:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1071937377, "name": "CVE-2022-0739-Exploitation", diff --git a/2022/CVE-2022-0778.json b/2022/CVE-2022-0778.json index 1d4adbb323..7d1509c4ae 100644 --- a/2022/CVE-2022-0778.json +++ b/2022/CVE-2022-0778.json @@ -136,71 +136,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 689922616, - "name": "openssl-1.1.1g_CVE-2022-0778", - "full_name": "Trinadh465\/openssl-1.1.1g_CVE-2022-0778", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/openssl-1.1.1g_CVE-2022-0778", - "description": null, - "fork": false, - "created_at": "2023-09-11T07:30:33Z", - "updated_at": "2023-09-11T07:33:47Z", - "pushed_at": "2023-09-11T07:34:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 710128947, - "name": "CVE-2022-0778", - "full_name": "jeongjunsoo\/CVE-2022-0778", - "owner": { - "login": "jeongjunsoo", - "id": 75816093, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75816093?v=4", - "html_url": "https:\/\/github.com\/jeongjunsoo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jeongjunsoo\/CVE-2022-0778", - "description": null, - "fork": false, - "created_at": "2023-10-26T04:39:44Z", - "updated_at": "2023-10-26T04:39:44Z", - "pushed_at": "2023-10-26T07:09:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json index bef8caaeaa..002f29dd05 100644 --- a/2022/CVE-2022-0847.json +++ b/2022/CVE-2022-0847.json @@ -2516,435 +2516,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 585137919, - "name": "Dirty-Pipe-CVE-2022-0847-POCs", - "full_name": "ajith737\/Dirty-Pipe-CVE-2022-0847-POCs", - "owner": { - "login": "ajith737", - "id": 72512571, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72512571?v=4", - "html_url": "https:\/\/github.com\/ajith737", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ajith737\/Dirty-Pipe-CVE-2022-0847-POCs", - "description": null, - "fork": false, - "created_at": "2023-01-04T12:17:12Z", - "updated_at": "2023-01-04T12:17:19Z", - "pushed_at": "2023-01-04T12:51:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 592661297, - "name": "CVE-2022-0847", - "full_name": "mutur4\/CVE-2022-0847", - "owner": { - "login": "mutur4", - "id": 68686790, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68686790?v=4", - "html_url": "https:\/\/github.com\/mutur4", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mutur4\/CVE-2022-0847", - "description": "Drity Pipe Linux Kernel 1-Day Exploit", - "fork": false, - "created_at": "2023-01-24T08:44:32Z", - "updated_at": "2024-02-10T19:14:45Z", - "pushed_at": "2023-09-06T12:28:47Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 606665321, - "name": "CVE-2022-0847-DirtyPipe-Exploits", - "full_name": "orsuprasad\/CVE-2022-0847-DirtyPipe-Exploits", - "owner": { - "login": "orsuprasad", - "id": 96675141, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96675141?v=4", - "html_url": "https:\/\/github.com\/orsuprasad", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/orsuprasad\/CVE-2022-0847-DirtyPipe-Exploits", - "description": null, - "fork": false, - "created_at": "2023-02-26T07:08:36Z", - "updated_at": "2023-02-26T07:09:46Z", - "pushed_at": "2023-02-26T07:09:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 632960690, - "name": "CVE-2022-0847-container-escape", - "full_name": "JlSakuya\/CVE-2022-0847-container-escape", - "owner": { - "login": "JlSakuya", - "id": 43692131, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43692131?v=4", - "html_url": "https:\/\/github.com\/JlSakuya", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JlSakuya\/CVE-2022-0847-container-escape", - "description": "A simple exploit that uses dirtypipe to inject shellcode into runC entrypoint to implement container escapes.", - "fork": false, - "created_at": "2023-04-26T13:37:14Z", - "updated_at": "2023-04-29T08:25:41Z", - "pushed_at": "2023-04-26T13:38:38Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 634694393, - "name": "cve-2022-0847", - "full_name": "jonathanbest7\/cve-2022-0847", - "owner": { - "login": "jonathanbest7", - "id": 91819614, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91819614?v=4", - "html_url": "https:\/\/github.com\/jonathanbest7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jonathanbest7\/cve-2022-0847", - "description": "check cve-2022-0847", - "fork": false, - "created_at": "2023-04-30T23:52:14Z", - "updated_at": "2023-04-30T23:52:15Z", - "pushed_at": "2023-04-30T23:52:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 656422987, - "name": "dirty-pipe-poc", - "full_name": "0xeremus\/dirty-pipe-poc", - "owner": { - "login": "0xeremus", - "id": 115777776, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115777776?v=4", - "html_url": "https:\/\/github.com\/0xeremus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xeremus\/dirty-pipe-poc", - "description": "POC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe Vulnerability", - "fork": false, - "created_at": "2023-06-20T23:48:24Z", - "updated_at": "2026-05-06T09:27:08Z", - "pushed_at": "2023-06-20T23:48:52Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 662828842, - "name": "CVE-2022-0847-eBPF", - "full_name": "h4ckm310n\/CVE-2022-0847-eBPF", - "owner": { - "login": "h4ckm310n", - "id": 10968322, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10968322?v=4", - "html_url": "https:\/\/github.com\/h4ckm310n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h4ckm310n\/CVE-2022-0847-eBPF", - "description": "An eBPF program to detect attacks on CVE-2022-0847", - "fork": false, - "created_at": "2023-07-06T01:31:01Z", - "updated_at": "2024-07-03T22:01:24Z", - "pushed_at": "2023-11-04T15:49:51Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 664412775, - "name": "CVE-2022-0847-Exploit-Implementation", - "full_name": "joeymeech\/CVE-2022-0847-Exploit-Implementation", - "owner": { - "login": "joeymeech", - "id": 32067575, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32067575?v=4", - "html_url": "https:\/\/github.com\/joeymeech", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/joeymeech\/CVE-2022-0847-Exploit-Implementation", - "description": "Using CVE-2022-0847, \"Dirty Pipe Exploit\", to pop a reverse bash shell for arbitrary code execution on a foreign machine.", - "fork": false, - "created_at": "2023-07-09T22:48:22Z", - "updated_at": "2024-06-21T10:50:51Z", - "pushed_at": "2023-07-11T02:02:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 692738777, - "name": "DirtyPipe", - "full_name": "pashayogi\/DirtyPipe", - "owner": { - "login": "pashayogi", - "id": 50790111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50790111?v=4", - "html_url": "https:\/\/github.com\/pashayogi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pashayogi\/DirtyPipe", - "description": "CVE: CVE-2022-0847", - "fork": false, - "created_at": "2023-09-17T12:43:52Z", - "updated_at": "2024-07-16T13:10:31Z", - "pushed_at": "2023-09-17T12:44:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 709775288, - "name": "CVE-2022-0847-dirty-pipe-checker", - "full_name": "ayushx007\/CVE-2022-0847-dirty-pipe-checker", - "owner": { - "login": "ayushx007", - "id": 113995024, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113995024?v=4", - "html_url": "https:\/\/github.com\/ayushx007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ayushx007\/CVE-2022-0847-dirty-pipe-checker", - "description": "Bash script to check if kernel is vulnerable ", - "fork": false, - "created_at": "2023-10-25T11:28:22Z", - "updated_at": "2023-10-25T11:29:25Z", - "pushed_at": "2023-10-25T11:29:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 714682173, - "name": "CVE-2022-0847-DirtyPipe-Exploits", - "full_name": "ayushx007\/CVE-2022-0847-DirtyPipe-Exploits", - "owner": { - "login": "ayushx007", - "id": 113995024, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113995024?v=4", - "html_url": "https:\/\/github.com\/ayushx007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ayushx007\/CVE-2022-0847-DirtyPipe-Exploits", - "description": null, - "fork": false, - "created_at": "2023-11-05T15:34:54Z", - "updated_at": "2023-11-05T15:35:50Z", - "pushed_at": "2023-11-05T15:35:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 736712600, - "name": "LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus", - "full_name": "solomon12354\/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus", - "owner": { - "login": "solomon12354", - "id": 84257391, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84257391?v=4", - "html_url": "https:\/\/github.com\/solomon12354", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/solomon12354\/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus", - "description": null, - "fork": false, - "created_at": "2023-12-28T16:52:42Z", - "updated_at": "2024-07-13T01:50:03Z", - "pushed_at": "2024-05-27T16:41:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 757803327, - "name": "CVE-2022-0847", - "full_name": "letsr00t\/CVE-2022-0847", - "owner": { - "login": "letsr00t", - "id": 38699989, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38699989?v=4", - "html_url": "https:\/\/github.com\/letsr00t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/letsr00t\/CVE-2022-0847", - "description": null, - "fork": false, - "created_at": "2024-02-15T02:27:27Z", - "updated_at": "2024-02-15T02:28:36Z", - "pushed_at": "2024-02-15T02:28:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 789035235, "name": "DirtyPipe-Exploit", @@ -2978,237 +2549,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 794413658, - "name": "CVE-2022-0847", - "full_name": "xsxtw\/CVE-2022-0847", - "owner": { - "login": "xsxtw", - "id": 168295718, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168295718?v=4", - "html_url": "https:\/\/github.com\/xsxtw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xsxtw\/CVE-2022-0847", - "description": null, - "fork": false, - "created_at": "2024-05-01T05:16:16Z", - "updated_at": "2024-05-01T05:18:06Z", - "pushed_at": "2024-05-01T05:18:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 810324570, - "name": "CVE-2022-0847-dirty-pipe-checker", - "full_name": "muhammad1596\/CVE-2022-0847-dirty-pipe-checker", - "owner": { - "login": "muhammad1596", - "id": 68430129, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68430129?v=4", - "html_url": "https:\/\/github.com\/muhammad1596", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/muhammad1596\/CVE-2022-0847-dirty-pipe-checker", - "description": null, - "fork": false, - "created_at": "2024-06-04T13:25:04Z", - "updated_at": "2024-06-04T16:18:38Z", - "pushed_at": "2024-06-04T16:07:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 811402709, - "name": "CVE-2022-0847-DirtyPipe-Exploits", - "full_name": "muhammad1596\/CVE-2022-0847-DirtyPipe-Exploits", - "owner": { - "login": "muhammad1596", - "id": 68430129, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68430129?v=4", - "html_url": "https:\/\/github.com\/muhammad1596", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/muhammad1596\/CVE-2022-0847-DirtyPipe-Exploits", - "description": null, - "fork": false, - "created_at": "2024-06-06T14:27:41Z", - "updated_at": "2024-06-06T14:39:21Z", - "pushed_at": "2024-06-06T14:39:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 893690392, - "name": "DirtyPipe", - "full_name": "aswanepo\/DirtyPipe", - "owner": { - "login": "aswanepo", - "id": 31624405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31624405?v=4", - "html_url": "https:\/\/github.com\/aswanepo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aswanepo\/DirtyPipe", - "description": "Working Dirty Pipe (CVE-2022-0847) exploit tool with root access and file overwrites.", - "fork": false, - "created_at": "2024-11-25T03:09:57Z", - "updated_at": "2024-11-25T03:09:57Z", - "pushed_at": "2023-10-15T22:23:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 913058800, - "name": "CTF-CVE-2022-0847", - "full_name": "JustinYe377\/CTF-CVE-2022-0847", - "owner": { - "login": "JustinYe377", - "id": 97569874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97569874?v=4", - "html_url": "https:\/\/github.com\/JustinYe377", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JustinYe377\/CTF-CVE-2022-0847", - "description": null, - "fork": false, - "created_at": "2025-01-07T00:25:12Z", - "updated_at": "2025-01-07T04:02:47Z", - "pushed_at": "2025-01-07T04:02:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 913704023, - "name": "Dirty-Pipe-Exploit", - "full_name": "mithunmadhukuttan\/Dirty-Pipe-Exploit", - "owner": { - "login": "mithunmadhukuttan", - "id": 104143246, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104143246?v=4", - "html_url": "https:\/\/github.com\/mithunmadhukuttan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mithunmadhukuttan\/Dirty-Pipe-Exploit", - "description": "The **Dirty Pipe exploit (CVE-2022-0847)** is a Linux kernel vulnerability (v5.8+) allowing unprivileged attackers to overwrite arbitrary files via a flaw in the pipe mechanism. This leads to privilege escalation, granting root access. Similar to Dirty Cow but easier to exploit. Fix: Update to a patched kernel version.", - "fork": false, - "created_at": "2025-01-08T07:40:20Z", - "updated_at": "2025-01-08T07:41:44Z", - "pushed_at": "2025-01-08T07:41:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 919986858, - "name": "DirtyPipe_exploit", - "full_name": "Mephierr\/DirtyPipe_exploit", - "owner": { - "login": "Mephierr", - "id": 184470719, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184470719?v=4", - "html_url": "https:\/\/github.com\/Mephierr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mephierr\/DirtyPipe_exploit", - "description": "CVE-2022-0847", - "fork": false, - "created_at": "2025-01-21T11:15:54Z", - "updated_at": "2025-01-21T12:07:38Z", - "pushed_at": "2025-01-21T11:26:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 929971733, "name": "CVE-2022-0847", diff --git a/2022/CVE-2022-0944.json b/2022/CVE-2022-0944.json index e47868d993..76b6f66f72 100644 --- a/2022/CVE-2022-0944.json +++ b/2022/CVE-2022-0944.json @@ -1,136 +1,4 @@ [ - { - "id": 854311848, - "name": "CVE-2022-0944", - "full_name": "shhrew\/CVE-2022-0944", - "owner": { - "login": "shhrew", - "id": 179271961, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179271961?v=4", - "html_url": "https:\/\/github.com\/shhrew", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shhrew\/CVE-2022-0944", - "description": "A proof of concept exploit for SQLPad RCE (CVE-2022-0944).", - "fork": false, - "created_at": "2024-09-08T23:39:24Z", - "updated_at": "2024-10-26T18:00:04Z", - "pushed_at": "2024-09-08T23:57:27Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 854473439, - "name": "CVE-2022-0944_RCE_Automation", - "full_name": "Philip-Otter\/CVE-2022-0944_RCE_Automation", - "owner": { - "login": "Philip-Otter", - "id": 78989650, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78989650?v=4", - "html_url": "https:\/\/github.com\/Philip-Otter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Philip-Otter\/CVE-2022-0944_RCE_Automation", - "description": "PoC code written for CVE-2022-0944 to make exploitation easier. Based on information found here: https:\/\/huntr.com\/bounties\/46630727-d923-4444-a421-537ecd63e7fb", - "fork": false, - "created_at": "2024-09-09T08:33:17Z", - "updated_at": "2024-09-10T17:01:28Z", - "pushed_at": "2024-09-10T17:01:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 854781649, - "name": "CVE-2022-0944", - "full_name": "FlojBoj\/CVE-2022-0944", - "owner": { - "login": "FlojBoj", - "id": 170850781, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170850781?v=4", - "html_url": "https:\/\/github.com\/FlojBoj", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FlojBoj\/CVE-2022-0944", - "description": "SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])", - "fork": false, - "created_at": "2024-09-09T19:09:43Z", - "updated_at": "2024-12-09T18:18:45Z", - "pushed_at": "2024-09-10T14:23:01Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 855111543, - "name": "sqlpad-rce-exploit-CVE-2022-0944", - "full_name": "0xRoqeeb\/sqlpad-rce-exploit-CVE-2022-0944", - "owner": { - "login": "0xRoqeeb", - "id": 49154037, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49154037?v=4", - "html_url": "https:\/\/github.com\/0xRoqeeb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xRoqeeb\/sqlpad-rce-exploit-CVE-2022-0944", - "description": null, - "fork": false, - "created_at": "2024-09-10T10:26:57Z", - "updated_at": "2025-05-22T23:12:12Z", - "pushed_at": "2024-09-10T16:18:40Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, { "id": 855192500, "name": "OverlayFS-PrivEsc-CVE-2022-0944", @@ -164,74 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 856828078, - "name": "CVE-2022-0944_RCE_POC", - "full_name": "Robocopsita\/CVE-2022-0944_RCE_POC", - "owner": { - "login": "Robocopsita", - "id": 181462171, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181462171?v=4", - "html_url": "https:\/\/github.com\/Robocopsita", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Robocopsita\/CVE-2022-0944_RCE_POC", - "description": null, - "fork": false, - "created_at": "2024-09-13T09:30:08Z", - "updated_at": "2024-12-09T18:18:46Z", - "pushed_at": "2024-09-13T09:44:56Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 872147587, - "name": "CVE-2022-0944", - "full_name": "toneillcodes\/CVE-2022-0944", - "owner": { - "login": "toneillcodes", - "id": 148013535, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148013535?v=4", - "html_url": "https:\/\/github.com\/toneillcodes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/toneillcodes\/CVE-2022-0944", - "description": "PoC for RCE in SQLPad (CVE-2022-0944)", - "fork": false, - "created_at": "2024-10-13T22:34:09Z", - "updated_at": "2025-02-09T19:57:56Z", - "pushed_at": "2024-10-14T14:08:01Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cybersecurity" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 878669450, "name": "SQLPad-RCE-Exploit-CVE-2022-0944", @@ -265,39 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 879408778, - "name": "SQLPad-6.10.0-Exploit-CVE-2022-0944", - "full_name": "0xDTC\/SQLPad-6.10.0-Exploit-CVE-2022-0944", - "owner": { - "login": "0xDTC", - "id": 95960398, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95960398?v=4", - "html_url": "https:\/\/github.com\/0xDTC", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xDTC\/SQLPad-6.10.0-Exploit-CVE-2022-0944", - "description": "Refurbish", - "fork": false, - "created_at": "2024-10-27T20:26:47Z", - "updated_at": "2025-01-11T13:26:28Z", - "pushed_at": "2025-01-11T13:26:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1191372560, "name": "OverlayFS-PrivEsc-CVE-2022-0944", diff --git a/2022/CVE-2022-0952.json b/2022/CVE-2022-0952.json deleted file mode 100644 index 9057d0389d..0000000000 --- a/2022/CVE-2022-0952.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 675703857, - "name": "CVE-2022-0952", - "full_name": "RandomRobbieBF\/CVE-2022-0952", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-0952", - "description": "Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update", - "fork": false, - "created_at": "2023-08-07T14:28:11Z", - "updated_at": "2025-02-14T17:11:46Z", - "pushed_at": "2023-08-09T10:14:42Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0995.json b/2022/CVE-2022-0995.json index 984c36a449..fd537e414e 100644 --- a/2022/CVE-2022-0995.json +++ b/2022/CVE-2022-0995.json @@ -32,72 +32,6 @@ "score": 0, "subscribers_count": 6 }, - { - "id": 612087603, - "name": "CVE-2022-0995", - "full_name": "AndreevSemen\/CVE-2022-0995", - "owner": { - "login": "AndreevSemen", - "id": 43631421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43631421?v=4", - "html_url": "https:\/\/github.com\/AndreevSemen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AndreevSemen\/CVE-2022-0995", - "description": "Реализация средств повышения привилегий в Linux", - "fork": false, - "created_at": "2023-03-10T07:05:45Z", - "updated_at": "2023-03-11T02:46:18Z", - "pushed_at": "2023-03-10T11:29:22Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 738494648, - "name": "CVE-2022-0995", - "full_name": "1nzag\/CVE-2022-0995", - "owner": { - "login": "1nzag", - "id": 29899371, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29899371?v=4", - "html_url": "https:\/\/github.com\/1nzag", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1nzag\/CVE-2022-0995", - "description": "CVE-2022-0995 exploit", - "fork": false, - "created_at": "2024-01-03T11:03:45Z", - "updated_at": "2025-07-25T01:44:29Z", - "pushed_at": "2024-01-03T11:12:38Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1008479578, "name": "cve-2022-0995", diff --git a/2022/CVE-2022-1011.json b/2022/CVE-2022-1011.json deleted file mode 100644 index 6153578990..0000000000 --- a/2022/CVE-2022-1011.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 654390552, - "name": "CVE-2022-1011", - "full_name": "xkaneiki\/CVE-2022-1011", - "owner": { - "login": "xkaneiki", - "id": 26479696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26479696?v=4", - "html_url": "https:\/\/github.com\/xkaneiki", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xkaneiki\/CVE-2022-1011", - "description": "这个漏洞感觉只能信息泄露？", - "fork": false, - "created_at": "2023-06-16T03:02:38Z", - "updated_at": "2026-05-22T05:52:41Z", - "pushed_at": "2023-06-16T04:13:42Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1015.json b/2022/CVE-2022-1015.json index 5200601a34..ee3ac6b509 100644 --- a/2022/CVE-2022-1015.json +++ b/2022/CVE-2022-1015.json @@ -97,203 +97,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 600659828, - "name": "CVE-2022-1015", - "full_name": "wlswotmd\/CVE-2022-1015", - "owner": { - "login": "wlswotmd", - "id": 80761172, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80761172?v=4", - "html_url": "https:\/\/github.com\/wlswotmd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wlswotmd\/CVE-2022-1015", - "description": null, - "fork": false, - "created_at": "2023-02-12T07:06:40Z", - "updated_at": "2023-02-12T07:09:56Z", - "pushed_at": "2023-04-26T09:40:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 610271922, - "name": "CVE-2022-1015", - "full_name": "delsploit\/CVE-2022-1015", - "owner": { - "login": "delsploit", - "id": 127108998, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127108998?v=4", - "html_url": "https:\/\/github.com\/delsploit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/delsploit\/CVE-2022-1015", - "description": null, - "fork": false, - "created_at": "2023-03-06T12:50:43Z", - "updated_at": "2023-03-06T12:51:55Z", - "pushed_at": "2023-03-06T12:51:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 617380197, - "name": "CVE-2022-1015", - "full_name": "pivik271\/CVE-2022-1015", - "owner": { - "login": "pivik271", - "id": 82135340, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82135340?v=4", - "html_url": "https:\/\/github.com\/pivik271", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pivik271\/CVE-2022-1015", - "description": null, - "fork": false, - "created_at": "2023-03-22T09:16:58Z", - "updated_at": "2023-04-25T01:05:15Z", - "pushed_at": "2023-03-22T09:20:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 675264070, - "name": "CVE-2022-1015", - "full_name": "more-kohii\/CVE-2022-1015", - "owner": { - "login": "more-kohii", - "id": 87258637, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87258637?v=4", - "html_url": "https:\/\/github.com\/more-kohii", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/more-kohii\/CVE-2022-1015", - "description": "Linux Kernel 1-Day Analysis & Exploitation", - "fork": false, - "created_at": "2023-08-06T10:46:49Z", - "updated_at": "2024-07-02T09:40:21Z", - "pushed_at": "2023-08-08T00:42:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 698913839, - "name": "CVE-2022-1015", - "full_name": "0range1337\/CVE-2022-1015", - "owner": { - "login": "0range1337", - "id": 146405672, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146405672?v=4", - "html_url": "https:\/\/github.com\/0range1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0range1337\/CVE-2022-1015", - "description": null, - "fork": false, - "created_at": "2023-10-01T11:18:48Z", - "updated_at": "2023-10-01T11:18:48Z", - "pushed_at": "2024-03-18T12:45:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 872919160, - "name": "CVE-2022-1015", - "full_name": "seadragnol\/CVE-2022-1015", - "owner": { - "login": "seadragnol", - "id": 55611051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55611051?v=4", - "html_url": "https:\/\/github.com\/seadragnol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/seadragnol\/CVE-2022-1015", - "description": null, - "fork": false, - "created_at": "2024-10-15T09:51:06Z", - "updated_at": "2024-10-15T10:09:11Z", - "pushed_at": "2024-10-15T10:09:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-1026.json b/2022/CVE-2022-1026.json index 2be34ea66f..e638201d90 100644 --- a/2022/CVE-2022-1026.json +++ b/2022/CVE-2022-1026.json @@ -1,103 +1,4 @@ [ - { - "id": 614407734, - "name": "kyocera-cve-2022-1026", - "full_name": "ac3lives\/kyocera-cve-2022-1026", - "owner": { - "login": "ac3lives", - "id": 26721330, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26721330?v=4", - "html_url": "https:\/\/github.com\/ac3lives", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ac3lives\/kyocera-cve-2022-1026", - "description": "An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords", - "fork": false, - "created_at": "2023-03-15T14:23:41Z", - "updated_at": "2026-06-16T06:06:57Z", - "pushed_at": "2023-03-15T14:33:48Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 23, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 666781357, - "name": "nmap-printer-nse-scripts", - "full_name": "flamebarke\/nmap-printer-nse-scripts", - "owner": { - "login": "flamebarke", - "id": 39644720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39644720?v=4", - "html_url": "https:\/\/github.com\/flamebarke", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/flamebarke\/nmap-printer-nse-scripts", - "description": "NSE port of CVE-2022-1026 exploit for mass identification and exploitation", - "fork": false, - "created_at": "2023-07-15T14:56:55Z", - "updated_at": "2025-10-07T09:10:41Z", - "pushed_at": "2023-07-15T14:59:06Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 814582796, - "name": "kygocera", - "full_name": "r0lh\/kygocera", - "owner": { - "login": "r0lh", - "id": 51697374, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51697374?v=4", - "html_url": "https:\/\/github.com\/r0lh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0lh\/kygocera", - "description": "Improved Golang Version of Rapid7 PoC for CVE-2022-1026", - "fork": false, - "created_at": "2024-06-13T09:40:02Z", - "updated_at": "2024-06-13T12:18:39Z", - "pushed_at": "2024-06-13T12:18:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1121094364, "name": "kyocera-cve-2022-1026_SOAP1.1", diff --git a/2022/CVE-2022-10270.json b/2022/CVE-2022-10270.json deleted file mode 100644 index bbd7e91554..0000000000 --- a/2022/CVE-2022-10270.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 587225929, - "name": "sunflower_exp", - "full_name": "baimaobg\/sunflower_exp", - "owner": { - "login": "baimaobg", - "id": 110097762, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110097762?v=4", - "html_url": "https:\/\/github.com\/baimaobg", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/baimaobg\/sunflower_exp", - "description": "Sunflower CVE-2022-10270 vulnerability exploitation tool", - "fork": false, - "created_at": "2023-01-10T08:56:15Z", - "updated_at": "2025-02-12T01:41:08Z", - "pushed_at": "2023-01-10T10:27:53Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1040.json b/2022/CVE-2022-1040.json index 02b0a8acbc..d19a6f5bd9 100644 --- a/2022/CVE-2022-1040.json +++ b/2022/CVE-2022-1040.json @@ -130,104 +130,5 @@ "watchers": 2, "score": 0, "subscribers_count": 0 - }, - { - "id": 586568152, - "name": "CVE-2022-1040", - "full_name": "michealadams30\/CVE-2022-1040", - "owner": { - "login": "michealadams30", - "id": 113975732, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113975732?v=4", - "html_url": "https:\/\/github.com\/michealadams30", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/michealadams30\/CVE-2022-1040", - "description": "Sophos EXploit", - "fork": false, - "created_at": "2023-01-08T15:46:00Z", - "updated_at": "2023-01-08T15:46:00Z", - "pushed_at": "2023-01-08T15:48:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 696656893, - "name": "CVE-2022-1040", - "full_name": "Cyb3rEnthusiast\/CVE-2022-1040", - "owner": { - "login": "Cyb3rEnthusiast", - "id": 143934696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143934696?v=4", - "html_url": "https:\/\/github.com\/Cyb3rEnthusiast", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cyb3rEnthusiast\/CVE-2022-1040", - "description": "New exploitation of 2020 Sophos vuln", - "fork": false, - "created_at": "2023-09-26T07:26:42Z", - "updated_at": "2025-10-24T22:26:44Z", - "pushed_at": "2023-09-26T07:29:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 752960539, - "name": "CVE-2022-1040", - "full_name": "xMr110\/CVE-2022-1040", - "owner": { - "login": "xMr110", - "id": 42313754, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42313754?v=4", - "html_url": "https:\/\/github.com\/xMr110", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xMr110\/CVE-2022-1040", - "description": null, - "fork": false, - "created_at": "2024-02-05T07:35:41Z", - "updated_at": "2024-02-05T07:35:42Z", - "pushed_at": "2024-02-05T07:36:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-1068.json b/2022/CVE-2022-1068.json deleted file mode 100644 index 902a4f231b..0000000000 --- a/2022/CVE-2022-1068.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 586786744, - "name": "CVE-2022-1068", - "full_name": "webraybtl\/CVE-2022-1068", - "owner": { - "login": "webraybtl", - "id": 95903558, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95903558?v=4", - "html_url": "https:\/\/github.com\/webraybtl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/webraybtl\/CVE-2022-1068", - "description": "Modbus Slave缓冲区溢出漏洞CVE-2022-1068分析与复现", - "fork": false, - "created_at": "2023-01-09T08:23:37Z", - "updated_at": "2023-09-05T10:24:54Z", - "pushed_at": "2023-07-06T06:36:36Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1203.json b/2022/CVE-2022-1203.json deleted file mode 100644 index 028fe37e6c..0000000000 --- a/2022/CVE-2022-1203.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 674165540, - "name": "CVE-2022-1203", - "full_name": "RandomRobbieBF\/CVE-2022-1203", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-1203", - "description": "Content Mask < 1.8.4 - Subscriber+ Arbitrary Options Update", - "fork": false, - "created_at": "2023-08-03T09:39:15Z", - "updated_at": "2024-08-12T20:32:20Z", - "pushed_at": "2023-08-03T09:43:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1227.json b/2022/CVE-2022-1227.json deleted file mode 100644 index 698ca17965..0000000000 --- a/2022/CVE-2022-1227.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 622123920, - "name": "CVE-2022-1227_Exploit", - "full_name": "LouisLiuNova\/CVE-2022-1227_Exploit", - "owner": { - "login": "LouisLiuNova", - "id": 32727642, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32727642?v=4", - "html_url": "https:\/\/github.com\/LouisLiuNova", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LouisLiuNova\/CVE-2022-1227_Exploit", - "description": "A script for exploiting CVE-2022-1227", - "fork": false, - "created_at": "2023-04-01T07:28:15Z", - "updated_at": "2024-06-20T08:23:31Z", - "pushed_at": "2023-04-13T12:36:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1329.json b/2022/CVE-2022-1329.json index 431c266e7c..f8f7288ea6 100644 --- a/2022/CVE-2022-1329.json +++ b/2022/CVE-2022-1329.json @@ -103,104 +103,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 594762176, - "name": "CVE-2022-1329", - "full_name": "dexit\/CVE-2022-1329", - "owner": { - "login": "dexit", - "id": 6205151, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6205151?v=4", - "html_url": "https:\/\/github.com\/dexit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dexit\/CVE-2022-1329", - "description": "The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~\/core\/app\/modules\/onboarding\/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files that can be used to o CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-29T15:13:34Z", - "updated_at": "2023-02-20T12:39:20Z", - "pushed_at": "2022-12-28T12:11:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 818198561, - "name": "CVE-2022-1329", - "full_name": "phanthibichtram12\/CVE-2022-1329", - "owner": { - "login": "phanthibichtram12", - "id": 95855503, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95855503?v=4", - "html_url": "https:\/\/github.com\/phanthibichtram12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/phanthibichtram12\/CVE-2022-1329", - "description": null, - "fork": false, - "created_at": "2024-06-21T10:05:03Z", - "updated_at": "2024-06-21T10:38:10Z", - "pushed_at": "2024-06-21T10:38:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 871297880, - "name": "CVE-2022-1329", - "full_name": "AgustinESI\/CVE-2022-1329", - "owner": { - "login": "AgustinESI", - "id": 73068658, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73068658?v=4", - "html_url": "https:\/\/github.com\/AgustinESI", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AgustinESI\/CVE-2022-1329", - "description": null, - "fork": false, - "created_at": "2024-10-11T16:57:20Z", - "updated_at": "2024-12-20T10:58:12Z", - "pushed_at": "2024-12-20T10:58:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-1364.json b/2022/CVE-2022-1364.json index b183e1b20c..d1d4d27eed 100644 --- a/2022/CVE-2022-1364.json +++ b/2022/CVE-2022-1364.json @@ -1,37 +1,4 @@ [ - { - "id": 722060198, - "name": "cve-2022-1364", - "full_name": "A1Lin\/cve-2022-1364", - "owner": { - "login": "A1Lin", - "id": 22007644, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22007644?v=4", - "html_url": "https:\/\/github.com\/A1Lin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/A1Lin\/cve-2022-1364", - "description": null, - "fork": false, - "created_at": "2023-11-22T10:55:34Z", - "updated_at": "2025-09-15T07:23:47Z", - "pushed_at": "2023-11-22T11:09:16Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1077499213, "name": "uc_browser_poc_CVE-2022-1364", diff --git a/2022/CVE-2022-1386.json b/2022/CVE-2022-1386.json index c385357d3b..98b208af0d 100644 --- a/2022/CVE-2022-1386.json +++ b/2022/CVE-2022-1386.json @@ -1,176 +1,4 @@ [ - { - "id": 607455905, - "name": "CVE-2022-1386", - "full_name": "ardzz\/CVE-2022-1386", - "owner": { - "login": "ardzz", - "id": 38525912, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38525912?v=4", - "html_url": "https:\/\/github.com\/ardzz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ardzz\/CVE-2022-1386", - "description": null, - "fork": false, - "created_at": "2023-02-28T02:08:59Z", - "updated_at": "2025-12-07T02:49:27Z", - "pushed_at": "2023-03-09T16:25:57Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 609709956, - "name": "fubucker", - "full_name": "im-hanzou\/fubucker", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/fubucker", - "description": "Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF", - "fork": false, - "created_at": "2023-03-05T01:46:41Z", - "updated_at": "2025-08-27T12:33:33Z", - "pushed_at": "2023-03-08T18:25:29Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "avada", - "checker", - "cve-2022-1386", - "fusion-builder", - "theme-fusion", - "wordpress" - ], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 697749113, - "name": "CVE-2022-1386-Mass_Vulnerability", - "full_name": "zycoder0day\/CVE-2022-1386-Mass_Vulnerability", - "owner": { - "login": "zycoder0day", - "id": 31403046, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31403046?v=4", - "html_url": "https:\/\/github.com\/zycoder0day", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zycoder0day\/CVE-2022-1386-Mass_Vulnerability", - "description": null, - "fork": false, - "created_at": "2023-09-28T11:55:43Z", - "updated_at": "2023-09-28T17:30:07Z", - "pushed_at": "2023-09-28T11:56:05Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 768474131, - "name": "CVE-2022-1386", - "full_name": "satyasai1460\/CVE-2022-1386", - "owner": { - "login": "satyasai1460", - "id": 68277833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68277833?v=4", - "html_url": "https:\/\/github.com\/satyasai1460", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/satyasai1460\/CVE-2022-1386", - "description": null, - "fork": false, - "created_at": "2024-03-07T06:35:33Z", - "updated_at": "2025-10-04T17:43:20Z", - "pushed_at": "2024-03-07T06:54:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 898463801, - "name": "CVE-2022-1386", - "full_name": "kreeksec\/CVE-2022-1386", - "owner": { - "login": "kreeksec", - "id": 47277287, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47277287?v=4", - "html_url": "https:\/\/github.com\/kreeksec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kreeksec\/CVE-2022-1386", - "description": "Fusion Builder < 3.6.2 - Unauthenticated SSRF", - "fork": false, - "created_at": "2024-12-04T12:48:53Z", - "updated_at": "2024-12-04T12:51:24Z", - "pushed_at": "2024-12-04T12:51:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1024106156, "name": "CVE-2022-1386-FusionBuilder-SSRF", diff --git a/2022/CVE-2022-1388.json b/2022/CVE-2022-1388.json index 5b528ad31a..bd77181cda 100644 --- a/2022/CVE-2022-1388.json +++ b/2022/CVE-2022-1388.json @@ -1939,240 +1939,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 627124485, - "name": "tippa-my-tongue", - "full_name": "j-baines\/tippa-my-tongue", - "owner": { - "login": "j-baines", - "id": 113205286, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113205286?v=4", - "html_url": "https:\/\/github.com\/j-baines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/j-baines\/tippa-my-tongue", - "description": "F5 BIG-IP Exploit Using CVE-2022-1388 and CVE-2022-41800", - "fork": false, - "created_at": "2023-04-12T20:46:03Z", - "updated_at": "2023-04-14T17:24:44Z", - "pushed_at": "2023-04-12T21:03:44Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-1388", - "cve-2022-41800" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 665620716, - "name": "F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", - "full_name": "SudeepaShiranthaka\/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", - "owner": { - "login": "SudeepaShiranthaka", - "id": 58376903, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58376903?v=4", - "html_url": "https:\/\/github.com\/SudeepaShiranthaka", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SudeepaShiranthaka\/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", - "description": "F5-BIG-IP Remote Code Execution Vulnerability CVE-2022-1388: A Case Study", - "fork": false, - "created_at": "2023-07-12T15:53:33Z", - "updated_at": "2023-07-12T15:53:34Z", - "pushed_at": "2023-07-12T15:54:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 673481578, - "name": "refresh", - "full_name": "battleofthebots\/refresh", - "owner": { - "login": "battleofthebots", - "id": 122462368, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122462368?v=4", - "html_url": "https:\/\/github.com\/battleofthebots", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/battleofthebots\/refresh", - "description": "CVE-2022-1388 - F5 Router RCE Replica", - "fork": false, - "created_at": "2023-08-01T18:12:52Z", - "updated_at": "2023-10-16T10:21:39Z", - "pushed_at": "2023-10-11T22:07:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 738523749, - "name": "CVE-2022-1388-exploit", - "full_name": "nvk0x\/CVE-2022-1388-exploit", - "owner": { - "login": "nvk0x", - "id": 22233431, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22233431?v=4", - "html_url": "https:\/\/github.com\/nvk0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nvk0x\/CVE-2022-1388-exploit", - "description": "exploit poc", - "fork": false, - "created_at": "2024-01-03T12:28:06Z", - "updated_at": "2025-05-01T10:13:53Z", - "pushed_at": "2024-01-03T12:28:54Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 741149336, - "name": "CVE-2022-1388", - "full_name": "nico989\/CVE-2022-1388", - "owner": { - "login": "nico989", - "id": 55981787, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55981787?v=4", - "html_url": "https:\/\/github.com\/nico989", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nico989\/CVE-2022-1388", - "description": "PoC for CVE-2022-1388 affecting F5 BIG-IP.", - "fork": false, - "created_at": "2024-01-09T19:52:36Z", - "updated_at": "2024-03-23T10:44:09Z", - "pushed_at": "2024-01-12T22:42:14Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 793842153, - "name": "CVE-2022-1388", - "full_name": "gotr00t0day\/CVE-2022-1388", - "owner": { - "login": "gotr00t0day", - "id": 48636787, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48636787?v=4", - "html_url": "https:\/\/github.com\/gotr00t0day", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gotr00t0day\/CVE-2022-1388", - "description": "A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges.", - "fork": false, - "created_at": "2024-04-30T01:10:05Z", - "updated_at": "2026-06-09T23:59:23Z", - "pushed_at": "2024-04-30T01:12:19Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 856503073, - "name": "CVE-2022-1388", - "full_name": "impost0r\/CVE-2022-1388", - "owner": { - "login": "impost0r", - "id": 16020669, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16020669?v=4", - "html_url": "https:\/\/github.com\/impost0r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/impost0r\/CVE-2022-1388", - "description": "Old weaponized CVE-2022-1388 exploit.", - "fork": false, - "created_at": "2024-09-12T17:25:23Z", - "updated_at": "2024-09-12T17:27:23Z", - "pushed_at": "2024-09-12T17:27:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1018467699, "name": "CVE-2022-1388", diff --git a/2022/CVE-2022-1442.json b/2022/CVE-2022-1442.json deleted file mode 100644 index a0b7ad940d..0000000000 --- a/2022/CVE-2022-1442.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 674189234, - "name": "CVE-2022-1442", - "full_name": "RandomRobbieBF\/CVE-2022-1442", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-1442", - "description": "WordPress Plugin Metform <= 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure", - "fork": false, - "created_at": "2023-08-03T10:47:28Z", - "updated_at": "2024-08-12T20:32:20Z", - "pushed_at": "2023-08-03T10:49:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1471.json b/2022/CVE-2022-1471.json index 70e32b783d..0aeb491207 100644 --- a/2022/CVE-2022-1471.json +++ b/2022/CVE-2022-1471.json @@ -1,70 +1,4 @@ [ - { - "id": 608740009, - "name": "SnakeYAML-CVE-2022-1471-POC", - "full_name": "1fabunicorn\/SnakeYAML-CVE-2022-1471-POC", - "owner": { - "login": "1fabunicorn", - "id": 19752126, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19752126?v=4", - "html_url": "https:\/\/github.com\/1fabunicorn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1fabunicorn\/SnakeYAML-CVE-2022-1471-POC", - "description": "Code for veracode blog", - "fork": false, - "created_at": "2023-03-02T16:33:02Z", - "updated_at": "2024-07-19T18:50:15Z", - "pushed_at": "2023-03-02T16:50:59Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 637852784, - "name": "snakeyaml_cve_poc", - "full_name": "falconkei\/snakeyaml_cve_poc", - "owner": { - "login": "falconkei", - "id": 19479860, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19479860?v=4", - "html_url": "https:\/\/github.com\/falconkei", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/falconkei\/snakeyaml_cve_poc", - "description": "SnakeYAML-CVE-2022-1471-POC", - "fork": false, - "created_at": "2023-05-08T14:46:22Z", - "updated_at": "2025-04-04T09:20:26Z", - "pushed_at": "2023-12-24T13:26:54Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1150953129, "name": "yaml-payload", diff --git a/2022/CVE-2022-1565.json b/2022/CVE-2022-1565.json deleted file mode 100644 index 0ec99c56d4..0000000000 --- a/2022/CVE-2022-1565.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 818221073, - "name": "CVE-2022-1565", - "full_name": "phanthibichtram12\/CVE-2022-1565", - "owner": { - "login": "phanthibichtram12", - "id": 95855503, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95855503?v=4", - "html_url": "https:\/\/github.com\/phanthibichtram12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/phanthibichtram12\/CVE-2022-1565", - "description": null, - "fork": false, - "created_at": "2024-06-21T11:08:26Z", - "updated_at": "2024-06-21T11:10:04Z", - "pushed_at": "2024-06-21T11:10:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-1609.json b/2022/CVE-2022-1609.json index da42604ef0..85249dfe3d 100644 --- a/2022/CVE-2022-1609.json +++ b/2022/CVE-2022-1609.json @@ -97,38 +97,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 631257182, - "name": "cve-2022-1609-exploit", - "full_name": "itworksig\/cve-2022-1609-exploit", - "owner": { - "login": "itworksig", - "id": 119853210, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119853210?v=4", - "html_url": "https:\/\/github.com\/itworksig", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/itworksig\/cve-2022-1609-exploit", - "description": "Exploit for CVE-2022-1609 WordPress Weblizar Backdoor.", - "fork": false, - "created_at": "2023-04-22T12:51:09Z", - "updated_at": "2025-09-12T09:26:17Z", - "pushed_at": "2023-04-22T12:51:38Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-1679.json b/2022/CVE-2022-1679.json index b415b35628..4f20e64e0a 100644 --- a/2022/CVE-2022-1679.json +++ b/2022/CVE-2022-1679.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 690703239, - "name": "Detection-and-Mitigation-for-CVE-2022-1679", - "full_name": "ov3rwatch\/Detection-and-Mitigation-for-CVE-2022-1679", - "owner": { - "login": "ov3rwatch", - "id": 23441286, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23441286?v=4", - "html_url": "https:\/\/github.com\/ov3rwatch", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ov3rwatch\/Detection-and-Mitigation-for-CVE-2022-1679", - "description": null, - "fork": false, - "created_at": "2023-09-12T17:47:01Z", - "updated_at": "2023-09-12T17:48:39Z", - "pushed_at": "2023-09-12T17:48:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-20009.json b/2022/CVE-2022-20009.json deleted file mode 100644 index a6c31590d5..0000000000 --- a/2022/CVE-2022-20009.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 675254019, - "name": "android-gadget", - "full_name": "szymonh\/android-gadget", - "owner": { - "login": "szymonh", - "id": 12231135, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12231135?v=4", - "html_url": "https:\/\/github.com\/szymonh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/szymonh\/android-gadget", - "description": "CVE-2022-20009 - Description and sample exploit for Android USB Gadgets", - "fork": false, - "created_at": "2023-08-06T10:01:32Z", - "updated_at": "2026-04-17T06:01:12Z", - "pushed_at": "2023-08-06T11:03:21Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20120.json b/2022/CVE-2022-20120.json deleted file mode 100644 index 461484bbc0..0000000000 --- a/2022/CVE-2022-20120.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 905192929, - "name": "ABL_ROP", - "full_name": "boredpentester\/ABL_ROP", - "owner": { - "login": "boredpentester", - "id": 47897567, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47897567?v=4", - "html_url": "https:\/\/github.com\/boredpentester", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/boredpentester\/ABL_ROP", - "description": "Experimenting with CVE-2022-20120 (Pixel Bootloader \/ ABL) using Unicorn, derived from eShard's emulator at https:\/\/github.com\/eshard\/pixel6-boot\/blob\/main\/run_abl_public.ipynb", - "fork": false, - "created_at": "2024-12-18T10:44:34Z", - "updated_at": "2025-06-21T14:21:10Z", - "pushed_at": "2024-12-18T11:00:38Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20140.json b/2022/CVE-2022-20140.json deleted file mode 100644 index d774670c76..0000000000 --- a/2022/CVE-2022-20140.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 778237386, - "name": "system_bt_aosp10_cve-2022-20140", - "full_name": "RenukaSelvar\/system_bt_aosp10_cve-2022-20140", - "owner": { - "login": "RenukaSelvar", - "id": 165150685, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/165150685?v=4", - "html_url": "https:\/\/github.com\/RenukaSelvar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RenukaSelvar\/system_bt_aosp10_cve-2022-20140", - "description": null, - "fork": false, - "created_at": "2024-03-27T10:45:21Z", - "updated_at": "2024-03-27T10:48:05Z", - "pushed_at": "2024-03-27T10:48:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20186.json b/2022/CVE-2022-20186.json index 25749faff3..475f5d08e0 100644 --- a/2022/CVE-2022-20186.json +++ b/2022/CVE-2022-20186.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 821468476, - "name": "CVE-2022-20186", - "full_name": "SmileTabLabo\/CVE-2022-20186", - "owner": { - "login": "SmileTabLabo", - "id": 112930114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112930114?v=4", - "html_url": "https:\/\/github.com\/SmileTabLabo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SmileTabLabo\/CVE-2022-20186", - "description": null, - "fork": false, - "created_at": "2024-06-28T15:53:30Z", - "updated_at": "2025-08-17T01:00:25Z", - "pushed_at": "2024-06-28T17:05:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": true, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1229784905, "name": "CVE-2022-20186", diff --git a/2022/CVE-2022-20338.json b/2022/CVE-2022-20338.json deleted file mode 100644 index 10362cfd0f..0000000000 --- a/2022/CVE-2022-20338.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 718530988, - "name": "frameworks_base_AOSP_06_r22_CVE-2022-20338", - "full_name": "Satheesh575555\/frameworks_base_AOSP_06_r22_CVE-2022-20338", - "owner": { - "login": "Satheesh575555", - "id": 102573923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4", - "html_url": "https:\/\/github.com\/Satheesh575555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Satheesh575555\/frameworks_base_AOSP_06_r22_CVE-2022-20338", - "description": null, - "fork": false, - "created_at": "2023-11-14T09:21:58Z", - "updated_at": "2023-11-14T10:03:13Z", - "pushed_at": "2023-11-14T09:44:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 720348499, - "name": "frameworks_base_AOSP10_r33_CVE-2022-20338", - "full_name": "Trinadh465\/frameworks_base_AOSP10_r33_CVE-2022-20338", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_base_AOSP10_r33_CVE-2022-20338", - "description": null, - "fork": false, - "created_at": "2023-11-18T07:44:41Z", - "updated_at": "2023-11-18T07:44:41Z", - "pushed_at": "2023-11-18T07:44:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 720410510, - "name": "frameworks_base_AOSP_10_r33_CVE-2022-20338", - "full_name": "Trinadh465\/frameworks_base_AOSP_10_r33_CVE-2022-20338", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_base_AOSP_10_r33_CVE-2022-20338", - "description": null, - "fork": false, - "created_at": "2023-11-18T12:02:22Z", - "updated_at": "2023-11-18T12:45:06Z", - "pushed_at": "2023-11-18T13:52:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20360.json b/2022/CVE-2022-20360.json deleted file mode 100644 index 8bb7dd888c..0000000000 --- a/2022/CVE-2022-20360.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 645233752, - "name": "packages_apps_Settings_AOSP_10_r33_CVE-2022-20360", - "full_name": "726232111\/packages_apps_Settings_AOSP_10_r33_CVE-2022-20360", - "owner": { - "login": "726232111", - "id": 34729943, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34729943?v=4", - "html_url": "https:\/\/github.com\/726232111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/726232111\/packages_apps_Settings_AOSP_10_r33_CVE-2022-20360", - "description": null, - "fork": false, - "created_at": "2023-05-25T07:56:24Z", - "updated_at": "2023-05-25T07:56:24Z", - "pushed_at": "2022-09-09T07:35:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20413.json b/2022/CVE-2022-20413.json deleted file mode 100644 index ca2cd8876c..0000000000 --- a/2022/CVE-2022-20413.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 589955117, - "name": "frameworks_av-r33_CVE-2022-20413", - "full_name": "pazhanivel07\/frameworks_av-r33_CVE-2022-20413", - "owner": { - "login": "pazhanivel07", - "id": 97434034, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97434034?v=4", - "html_url": "https:\/\/github.com\/pazhanivel07", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pazhanivel07\/frameworks_av-r33_CVE-2022-20413", - "description": null, - "fork": false, - "created_at": "2023-01-17T10:33:22Z", - "updated_at": "2023-03-23T01:13:28Z", - "pushed_at": "2023-01-17T11:20:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20421.json b/2022/CVE-2022-20421.json index 2e1cfe4f1a..dd047aef44 100644 --- a/2022/CVE-2022-20421.json +++ b/2022/CVE-2022-20421.json @@ -1,37 +1,4 @@ [ - { - "id": 617890338, - "name": "badspin", - "full_name": "0xkol\/badspin", - "owner": { - "login": "0xkol", - "id": 58270928, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58270928?v=4", - "html_url": "https:\/\/github.com\/0xkol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xkol\/badspin", - "description": "Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)", - "fork": false, - "created_at": "2023-03-23T10:25:59Z", - "updated_at": "2026-06-12T15:55:00Z", - "pushed_at": "2023-05-27T15:39:41Z", - "stargazers_count": 287, - "watchers_count": 287, - "has_discussions": false, - "forks_count": 47, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 47, - "watchers": 287, - "score": 0, - "subscribers_count": 6 - }, { "id": 1046633958, "name": "oo", diff --git a/2022/CVE-2022-20452.json b/2022/CVE-2022-20452.json deleted file mode 100644 index 85d8e74c11..0000000000 --- a/2022/CVE-2022-20452.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 587387036, - "name": "LeakValue", - "full_name": "michalbednarski\/LeakValue", - "owner": { - "login": "michalbednarski", - "id": 1826899, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1826899?v=4", - "html_url": "https:\/\/github.com\/michalbednarski", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/michalbednarski\/LeakValue", - "description": "Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()", - "fork": false, - "created_at": "2023-01-10T16:24:51Z", - "updated_at": "2026-06-13T04:59:28Z", - "pushed_at": "2023-04-12T17:28:49Z", - "stargazers_count": 347, - "watchers_count": 347, - "has_discussions": false, - "forks_count": 64, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 64, - "watchers": 347, - "score": 0, - "subscribers_count": 10 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20470.json b/2022/CVE-2022-20470.json deleted file mode 100644 index 7e81cae4ca..0000000000 --- a/2022/CVE-2022-20470.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 584611982, - "name": "frameworks_base_AOSP10_r33_CVE-2022-20470", - "full_name": "Trinadh465\/frameworks_base_AOSP10_r33_CVE-2022-20470", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_base_AOSP10_r33_CVE-2022-20470", - "description": null, - "fork": false, - "created_at": "2023-01-03T03:54:59Z", - "updated_at": "2023-03-27T01:47:22Z", - "pushed_at": "2023-01-03T04:01:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20473.json b/2022/CVE-2022-20473.json deleted file mode 100644 index 02d74693e4..0000000000 --- a/2022/CVE-2022-20473.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 584289667, - "name": "frameworks_minikin_AOSP10_r33_CVE-2022-20473", - "full_name": "Trinadh465\/frameworks_minikin_AOSP10_r33_CVE-2022-20473", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_minikin_AOSP10_r33_CVE-2022-20473", - "description": null, - "fork": false, - "created_at": "2023-01-02T05:55:37Z", - "updated_at": "2023-01-02T05:55:37Z", - "pushed_at": null, - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 584624006, - "name": "frameworks_minikin_AOSP10_r33-CVE-2022-20473", - "full_name": "Trinadh465\/frameworks_minikin_AOSP10_r33-CVE-2022-20473", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_minikin_AOSP10_r33-CVE-2022-20473", - "description": null, - "fork": false, - "created_at": "2023-01-03T04:51:12Z", - "updated_at": "2025-10-07T09:09:37Z", - "pushed_at": "2023-01-03T04:53:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20493.json b/2022/CVE-2022-20493.json deleted file mode 100644 index 23470b6760..0000000000 --- a/2022/CVE-2022-20493.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 647669098, - "name": "frameworks_base_CVE-2022-20493", - "full_name": "Trinadh465\/frameworks_base_CVE-2022-20493", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/frameworks_base_CVE-2022-20493", - "description": null, - "fork": false, - "created_at": "2023-05-31T09:18:01Z", - "updated_at": "2023-05-31T09:25:13Z", - "pushed_at": "2023-05-31T09:24:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20494.json b/2022/CVE-2022-20494.json deleted file mode 100644 index 873dcc8b2c..0000000000 --- a/2022/CVE-2022-20494.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 609257730, - "name": "CVE-2022-20494", - "full_name": "Supersonic\/CVE-2022-20494", - "owner": { - "login": "Supersonic", - "id": 36431699, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36431699?v=4", - "html_url": "https:\/\/github.com\/Supersonic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Supersonic\/CVE-2022-20494", - "description": "Exploit app for CVE-2022-20494, a high severity permanent denial-of-service vulnerability that leverages Android's DND (Do not disturb) feature", - "fork": false, - "created_at": "2023-03-03T17:54:34Z", - "updated_at": "2026-04-17T05:57:29Z", - "pushed_at": "2023-03-03T18:11:07Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 27, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20607.json b/2022/CVE-2022-20607.json deleted file mode 100644 index 489b1b9159..0000000000 --- a/2022/CVE-2022-20607.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 598379401, - "name": "CVE-2022-20607", - "full_name": "sumeetIT\/CVE-2022-20607", - "owner": { - "login": "sumeetIT", - "id": 54736912, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54736912?v=4", - "html_url": "https:\/\/github.com\/sumeetIT", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sumeetIT\/CVE-2022-20607", - "description": "In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References: N\/A CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-02-07T01:28:29Z", - "updated_at": "2023-02-20T12:01:39Z", - "pushed_at": "2022-12-27T12:10:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-2078.json b/2022/CVE-2022-2078.json deleted file mode 100644 index c6d7bb121c..0000000000 --- a/2022/CVE-2022-2078.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 610271448, - "name": "CVE-2022-2078", - "full_name": "delsploit\/CVE-2022-2078", - "owner": { - "login": "delsploit", - "id": 127108998, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127108998?v=4", - "html_url": "https:\/\/github.com\/delsploit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/delsploit\/CVE-2022-2078", - "description": null, - "fork": false, - "created_at": "2023-03-06T12:49:29Z", - "updated_at": "2025-10-24T08:20:12Z", - "pushed_at": "2023-03-06T12:50:15Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-20818.json b/2022/CVE-2022-20818.json deleted file mode 100644 index a44840e64f..0000000000 --- a/2022/CVE-2022-20818.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 742645854, - "name": "CVE-2022-20818", - "full_name": "mbadanoiu\/CVE-2022-20818", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-20818", - "description": "CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN", - "fork": false, - "created_at": "2024-01-13T00:17:53Z", - "updated_at": "2026-02-18T03:11:12Z", - "pushed_at": "2024-01-13T00:42:03Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-20818", - "cves", - "local-privilege-escalation" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21306.json b/2022/CVE-2022-21306.json deleted file mode 100644 index 062eaec4ef..0000000000 --- a/2022/CVE-2022-21306.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 624702558, - "name": "CVE-2022-21306", - "full_name": "hktalent\/CVE-2022-21306", - "owner": { - "login": "hktalent", - "id": 18223385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18223385?v=4", - "html_url": "https:\/\/github.com\/hktalent", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hktalent\/CVE-2022-21306", - "description": "POC，EXP，chatGPT for me，只能给一些思路，全部不可用", - "fork": false, - "created_at": "2023-04-07T03:59:07Z", - "updated_at": "2023-04-07T03:59:43Z", - "pushed_at": "2023-04-07T03:59:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21340.json b/2022/CVE-2022-21340.json deleted file mode 100644 index a76edc40d2..0000000000 --- a/2022/CVE-2022-21340.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 784177636, - "name": "CVE-2022-21340", - "full_name": "Alexandre-Bartel\/CVE-2022-21340", - "owner": { - "login": "Alexandre-Bartel", - "id": 655248, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/655248?v=4", - "html_url": "https:\/\/github.com\/Alexandre-Bartel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Alexandre-Bartel\/CVE-2022-21340", - "description": "PoC for CVE-2022-21340", - "fork": false, - "created_at": "2024-04-09T10:41:12Z", - "updated_at": "2024-04-09T10:45:03Z", - "pushed_at": "2024-04-09T10:44:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "denial-of-service", - "dos", - "java", - "openjdk", - "poc", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21371.json b/2022/CVE-2022-21371.json index 1e8f4d522c..6d51ab81e4 100644 --- a/2022/CVE-2022-21371.json +++ b/2022/CVE-2022-21371.json @@ -64,54 +64,5 @@ "watchers": 18, "score": 0, "subscribers_count": 1 - }, - { - "id": 810939629, - "name": "CVE-2022-21371", - "full_name": "Cappricio-Securities\/CVE-2022-21371", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2022-21371", - "description": "Oracle WebLogic Server (LFI)", - "fork": false, - "created_at": "2024-06-05T16:29:16Z", - "updated_at": "2025-11-03T15:21:30Z", - "pushed_at": "2024-06-24T10:35:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bugbounty", - "bugbounty-tool", - "bugbounty-tools", - "cve-2022-21371", - "cve-2022-21371-poc", - "cve-2022-21371-scanner", - "lfi", - "lfi-detection", - "lfi-exploitation", - "lfi-exploiter", - "lfi-scanner", - "lfi-vulnerability", - "local-file-inclusion", - "oracle-weblogic-server", - "oracle-weblogic-server-lfi" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-21392.json b/2022/CVE-2022-21392.json deleted file mode 100644 index d78a0bcfd1..0000000000 --- a/2022/CVE-2022-21392.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 729286928, - "name": "CVE-2022-21392", - "full_name": "mbadanoiu\/CVE-2022-21392", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-21392", - "description": "CVE-2022-21392: Local Privilege Escalation via NMR SUID in Oracle Enterprise Manager ", - "fork": false, - "created_at": "2023-12-08T20:13:23Z", - "updated_at": "2025-12-29T05:16:41Z", - "pushed_at": "2023-12-08T20:27:58Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-21392", - "cves", - "local-privilege-escalation" - ], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21445.json b/2022/CVE-2022-21445.json index 7e3a8a61cd..72a07fe0ed 100644 --- a/2022/CVE-2022-21445.json +++ b/2022/CVE-2022-21445.json @@ -1,37 +1,4 @@ [ - { - "id": 770745685, - "name": "CVE-2022-21445-for-12.2.1.3.0-Weblogic", - "full_name": "hienkiet\/CVE-2022-21445-for-12.2.1.3.0-Weblogic", - "owner": { - "login": "hienkiet", - "id": 63083901, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63083901?v=4", - "html_url": "https:\/\/github.com\/hienkiet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hienkiet\/CVE-2022-21445-for-12.2.1.3.0-Weblogic", - "description": null, - "fork": false, - "created_at": "2024-03-12T04:47:02Z", - "updated_at": "2025-12-12T16:08:42Z", - "pushed_at": "2024-03-18T07:32:24Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 1168364374, "name": "CVE-2022-21445", diff --git a/2022/CVE-2022-21500.json b/2022/CVE-2022-21500.json deleted file mode 100644 index fbaf528a91..0000000000 --- a/2022/CVE-2022-21500.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 812484365, - "name": "CVE-2022-21500", - "full_name": "Cappricio-Securities\/CVE-2022-21500", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2022-21500", - "description": "Oracle E-Business Suite <=12.2 - Authentication Bypass", - "fork": false, - "created_at": "2024-06-09T02:59:45Z", - "updated_at": "2026-01-26T13:10:22Z", - "pushed_at": "2024-06-24T10:50:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-21500", - "ebs", - "oracle", - "pentesting", - "wpt" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21587.json b/2022/CVE-2022-21587.json deleted file mode 100644 index 8dae90d05b..0000000000 --- a/2022/CVE-2022-21587.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 597954094, - "name": "CVE-2022-21587-POC", - "full_name": "hieuminhnv\/CVE-2022-21587-POC", - "owner": { - "login": "hieuminhnv", - "id": 28292732, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28292732?v=4", - "html_url": "https:\/\/github.com\/hieuminhnv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hieuminhnv\/CVE-2022-21587-POC", - "description": "CVE-2022-21587 POC ", - "fork": false, - "created_at": "2023-02-06T04:18:24Z", - "updated_at": "2026-05-08T08:41:25Z", - "pushed_at": "2023-02-17T09:22:41Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 604991320, - "name": "Oracle-E-BS-CVE-2022-21587-Exploit", - "full_name": "rockmelodies\/Oracle-E-BS-CVE-2022-21587-Exploit", - "owner": { - "login": "rockmelodies", - "id": 24653177, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24653177?v=4", - "html_url": "https:\/\/github.com\/rockmelodies", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rockmelodies\/Oracle-E-BS-CVE-2022-21587-Exploit", - "description": "Oracle E-BS CVE-2022-21587 Exploit", - "fork": false, - "created_at": "2023-02-22T08:00:38Z", - "updated_at": "2026-05-22T08:22:38Z", - "pushed_at": "2023-02-14T03:46:20Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 609134090, - "name": "CVE-2022-21587-Oracle-EBS-", - "full_name": "sahabrifki\/CVE-2022-21587-Oracle-EBS-", - "owner": { - "login": "sahabrifki", - "id": 26023743, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26023743?v=4", - "html_url": "https:\/\/github.com\/sahabrifki", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sahabrifki\/CVE-2022-21587-Oracle-EBS-", - "description": "This script is used for automating exploit for Oracle Ebussiness (EBS) for CVE 2022-21587 ( Unauthenticated File Upload For Remote Code Execution)", - "fork": false, - "created_at": "2023-03-03T12:56:58Z", - "updated_at": "2025-06-22T08:06:00Z", - "pushed_at": "2023-03-03T13:12:40Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21661.json b/2022/CVE-2022-21661.json index cfdd484b35..540a0072c5 100644 --- a/2022/CVE-2022-21661.json +++ b/2022/CVE-2022-21661.json @@ -164,209 +164,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 588582544, - "name": "SSI-CVE-2022-21661", - "full_name": "WellingtonEspindula\/SSI-CVE-2022-21661", - "owner": { - "login": "WellingtonEspindula", - "id": 16787873, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16787873?v=4", - "html_url": "https:\/\/github.com\/WellingtonEspindula", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WellingtonEspindula\/SSI-CVE-2022-21661", - "description": "Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3.", - "fork": false, - "created_at": "2023-01-13T13:31:34Z", - "updated_at": "2024-10-22T07:08:42Z", - "pushed_at": "2023-11-30T14:51:15Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-21661", - "exploit", - "pof", - "security" - ], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 598931701, - "name": "CVE-2022-21661-Demo", - "full_name": "daniel616\/CVE-2022-21661-Demo", - "owner": { - "login": "daniel616", - "id": 26915500, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26915500?v=4", - "html_url": "https:\/\/github.com\/daniel616", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/daniel616\/CVE-2022-21661-Demo", - "description": "Demonstration of the SQL injection vulnerability in wordpress 5.8.2", - "fork": false, - "created_at": "2023-02-08T04:58:57Z", - "updated_at": "2025-02-14T17:11:21Z", - "pushed_at": "2023-05-10T01:10:08Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 633180220, - "name": "CVE-2022-21661-PoC", - "full_name": "sealldeveloper\/CVE-2022-21661-PoC", - "owner": { - "login": "sealldeveloper", - "id": 120470330, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120470330?v=4", - "html_url": "https:\/\/github.com\/sealldeveloper", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sealldeveloper\/CVE-2022-21661-PoC", - "description": "A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC", - "fork": false, - "created_at": "2023-04-27T00:36:16Z", - "updated_at": "2024-09-09T18:01:25Z", - "pushed_at": "2023-04-27T00:50:50Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 739025859, - "name": "CVE-2022-21661", - "full_name": "p4ncontomat3\/CVE-2022-21661", - "owner": { - "login": "p4ncontomat3", - "id": 52469263, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52469263?v=4", - "html_url": "https:\/\/github.com\/p4ncontomat3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/p4ncontomat3\/CVE-2022-21661", - "description": "Script to validate WordPress CVE-2022-21661", - "fork": false, - "created_at": "2024-01-04T15:49:00Z", - "updated_at": "2024-01-04T15:52:21Z", - "pushed_at": "2024-01-04T15:53:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 776679745, - "name": "WordPress--CVE-2022-21661", - "full_name": "CharonDefalt\/WordPress--CVE-2022-21661", - "owner": { - "login": "CharonDefalt", - "id": 103410775, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103410775?v=4", - "html_url": "https:\/\/github.com\/CharonDefalt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CharonDefalt\/WordPress--CVE-2022-21661", - "description": null, - "fork": false, - "created_at": "2024-03-24T07:03:35Z", - "updated_at": "2024-03-24T07:03:35Z", - "pushed_at": "2024-03-24T07:03:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 887277471, - "name": "CVE-2022-21661", - "full_name": "w0r1i0g1ht\/CVE-2022-21661", - "owner": { - "login": "w0r1i0g1ht", - "id": 78846391, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78846391?v=4", - "html_url": "https:\/\/github.com\/w0r1i0g1ht", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/w0r1i0g1ht\/CVE-2022-21661", - "description": "CVE-2022-21661 docker and poc", - "fork": false, - "created_at": "2024-11-12T13:23:12Z", - "updated_at": "2024-11-12T13:30:16Z", - "pushed_at": "2024-11-12T13:30:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 982601758, "name": "CVE-2022-21661", diff --git a/2022/CVE-2022-21839.json b/2022/CVE-2022-21839.json deleted file mode 100644 index d4e7a17e16..0000000000 --- a/2022/CVE-2022-21839.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 587390406, - "name": "CVE-2022-21839-", - "full_name": "lolin19\/CVE-2022-21839-", - "owner": { - "login": "lolin19", - "id": 104766804, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104766804?v=4", - "html_url": "https:\/\/github.com\/lolin19", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lolin19\/CVE-2022-21839-", - "description": null, - "fork": false, - "created_at": "2023-01-10T16:34:02Z", - "updated_at": "2023-01-10T16:34:02Z", - "pushed_at": "2023-01-10T16:42:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21894.json b/2022/CVE-2022-21894.json index 193bd299c3..5db2bc539d 100644 --- a/2022/CVE-2022-21894.json +++ b/2022/CVE-2022-21894.json @@ -72,137 +72,5 @@ "watchers": 15, "score": 0, "subscribers_count": 2 - }, - { - "id": 612635950, - "name": "batondrop_armv7", - "full_name": "Wack0\/batondrop_armv7", - "owner": { - "login": "Wack0", - "id": 2650838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2650838?v=4", - "html_url": "https:\/\/github.com\/Wack0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Wack0\/batondrop_armv7", - "description": "An implementation of baton drop (CVE-2022-21894) for armv7 (MSM8960)", - "fork": false, - "created_at": "2023-03-11T14:38:13Z", - "updated_at": "2025-01-05T19:08:06Z", - "pushed_at": "2023-03-11T14:46:39Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 10, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 626737095, - "name": "BlackLotusDetection", - "full_name": "bakedmuffinman\/BlackLotusDetection", - "owner": { - "login": "bakedmuffinman", - "id": 28766981, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28766981?v=4", - "html_url": "https:\/\/github.com\/bakedmuffinman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bakedmuffinman\/BlackLotusDetection", - "description": "Created to help detect IOCs for CVE-2022-21894: The BlackLotus campaign", - "fork": false, - "created_at": "2023-04-12T04:05:42Z", - "updated_at": "2023-04-12T04:06:54Z", - "pushed_at": "2023-04-12T04:13:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 626751306, - "name": "BlackLotus-Detection", - "full_name": "qjawls2003\/BlackLotus-Detection", - "owner": { - "login": "qjawls2003", - "id": 35247051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35247051?v=4", - "html_url": "https:\/\/github.com\/qjawls2003", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/qjawls2003\/BlackLotus-Detection", - "description": "Public repo for anything CVE-2022-21894", - "fork": false, - "created_at": "2023-04-12T05:01:50Z", - "updated_at": "2023-04-12T05:15:56Z", - "pushed_at": "2023-04-12T05:31:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": true, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 696622822, - "name": "CVE-2022-21894-Payload-New", - "full_name": "nova-master\/CVE-2022-21894-Payload-New", - "owner": { - "login": "nova-master", - "id": 129145316, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129145316?v=4", - "html_url": "https:\/\/github.com\/nova-master", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nova-master\/CVE-2022-21894-Payload-New", - "description": null, - "fork": false, - "created_at": "2023-09-26T05:52:36Z", - "updated_at": "2026-03-01T08:48:34Z", - "pushed_at": "2023-09-26T06:01:23Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-21907.json b/2022/CVE-2022-21907.json index 903280be81..39466aec62 100644 --- a/2022/CVE-2022-21907.json +++ b/2022/CVE-2022-21907.json @@ -406,137 +406,5 @@ "watchers": 8, "score": 0, "subscribers_count": 2 - }, - { - "id": 632224259, - "name": "CVE-2022-21907", - "full_name": "cassie0206\/CVE-2022-21907", - "owner": { - "login": "cassie0206", - "id": 90564331, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90564331?v=4", - "html_url": "https:\/\/github.com\/cassie0206", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cassie0206\/CVE-2022-21907", - "description": "2022 Spring Prof. 謝續平", - "fork": false, - "created_at": "2023-04-25T01:13:51Z", - "updated_at": "2023-05-17T08:52:27Z", - "pushed_at": "2023-06-25T07:11:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 637001964, - "name": "CVE-2022-21907-RCE", - "full_name": "EzoomE\/CVE-2022-21907-RCE", - "owner": { - "login": "EzoomE", - "id": 99851303, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99851303?v=4", - "html_url": "https:\/\/github.com\/EzoomE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/EzoomE\/CVE-2022-21907-RCE", - "description": "CVE-2022-21907漏洞RCE PoC", - "fork": false, - "created_at": "2023-05-06T07:50:08Z", - "updated_at": "2023-05-06T07:50:53Z", - "pushed_at": "2023-05-22T03:14:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 679736679, - "name": "CVE-2022-21907", - "full_name": "asepsaepdin\/CVE-2022-21907", - "owner": { - "login": "asepsaepdin", - "id": 122620685, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122620685?v=4", - "html_url": "https:\/\/github.com\/asepsaepdin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/asepsaepdin\/CVE-2022-21907", - "description": null, - "fork": false, - "created_at": "2023-08-17T13:58:00Z", - "updated_at": "2023-08-17T14:12:38Z", - "pushed_at": "2023-09-03T15:14:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 729648780, - "name": "CVE-2022-21907", - "full_name": "kamal-marouane\/CVE-2022-21907", - "owner": { - "login": "kamal-marouane", - "id": 110986028, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110986028?v=4", - "html_url": "https:\/\/github.com\/kamal-marouane", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kamal-marouane\/CVE-2022-21907", - "description": "Vulnerability in HTTP Protocol Stack Enabling Remote Code Execution and Potential System Crash.", - "fork": false, - "created_at": "2023-12-09T22:26:49Z", - "updated_at": "2023-12-11T20:32:49Z", - "pushed_at": "2024-01-19T04:04:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-22057.json b/2022/CVE-2022-22057.json deleted file mode 100644 index e3899ef501..0000000000 --- a/2022/CVE-2022-22057.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 664855267, - "name": "CVE-2022-22057_SM-F926U", - "full_name": "diabl0w\/CVE-2022-22057_SM-F926U", - "owner": { - "login": "diabl0w", - "id": 16129074, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16129074?v=4", - "html_url": "https:\/\/github.com\/diabl0w", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/diabl0w\/CVE-2022-22057_SM-F926U", - "description": null, - "fork": false, - "created_at": "2023-07-10T22:55:02Z", - "updated_at": "2026-06-17T03:53:09Z", - "pushed_at": "2023-07-11T23:15:53Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22274.json b/2022/CVE-2022-22274.json deleted file mode 100644 index 0be4167608..0000000000 --- a/2022/CVE-2022-22274.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 588980352, - "name": "Sonic_CVE-2022-22274_poc", - "full_name": "4lucardSec\/Sonic_CVE-2022-22274_poc", - "owner": { - "login": "4lucardSec", - "id": 71567033, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71567033?v=4", - "html_url": "https:\/\/github.com\/4lucardSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/4lucardSec\/Sonic_CVE-2022-22274_poc", - "description": null, - "fork": false, - "created_at": "2023-01-14T17:15:53Z", - "updated_at": "2024-01-22T02:42:51Z", - "pushed_at": "2023-01-14T17:18:51Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 652282669, - "name": "CVE-2022-22274_poc", - "full_name": "forthisvideo\/CVE-2022-22274_poc", - "owner": { - "login": "forthisvideo", - "id": 136259454, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136259454?v=4", - "html_url": "https:\/\/github.com\/forthisvideo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/forthisvideo\/CVE-2022-22274_poc", - "description": null, - "fork": false, - "created_at": "2023-06-11T16:56:53Z", - "updated_at": "2023-06-11T16:57:33Z", - "pushed_at": "2023-06-11T16:57:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 742585090, - "name": "CVE-2022-22274_CVE-2023-0656", - "full_name": "BishopFox\/CVE-2022-22274_CVE-2023-0656", - "owner": { - "login": "BishopFox", - "id": 4523757, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4523757?v=4", - "html_url": "https:\/\/github.com\/BishopFox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BishopFox\/CVE-2022-22274_CVE-2023-0656", - "description": null, - "fork": false, - "created_at": "2024-01-12T20:03:51Z", - "updated_at": "2025-12-31T04:40:48Z", - "pushed_at": "2024-01-12T20:15:47Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 19, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22555.json b/2022/CVE-2022-22555.json deleted file mode 100644 index ae82fe5720..0000000000 --- a/2022/CVE-2022-22555.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 758383136, - "name": "cve-2022-22555", - "full_name": "colaoo123\/cve-2022-22555", - "owner": { - "login": "colaoo123", - "id": 136353760, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136353760?v=4", - "html_url": "https:\/\/github.com\/colaoo123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/colaoo123\/cve-2022-22555", - "description": null, - "fork": false, - "created_at": "2024-02-16T07:45:51Z", - "updated_at": "2024-02-16T07:50:14Z", - "pushed_at": "2024-02-16T07:50:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22720.json b/2022/CVE-2022-22720.json deleted file mode 100644 index d6918e4ad1..0000000000 --- a/2022/CVE-2022-22720.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 723248102, - "name": "CVE-2022-22720", - "full_name": "Benasin\/CVE-2022-22720", - "owner": { - "login": "Benasin", - "id": 47447167, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47447167?v=4", - "html_url": "https:\/\/github.com\/Benasin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Benasin\/CVE-2022-22720", - "description": null, - "fork": false, - "created_at": "2023-11-25T04:06:01Z", - "updated_at": "2023-11-25T04:06:54Z", - "pushed_at": "2023-11-25T04:06:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22733.json b/2022/CVE-2022-22733.json deleted file mode 100644 index 5b4fac1db2..0000000000 --- a/2022/CVE-2022-22733.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 632426945, - "name": "CVE-2022-22733", - "full_name": "Zeyad-Azima\/CVE-2022-22733", - "owner": { - "login": "Zeyad-Azima", - "id": 62406753, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62406753?v=4", - "html_url": "https:\/\/github.com\/Zeyad-Azima", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Zeyad-Azima\/CVE-2022-22733", - "description": "Apache ShardingSphere ElasticJob-UI Privilege Escalation & RCE Exploit", - "fork": false, - "created_at": "2023-04-25T11:39:40Z", - "updated_at": "2024-06-09T10:36:58Z", - "pushed_at": "2023-05-22T12:49:23Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apache", - "apache2", - "exploit", - "java", - "shardingsphere", - "vulnerability" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-2274.json b/2022/CVE-2022-2274.json index e3120f809d..25e0b2cb34 100644 --- a/2022/CVE-2022-2274.json +++ b/2022/CVE-2022-2274.json @@ -71,43 +71,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 604407954, - "name": "CVE-2022-2274", - "full_name": "DesmondSanctity\/CVE-2022-2274", - "owner": { - "login": "DesmondSanctity", - "id": 51109125, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51109125?v=4", - "html_url": "https:\/\/github.com\/DesmondSanctity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DesmondSanctity\/CVE-2022-2274", - "description": "OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274", - "fork": false, - "created_at": "2023-02-21T01:56:51Z", - "updated_at": "2023-02-21T13:15:47Z", - "pushed_at": "2023-02-21T02:09:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "advisory", - "security", - "vulnerabilities", - "vulnerability-assessment" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-22947.json b/2022/CVE-2022-22947.json index 48e870a120..21b87aaa8e 100644 --- a/2022/CVE-2022-22947.json +++ b/2022/CVE-2022-22947.json @@ -1693,171 +1693,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 598386749, - "name": "CVE-2022-22947", - "full_name": "Zh0um1\/CVE-2022-22947", - "owner": { - "login": "Zh0um1", - "id": 94421064, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94421064?v=4", - "html_url": "https:\/\/github.com\/Zh0um1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Zh0um1\/CVE-2022-22947", - "description": "CVE-2022-22947注入哥斯拉内存马", - "fork": false, - "created_at": "2023-02-07T01:59:01Z", - "updated_at": "2025-05-19T08:49:52Z", - "pushed_at": "2023-06-21T15:43:11Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 28, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 645770114, - "name": "CVE-2022-22947", - "full_name": "Le1a\/CVE-2022-22947", - "owner": { - "login": "Le1a", - "id": 97610822, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97610822?v=4", - "html_url": "https:\/\/github.com\/Le1a", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Le1a\/CVE-2022-22947", - "description": "Spring Cloud Gateway Actuator API SpEL表达式注入命令执行Exp", - "fork": false, - "created_at": "2023-05-26T11:52:22Z", - "updated_at": "2023-06-02T03:47:18Z", - "pushed_at": "2023-05-27T04:38:31Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 738464216, - "name": "CVE-2022-22947", - "full_name": "Sumitpathania03\/CVE-2022-22947", - "owner": { - "login": "Sumitpathania03", - "id": 126046383, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126046383?v=4", - "html_url": "https:\/\/github.com\/Sumitpathania03", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sumitpathania03\/CVE-2022-22947", - "description": null, - "fork": false, - "created_at": "2024-01-03T09:37:54Z", - "updated_at": "2024-11-26T09:43:53Z", - "pushed_at": "2024-04-02T06:35:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 754001866, - "name": "SpringExploitGUI", - "full_name": "superneilcn\/SpringExploitGUI", - "owner": { - "login": "superneilcn", - "id": 26054977, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26054977?v=4", - "html_url": "https:\/\/github.com\/superneilcn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/superneilcn\/SpringExploitGUI", - "description": "一款Spring综合漏洞的利用工具，工具目前支持Spring Cloud Gateway RCE(CVE-2022-22947)、Spring Framework RCE (CVE-2022-22965) 的检测以及利用", - "fork": false, - "created_at": "2024-02-07T07:51:30Z", - "updated_at": "2024-02-07T07:51:30Z", - "pushed_at": "2024-04-11T05:01:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 15, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 15, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 817383255, - "name": "CVE-2022-22947", - "full_name": "cc3305\/CVE-2022-22947", - "owner": { - "login": "cc3305", - "id": 103961201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4", - "html_url": "https:\/\/github.com\/cc3305", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cc3305\/CVE-2022-22947", - "description": "CVE-2022-22947 exploit script", - "fork": false, - "created_at": "2024-06-19T15:31:19Z", - "updated_at": "2024-07-27T20:16:38Z", - "pushed_at": "2024-07-27T20:16:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1034345877, "name": "CVE-2022-22947-pb-ai", diff --git a/2022/CVE-2022-22963.json b/2022/CVE-2022-22963.json index 1967a16dff..eba459bc59 100644 --- a/2022/CVE-2022-22963.json +++ b/2022/CVE-2022-22963.json @@ -516,341 +516,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 589347123, - "name": "CVE-2022-22963-POC", - "full_name": "iliass-dahman\/CVE-2022-22963-POC", - "owner": { - "login": "iliass-dahman", - "id": 40769568, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40769568?v=4", - "html_url": "https:\/\/github.com\/iliass-dahman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iliass-dahman\/CVE-2022-22963-POC", - "description": null, - "fork": false, - "created_at": "2023-01-15T21:39:20Z", - "updated_at": "2023-03-24T18:08:12Z", - "pushed_at": "2023-01-22T22:39:49Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 610851382, - "name": "CVE-2022-22963", - "full_name": "charis3306\/CVE-2022-22963", - "owner": { - "login": "charis3306", - "id": 84823804, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84823804?v=4", - "html_url": "https:\/\/github.com\/charis3306", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/charis3306\/CVE-2022-22963", - "description": "spring cloud function 一键利用工具! by charis 博客https:\/\/charis3306.top\/", - "fork": false, - "created_at": "2023-03-07T15:57:29Z", - "updated_at": "2024-09-24T03:12:53Z", - "pushed_at": "2023-06-04T08:02:23Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 613387933, - "name": "CVE-2022-22963-PoC", - "full_name": "lemmyz4n3771\/CVE-2022-22963-PoC", - "owner": { - "login": "lemmyz4n3771", - "id": 116111418, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116111418?v=4", - "html_url": "https:\/\/github.com\/lemmyz4n3771", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lemmyz4n3771\/CVE-2022-22963-PoC", - "description": "CVE-2022-22963 RCE PoC in python", - "fork": false, - "created_at": "2023-03-13T13:28:55Z", - "updated_at": "2023-07-07T22:25:02Z", - "pushed_at": "2023-03-14T15:23:12Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 615687765, - "name": "CVE-2022-22963_Reverse-Shell-Exploit", - "full_name": "J0ey17\/CVE-2022-22963_Reverse-Shell-Exploit", - "owner": { - "login": "J0ey17", - "id": 72118225, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72118225?v=4", - "html_url": "https:\/\/github.com\/J0ey17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/J0ey17\/CVE-2022-22963_Reverse-Shell-Exploit", - "description": "CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vulnerability exists, and if it does, will give you a reverse shell.", - "fork": false, - "created_at": "2023-03-18T11:43:00Z", - "updated_at": "2026-04-23T23:02:48Z", - "pushed_at": "2023-03-18T11:47:55Z", - "stargazers_count": 24, - "watchers_count": 24, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 24, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 616814586, - "name": "CVE-2022-22963", - "full_name": "Mustafa1986\/CVE-2022-22963", - "owner": { - "login": "Mustafa1986", - "id": 27927358, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27927358?v=4", - "html_url": "https:\/\/github.com\/Mustafa1986", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mustafa1986\/CVE-2022-22963", - "description": null, - "fork": false, - "created_at": "2023-03-21T06:14:35Z", - "updated_at": "2023-03-21T06:16:01Z", - "pushed_at": "2023-03-21T06:15:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 625969417, - "name": "CVE-2022-22963-Exploit", - "full_name": "SourM1lk\/CVE-2022-22963-Exploit", - "owner": { - "login": "SourM1lk", - "id": 116470756, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116470756?v=4", - "html_url": "https:\/\/github.com\/SourM1lk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SourM1lk\/CVE-2022-22963-Exploit", - "description": "Rust-based exploit for the CVE-2022-22963 vulnerability", - "fork": false, - "created_at": "2023-04-10T14:12:58Z", - "updated_at": "2023-05-31T19:48:01Z", - "pushed_at": "2023-04-11T13:46:45Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 629041592, - "name": "Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE", - "full_name": "randallbanner\/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE", - "owner": { - "login": "randallbanner", - "id": 99814847, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99814847?v=4", - "html_url": "https:\/\/github.com\/randallbanner", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/randallbanner\/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE", - "description": null, - "fork": false, - "created_at": "2023-04-17T13:54:06Z", - "updated_at": "2025-04-26T19:15:43Z", - "pushed_at": "2023-04-17T14:01:46Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 635879677, - "name": "CVE-2022-22963", - "full_name": "gunzf0x\/CVE-2022-22963", - "owner": { - "login": "gunzf0x", - "id": 31874167, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31874167?v=4", - "html_url": "https:\/\/github.com\/gunzf0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gunzf0x\/CVE-2022-22963", - "description": "Binaries for CVE-2022-22963", - "fork": false, - "created_at": "2023-05-03T16:45:06Z", - "updated_at": "2023-05-03T17:19:31Z", - "pushed_at": "2023-05-04T23:24:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-22963", - "exploits", - "spring-cloud", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 645500414, - "name": "RCE-in-Spring-Cloud-CVE-2022-22963", - "full_name": "nikn0laty\/RCE-in-Spring-Cloud-CVE-2022-22963", - "owner": { - "login": "nikn0laty", - "id": 96344826, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96344826?v=4", - "html_url": "https:\/\/github.com\/nikn0laty", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nikn0laty\/RCE-in-Spring-Cloud-CVE-2022-22963", - "description": "Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function", - "fork": false, - "created_at": "2023-05-25T19:50:38Z", - "updated_at": "2023-05-25T19:54:23Z", - "pushed_at": "2023-05-26T21:50:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 711317604, - "name": "CVE-2022-22963-Poc-Bearcules", - "full_name": "BearClaw96\/CVE-2022-22963-Poc-Bearcules", - "owner": { - "login": "BearClaw96", - "id": 118552753, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118552753?v=4", - "html_url": "https:\/\/github.com\/BearClaw96", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BearClaw96\/CVE-2022-22963-Poc-Bearcules", - "description": "This is a POC for CVE-2022-22963 ", - "fork": false, - "created_at": "2023-10-28T21:42:38Z", - "updated_at": "2023-10-28T21:55:49Z", - "pushed_at": "2023-10-28T21:56:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 736534272, "name": "CVE-2022-22963", @@ -884,72 +549,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 797556032, - "name": "CVE-2022-22963", - "full_name": "jrbH4CK\/CVE-2022-22963", - "owner": { - "login": "jrbH4CK", - "id": 163496398, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163496398?v=4", - "html_url": "https:\/\/github.com\/jrbH4CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jrbH4CK\/CVE-2022-22963", - "description": null, - "fork": false, - "created_at": "2024-05-08T04:25:29Z", - "updated_at": "2024-07-30T23:22:39Z", - "pushed_at": "2024-07-30T23:22:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 903170019, - "name": "CVE-2022-22963", - "full_name": "Shayz614\/CVE-2022-22963", - "owner": { - "login": "Shayz614", - "id": 77766318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77766318?v=4", - "html_url": "https:\/\/github.com\/Shayz614", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Shayz614\/CVE-2022-22963", - "description": "CVE to CTF FP", - "fork": false, - "created_at": "2024-12-13T22:54:28Z", - "updated_at": "2024-12-13T22:56:47Z", - "pushed_at": "2024-12-13T22:56:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1229958575, "name": "CVE-2022-22963", diff --git a/2022/CVE-2022-22965.json b/2022/CVE-2022-22965.json index c44c9ff078..7e0f297000 100644 --- a/2022/CVE-2022-22965.json +++ b/2022/CVE-2022-22965.json @@ -2280,460 +2280,6 @@ "score": 0, "subscribers_count": 3 }, - { - "id": 584868904, - "name": "Spring4Shell-CVE-2022-22965-POC", - "full_name": "ajith737\/Spring4Shell-CVE-2022-22965-POC", - "owner": { - "login": "ajith737", - "id": 72512571, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72512571?v=4", - "html_url": "https:\/\/github.com\/ajith737", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ajith737\/Spring4Shell-CVE-2022-22965-POC", - "description": "User friendly Spring4Shell POC", - "fork": false, - "created_at": "2023-01-03T18:15:07Z", - "updated_at": "2023-01-03T18:15:14Z", - "pushed_at": "2023-01-03T18:53:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 608448692, - "name": "CVE-2022-22965", - "full_name": "c33dd\/CVE-2022-22965", - "owner": { - "login": "c33dd", - "id": 63436417, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63436417?v=4", - "html_url": "https:\/\/github.com\/c33dd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/c33dd\/CVE-2022-22965", - "description": " 🚀 Exploit for Spring core RCE in C [ wip ]", - "fork": false, - "created_at": "2023-03-02T03:09:39Z", - "updated_at": "2023-02-28T17:01:21Z", - "pushed_at": "2023-02-28T16:49:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 613032720, - "name": "Spring4Shell-PoC-exploit", - "full_name": "gokul-ramesh\/Spring4Shell-PoC-exploit", - "owner": { - "login": "gokul-ramesh", - "id": 65040016, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65040016?v=4", - "html_url": "https:\/\/github.com\/gokul-ramesh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gokul-ramesh\/Spring4Shell-PoC-exploit", - "description": "Demonstrable Proof of Concept Exploit for Spring4Shell Vulnerability (CVE-2022-22965)", - "fork": false, - "created_at": "2023-03-12T17:37:51Z", - "updated_at": "2024-06-24T06:32:48Z", - "pushed_at": "2023-03-17T14:30:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-22965", - "exploit-poc", - "spring4shell" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 647731640, - "name": "Telstra-Cybersecurity-Virtual-Experience-", - "full_name": "bL34cHig0\/Telstra-Cybersecurity-Virtual-Experience-", - "owner": { - "login": "bL34cHig0", - "id": 133022207, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133022207?v=4", - "html_url": "https:\/\/github.com\/bL34cHig0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bL34cHig0\/Telstra-Cybersecurity-Virtual-Experience-", - "description": "A simple python script for a firewall rule that blocks incoming requests based on the Spring4Shell (CVE-2022-22965) vulnerability", - "fork": false, - "created_at": "2023-05-31T12:04:25Z", - "updated_at": "2024-09-19T04:14:46Z", - "pushed_at": "2024-03-19T13:42:29Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "firewall-rules", - "incident-response", - "malware-analysis", - "network-analysis", - "python", - "python3", - "pythonscript", - "spring4shell", - "tomcat-server", - "webserver", - "zeroday", - "zeroday-attack" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 649060182, - "name": "CVE-2022-22965", - "full_name": "BKLockly\/CVE-2022-22965", - "owner": { - "login": "BKLockly", - "id": 113906689, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113906689?v=4", - "html_url": "https:\/\/github.com\/BKLockly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BKLockly\/CVE-2022-22965", - "description": "Poc&Exp,支持批量扫描,反弹shell", - "fork": false, - "created_at": "2023-06-03T16:39:50Z", - "updated_at": "2023-10-12T17:15:11Z", - "pushed_at": "2023-06-04T03:51:56Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 650528662, - "name": "Spring4Shell", - "full_name": "dbgee\/Spring4Shell", - "owner": { - "login": "dbgee", - "id": 46910972, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46910972?v=4", - "html_url": "https:\/\/github.com\/dbgee", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dbgee\/Spring4Shell", - "description": "Spring rce environment for CVE-2022-22965", - "fork": false, - "created_at": "2023-06-07T09:02:50Z", - "updated_at": "2023-06-08T03:38:35Z", - "pushed_at": "2023-06-08T03:37:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 656168817, - "name": "CVE-2022-22965-Spring4Shell", - "full_name": "jakabakos\/CVE-2022-22965-Spring4Shell", - "owner": { - "login": "jakabakos", - "id": 42498816, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42498816?v=4", - "html_url": "https:\/\/github.com\/jakabakos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jakabakos\/CVE-2022-22965-Spring4Shell", - "description": "PoC and exploit for CVE-2022-22965 Spring4Shell", - "fork": false, - "created_at": "2023-06-20T11:45:29Z", - "updated_at": "2024-06-06T11:59:00Z", - "pushed_at": "2023-06-21T10:28:40Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 686301684, - "name": "Spring4Shell-CVE-2022-22965", - "full_name": "sohamsharma966\/Spring4Shell-CVE-2022-22965", - "owner": { - "login": "sohamsharma966", - "id": 72042665, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72042665?v=4", - "html_url": "https:\/\/github.com\/sohamsharma966", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sohamsharma966\/Spring4Shell-CVE-2022-22965", - "description": null, - "fork": false, - "created_at": "2023-09-02T10:41:05Z", - "updated_at": "2023-09-02T10:41:30Z", - "pushed_at": "2023-09-02T10:51:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 717886733, - "name": "CVE-2022-22965", - "full_name": "LucasPDiniz\/CVE-2022-22965", - "owner": { - "login": "LucasPDiniz", - "id": 57265360, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57265360?v=4", - "html_url": "https:\/\/github.com\/LucasPDiniz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LucasPDiniz\/CVE-2022-22965", - "description": "Spring4Shell Vulnerability RCE - CVE-2022-22965 ", - "fork": false, - "created_at": "2023-11-12T22:15:32Z", - "updated_at": "2024-06-30T21:57:34Z", - "pushed_at": "2024-06-30T21:57:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "2022", - "cve-2022-22965", - "spring", - "spring4shell", - "springboot", - "vulnerability" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 721844194, - "name": "Firewall-Rules", - "full_name": "ESSAFAR\/Firewall-Rules", - "owner": { - "login": "ESSAFAR", - "id": 114870388, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114870388?v=4", - "html_url": "https:\/\/github.com\/ESSAFAR", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ESSAFAR\/Firewall-Rules", - "description": "Firewall rules to mitigate a zero-day vulnerability malware attack (CVE-2022-22965), known as Spring4Shell", - "fork": false, - "created_at": "2023-11-21T22:18:49Z", - "updated_at": "2025-04-12T18:38:30Z", - "pushed_at": "2023-11-21T22:19:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 794376820, - "name": "SpringFramework_CVE-2022-22965_RCE", - "full_name": "xsxtw\/SpringFramework_CVE-2022-22965_RCE", - "owner": { - "login": "xsxtw", - "id": 168295718, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168295718?v=4", - "html_url": "https:\/\/github.com\/xsxtw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xsxtw\/SpringFramework_CVE-2022-22965_RCE", - "description": null, - "fork": false, - "created_at": "2024-05-01T02:36:13Z", - "updated_at": "2024-05-01T02:39:16Z", - "pushed_at": "2024-05-01T02:39:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 882127199, - "name": "Block-Spring4Shell", - "full_name": "Aur3ns\/Block-Spring4Shell", - "owner": { - "login": "Aur3ns", - "id": 141164867, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141164867?v=4", - "html_url": "https:\/\/github.com\/Aur3ns", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Aur3ns\/Block-Spring4Shell", - "description": "POC firewall with rules designed to detect and block Spring4Shell vulnerability (CVE-2022-22965) exploit", - "fork": false, - "created_at": "2024-11-02T00:26:02Z", - "updated_at": "2024-12-15T00:16:07Z", - "pushed_at": "2024-12-15T00:16:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 883824974, - "name": "Expoitation-de-la-vuln-rabilit-CVE-2022-22965", - "full_name": "guigui237\/Expoitation-de-la-vuln-rabilit-CVE-2022-22965", - "owner": { - "login": "guigui237", - "id": 184559460, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184559460?v=4", - "html_url": "https:\/\/github.com\/guigui237", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/guigui237\/Expoitation-de-la-vuln-rabilit-CVE-2022-22965", - "description": null, - "fork": false, - "created_at": "2024-11-05T16:30:00Z", - "updated_at": "2024-11-06T23:04:42Z", - "pushed_at": "2024-11-06T23:04:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 926480657, "name": "Spring4Shell", diff --git a/2022/CVE-2022-22970.json b/2022/CVE-2022-22970.json deleted file mode 100644 index 8ebc45deae..0000000000 --- a/2022/CVE-2022-22970.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 891177744, - "name": "CVE-2022-22970", - "full_name": "Performant-Labs\/CVE-2022-22970", - "owner": { - "login": "Performant-Labs", - "id": 35463594, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35463594?v=4", - "html_url": "https:\/\/github.com\/Performant-Labs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Performant-Labs\/CVE-2022-22970", - "description": null, - "fork": false, - "created_at": "2024-11-19T21:36:09Z", - "updated_at": "2024-11-22T17:48:39Z", - "pushed_at": "2024-11-22T17:48:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22978.json b/2022/CVE-2022-22978.json index 7fe4c37049..3243d99dab 100644 --- a/2022/CVE-2022-22978.json +++ b/2022/CVE-2022-22978.json @@ -103,138 +103,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 608016738, - "name": "CVE-2022-22978", - "full_name": "umakant76705\/CVE-2022-22978", - "owner": { - "login": "umakant76705", - "id": 31900360, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31900360?v=4", - "html_url": "https:\/\/github.com\/umakant76705", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/umakant76705\/CVE-2022-22978", - "description": null, - "fork": false, - "created_at": "2023-03-01T06:21:56Z", - "updated_at": "2023-03-17T15:20:20Z", - "pushed_at": "2023-03-01T06:22:08Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 614770479, - "name": "CVE-2022-22978", - "full_name": "Raghvendra1207\/CVE-2022-22978", - "owner": { - "login": "Raghvendra1207", - "id": 128030511, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128030511?v=4", - "html_url": "https:\/\/github.com\/Raghvendra1207", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Raghvendra1207\/CVE-2022-22978", - "description": null, - "fork": false, - "created_at": "2023-03-16T09:34:17Z", - "updated_at": "2023-03-16T09:34:49Z", - "pushed_at": "2023-09-08T10:26:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 801924792, - "name": "CVE-2022-22978-demo", - "full_name": "wan9xx\/CVE-2022-22978-demo", - "owner": { - "login": "wan9xx", - "id": 65795483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65795483?v=4", - "html_url": "https:\/\/github.com\/wan9xx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wan9xx\/CVE-2022-22978-demo", - "description": "CVE-2022-22978漏洞实例代码", - "fork": false, - "created_at": "2024-05-17T07:26:54Z", - "updated_at": "2024-05-20T03:52:35Z", - "pushed_at": "2024-05-20T03:52:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 836181828, - "name": "CVE-2022-22978", - "full_name": "BoB13-Opensource-Contribution-Team9\/CVE-2022-22978", - "owner": { - "login": "BoB13-Opensource-Contribution-Team9", - "id": 177111000, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177111000?v=4", - "html_url": "https:\/\/github.com\/BoB13-Opensource-Contribution-Team9", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BoB13-Opensource-Contribution-Team9\/CVE-2022-22978", - "description": "CVE-2022-22978's Nuclei-Template", - "fork": false, - "created_at": "2024-07-31T10:12:33Z", - "updated_at": "2024-07-31T10:12:34Z", - "pushed_at": "2024-07-31T10:12:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 961436063, "name": "CVE-2022-22978", diff --git a/2022/CVE-2022-23093.json b/2022/CVE-2022-23093.json index f199d67326..418643f31e 100644 --- a/2022/CVE-2022-23093.json +++ b/2022/CVE-2022-23093.json @@ -43,38 +43,5 @@ "watchers": 10, "score": 0, "subscribers_count": 1 - }, - { - "id": 775885856, - "name": "DrayTek-Exploit", - "full_name": "Symbolexe\/DrayTek-Exploit", - "owner": { - "login": "Symbolexe", - "id": 140549630, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140549630?v=4", - "html_url": "https:\/\/github.com\/Symbolexe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Symbolexe\/DrayTek-Exploit", - "description": "CVE-2022-23093 FreeBSD Stack-Based Overflow", - "fork": false, - "created_at": "2024-03-22T08:38:40Z", - "updated_at": "2024-03-22T08:46:36Z", - "pushed_at": "2024-03-22T08:46:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-23131.json b/2022/CVE-2022-23131.json index 6a97520bb6..fa2a297dcb 100644 --- a/2022/CVE-2022-23131.json +++ b/2022/CVE-2022-23131.json @@ -472,237 +472,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 586260198, - "name": "cve-2022-23131", - "full_name": "wr0x00\/cve-2022-23131", - "owner": { - "login": "wr0x00", - "id": 86941613, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86941613?v=4", - "html_url": "https:\/\/github.com\/wr0x00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wr0x00\/cve-2022-23131", - "description": null, - "fork": false, - "created_at": "2023-01-07T14:09:40Z", - "updated_at": "2024-10-01T19:30:20Z", - "pushed_at": "2023-01-07T14:22:29Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 586722779, - "name": "CVE-2022-23131_exp", - "full_name": "Arrnitage\/CVE-2022-23131_exp", - "owner": { - "login": "Arrnitage", - "id": 48816467, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48816467?v=4", - "html_url": "https:\/\/github.com\/Arrnitage", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Arrnitage\/CVE-2022-23131_exp", - "description": "zabbix saml bypass", - "fork": false, - "created_at": "2023-01-09T04:10:08Z", - "updated_at": "2023-02-09T03:20:18Z", - "pushed_at": "2023-01-09T04:10:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 604432382, - "name": "Zabbix-SAML-SSO-_CVE-2022-23131", - "full_name": "clearcdq\/Zabbix-SAML-SSO-_CVE-2022-23131", - "owner": { - "login": "clearcdq", - "id": 81290636, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81290636?v=4", - "html_url": "https:\/\/github.com\/clearcdq", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/clearcdq\/Zabbix-SAML-SSO-_CVE-2022-23131", - "description": null, - "fork": false, - "created_at": "2023-02-21T03:30:20Z", - "updated_at": "2023-03-20T07:44:06Z", - "pushed_at": "2023-02-21T03:45:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 709195408, - "name": "CVE-2022-23131", - "full_name": "r10lab\/CVE-2022-23131", - "owner": { - "login": "r10lab", - "id": 92838079, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92838079?v=4", - "html_url": "https:\/\/github.com\/r10lab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r10lab\/CVE-2022-23131", - "description": null, - "fork": false, - "created_at": "2023-10-24T08:11:06Z", - "updated_at": "2023-10-24T08:12:16Z", - "pushed_at": "2023-10-24T08:13:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 859400181, - "name": "CVE-2022-23131", - "full_name": "fork-bombed\/CVE-2022-23131", - "owner": { - "login": "fork-bombed", - "id": 57873842, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57873842?v=4", - "html_url": "https:\/\/github.com\/fork-bombed", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fork-bombed\/CVE-2022-23131", - "description": "CVE-2022-23131 Zabbix Server SAML authentication exploit", - "fork": false, - "created_at": "2024-09-18T15:42:26Z", - "updated_at": "2025-03-11T16:35:52Z", - "pushed_at": "2024-09-18T15:58:35Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 878490904, - "name": "CVE-2022-23131", - "full_name": "davidzzo23\/CVE-2022-23131", - "owner": { - "login": "davidzzo23", - "id": 156780826, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156780826?v=4", - "html_url": "https:\/\/github.com\/davidzzo23", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/davidzzo23\/CVE-2022-23131", - "description": "Zabbix Frontend Authentication Bypass Vulnerability", - "fork": false, - "created_at": "2024-10-25T13:44:21Z", - "updated_at": "2026-02-10T04:24:25Z", - "pushed_at": "2024-10-25T14:00:09Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 896349551, - "name": "Zabbix-cve-2022-23131-SSO-bypass", - "full_name": "dagowda\/Zabbix-cve-2022-23131-SSO-bypass", - "owner": { - "login": "dagowda", - "id": 114467712, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114467712?v=4", - "html_url": "https:\/\/github.com\/dagowda", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dagowda\/Zabbix-cve-2022-23131-SSO-bypass", - "description": null, - "fork": false, - "created_at": "2024-11-30T05:49:21Z", - "updated_at": "2024-11-30T06:01:18Z", - "pushed_at": "2024-11-30T06:01:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1276673888, "name": "CVE-2022-23131-Wrappers", diff --git a/2022/CVE-2022-23303.json b/2022/CVE-2022-23303.json deleted file mode 100644 index c26fcec924..0000000000 --- a/2022/CVE-2022-23303.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 716883546, - "name": "hostapd_mirror", - "full_name": "web-logs2\/hostapd_mirror", - "owner": { - "login": "web-logs2", - "id": 143675346, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143675346?v=4", - "html_url": "https:\/\/github.com\/web-logs2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/web-logs2\/hostapd_mirror", - "description": "mirror of https:\/\/w1.fi\/cgit\/hostap\/ till 30\/01\/2023 for CVE-2022-23303\/4 - c22", - "fork": false, - "created_at": "2023-11-10T04:24:19Z", - "updated_at": "2023-11-10T04:24:19Z", - "pushed_at": "2023-02-01T06:29:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-23305.json b/2022/CVE-2022-23305.json index 92cdced383..7cdf1fa319 100644 --- a/2022/CVE-2022-23305.json +++ b/2022/CVE-2022-23305.json @@ -85,38 +85,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 670307374, - "name": "CVE-2022-23305_POC", - "full_name": "tkomlodi\/CVE-2022-23305_POC", - "owner": { - "login": "tkomlodi", - "id": 6026319, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6026319?v=4", - "html_url": "https:\/\/github.com\/tkomlodi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tkomlodi\/CVE-2022-23305_POC", - "description": "CVE-2022-23305 Log4J JDBCAppender SQl injection POC ", - "fork": false, - "created_at": "2023-07-24T18:52:15Z", - "updated_at": "2024-05-16T10:33:38Z", - "pushed_at": "2023-07-24T19:47:13Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-23529.json b/2022/CVE-2022-23529.json deleted file mode 100644 index b77e3233ee..0000000000 --- a/2022/CVE-2022-23529.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 639625315, - "name": "CVE-2022-23529-Exploration", - "full_name": "daniel-marchi\/CVE-2022-23529-Exploration", - "owner": { - "login": "daniel-marchi", - "id": 1558545, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1558545?v=4", - "html_url": "https:\/\/github.com\/daniel-marchi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/daniel-marchi\/CVE-2022-23529-Exploration", - "description": "CVE-2022-23529-PoC", - "fork": false, - "created_at": "2023-05-11T21:28:31Z", - "updated_at": "2023-05-11T21:28:31Z", - "pushed_at": "2023-02-04T10:16:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-23614.json b/2022/CVE-2022-23614.json index 121203073d..f2be380934 100644 --- a/2022/CVE-2022-23614.json +++ b/2022/CVE-2022-23614.json @@ -35,38 +35,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 662215491, - "name": "CVE-2022-23614", - "full_name": "4rtamis\/CVE-2022-23614", - "owner": { - "login": "4rtamis", - "id": 62891170, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62891170?v=4", - "html_url": "https:\/\/github.com\/4rtamis", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/4rtamis\/CVE-2022-23614", - "description": "Proof of concept for CVE-2022-23614 (command injection in Twig)", - "fork": false, - "created_at": "2023-07-04T15:52:50Z", - "updated_at": "2023-07-04T16:57:04Z", - "pushed_at": "2023-07-04T16:57:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-23773.json b/2022/CVE-2022-23773.json index e41301cf2b..84b7d95430 100644 --- a/2022/CVE-2022-23773.json +++ b/2022/CVE-2022-23773.json @@ -64,38 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 615996454, - "name": "CVE-2022-23773-Reproduce", - "full_name": "YouShengLiu\/CVE-2022-23773-Reproduce", - "owner": { - "login": "YouShengLiu", - "id": 51371214, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51371214?v=4", - "html_url": "https:\/\/github.com\/YouShengLiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/YouShengLiu\/CVE-2022-23773-Reproduce", - "description": null, - "fork": false, - "created_at": "2023-03-19T10:08:47Z", - "updated_at": "2023-05-31T07:52:38Z", - "pushed_at": "2023-05-31T07:56:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-23861.json b/2022/CVE-2022-23861.json deleted file mode 100644 index 1a90e64be5..0000000000 --- a/2022/CVE-2022-23861.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 864892843, - "name": "CVE-2022-23861", - "full_name": "mbadanoiu\/CVE-2022-23861", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-23861", - "description": "CVE-2022-23861: Multiple Stored Cross-Site Scripting in YSoft SafeQ", - "fork": false, - "created_at": "2024-09-29T12:57:38Z", - "updated_at": "2025-02-25T19:01:52Z", - "pushed_at": "2024-09-29T13:13:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "authenticated", - "cve", - "cve-2022-23861", - "cves", - "xss" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-23862.json b/2022/CVE-2022-23862.json deleted file mode 100644 index ac2d435a8c..0000000000 --- a/2022/CVE-2022-23862.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 864901218, - "name": "CVE-2022-23862", - "full_name": "mbadanoiu\/CVE-2022-23862", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-23862", - "description": "CVE-2022-23862: Local Privilege Escalation via Unauthenticated JMX in YSoft SafeQ", - "fork": false, - "created_at": "2024-09-29T13:24:40Z", - "updated_at": "2025-02-25T19:01:25Z", - "pushed_at": "2024-09-29T13:36:31Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-23862", - "cves", - "local-privilege-escalation" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-23935.json b/2022/CVE-2022-23935.json deleted file mode 100644 index 89ed450c74..0000000000 --- a/2022/CVE-2022-23935.json +++ /dev/null @@ -1,139 +0,0 @@ -[ - { - "id": 594491558, - "name": "CVE-2022-23935-PoC-Exploit", - "full_name": "dpbe32\/CVE-2022-23935-PoC-Exploit", - "owner": { - "login": "dpbe32", - "id": 93081177, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93081177?v=4", - "html_url": "https:\/\/github.com\/dpbe32", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dpbe32\/CVE-2022-23935-PoC-Exploit", - "description": "CVE-2022-23935 exploit PoC exiftool version 12.37", - "fork": false, - "created_at": "2023-01-28T18:04:05Z", - "updated_at": "2024-05-31T07:39:02Z", - "pushed_at": "2023-02-21T15:22:31Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 598604286, - "name": "CVE-2022-23935", - "full_name": "cowsecurity\/CVE-2022-23935", - "owner": { - "login": "cowsecurity", - "id": 74612612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74612612?v=4", - "html_url": "https:\/\/github.com\/cowsecurity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cowsecurity\/CVE-2022-23935", - "description": "CVE-2022-23935 exploit PoC exiftool version 12.37 written in python", - "fork": false, - "created_at": "2023-02-07T13:02:40Z", - "updated_at": "2024-10-22T14:32:35Z", - "pushed_at": "2023-02-07T13:10:30Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 600164977, - "name": "CVE-2022-23935", - "full_name": "BKreisel\/CVE-2022-23935", - "owner": { - "login": "BKreisel", - "id": 1513073, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1513073?v=4", - "html_url": "https:\/\/github.com\/BKreisel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BKreisel\/CVE-2022-23935", - "description": "🐍 Python Exploit for CVE-2022-23935", - "fork": false, - "created_at": "2023-02-10T18:22:44Z", - "updated_at": "2026-01-20T19:09:39Z", - "pushed_at": "2023-02-10T21:00:05Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-23935", - "exploit", - "python" - ], - "visibility": "public", - "forks": 2, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 614902442, - "name": "CVE-2022-23935", - "full_name": "antisecc\/CVE-2022-23935", - "owner": { - "login": "antisecc", - "id": 92209707, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92209707?v=4", - "html_url": "https:\/\/github.com\/antisecc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/antisecc\/CVE-2022-23935", - "description": null, - "fork": false, - "created_at": "2023-03-16T14:47:55Z", - "updated_at": "2024-11-30T11:39:02Z", - "pushed_at": "2023-03-16T15:09:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-23988.json b/2022/CVE-2022-23988.json deleted file mode 100644 index ed152c9c94..0000000000 --- a/2022/CVE-2022-23988.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 704136393, - "name": "WebSecurityProject", - "full_name": "simonepetruzzi\/WebSecurityProject", - "owner": { - "login": "simonepetruzzi", - "id": 62298351, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62298351?v=4", - "html_url": "https:\/\/github.com\/simonepetruzzi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/simonepetruzzi\/WebSecurityProject", - "description": "Analysis and replication of CVE-2022-23988 and CVE-2022-34265 ", - "fork": false, - "created_at": "2023-10-12T15:58:06Z", - "updated_at": "2023-10-17T00:41:42Z", - "pushed_at": "2023-10-17T15:16:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24086.json b/2022/CVE-2022-24086.json index ea2e60998c..e39682e834 100644 --- a/2022/CVE-2022-24086.json +++ b/2022/CVE-2022-24086.json @@ -230,39 +230,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 686707778, - "name": "CVE-2022-24086", - "full_name": "BurpRoot\/CVE-2022-24086", - "owner": { - "login": "BurpRoot", - "id": 54332012, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54332012?v=4", - "html_url": "https:\/\/github.com\/BurpRoot", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BurpRoot\/CVE-2022-24086", - "description": "CVE-2022-24086 POC example", - "fork": false, - "created_at": "2023-09-03T17:27:58Z", - "updated_at": "2023-09-03T17:27:58Z", - "pushed_at": "2023-09-03T17:34:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 893761573, "name": "magento2-template-filter-patch", diff --git a/2022/CVE-2022-24112.json b/2022/CVE-2022-24112.json index 253078e489..43399f2c8d 100644 --- a/2022/CVE-2022-24112.json +++ b/2022/CVE-2022-24112.json @@ -268,39 +268,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 809913189, - "name": "exploit_CVE-2022-24112", - "full_name": "btar1gan\/exploit_CVE-2022-24112", - "owner": { - "login": "btar1gan", - "id": 92728059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92728059?v=4", - "html_url": "https:\/\/github.com\/btar1gan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/btar1gan\/exploit_CVE-2022-24112", - "description": "New exploit for Apache APISIX v2.12.1 - Remote code execution (RCE)", - "fork": false, - "created_at": "2024-06-03T17:33:59Z", - "updated_at": "2025-06-21T16:31:07Z", - "pushed_at": "2024-06-07T05:09:49Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 989327326, "name": "CVE-2022-24112", diff --git a/2022/CVE-2022-2414.json b/2022/CVE-2022-2414.json index 0f803bfd52..0397fcde80 100644 --- a/2022/CVE-2022-2414.json +++ b/2022/CVE-2022-2414.json @@ -64,71 +64,5 @@ "watchers": 10, "score": 0, "subscribers_count": 1 - }, - { - "id": 700743029, - "name": "CVE-2022-2414", - "full_name": "satyasai1460\/CVE-2022-2414", - "owner": { - "login": "satyasai1460", - "id": 68277833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68277833?v=4", - "html_url": "https:\/\/github.com\/satyasai1460", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/satyasai1460\/CVE-2022-2414", - "description": "CVE-2022-2414 POC", - "fork": false, - "created_at": "2023-10-05T07:55:01Z", - "updated_at": "2023-10-05T08:22:24Z", - "pushed_at": "2023-10-05T08:24:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 869025784, - "name": "CVE-2022-2414", - "full_name": "geniuszly\/CVE-2022-2414", - "owner": { - "login": "geniuszly", - "id": 137893386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4", - "html_url": "https:\/\/github.com\/geniuszly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geniuszly\/CVE-2022-2414", - "description": "is a PoC script for demonstrating an XML External Entity (XXE) vulnerability exploitation", - "fork": false, - "created_at": "2024-10-07T15:36:39Z", - "updated_at": "2024-10-21T08:15:06Z", - "pushed_at": "2024-10-07T15:37:27Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-24227.json b/2022/CVE-2022-24227.json deleted file mode 100644 index 5f35979155..0000000000 --- a/2022/CVE-2022-24227.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 718130267, - "name": "CVE-2022-24227-updated", - "full_name": "Cyber-Wo0dy\/CVE-2022-24227-updated", - "owner": { - "login": "Cyber-Wo0dy", - "id": 148460873, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148460873?v=4", - "html_url": "https:\/\/github.com\/Cyber-Wo0dy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cyber-Wo0dy\/CVE-2022-24227-updated", - "description": "CVE-2022-24227 [Updated]: BoltWire v8.00 vulnerable to \"Stored Cross-site Scripting (XSS)\"", - "fork": false, - "created_at": "2023-11-13T12:53:56Z", - "updated_at": "2023-11-13T12:56:26Z", - "pushed_at": "2023-11-13T12:54:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24439.json b/2022/CVE-2022-24439.json index ece9dc2c06..e6d2c7dced 100644 --- a/2022/CVE-2022-24439.json +++ b/2022/CVE-2022-24439.json @@ -1,37 +1,4 @@ [ - { - "id": 873393552, - "name": "CVE-2022-24439", - "full_name": "muhammadhendro\/CVE-2022-24439", - "owner": { - "login": "muhammadhendro", - "id": 40570379, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40570379?v=4", - "html_url": "https:\/\/github.com\/muhammadhendro", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/muhammadhendro\/CVE-2022-24439", - "description": null, - "fork": false, - "created_at": "2024-10-16T05:06:01Z", - "updated_at": "2024-10-16T05:07:07Z", - "pushed_at": "2024-10-16T05:07:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1018359628, "name": "GitPython-Exploit-CVE-2022-24439", diff --git a/2022/CVE-2022-24442.json b/2022/CVE-2022-24442.json deleted file mode 100644 index 526d19ef15..0000000000 --- a/2022/CVE-2022-24442.json +++ /dev/null @@ -1,45 +0,0 @@ -[ - { - "id": 739172589, - "name": "CVE-2022-24442", - "full_name": "mbadanoiu\/CVE-2022-24442", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-24442", - "description": "CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack", - "fork": false, - "created_at": "2024-01-05T00:04:41Z", - "updated_at": "2024-01-05T00:24:40Z", - "pushed_at": "2024-01-05T00:21:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "authenticated", - "bypass", - "cve", - "cve-2021-25770", - "cve-2022-24442", - "cves", - "remote-code-execution", - "server-side-template-injection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24481.json b/2022/CVE-2022-24481.json index dd59607e08..0a654c6dc7 100644 --- a/2022/CVE-2022-24481.json +++ b/2022/CVE-2022-24481.json @@ -1,37 +1,4 @@ [ - { - "id": 640468590, - "name": "CVE-2022-24481-POC", - "full_name": "fr4nkxixi\/CVE-2022-24481-POC", - "owner": { - "login": "fr4nkxixi", - "id": 81340681, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81340681?v=4", - "html_url": "https:\/\/github.com\/fr4nkxixi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fr4nkxixi\/CVE-2022-24481-POC", - "description": "POC for CLFS CVE-2022-24481", - "fork": false, - "created_at": "2023-05-14T07:30:23Z", - "updated_at": "2026-02-25T07:36:24Z", - "pushed_at": "2023-05-14T08:07:40Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 14, - "score": 0, - "subscribers_count": 1 - }, { "id": 1166251803, "name": "CVE-2022-24481", diff --git a/2022/CVE-2022-24500.json b/2022/CVE-2022-24500.json deleted file mode 100644 index 7480f98641..0000000000 --- a/2022/CVE-2022-24500.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 674032505, - "name": "CVE-2022-24500", - "full_name": "0x7n6\/CVE-2022-24500", - "owner": { - "login": "0x7n6", - "id": 73413581, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73413581?v=4", - "html_url": "https:\/\/github.com\/0x7n6", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0x7n6\/CVE-2022-24500", - "description": null, - "fork": false, - "created_at": "2023-08-03T01:55:15Z", - "updated_at": "2025-10-11T04:46:38Z", - "pushed_at": "2023-08-03T01:55:23Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 10, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24637.json b/2022/CVE-2022-24637.json index c3efc8bfd9..f16965f764 100644 --- a/2022/CVE-2022-24637.json +++ b/2022/CVE-2022-24637.json @@ -101,104 +101,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 611686754, - "name": "CVE-2022-24637", - "full_name": "Pflegusch\/CVE-2022-24637", - "owner": { - "login": "Pflegusch", - "id": 44372539, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44372539?v=4", - "html_url": "https:\/\/github.com\/Pflegusch", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pflegusch\/CVE-2022-24637", - "description": "Open Web Analytics 1.7.3 - Remote Code Execution", - "fork": false, - "created_at": "2023-03-09T10:40:24Z", - "updated_at": "2023-10-19T18:37:06Z", - "pushed_at": "2023-04-08T13:58:29Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 619163880, - "name": "CVE-2022-24637", - "full_name": "0xM4hm0ud\/CVE-2022-24637", - "owner": { - "login": "0xM4hm0ud", - "id": 80924519, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80924519?v=4", - "html_url": "https:\/\/github.com\/0xM4hm0ud", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xM4hm0ud\/CVE-2022-24637", - "description": "Unauthenticated RCE in Open Web Analytics version <1.7.4", - "fork": false, - "created_at": "2023-03-26T13:11:50Z", - "updated_at": "2026-03-16T15:38:38Z", - "pushed_at": "2023-03-26T13:22:14Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 681731098, - "name": "CVE-2022-24637", - "full_name": "0xRyuk\/CVE-2022-24637", - "owner": { - "login": "0xRyuk", - "id": 64897374, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64897374?v=4", - "html_url": "https:\/\/github.com\/0xRyuk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xRyuk\/CVE-2022-24637", - "description": "Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2", - "fork": false, - "created_at": "2023-08-22T16:25:52Z", - "updated_at": "2025-07-19T16:19:37Z", - "pushed_at": "2023-08-22T16:43:55Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-24638.json b/2022/CVE-2022-24638.json deleted file mode 100644 index 29a633d270..0000000000 --- a/2022/CVE-2022-24638.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 645232835, - "name": "CVE-2022-24638", - "full_name": "726232111\/CVE-2022-24638", - "owner": { - "login": "726232111", - "id": 34729943, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34729943?v=4", - "html_url": "https:\/\/github.com\/726232111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/726232111\/CVE-2022-24638", - "description": "Unauthenticated RCE in Open Web Analytics (OWA) <1.7.4", - "fork": false, - "created_at": "2023-05-25T07:53:53Z", - "updated_at": "2023-05-25T07:53:53Z", - "pushed_at": "2023-03-20T14:05:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24715.json b/2022/CVE-2022-24715.json deleted file mode 100644 index 782a79ed9e..0000000000 --- a/2022/CVE-2022-24715.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 618799139, - "name": "CVE-2022-24715", - "full_name": "nimphtix\/CVE-2022-24715", - "owner": { - "login": "nimphtix", - "id": 128583335, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128583335?v=4", - "html_url": "https:\/\/github.com\/nimphtix", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nimphtix\/CVE-2022-24715", - "description": " Authenticated Remote Code Execution in Icinga Web 2 <2.8.6, <2.9.6, <2.10", - "fork": false, - "created_at": "2023-03-25T11:42:56Z", - "updated_at": "2023-03-24T23:48:01Z", - "pushed_at": "2023-03-22T13:08:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 664102574, - "name": "CVE-2022-24715", - "full_name": "cxdxnt\/CVE-2022-24715", - "owner": { - "login": "cxdxnt", - "id": 79928273, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79928273?v=4", - "html_url": "https:\/\/github.com\/cxdxnt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cxdxnt\/CVE-2022-24715", - "description": "Icinga Web 2 - Authenticated Remote Code Execution <2.8.6, <2.9.6, <2.10", - "fork": false, - "created_at": "2023-07-08T23:22:28Z", - "updated_at": "2023-07-09T13:33:46Z", - "pushed_at": "2023-07-09T13:44:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 715006168, - "name": "CVE-2022-24715-go", - "full_name": "d4rkb0n3\/CVE-2022-24715-go", - "owner": { - "login": "d4rkb0n3", - "id": 149922113, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149922113?v=4", - "html_url": "https:\/\/github.com\/d4rkb0n3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d4rkb0n3\/CVE-2022-24715-go", - "description": null, - "fork": false, - "created_at": "2023-11-06T09:44:33Z", - "updated_at": "2023-11-06T09:47:13Z", - "pushed_at": "2023-11-06T09:49:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24716.json b/2022/CVE-2022-24716.json deleted file mode 100644 index 14df2c034a..0000000000 --- a/2022/CVE-2022-24716.json +++ /dev/null @@ -1,167 +0,0 @@ -[ - { - "id": 616327483, - "name": "CVE-2022-24716", - "full_name": "gmh5225\/CVE-2022-24716", - "owner": { - "login": "gmh5225", - "id": 13917777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4", - "html_url": "https:\/\/github.com\/gmh5225", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gmh5225\/CVE-2022-24716", - "description": "Arbitrary File Disclosure Vulnerability in Icinga Web 2 <2.8.6, <2.9.6, <2.10", - "fork": false, - "created_at": "2023-03-20T07:01:53Z", - "updated_at": "2023-03-20T01:13:14Z", - "pushed_at": "2023-03-20T05:02:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 619003382, - "name": "CVE-2022-24716", - "full_name": "pumpkinpiteam\/CVE-2022-24716", - "owner": { - "login": "pumpkinpiteam", - "id": 128508216, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128508216?v=4", - "html_url": "https:\/\/github.com\/pumpkinpiteam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pumpkinpiteam\/CVE-2022-24716", - "description": null, - "fork": false, - "created_at": "2023-03-26T01:03:07Z", - "updated_at": "2023-03-26T01:04:33Z", - "pushed_at": "2023-03-26T01:04:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 619372624, - "name": "CVE-2022-24716", - "full_name": "0x0Jackal\/CVE-2022-24716", - "owner": { - "login": "0x0Jackal", - "id": 128431701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128431701?v=4", - "html_url": "https:\/\/github.com\/0x0Jackal", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0x0Jackal\/CVE-2022-24716", - "description": "Arbitrary File Disclosure Vulnerability in Icinga Web 2 <2.8.6, <2.9.6, <2.10", - "fork": false, - "created_at": "2023-03-27T02:22:23Z", - "updated_at": "2023-04-24T21:26:44Z", - "pushed_at": "2023-03-27T02:47:46Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 643308038, - "name": "CVE-2022-24716", - "full_name": "antisecc\/CVE-2022-24716", - "owner": { - "login": "antisecc", - "id": 92209707, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92209707?v=4", - "html_url": "https:\/\/github.com\/antisecc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/antisecc\/CVE-2022-24716", - "description": null, - "fork": false, - "created_at": "2023-05-20T18:43:46Z", - "updated_at": "2023-05-20T18:50:20Z", - "pushed_at": "2023-05-20T18:50:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 789949659, - "name": "CVE-2022-24716-2", - "full_name": "gmh5225\/CVE-2022-24716-2", - "owner": { - "login": "gmh5225", - "id": 13917777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4", - "html_url": "https:\/\/github.com\/gmh5225", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gmh5225\/CVE-2022-24716-2", - "description": "CVE-2022-24716 (Arbitrary File Disclosure Icingaweb2)", - "fork": false, - "created_at": "2024-04-22T01:17:01Z", - "updated_at": "2024-04-22T01:17:01Z", - "pushed_at": "2023-10-11T13:27:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24816.json b/2022/CVE-2022-24816.json deleted file mode 100644 index aa1268affb..0000000000 --- a/2022/CVE-2022-24816.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 918197519, - "name": "CVE-2022-24816", - "full_name": "c1ph3rbyt3\/CVE-2022-24816", - "owner": { - "login": "c1ph3rbyt3", - "id": 175246639, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175246639?v=4", - "html_url": "https:\/\/github.com\/c1ph3rbyt3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/c1ph3rbyt3\/CVE-2022-24816", - "description": null, - "fork": false, - "created_at": "2025-01-17T12:50:48Z", - "updated_at": "2026-02-10T09:51:57Z", - "pushed_at": "2025-01-17T12:53:49Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24818.json b/2022/CVE-2022-24818.json deleted file mode 100644 index 499852096d..0000000000 --- a/2022/CVE-2022-24818.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 780425505, - "name": "CVE-2022-24818", - "full_name": "mbadanoiu\/CVE-2022-24818", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-24818", - "description": "CVE-2022-24818: Java Deserialization via Unchecked JNDI Lookups in GeoServer and GeoTools", - "fork": false, - "created_at": "2024-04-01T13:06:31Z", - "updated_at": "2024-04-01T16:48:19Z", - "pushed_at": "2024-04-01T16:45:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-24818", - "cves", - "deserialization", - "remote-code-execution" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-24834.json b/2022/CVE-2022-24834.json index de9031e582..039b5ac0a3 100644 --- a/2022/CVE-2022-24834.json +++ b/2022/CVE-2022-24834.json @@ -1,37 +1,4 @@ [ - { - "id": 672017875, - "name": "CVE-2022-24834", - "full_name": "convisolabs\/CVE-2022-24834", - "owner": { - "login": "convisolabs", - "id": 92468795, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92468795?v=4", - "html_url": "https:\/\/github.com\/convisolabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/convisolabs\/CVE-2022-24834", - "description": null, - "fork": false, - "created_at": "2023-07-28T17:42:33Z", - "updated_at": "2025-11-12T02:07:18Z", - "pushed_at": "2023-07-28T17:54:59Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 23, - "score": 0, - "subscribers_count": 3 - }, { "id": 844114285, "name": "CVE-2022-24834-", diff --git a/2022/CVE-2022-25012.json b/2022/CVE-2022-25012.json index 65b8b55862..3fcc912f5c 100644 --- a/2022/CVE-2022-25012.json +++ b/2022/CVE-2022-25012.json @@ -1,37 +1,4 @@ [ - { - "id": 622083074, - "name": "CVE-2022-25012", - "full_name": "s3l33\/CVE-2022-25012", - "owner": { - "login": "s3l33", - "id": 60675004, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60675004?v=4", - "html_url": "https:\/\/github.com\/s3l33", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s3l33\/CVE-2022-25012", - "description": "Updated version of this weak password encryption script", - "fork": false, - "created_at": "2023-04-01T04:21:18Z", - "updated_at": "2025-09-01T08:41:36Z", - "pushed_at": "2023-04-01T04:38:18Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, { "id": 974573539, "name": "CVE-2022-25012-POC", diff --git a/2022/CVE-2022-25313.json b/2022/CVE-2022-25313.json index 23fdbd91c6..56e92a3cb0 100644 --- a/2022/CVE-2022-25313.json +++ b/2022/CVE-2022-25313.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 626759487, - "name": "external_expat-2.1.0_CVE-2022-25313", - "full_name": "Trinadh465\/external_expat-2.1.0_CVE-2022-25313", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/external_expat-2.1.0_CVE-2022-25313", - "description": null, - "fork": false, - "created_at": "2023-04-12T05:30:46Z", - "updated_at": "2023-04-12T05:44:54Z", - "pushed_at": "2023-04-12T05:45:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-25365.json b/2022/CVE-2022-25365.json deleted file mode 100644 index 1a4e6aaabc..0000000000 --- a/2022/CVE-2022-25365.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 603748967, - "name": "CVE-2022-25365", - "full_name": "followboy1999\/CVE-2022-25365", - "owner": { - "login": "followboy1999", - "id": 4121091, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4121091?v=4", - "html_url": "https:\/\/github.com\/followboy1999", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/followboy1999\/CVE-2022-25365", - "description": null, - "fork": false, - "created_at": "2023-02-19T13:19:10Z", - "updated_at": "2024-05-27T08:43:16Z", - "pushed_at": "2023-02-19T13:32:06Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-2546.json b/2022/CVE-2022-2546.json deleted file mode 100644 index b014980c70..0000000000 --- a/2022/CVE-2022-2546.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 859921517, - "name": "CVE-2022-2546", - "full_name": "OpenXP-Research\/CVE-2022-2546", - "owner": { - "login": "OpenXP-Research", - "id": 124332420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4", - "html_url": "https:\/\/github.com\/OpenXP-Research", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2022-2546", - "description": "All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS + CSRF", - "fork": false, - "created_at": "2024-09-19T14:05:55Z", - "updated_at": "2024-09-19T14:06:07Z", - "pushed_at": "2024-09-19T14:06:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-25479.json b/2022/CVE-2022-25479.json deleted file mode 100644 index 7dbea8361c..0000000000 --- a/2022/CVE-2022-25479.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 858573400, - "name": "CVE-2024-40431-CVE-2022-25479-EOP-CHAIN", - "full_name": "SpiralBL0CK\/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN", - "description": "CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK) ", - "fork": false, - "created_at": "2024-09-17T06:28:17Z", - "updated_at": "2025-05-19T19:40:18Z", - "pushed_at": "2024-10-16T22:27:13Z", - "stargazers_count": 45, - "watchers_count": 45, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 11, - "watchers": 45, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-25765.json b/2022/CVE-2022-25765.json index c847474e98..aab4c3ed0e 100644 --- a/2022/CVE-2022-25765.json +++ b/2022/CVE-2022-25765.json @@ -141,39 +141,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 594688502, - "name": "PDFkit-CMD-Injection-CVE-2022-25765", - "full_name": "nikn0laty\/PDFkit-CMD-Injection-CVE-2022-25765", - "owner": { - "login": "nikn0laty", - "id": 96344826, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96344826?v=4", - "html_url": "https:\/\/github.com\/nikn0laty", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nikn0laty\/PDFkit-CMD-Injection-CVE-2022-25765", - "description": "Exploit for CVE-2022-25765 command injection in pdfkit < 0.8.6", - "fork": false, - "created_at": "2023-01-29T10:36:40Z", - "updated_at": "2025-04-28T07:33:54Z", - "pushed_at": "2023-01-29T11:01:27Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 10, - "score": 0, - "subscribers_count": 1 - }, { "id": 599828263, "name": "exploit-CVE-2022-25765", @@ -221,49 +188,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 604742294, - "name": "PDFkit-CMD-Injection", - "full_name": "lekosbelas\/PDFkit-CMD-Injection", - "owner": { - "login": "lekosbelas", - "id": 35641898, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35641898?v=4", - "html_url": "https:\/\/github.com\/lekosbelas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lekosbelas\/PDFkit-CMD-Injection", - "description": "CVE-2022-25765 pdfkit 0.8.6 command injection.", - "fork": false, - "created_at": "2023-02-21T17:38:51Z", - "updated_at": "2023-03-04T10:34:21Z", - "pushed_at": "2023-02-22T11:55:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "2022", - "25765", - "cmd", - "command", - "cve", - "exploit", - "injection", - "pdfkit", - "rce" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 746721441, "name": "CVE-2022-25765", diff --git a/2022/CVE-2022-25813.json b/2022/CVE-2022-25813.json deleted file mode 100644 index 1eff9c481a..0000000000 --- a/2022/CVE-2022-25813.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 732790883, - "name": "CVE-2022-25813", - "full_name": "mbadanoiu\/CVE-2022-25813", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-25813", - "description": "CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz ", - "fork": false, - "created_at": "2023-12-17T20:43:26Z", - "updated_at": "2023-12-17T20:56:52Z", - "pushed_at": "2023-12-17T20:54:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-25813", - "cves", - "remote-code-execution", - "server-side-template-injection", - "user-interaction" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-25845.json b/2022/CVE-2022-25845.json index 91a1e82471..8f87b7ad5a 100644 --- a/2022/CVE-2022-25845.json +++ b/2022/CVE-2022-25845.json @@ -32,138 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 608248647, - "name": "CVE-2022-25845-exploit", - "full_name": "nerowander\/CVE-2022-25845-exploit", - "owner": { - "login": "nerowander", - "id": 98097702, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98097702?v=4", - "html_url": "https:\/\/github.com\/nerowander", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nerowander\/CVE-2022-25845-exploit", - "description": null, - "fork": false, - "created_at": "2023-03-01T16:17:08Z", - "updated_at": "2023-12-11T10:32:55Z", - "pushed_at": "2023-03-01T16:28:40Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 749518886, - "name": "fastjson-tp1fn1", - "full_name": "scabench\/fastjson-tp1fn1", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/fastjson-tp1fn1", - "description": "a scenario based on CVE-2022-25845 yielding a TP for metadata based SCA but a FN if the callgraph is used", - "fork": false, - "created_at": "2024-01-28T20:03:23Z", - "updated_at": "2024-01-29T20:01:15Z", - "pushed_at": "2024-01-29T20:16:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 884824446, - "name": "CVE-2022-25845-In-Spring", - "full_name": "luelueking\/CVE-2022-25845-In-Spring", - "owner": { - "login": "luelueking", - "id": 93204032, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93204032?v=4", - "html_url": "https:\/\/github.com\/luelueking", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/luelueking\/CVE-2022-25845-In-Spring", - "description": "CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!", - "fork": false, - "created_at": "2024-11-07T13:06:44Z", - "updated_at": "2026-06-12T05:58:16Z", - "pushed_at": "2024-11-07T13:38:18Z", - "stargazers_count": 108, - "watchers_count": 108, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 108, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 894494079, - "name": "CVE-2022-25845-In-Spring", - "full_name": "ph0ebus\/CVE-2022-25845-In-Spring", - "owner": { - "login": "ph0ebus", - "id": 108201283, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108201283?v=4", - "html_url": "https:\/\/github.com\/ph0ebus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ph0ebus\/CVE-2022-25845-In-Spring", - "description": "exploit by python", - "fork": false, - "created_at": "2024-11-26T13:03:38Z", - "updated_at": "2026-01-11T09:03:56Z", - "pushed_at": "2024-12-01T13:50:47Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, { "id": 1017851881, "name": "fastjson-CVE-2022-25845", diff --git a/2022/CVE-2022-2588.json b/2022/CVE-2022-2588.json index a6da0454a7..4476b1d6ec 100644 --- a/2022/CVE-2022-2588.json +++ b/2022/CVE-2022-2588.json @@ -164,72 +164,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 608527042, - "name": "CVE-2022-2588", - "full_name": "veritas501\/CVE-2022-2588", - "owner": { - "login": "veritas501", - "id": 25763545, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25763545?v=4", - "html_url": "https:\/\/github.com\/veritas501", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/veritas501\/CVE-2022-2588", - "description": "CVE-2022-2588", - "fork": false, - "created_at": "2023-03-02T07:45:22Z", - "updated_at": "2025-11-10T08:22:10Z", - "pushed_at": "2023-08-22T11:19:28Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 611941666, - "name": "CVE-2022-2588", - "full_name": "dom4570\/CVE-2022-2588", - "owner": { - "login": "dom4570", - "id": 70895650, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70895650?v=4", - "html_url": "https:\/\/github.com\/dom4570", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dom4570\/CVE-2022-2588", - "description": null, - "fork": false, - "created_at": "2023-03-09T21:29:56Z", - "updated_at": "2023-03-09T21:30:56Z", - "pushed_at": "2023-03-09T21:30:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1008232005, "name": "CVE-2022-2588", diff --git a/2022/CVE-2022-2590.json b/2022/CVE-2022-2590.json deleted file mode 100644 index cd6c9ccc8e..0000000000 --- a/2022/CVE-2022-2590.json +++ /dev/null @@ -1,49 +0,0 @@ -[ - { - "id": 835827416, - "name": "CVE-2022-2590-analysis", - "full_name": "hyeonjun17\/CVE-2022-2590-analysis", - "owner": { - "login": "hyeonjun17", - "id": 69148883, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69148883?v=4", - "html_url": "https:\/\/github.com\/hyeonjun17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hyeonjun17\/CVE-2022-2590-analysis", - "description": "Dirty COW restricted to shmem in linux kernel", - "fork": false, - "created_at": "2024-07-30T15:54:07Z", - "updated_at": "2025-12-29T14:20:04Z", - "pushed_at": "2024-07-30T17:31:48Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "1-day", - "analysis", - "cve-2022-2590", - "dirty-cow", - "exploit", - "linux", - "linux-kernel", - "memory-management", - "race-condition", - "security", - "shared-memory", - "userfaultfd", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-25927.json b/2022/CVE-2022-25927.json index 50f84fa0b7..285e8f7cbf 100644 --- a/2022/CVE-2022-25927.json +++ b/2022/CVE-2022-25927.json @@ -1,37 +1,4 @@ [ - { - "id": 595917273, - "name": "cve-2022-25927", - "full_name": "masahiro331\/cve-2022-25927", - "owner": { - "login": "masahiro331", - "id": 20438853, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20438853?v=4", - "html_url": "https:\/\/github.com\/masahiro331", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/masahiro331\/cve-2022-25927", - "description": null, - "fork": false, - "created_at": "2023-02-01T04:16:47Z", - "updated_at": "2026-04-01T13:35:19Z", - "pushed_at": "2023-02-01T04:17:58Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1194410511, "name": "CVE-2022-25927-test", diff --git a/2022/CVE-2022-2602.json b/2022/CVE-2022-2602.json index d7cc980f20..73844ba578 100644 --- a/2022/CVE-2022-2602.json +++ b/2022/CVE-2022-2602.json @@ -64,38 +64,5 @@ "watchers": 86, "score": 0, "subscribers_count": 2 - }, - { - "id": 586887875, - "name": "CVE-2022-2602-Study", - "full_name": "th3-5had0w\/CVE-2022-2602-Study", - "owner": { - "login": "th3-5had0w", - "id": 46859830, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46859830?v=4", - "html_url": "https:\/\/github.com\/th3-5had0w", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/th3-5had0w\/CVE-2022-2602-Study", - "description": null, - "fork": false, - "created_at": "2023-01-09T13:21:02Z", - "updated_at": "2023-05-20T05:45:42Z", - "pushed_at": "2023-01-09T13:22:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 8430d56422..692852d68c 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -1921,376 +1921,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 589327553, - "name": "CVE-2022-26134_check", - "full_name": "cbk914\/CVE-2022-26134_check", - "owner": { - "login": "cbk914", - "id": 2042196, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2042196?v=4", - "html_url": "https:\/\/github.com\/cbk914", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cbk914\/CVE-2022-26134_check", - "description": null, - "fork": false, - "created_at": "2023-01-15T20:11:27Z", - "updated_at": "2023-01-19T23:43:17Z", - "pushed_at": "2023-01-15T20:14:57Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 597319077, - "name": "CVE-2022-26134_Behinder_MemShell", - "full_name": "MaskCyberSecurityTeam\/CVE-2022-26134_Behinder_MemShell", - "owner": { - "login": "MaskCyberSecurityTeam", - "id": 107802263, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107802263?v=4", - "html_url": "https:\/\/github.com\/MaskCyberSecurityTeam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MaskCyberSecurityTeam\/CVE-2022-26134_Behinder_MemShell", - "description": null, - "fork": false, - "created_at": "2023-02-04T06:51:47Z", - "updated_at": "2024-01-12T09:31:33Z", - "pushed_at": "2023-02-04T07:18:25Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 9, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 672663443, - "name": "Atlassian_CVE-2022-26134", - "full_name": "Muhammad-Ali007\/Atlassian_CVE-2022-26134", - "owner": { - "login": "Muhammad-Ali007", - "id": 64638296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64638296?v=4", - "html_url": "https:\/\/github.com\/Muhammad-Ali007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Muhammad-Ali007\/Atlassian_CVE-2022-26134", - "description": "Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)", - "fork": false, - "created_at": "2023-07-30T20:56:13Z", - "updated_at": "2023-08-03T21:18:52Z", - "pushed_at": "2023-08-03T21:21:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 694339159, - "name": "CVE-2022-26134", - "full_name": "acfirthh\/CVE-2022-26134", - "owner": { - "login": "acfirthh", - "id": 59393271, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59393271?v=4", - "html_url": "https:\/\/github.com\/acfirthh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/acfirthh\/CVE-2022-26134", - "description": "A PoC for CVE-2022-26134 for Educational Purposes and Security Research", - "fork": false, - "created_at": "2023-09-20T19:54:05Z", - "updated_at": "2024-07-15T15:33:52Z", - "pushed_at": "2023-09-20T20:08:15Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cybersecurity", - "cybersecurity-education", - "research", - "security-research", - "tryhackme" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 707572955, - "name": "CVE-2022-26134", - "full_name": "yTxZx\/CVE-2022-26134", - "owner": { - "login": "yTxZx", - "id": 100921463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100921463?v=4", - "html_url": "https:\/\/github.com\/yTxZx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yTxZx\/CVE-2022-26134", - "description": null, - "fork": false, - "created_at": "2023-10-20T07:42:36Z", - "updated_at": "2023-10-20T07:43:08Z", - "pushed_at": "2023-10-20T08:36:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 736886495, - "name": "-CVE-2022-26134", - "full_name": "DARKSTUFF-LAB\/-CVE-2022-26134", - "owner": { - "login": "DARKSTUFF-LAB", - "id": 109729013, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109729013?v=4", - "html_url": "https:\/\/github.com\/DARKSTUFF-LAB", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DARKSTUFF-LAB\/-CVE-2022-26134", - "description": null, - "fork": false, - "created_at": "2023-12-29T06:51:38Z", - "updated_at": "2023-12-29T06:51:51Z", - "pushed_at": "2023-12-29T06:51:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 777796929, - "name": "CVE-2022-26134-POC", - "full_name": "404fu\/CVE-2022-26134-POC", - "owner": { - "login": "404fu", - "id": 144592414, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144592414?v=4", - "html_url": "https:\/\/github.com\/404fu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/404fu\/CVE-2022-26134-POC", - "description": null, - "fork": false, - "created_at": "2024-03-26T14:18:17Z", - "updated_at": "2024-03-26T14:43:14Z", - "pushed_at": "2024-03-26T14:34:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 795180088, - "name": "CVE-2022-26134", - "full_name": "xsxtw\/CVE-2022-26134", - "owner": { - "login": "xsxtw", - "id": 168295718, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168295718?v=4", - "html_url": "https:\/\/github.com\/xsxtw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xsxtw\/CVE-2022-26134", - "description": null, - "fork": false, - "created_at": "2024-05-02T18:31:54Z", - "updated_at": "2024-05-02T18:33:42Z", - "pushed_at": "2024-05-02T18:33:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 807402056, - "name": "Confluence-RCE", - "full_name": "BBD-YZZ\/Confluence-RCE", - "owner": { - "login": "BBD-YZZ", - "id": 132546612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132546612?v=4", - "html_url": "https:\/\/github.com\/BBD-YZZ", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BBD-YZZ\/Confluence-RCE", - "description": "confluence rce (CVE-2021-26084, CVE-2022-26134, CVE-2023-22527)", - "fork": false, - "created_at": "2024-05-29T03:20:22Z", - "updated_at": "2025-10-11T19:07:50Z", - "pushed_at": "2024-08-26T09:24:31Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 812067894, - "name": "CVE-2022-26134", - "full_name": "cc3305\/CVE-2022-26134", - "owner": { - "login": "cc3305", - "id": 103961201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4", - "html_url": "https:\/\/github.com\/cc3305", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cc3305\/CVE-2022-26134", - "description": "CVE-2022-26134 exploit script", - "fork": false, - "created_at": "2024-06-07T22:15:48Z", - "updated_at": "2024-07-27T20:17:27Z", - "pushed_at": "2024-07-27T20:17:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 871981798, - "name": "CVE-2022-26134", - "full_name": "Gilospy\/CVE-2022-26134", - "owner": { - "login": "Gilospy", - "id": 67920312, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67920312?v=4", - "html_url": "https:\/\/github.com\/Gilospy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gilospy\/CVE-2022-26134", - "description": null, - "fork": false, - "created_at": "2024-10-13T13:38:07Z", - "updated_at": "2024-11-17T11:19:13Z", - "pushed_at": "2024-11-17T11:19:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 931675599, "name": "CVE-2022-26134", diff --git a/2022/CVE-2022-26265.json b/2022/CVE-2022-26265.json index 0bf7c65bcb..9065fac2ce 100644 --- a/2022/CVE-2022-26265.json +++ b/2022/CVE-2022-26265.json @@ -38,38 +38,5 @@ "watchers": 10, "score": 0, "subscribers_count": 1 - }, - { - "id": 623880121, - "name": "CVE-2022-26265", - "full_name": "redteamsecurity2023\/CVE-2022-26265", - "owner": { - "login": "redteamsecurity2023", - "id": 129942969, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129942969?v=4", - "html_url": "https:\/\/github.com\/redteamsecurity2023", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/redteamsecurity2023\/CVE-2022-26265", - "description": "The first proof of concept of the Contao CMS RCE", - "fork": false, - "created_at": "2023-04-05T09:34:29Z", - "updated_at": "2023-04-05T09:37:01Z", - "pushed_at": "2023-04-05T09:36:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26318.json b/2022/CVE-2022-26318.json index e78431dd64..498fa569f2 100644 --- a/2022/CVE-2022-26318.json +++ b/2022/CVE-2022-26318.json @@ -97,38 +97,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 898928788, - "name": "Watchguard-RCE-POC-CVE-2022-26318", - "full_name": "egilas\/Watchguard-RCE-POC-CVE-2022-26318", - "owner": { - "login": "egilas", - "id": 14824771, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14824771?v=4", - "html_url": "https:\/\/github.com\/egilas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/egilas\/Watchguard-RCE-POC-CVE-2022-26318", - "description": "PoC for Watchguard CVE-2022-26318 updated to Python3.12", - "fork": false, - "created_at": "2024-12-05T09:56:57Z", - "updated_at": "2024-12-21T15:37:08Z", - "pushed_at": "2024-12-05T10:00:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26377.json b/2022/CVE-2022-26377.json deleted file mode 100644 index 2a1e638e4c..0000000000 --- a/2022/CVE-2022-26377.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 785525373, - "name": "ibm-qradar-ajp_smuggling_CVE-2022-26377_poc", - "full_name": "watchtowrlabs\/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc", - "owner": { - "login": "watchtowrlabs", - "id": 99977116, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4", - "html_url": "https:\/\/github.com\/watchtowrlabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/watchtowrlabs\/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc", - "description": null, - "fork": false, - "created_at": "2024-04-12T03:59:03Z", - "updated_at": "2024-06-27T09:27:36Z", - "pushed_at": "2024-04-12T04:05:19Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-2639.json b/2022/CVE-2022-2639.json index 34e04ada1d..bd34290adc 100644 --- a/2022/CVE-2022-2639.json +++ b/2022/CVE-2022-2639.json @@ -31,71 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 752952146, - "name": "-2022-LOCALROOT-CVE-2022-2639", - "full_name": "letsr00t\/-2022-LOCALROOT-CVE-2022-2639", - "owner": { - "login": "letsr00t", - "id": 38699989, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38699989?v=4", - "html_url": "https:\/\/github.com\/letsr00t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/letsr00t\/-2022-LOCALROOT-CVE-2022-2639", - "description": null, - "fork": false, - "created_at": "2024-02-05T07:10:51Z", - "updated_at": "2024-02-05T07:10:51Z", - "pushed_at": "2024-02-05T07:25:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 879447823, - "name": "CVE-2022-2639-PipeVersion", - "full_name": "devetop\/CVE-2022-2639-PipeVersion", - "owner": { - "login": "devetop", - "id": 62440997, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62440997?v=4", - "html_url": "https:\/\/github.com\/devetop", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/devetop\/CVE-2022-2639-PipeVersion", - "description": null, - "fork": false, - "created_at": "2024-10-27T23:14:48Z", - "updated_at": "2024-10-27T23:15:41Z", - "pushed_at": "2024-10-27T23:32:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26485.json b/2022/CVE-2022-26485.json deleted file mode 100644 index 50d020ea4b..0000000000 --- a/2022/CVE-2022-26485.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595523904, - "name": "CVE-2022-26485", - "full_name": "mistymntncop\/CVE-2022-26485", - "owner": { - "login": "mistymntncop", - "id": 105329747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105329747?v=4", - "html_url": "https:\/\/github.com\/mistymntncop", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mistymntncop\/CVE-2022-26485", - "description": null, - "fork": false, - "created_at": "2023-01-31T09:01:17Z", - "updated_at": "2026-05-23T10:54:09Z", - "pushed_at": "2023-01-31T09:10:21Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 17, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-26488.json b/2022/CVE-2022-26488.json deleted file mode 100644 index de2b905181..0000000000 --- a/2022/CVE-2022-26488.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 633237667, - "name": "PyPATHPwner", - "full_name": "techspence\/PyPATHPwner", - "owner": { - "login": "techspence", - "id": 7014376, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7014376?v=4", - "html_url": "https:\/\/github.com\/techspence", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/techspence\/PyPATHPwner", - "description": "POC Exploit for CVE-2022-26488 - Python for Windows (CPython) escalation of privilege vulnerability, discovered by the Lockheed Martin Red Team.", - "fork": false, - "created_at": "2023-04-27T04:30:29Z", - "updated_at": "2023-08-17T16:20:03Z", - "pushed_at": "2023-04-27T04:35:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-26923.json b/2022/CVE-2022-26923.json index c9c5b430e8..91f4800615 100644 --- a/2022/CVE-2022-26923.json +++ b/2022/CVE-2022-26923.json @@ -98,105 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 706016211, - "name": "PIGADVulnScanner", - "full_name": "evilashz\/PIGADVulnScanner", - "owner": { - "login": "evilashz", - "id": 50722929, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50722929?v=4", - "html_url": "https:\/\/github.com\/evilashz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/evilashz\/PIGADVulnScanner", - "description": "检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare", - "fork": false, - "created_at": "2023-10-17T06:29:44Z", - "updated_at": "2026-06-08T14:40:38Z", - "pushed_at": "2023-10-23T04:47:11Z", - "stargazers_count": 80, - "watchers_count": 80, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 80, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 724703848, - "name": "CVE-2022-26923", - "full_name": "Gh-Badr\/CVE-2022-26923", - "owner": { - "login": "Gh-Badr", - "id": 110426701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110426701?v=4", - "html_url": "https:\/\/github.com\/Gh-Badr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gh-Badr\/CVE-2022-26923", - "description": "A proof of concept exploiting CVE-2022-26923.", - "fork": false, - "created_at": "2023-11-28T16:13:36Z", - "updated_at": "2025-05-13T09:41:17Z", - "pushed_at": "2023-12-09T23:39:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 850747240, - "name": "CVE-2022-26923", - "full_name": "Yowise\/CVE-2022-26923", - "owner": { - "login": "Yowise", - "id": 42322439, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42322439?v=4", - "html_url": "https:\/\/github.com\/Yowise", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Yowise\/CVE-2022-26923", - "description": null, - "fork": false, - "created_at": "2024-09-01T17:03:27Z", - "updated_at": "2024-09-01T17:04:54Z", - "pushed_at": "2024-09-01T17:04:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 942578863, "name": "CVE-2022-26923-rayng", diff --git a/2022/CVE-2022-26965.json b/2022/CVE-2022-26965.json deleted file mode 100644 index 47451fbdf4..0000000000 --- a/2022/CVE-2022-26965.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 674804496, - "name": "Pluck-Exploitation-by-skdevils", - "full_name": "SkDevilS\/Pluck-Exploitation-by-skdevils", - "owner": { - "login": "SkDevilS", - "id": 112902431, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112902431?v=4", - "html_url": "https:\/\/github.com\/SkDevilS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SkDevilS\/Pluck-Exploitation-by-skdevils", - "description": "# Exploit Title: Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated) # Date: 13.03.2022 # Exploit Author: Ashish Koli (Shikari) # Vendor Homepage: https:\/\/github.com\/pluck-cms\/pluck # Version: 4.7.16 # Tested on Ubuntu 20.04.3 LTS # CVE: CVE-2022-26965 ", - "fork": false, - "created_at": "2023-08-04T20:32:08Z", - "updated_at": "2023-08-08T16:30:42Z", - "pushed_at": "2023-08-08T16:30:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-27499.json b/2022/CVE-2022-27499.json deleted file mode 100644 index 8ebef68f48..0000000000 --- a/2022/CVE-2022-27499.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 692762993, - "name": "snapshot-demo", - "full_name": "web-logs2\/snapshot-demo", - "owner": { - "login": "web-logs2", - "id": 143675346, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143675346?v=4", - "html_url": "https:\/\/github.com\/web-logs2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/web-logs2\/snapshot-demo", - "description": "CVE-2022-27499", - "fork": false, - "created_at": "2023-09-17T14:08:59Z", - "updated_at": "2023-09-17T14:08:59Z", - "pushed_at": "2023-01-16T14:30:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-27518.json b/2022/CVE-2022-27518.json deleted file mode 100644 index bd8704d198..0000000000 --- a/2022/CVE-2022-27518.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 590162168, - "name": "CVE-2022-27518_POC", - "full_name": "dolby360\/CVE-2022-27518_POC", - "owner": { - "login": "dolby360", - "id": 22151399, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22151399?v=4", - "html_url": "https:\/\/github.com\/dolby360", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dolby360\/CVE-2022-27518_POC", - "description": "A POC on how to exploit CVE-2022-27518 ", - "fork": false, - "created_at": "2023-01-17T19:40:04Z", - "updated_at": "2025-02-22T18:01:25Z", - "pushed_at": "2023-01-18T19:48:09Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-27646.json b/2022/CVE-2022-27646.json deleted file mode 100644 index f8ff081619..0000000000 --- a/2022/CVE-2022-27646.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 648047567, - "name": "netgear_r6700v3_circled", - "full_name": "cyber-defence-campus\/netgear_r6700v3_circled", - "owner": { - "login": "cyber-defence-campus", - "id": 117660722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117660722?v=4", - "html_url": "https:\/\/github.com\/cyber-defence-campus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cyber-defence-campus\/netgear_r6700v3_circled", - "description": "Demonstrate some functionalities of Morion by generating an exploit for CVE-2022-27646 (stack buffer overflow on Netgear R6700v3 routers).", - "fork": false, - "created_at": "2023-06-01T05:10:56Z", - "updated_at": "2025-10-20T12:28:38Z", - "pushed_at": "2024-12-13T08:49:41Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "armv7", - "emulation", - "exploit-generation", - "gdb", - "morion", - "symbolic-execution", - "triton" - ], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-27666.json b/2022/CVE-2022-27666.json index bc42d5bf4d..8eb92bd7b2 100644 --- a/2022/CVE-2022-27666.json +++ b/2022/CVE-2022-27666.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 6 }, - { - "id": 626171379, - "name": "cve-2022-27666-exploits", - "full_name": "Albocoder\/cve-2022-27666-exploits", - "owner": { - "login": "Albocoder", - "id": 11018611, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11018611?v=4", - "html_url": "https:\/\/github.com\/Albocoder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Albocoder\/cve-2022-27666-exploits", - "description": "There are 2 exploitation methods that exploit CVE-2022-27666. For more info on how to use these code bases please check my blog.", - "fork": false, - "created_at": "2023-04-11T00:12:33Z", - "updated_at": "2024-02-15T20:16:05Z", - "pushed_at": "2023-04-11T00:27:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1225184325, "name": "CVE-2022-27666", diff --git a/2022/CVE-2022-27925.json b/2022/CVE-2022-27925.json index 2db0ab2d7c..02205f33a7 100644 --- a/2022/CVE-2022-27925.json +++ b/2022/CVE-2022-27925.json @@ -373,38 +373,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 844643090, - "name": "CVE-2022-27925", - "full_name": "sanan2004\/CVE-2022-27925", - "owner": { - "login": "sanan2004", - "id": 118365296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118365296?v=4", - "html_url": "https:\/\/github.com\/sanan2004", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sanan2004\/CVE-2022-27925", - "description": "PoC", - "fork": false, - "created_at": "2024-08-19T17:17:24Z", - "updated_at": "2024-08-21T09:20:35Z", - "pushed_at": "2024-08-19T17:17:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-27997.json b/2022/CVE-2022-27997.json deleted file mode 100644 index 90a8a734b5..0000000000 --- a/2022/CVE-2022-27997.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 686590287, - "name": "CVE-2023-27997", - "full_name": "Cyb3rEnthusiast\/CVE-2023-27997", - "owner": { - "login": "Cyb3rEnthusiast", - "id": 143934696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143934696?v=4", - "html_url": "https:\/\/github.com\/Cyb3rEnthusiast", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cyb3rEnthusiast\/CVE-2023-27997", - "description": "How to get access via CVE-2022-27997", - "fork": false, - "created_at": "2023-09-03T10:01:24Z", - "updated_at": "2023-09-10T10:48:40Z", - "pushed_at": "2023-09-09T09:22:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-28108.json b/2022/CVE-2022-28108.json deleted file mode 100644 index 951f708b4f..0000000000 --- a/2022/CVE-2022-28108.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 914589028, - "name": "CVE-2022-28108", - "full_name": "ZeroEthical\/CVE-2022-28108", - "owner": { - "login": "ZeroEthical", - "id": 194415982, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194415982?v=4", - "html_url": "https:\/\/github.com\/ZeroEthical", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ZeroEthical\/CVE-2022-28108", - "description": null, - "fork": false, - "created_at": "2025-01-09T22:28:11Z", - "updated_at": "2025-01-10T00:18:20Z", - "pushed_at": "2025-01-10T00:18:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-28117.json b/2022/CVE-2022-28117.json index 208d2e6711..75c8090aec 100644 --- a/2022/CVE-2022-28117.json +++ b/2022/CVE-2022-28117.json @@ -31,38 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 735816901, - "name": "POC-CVE-2022-28117", - "full_name": "kimstars\/POC-CVE-2022-28117", - "owner": { - "login": "kimstars", - "id": 23279002, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23279002?v=4", - "html_url": "https:\/\/github.com\/kimstars", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kimstars\/POC-CVE-2022-28117", - "description": null, - "fork": false, - "created_at": "2023-12-26T06:51:54Z", - "updated_at": "2025-02-14T17:11:55Z", - "pushed_at": "2023-12-26T06:52:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-28171.json b/2022/CVE-2022-28171.json deleted file mode 100644 index 0a8d1e5552..0000000000 --- a/2022/CVE-2022-28171.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 666967366, - "name": "CVE-2022-28171-POC", - "full_name": "NyaMeeEain\/CVE-2022-28171-POC", - "owner": { - "login": "NyaMeeEain", - "id": 28331671, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28331671?v=4", - "html_url": "https:\/\/github.com\/NyaMeeEain", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NyaMeeEain\/CVE-2022-28171-POC", - "description": null, - "fork": false, - "created_at": "2023-07-16T07:30:22Z", - "updated_at": "2024-10-13T23:14:31Z", - "pushed_at": "2023-08-09T05:14:17Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 894493486, - "name": "hikvision_probe", - "full_name": "aengussong\/hikvision_probe", - "owner": { - "login": "aengussong", - "id": 26045876, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26045876?v=4", - "html_url": "https:\/\/github.com\/aengussong", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aengussong\/hikvision_probe", - "description": "Identify hikvision ip and probe for cve-s (CVE-2017-7921, CVE-2022-28171, CVE-2021-36260)", - "fork": false, - "created_at": "2024-11-26T13:02:18Z", - "updated_at": "2026-03-06T16:26:11Z", - "pushed_at": "2024-11-26T13:21:56Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-28346.json b/2022/CVE-2022-28346.json index 4d3ef7d8c3..2c1bc020b2 100644 --- a/2022/CVE-2022-28346.json +++ b/2022/CVE-2022-28346.json @@ -64,71 +64,5 @@ "watchers": 24, "score": 0, "subscribers_count": 2 - }, - { - "id": 609374925, - "name": "CVE-2022-28346", - "full_name": "vincentinttsh\/CVE-2022-28346", - "owner": { - "login": "vincentinttsh", - "id": 14941597, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14941597?v=4", - "html_url": "https:\/\/github.com\/vincentinttsh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vincentinttsh\/CVE-2022-28346", - "description": "An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.", - "fork": false, - "created_at": "2023-03-04T01:43:58Z", - "updated_at": "2022-08-24T08:06:59Z", - "pushed_at": "2022-05-15T00:53:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 745257468, - "name": "CVE-2022-28346", - "full_name": "kamal-marouane\/CVE-2022-28346", - "owner": { - "login": "kamal-marouane", - "id": 110986028, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110986028?v=4", - "html_url": "https:\/\/github.com\/kamal-marouane", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kamal-marouane\/CVE-2022-28346", - "description": "A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely.", - "fork": false, - "created_at": "2024-01-19T00:15:59Z", - "updated_at": "2024-01-20T05:30:50Z", - "pushed_at": "2024-01-19T04:00:05Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-28368.json b/2022/CVE-2022-28368.json deleted file mode 100644 index 0b07b0a64f..0000000000 --- a/2022/CVE-2022-28368.json +++ /dev/null @@ -1,106 +0,0 @@ -[ - { - "id": 601030910, - "name": "CVE-2022-28368", - "full_name": "rvzsec\/CVE-2022-28368", - "owner": { - "login": "rvzsec", - "id": 84989569, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84989569?v=4", - "html_url": "https:\/\/github.com\/rvzsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rvzsec\/CVE-2022-28368", - "description": "Dompdf RCE PoC Exploit - CVE-2022-28368", - "fork": false, - "created_at": "2023-02-13T08:10:00Z", - "updated_at": "2025-05-06T13:16:17Z", - "pushed_at": "2024-01-19T04:35:32Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-28368", - "cybersecurity", - "dompdf", - "exploit" - ], - "visibility": "public", - "forks": 2, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 633796587, - "name": "CVE-2022-28368-handler", - "full_name": "That-Guy-Steve\/CVE-2022-28368-handler", - "owner": { - "login": "That-Guy-Steve", - "id": 130059785, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130059785?v=4", - "html_url": "https:\/\/github.com\/That-Guy-Steve", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/That-Guy-Steve\/CVE-2022-28368-handler", - "description": "This repository contains a python script that will handle the majority of the dompdf cached font exploit (CVE-2022-28368), all you need to do is create the request", - "fork": false, - "created_at": "2023-04-28T09:49:05Z", - "updated_at": "2023-04-28T12:42:28Z", - "pushed_at": "2023-04-28T12:57:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 637435384, - "name": "Dompdf-Exploit-RCE", - "full_name": "Henryisnotavailable\/Dompdf-Exploit-RCE", - "owner": { - "login": "Henryisnotavailable", - "id": 112469853, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112469853?v=4", - "html_url": "https:\/\/github.com\/Henryisnotavailable", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Henryisnotavailable\/Dompdf-Exploit-RCE", - "description": "An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine", - "fork": false, - "created_at": "2023-05-07T14:49:38Z", - "updated_at": "2023-05-07T14:51:35Z", - "pushed_at": "2023-05-07T15:39:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-28672.json b/2022/CVE-2022-28672.json index 600273b309..981a2746bf 100644 --- a/2022/CVE-2022-28672.json +++ b/2022/CVE-2022-28672.json @@ -42,38 +42,5 @@ "watchers": 120, "score": 0, "subscribers_count": 1 - }, - { - "id": 584971290, - "name": "CVE-2022-28672", - "full_name": "fastmo\/CVE-2022-28672", - "owner": { - "login": "fastmo", - "id": 53575270, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53575270?v=4", - "html_url": "https:\/\/github.com\/fastmo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fastmo\/CVE-2022-28672", - "description": " CVE-2022-28672 Vulnerabilidad Foxit PDF Reader - UaF - RCE - JIT Spraying", - "fork": false, - "created_at": "2023-01-04T01:39:04Z", - "updated_at": "2023-01-04T02:03:45Z", - "pushed_at": "2023-01-04T02:04:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-29063.json b/2022/CVE-2022-29063.json deleted file mode 100644 index e2d7069956..0000000000 --- a/2022/CVE-2022-29063.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 732796706, - "name": "CVE-2022-29063", - "full_name": "mbadanoiu\/CVE-2022-29063", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-29063", - "description": "CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz", - "fork": false, - "created_at": "2023-12-17T21:11:30Z", - "updated_at": "2024-03-05T06:22:06Z", - "pushed_at": "2023-12-17T21:22:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "cve", - "cve-2022-29063", - "cves", - "deserialization", - "local-privilege-escalation" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-29072.json b/2022/CVE-2022-29072.json index d83c752dde..144ca778bb 100644 --- a/2022/CVE-2022-29072.json +++ b/2022/CVE-2022-29072.json @@ -134,38 +134,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 798859541, - "name": "CVE-2022-29072", - "full_name": "rasan2001\/CVE-2022-29072", - "owner": { - "login": "rasan2001", - "id": 156652838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156652838?v=4", - "html_url": "https:\/\/github.com\/rasan2001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rasan2001\/CVE-2022-29072", - "description": null, - "fork": false, - "created_at": "2024-05-10T16:13:15Z", - "updated_at": "2024-05-10T16:13:36Z", - "pushed_at": "2024-05-10T16:13:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-29078.json b/2022/CVE-2022-29078.json index 69295fbb92..4468815e71 100644 --- a/2022/CVE-2022-29078.json +++ b/2022/CVE-2022-29078.json @@ -32,111 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 671189433, - "name": "expluatation_CVE-2022-29078", - "full_name": "shurochka1396\/expluatation_CVE-2022-29078", - "owner": { - "login": "shurochka1396", - "id": 75414361, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75414361?v=4", - "html_url": "https:\/\/github.com\/shurochka1396", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shurochka1396\/expluatation_CVE-2022-29078", - "description": null, - "fork": false, - "created_at": "2023-07-26T18:42:09Z", - "updated_at": "2023-07-26T18:42:16Z", - "pushed_at": "2023-07-26T18:42:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 883535763, - "name": "CVE-2022-29078", - "full_name": "l0n3m4n\/CVE-2022-29078", - "owner": { - "login": "l0n3m4n", - "id": 143868630, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143868630?v=4", - "html_url": "https:\/\/github.com\/l0n3m4n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/l0n3m4n\/CVE-2022-29078", - "description": "Serverside Template Injection (SSTI) RCE - THM challenge \"whiterose\" ", - "fork": false, - "created_at": "2024-11-05T06:15:45Z", - "updated_at": "2025-09-11T13:45:00Z", - "pushed_at": "2024-11-08T14:00:44Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ctf", - "exploit", - "ssti", - "tryhackme", - "web-pentesting" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 913540389, - "name": "CVE-2022-29078", - "full_name": "chuckdu21\/CVE-2022-29078", - "owner": { - "login": "chuckdu21", - "id": 40186049, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40186049?v=4", - "html_url": "https:\/\/github.com\/chuckdu21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chuckdu21\/CVE-2022-29078", - "description": "PoC for CVE-2022-29078", - "fork": false, - "created_at": "2025-01-07T22:07:52Z", - "updated_at": "2025-01-07T22:27:45Z", - "pushed_at": "2025-01-07T22:27:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1157535660, "name": "npm-demo", diff --git a/2022/CVE-2022-29170.json b/2022/CVE-2022-29170.json deleted file mode 100644 index 99c94df853..0000000000 --- a/2022/CVE-2022-29170.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 594668634, - "name": "CVE-2022-29170", - "full_name": "yijikeji\/CVE-2022-29170", - "owner": { - "login": "yijikeji", - "id": 42433368, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42433368?v=4", - "html_url": "https:\/\/github.com\/yijikeji", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yijikeji\/CVE-2022-29170", - "description": "Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present starting with version 7.4.0-beta1 and prior to versions 7.5. CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-29T09:10:44Z", - "updated_at": "2023-02-20T13:57:30Z", - "pushed_at": "2022-12-29T07:40:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-29361.json b/2022/CVE-2022-29361.json deleted file mode 100644 index a6ca2a53ac..0000000000 --- a/2022/CVE-2022-29361.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 625487881, - "name": "Werkzeug-CVE-2022-29361-PoC", - "full_name": "kevin-mizu\/Werkzeug-CVE-2022-29361-PoC", - "owner": { - "login": "kevin-mizu", - "id": 48991194, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991194?v=4", - "html_url": "https:\/\/github.com\/kevin-mizu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kevin-mizu\/Werkzeug-CVE-2022-29361-PoC", - "description": null, - "fork": false, - "created_at": "2023-04-09T09:07:26Z", - "updated_at": "2025-08-07T07:27:07Z", - "pushed_at": "2023-04-09T16:02:55Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 723368358, - "name": "CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS", - "full_name": "l3ragio\/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS", - "owner": { - "login": "l3ragio", - "id": 48380612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48380612?v=4", - "html_url": "https:\/\/github.com\/l3ragio", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/l3ragio\/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS", - "description": null, - "fork": false, - "created_at": "2023-11-25T12:56:50Z", - "updated_at": "2024-06-02T13:50:24Z", - "pushed_at": "2023-11-25T13:14:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-29455.json b/2022/CVE-2022-29455.json index 419babeb95..832c94c604 100644 --- a/2022/CVE-2022-29455.json +++ b/2022/CVE-2022-29455.json @@ -64,71 +64,5 @@ "watchers": 17, "score": 0, "subscribers_count": 1 - }, - { - "id": 585658055, - "name": "CVE-2022-29455", - "full_name": "abdipranata\/CVE-2022-29455", - "owner": { - "login": "abdipranata", - "id": 39010800, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39010800?v=4", - "html_url": "https:\/\/github.com\/abdipranata", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/abdipranata\/CVE-2022-29455", - "description": "Mass Scanner for CVE-2022-29455 on Elementor Plugins Wordpress", - "fork": false, - "created_at": "2023-01-05T18:29:47Z", - "updated_at": "2023-03-22T08:09:03Z", - "pushed_at": "2023-01-05T18:30:52Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 600651739, - "name": "CVE-2022-29455", - "full_name": "0xc4t\/CVE-2022-29455", - "owner": { - "login": "0xc4t", - "id": 105418279, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105418279?v=4", - "html_url": "https:\/\/github.com\/0xc4t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xc4t\/CVE-2022-29455", - "description": "CVE-2022-29455", - "fork": false, - "created_at": "2023-02-12T06:26:11Z", - "updated_at": "2023-02-27T14:55:17Z", - "pushed_at": "2023-02-24T13:43:56Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-29464.json b/2022/CVE-2022-29464.json index f284b41eca..c03cd1f9b8 100644 --- a/2022/CVE-2022-29464.json +++ b/2022/CVE-2022-29464.json @@ -815,174 +815,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 632383541, - "name": "CVE-2022-29464", - "full_name": "Ap0dexMe0\/CVE-2022-29464", - "owner": { - "login": "Ap0dexMe0", - "id": 25004320, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25004320?v=4", - "html_url": "https:\/\/github.com\/Ap0dexMe0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ap0dexMe0\/CVE-2022-29464", - "description": "Perform With Mass Exploits In WSO Management.", - "fork": false, - "created_at": "2023-04-25T09:45:18Z", - "updated_at": "2026-03-01T20:00:15Z", - "pushed_at": "2023-07-24T22:21:30Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "administrator-privileges", - "auto-exploiter", - "wso2" - ], - "visibility": "public", - "forks": 3, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 709455861, - "name": "CVE-2022-29464", - "full_name": "Pushkarup\/CVE-2022-29464", - "owner": { - "login": "Pushkarup", - "id": 148672587, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148672587?v=4", - "html_url": "https:\/\/github.com\/Pushkarup", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pushkarup\/CVE-2022-29464", - "description": "A PoC and Exploit for CVE 2022-29464", - "fork": false, - "created_at": "2023-10-24T18:54:09Z", - "updated_at": "2023-10-26T19:21:35Z", - "pushed_at": "2023-10-25T03:54:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 719704174, - "name": "CVE-2022-29464", - "full_name": "SynixCyberCrimeMy\/CVE-2022-29464", - "owner": { - "login": "SynixCyberCrimeMy", - "id": 151055664, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151055664?v=4", - "html_url": "https:\/\/github.com\/SynixCyberCrimeMy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SynixCyberCrimeMy\/CVE-2022-29464", - "description": "SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?\/h4zzzzzz.scc", - "fork": false, - "created_at": "2023-11-16T18:16:29Z", - "updated_at": "2023-11-16T18:18:22Z", - "pushed_at": "2023-11-16T18:32:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 812068172, - "name": "CVE-2022-29464", - "full_name": "cc3305\/CVE-2022-29464", - "owner": { - "login": "cc3305", - "id": 103961201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4", - "html_url": "https:\/\/github.com\/cc3305", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cc3305\/CVE-2022-29464", - "description": "CVE-2022-29464 exploit script", - "fork": false, - "created_at": "2024-06-07T22:17:05Z", - "updated_at": "2024-07-27T20:18:09Z", - "pushed_at": "2024-07-27T20:18:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 918322526, - "name": "CVE-2022-29464", - "full_name": "c1ph3rbyt3\/CVE-2022-29464", - "owner": { - "login": "c1ph3rbyt3", - "id": 175246639, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175246639?v=4", - "html_url": "https:\/\/github.com\/c1ph3rbyt3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/c1ph3rbyt3\/CVE-2022-29464", - "description": null, - "fork": false, - "created_at": "2025-01-17T17:34:34Z", - "updated_at": "2025-01-17T17:41:12Z", - "pushed_at": "2025-01-17T17:41:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-29469.json b/2022/CVE-2022-29469.json deleted file mode 100644 index c3611048a6..0000000000 --- a/2022/CVE-2022-29469.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 719237611, - "name": "CVE-2022-29469", - "full_name": "S4muraiMelayu1337\/CVE-2022-29469", - "owner": { - "login": "S4muraiMelayu1337", - "id": 130330296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130330296?v=4", - "html_url": "https:\/\/github.com\/S4muraiMelayu1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/S4muraiMelayu1337\/CVE-2022-29469", - "description": null, - "fork": false, - "created_at": "2023-11-15T18:47:44Z", - "updated_at": "2023-11-15T18:49:58Z", - "pushed_at": "2023-11-15T18:51:55Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json index 26f70f4ad7..2fea8ad652 100644 --- a/2022/CVE-2022-29799.json +++ b/2022/CVE-2022-29799.json @@ -59,8 +59,8 @@ "description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.", "fork": false, "created_at": "2026-06-23T14:05:18Z", - "updated_at": "2026-07-02T15:17:04Z", - "pushed_at": "2026-07-02T15:16:00Z", + "updated_at": "2026-07-02T21:28:01Z", + "pushed_at": "2026-07-02T21:27:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-30114.json b/2022/CVE-2022-30114.json deleted file mode 100644 index 65d5c5f939..0000000000 --- a/2022/CVE-2022-30114.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 637148341, - "name": "CVE-2022-30114", - "full_name": "str0ng4le\/CVE-2022-30114", - "owner": { - "login": "str0ng4le", - "id": 83457499, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83457499?v=4", - "html_url": "https:\/\/github.com\/str0ng4le", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/str0ng4le\/CVE-2022-30114", - "description": null, - "fork": false, - "created_at": "2023-05-06T16:51:30Z", - "updated_at": "2023-05-11T08:42:56Z", - "pushed_at": "2023-05-12T21:57:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-30136.json b/2022/CVE-2022-30136.json deleted file mode 100644 index 837c16ee6d..0000000000 --- a/2022/CVE-2022-30136.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 614321236, - "name": "CVE-2022-30136", - "full_name": "fortra\/CVE-2022-30136", - "owner": { - "login": "fortra", - "id": 117669217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117669217?v=4", - "html_url": "https:\/\/github.com\/fortra", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fortra\/CVE-2022-30136", - "description": "Windows Network File System Remote exploit for CVE-2022-30136", - "fork": false, - "created_at": "2023-03-15T10:59:08Z", - "updated_at": "2026-03-23T23:10:09Z", - "pushed_at": "2023-07-11T16:57:26Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 11, - "watchers": 15, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 657715461, - "name": "CVE-2022-30136", - "full_name": "AXRoux\/CVE-2022-30136", - "owner": { - "login": "AXRoux", - "id": 103153079, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103153079?v=4", - "html_url": "https:\/\/github.com\/AXRoux", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AXRoux\/CVE-2022-30136", - "description": "Windows Network File System Remote exploit (DoS) PoC", - "fork": false, - "created_at": "2023-06-23T17:13:22Z", - "updated_at": "2023-06-26T07:07:36Z", - "pushed_at": "2023-06-23T17:14:48Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-30190.json b/2022/CVE-2022-30190.json index 438d26364f..23625cfe0b 100644 --- a/2022/CVE-2022-30190.json +++ b/2022/CVE-2022-30190.json @@ -2485,303 +2485,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 601379517, - "name": "CVE-2022-30190", - "full_name": "yrkuo\/CVE-2022-30190", - "owner": { - "login": "yrkuo", - "id": 39819798, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39819798?v=4", - "html_url": "https:\/\/github.com\/yrkuo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yrkuo\/CVE-2022-30190", - "description": null, - "fork": false, - "created_at": "2023-02-13T23:58:58Z", - "updated_at": "2023-12-25T12:02:49Z", - "pushed_at": "2023-02-14T01:29:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 613736106, - "name": "FOLLINA-CVE-2022-30190", - "full_name": "ToxicEnvelope\/FOLLINA-CVE-2022-30190", - "owner": { - "login": "ToxicEnvelope", - "id": 23465872, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23465872?v=4", - "html_url": "https:\/\/github.com\/ToxicEnvelope", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ToxicEnvelope\/FOLLINA-CVE-2022-30190", - "description": "Implementation of FOLLINA-CVE-2022-30190", - "fork": false, - "created_at": "2023-03-14T07:00:47Z", - "updated_at": "2024-06-20T18:44:33Z", - "pushed_at": "2023-08-27T09:39:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 635211834, - "name": "CVE-2022-30190", - "full_name": "hycheng15\/CVE-2022-30190", - "owner": { - "login": "hycheng15", - "id": 74200918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74200918?v=4", - "html_url": "https:\/\/github.com\/hycheng15", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hycheng15\/CVE-2022-30190", - "description": "An exploitation of CVE-2022-30190 (Follina)", - "fork": false, - "created_at": "2023-05-02T07:56:28Z", - "updated_at": "2023-07-26T14:55:29Z", - "pushed_at": "2023-11-14T10:19:33Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 640555631, - "name": "CVE-2022-30190", - "full_name": "aminetitrofine\/CVE-2022-30190", - "owner": { - "login": "aminetitrofine", - "id": 70074517, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70074517?v=4", - "html_url": "https:\/\/github.com\/aminetitrofine", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aminetitrofine\/CVE-2022-30190", - "description": "Follina (CVE-2022-30190) is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution (RCE) attacks.", - "fork": false, - "created_at": "2023-05-14T13:38:43Z", - "updated_at": "2026-02-27T16:50:04Z", - "pushed_at": "2023-05-14T13:45:18Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 667473352, - "name": "Follina_MSDT_CVE-2022-30190", - "full_name": "Muhammad-Ali007\/Follina_MSDT_CVE-2022-30190", - "owner": { - "login": "Muhammad-Ali007", - "id": 64638296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64638296?v=4", - "html_url": "https:\/\/github.com\/Muhammad-Ali007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Muhammad-Ali007\/Follina_MSDT_CVE-2022-30190", - "description": null, - "fork": false, - "created_at": "2023-07-17T15:24:54Z", - "updated_at": "2024-04-20T01:38:09Z", - "pushed_at": "2023-07-18T20:13:14Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 724428602, - "name": "AmzWord", - "full_name": "Jump-Wang-111\/AmzWord", - "owner": { - "login": "Jump-Wang-111", - "id": 69379868, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69379868?v=4", - "html_url": "https:\/\/github.com\/Jump-Wang-111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Jump-Wang-111\/AmzWord", - "description": "An automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography.", - "fork": false, - "created_at": "2023-11-28T03:47:32Z", - "updated_at": "2024-09-04T02:59:22Z", - "pushed_at": "2023-11-28T10:16:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 758899750, - "name": "ZipScan", - "full_name": "shri142\/ZipScan", - "owner": { - "login": "shri142", - "id": 81535914, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81535914?v=4", - "html_url": "https:\/\/github.com\/shri142", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shri142\/ZipScan", - "description": "A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190)", - "fork": false, - "created_at": "2024-02-17T12:10:12Z", - "updated_at": "2024-02-24T17:59:28Z", - "pushed_at": "2024-02-24T17:59:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 784462275, - "name": "CVE-2022-30190", - "full_name": "alienkeric\/CVE-2022-30190", - "owner": { - "login": "alienkeric", - "id": 102582785, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102582785?v=4", - "html_url": "https:\/\/github.com\/alienkeric", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alienkeric\/CVE-2022-30190", - "description": "The script is from https:\/\/github.com\/JohnHammond\/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link", - "fork": false, - "created_at": "2024-04-09T22:40:09Z", - "updated_at": "2024-04-10T01:26:23Z", - "pushed_at": "2024-04-09T22:41:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 831490675, - "name": "Follina-CVE-2022-30190-Sample", - "full_name": "ethicalblue\/Follina-CVE-2022-30190-Sample", - "owner": { - "login": "ethicalblue", - "id": 82314652, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82314652?v=4", - "html_url": "https:\/\/github.com\/ethicalblue", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ethicalblue\/Follina-CVE-2022-30190-Sample", - "description": "Educational exploit for CVE-2022-30190", - "fork": false, - "created_at": "2024-07-20T17:50:48Z", - "updated_at": "2024-07-20T19:56:33Z", - "pushed_at": "2024-07-20T18:23:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 928632164, "name": "CVE-2022-30190_page", diff --git a/2022/CVE-2022-30203.json b/2022/CVE-2022-30203.json deleted file mode 100644 index 8c85f6ce70..0000000000 --- a/2022/CVE-2022-30203.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 811928581, - "name": "dubiousdisk", - "full_name": "Wack0\/dubiousdisk", - "owner": { - "login": "Wack0", - "id": 2650838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2650838?v=4", - "html_url": "https:\/\/github.com\/Wack0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Wack0\/dubiousdisk", - "description": "The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)", - "fork": false, - "created_at": "2024-06-07T15:25:33Z", - "updated_at": "2025-04-02T07:54:21Z", - "pushed_at": "2024-06-07T15:26:02Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bitlocker", - "cve-2022-30203", - "cve-2023-21560", - "cve-2023-28249", - "cve-2023-28269", - "secure-boot", - "uefi", - "vulnerability", - "windows-boot", - "writeup" - ], - "visibility": "public", - "forks": 3, - "watchers": 10, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-30333.json b/2022/CVE-2022-30333.json index e7dc1fc9be..3bb47fcf5f 100644 --- a/2022/CVE-2022-30333.json +++ b/2022/CVE-2022-30333.json @@ -130,38 +130,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 812954079, - "name": "cve-2022-30333_online_rar_extracor", - "full_name": "paradox0909\/cve-2022-30333_online_rar_extracor", - "owner": { - "login": "paradox0909", - "id": 85692552, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85692552?v=4", - "html_url": "https:\/\/github.com\/paradox0909", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/paradox0909\/cve-2022-30333_online_rar_extracor", - "description": null, - "fork": false, - "created_at": "2024-06-10T08:17:50Z", - "updated_at": "2024-06-10T08:20:11Z", - "pushed_at": "2024-06-10T08:20:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-30524.json b/2022/CVE-2022-30524.json deleted file mode 100644 index 40bf479872..0000000000 --- a/2022/CVE-2022-30524.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 599809675, - "name": "xpdf-docker", - "full_name": "rishvic\/xpdf-docker", - "owner": { - "login": "rishvic", - "id": 40887886, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40887886?v=4", - "html_url": "https:\/\/github.com\/rishvic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rishvic\/xpdf-docker", - "description": "Docker images of Xpdf 4.04, vulnerable to CVE-2022-30524", - "fork": false, - "created_at": "2023-02-09T23:30:39Z", - "updated_at": "2024-06-20T09:09:42Z", - "pushed_at": "2023-02-10T01:23:16Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-30525.json b/2022/CVE-2022-30525.json index 7121b5ca3f..b37ca436ac 100644 --- a/2022/CVE-2022-30525.json +++ b/2022/CVE-2022-30525.json @@ -432,71 +432,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 589325446, - "name": "CVE-2022-30525_check", - "full_name": "cbk914\/CVE-2022-30525_check", - "owner": { - "login": "cbk914", - "id": 2042196, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2042196?v=4", - "html_url": "https:\/\/github.com\/cbk914", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cbk914\/CVE-2022-30525_check", - "description": null, - "fork": false, - "created_at": "2023-01-15T20:02:24Z", - "updated_at": "2023-01-19T23:43:16Z", - "pushed_at": "2023-01-15T20:06:36Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 763860214, - "name": "CVE-2022-30525_Exploit", - "full_name": "arajsingh-infosec\/CVE-2022-30525_Exploit", - "owner": { - "login": "arajsingh-infosec", - "id": 161408029, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161408029?v=4", - "html_url": "https:\/\/github.com\/arajsingh-infosec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/arajsingh-infosec\/CVE-2022-30525_Exploit", - "description": "Exploit for CVE-2022-30525", - "fork": false, - "created_at": "2024-02-27T03:31:37Z", - "updated_at": "2026-04-11T16:36:50Z", - "pushed_at": "2024-02-27T03:33:00Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-30780.json b/2022/CVE-2022-30780.json index 0191242ff7..9c24754de2 100644 --- a/2022/CVE-2022-30780.json +++ b/2022/CVE-2022-30780.json @@ -40,38 +40,5 @@ "watchers": 17, "score": 0, "subscribers_count": 1 - }, - { - "id": 830533984, - "name": "CVE-2022-30780_Checker", - "full_name": "xiw1ll\/CVE-2022-30780_Checker", - "owner": { - "login": "xiw1ll", - "id": 69167284, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69167284?v=4", - "html_url": "https:\/\/github.com\/xiw1ll", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xiw1ll\/CVE-2022-30780_Checker", - "description": "Lighttpd CVE-2022-30780 checker", - "fork": false, - "created_at": "2024-07-18T13:09:44Z", - "updated_at": "2024-07-18T13:41:32Z", - "pushed_at": "2024-07-18T13:41:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-31144.json b/2022/CVE-2022-31144.json deleted file mode 100644 index b6d3218e9f..0000000000 --- a/2022/CVE-2022-31144.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 596929868, - "name": "CVE-2022-31144", - "full_name": "SpiralBL0CK\/CVE-2022-31144", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2022-31144", - "description": "CVE-2022-31144 dos pt redis, not finished yet or too soon, this can be turned into rce but oh well if you smart enough", - "fork": false, - "created_at": "2023-02-03T08:40:38Z", - "updated_at": "2024-12-21T15:37:06Z", - "pushed_at": "2024-12-08T18:47:48Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-31692.json b/2022/CVE-2022-31692.json index 0b556ffa57..0db2530d79 100644 --- a/2022/CVE-2022-31692.json +++ b/2022/CVE-2022-31692.json @@ -31,38 +31,5 @@ "watchers": 35, "score": 0, "subscribers_count": 0 - }, - { - "id": 711577493, - "name": "cve-2022-31692", - "full_name": "hotblac\/cve-2022-31692", - "owner": { - "login": "hotblac", - "id": 4406140, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4406140?v=4", - "html_url": "https:\/\/github.com\/hotblac", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hotblac\/cve-2022-31692", - "description": "Demonstration of CVE-2022-31692 authorization bypass in Spring Security", - "fork": false, - "created_at": "2023-10-29T17:31:23Z", - "updated_at": "2023-10-29T17:31:49Z", - "pushed_at": "2023-12-02T11:23:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-31705.json b/2022/CVE-2022-31705.json deleted file mode 100644 index ce795a95e6..0000000000 --- a/2022/CVE-2022-31705.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 586726069, - "name": "cve-2022-31705", - "full_name": "s0duku\/cve-2022-31705", - "owner": { - "login": "s0duku", - "id": 83897807, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83897807?v=4", - "html_url": "https:\/\/github.com\/s0duku", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s0duku\/cve-2022-31705", - "description": "CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC ", - "fork": false, - "created_at": "2023-01-09T04:27:15Z", - "updated_at": "2026-05-15T15:44:13Z", - "pushed_at": "2023-01-09T08:19:27Z", - "stargazers_count": 120, - "watchers_count": 120, - "has_discussions": false, - "forks_count": 23, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 23, - "watchers": 120, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3172.json b/2022/CVE-2022-3172.json deleted file mode 100644 index 27e1677415..0000000000 --- a/2022/CVE-2022-3172.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 780911426, - "name": "CVE-2022-3172", - "full_name": "UgOrange\/CVE-2022-3172", - "owner": { - "login": "UgOrange", - "id": 28263639, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28263639?v=4", - "html_url": "https:\/\/github.com\/UgOrange", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/UgOrange\/CVE-2022-3172", - "description": null, - "fork": false, - "created_at": "2024-04-02T11:53:54Z", - "updated_at": "2024-04-02T11:54:42Z", - "pushed_at": "2024-04-02T11:54:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-31814.json b/2022/CVE-2022-31814.json index 2047df1a69..1d7d40a73e 100644 --- a/2022/CVE-2022-31814.json +++ b/2022/CVE-2022-31814.json @@ -37,247 +37,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 605094197, - "name": "CVE-2022-31814", - "full_name": "Madliife0\/CVE-2022-31814", - "owner": { - "login": "Madliife0", - "id": 64816845, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64816845?v=4", - "html_url": "https:\/\/github.com\/Madliife0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Madliife0\/CVE-2022-31814", - "description": null, - "fork": false, - "created_at": "2023-02-22T12:38:13Z", - "updated_at": "2023-02-22T12:38:13Z", - "pushed_at": "2023-02-22T12:38:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 608172527, - "name": "CVE-2022-31814", - "full_name": "TheUnknownSoul\/CVE-2022-31814", - "owner": { - "login": "TheUnknownSoul", - "id": 58050201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58050201?v=4", - "html_url": "https:\/\/github.com\/TheUnknownSoul", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TheUnknownSoul\/CVE-2022-31814", - "description": null, - "fork": false, - "created_at": "2023-03-01T13:24:29Z", - "updated_at": "2023-03-01T16:14:01Z", - "pushed_at": "2023-03-03T08:22:22Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 609702147, - "name": "RCE", - "full_name": "drcayber\/RCE", - "owner": { - "login": "drcayber", - "id": 101327574, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101327574?v=4", - "html_url": "https:\/\/github.com\/drcayber", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/drcayber\/RCE", - "description": "CVE-2022-31814", - "fork": false, - "created_at": "2023-03-05T00:56:14Z", - "updated_at": "2023-09-19T17:16:18Z", - "pushed_at": "2023-03-05T01:07:54Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bug", - "exploit", - "hunting", - "python", - "rce", - "rce-exploit", - "rce-scanner", - "web", - "webapplication" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 618996369, - "name": "CVE-2022-31814", - "full_name": "Chocapikk\/CVE-2022-31814", - "owner": { - "login": "Chocapikk", - "id": 88535377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4", - "html_url": "https:\/\/github.com\/Chocapikk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2022-31814", - "description": "pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)", - "fork": false, - "created_at": "2023-03-26T00:18:04Z", - "updated_at": "2024-09-08T03:28:15Z", - "pushed_at": "2023-03-26T00:25:48Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 619242757, - "name": "CVE-2022-31814", - "full_name": "dkstar11q\/CVE-2022-31814", - "owner": { - "login": "dkstar11q", - "id": 123830677, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123830677?v=4", - "html_url": "https:\/\/github.com\/dkstar11q", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkstar11q\/CVE-2022-31814", - "description": "pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)", - "fork": false, - "created_at": "2023-03-26T17:22:40Z", - "updated_at": "2024-08-10T07:10:31Z", - "pushed_at": "2023-03-26T00:25:48Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 832573377, - "name": "CVE-2022-31814", - "full_name": "Laburity\/CVE-2022-31814", - "owner": { - "login": "Laburity", - "id": 130553966, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130553966?v=4", - "html_url": "https:\/\/github.com\/Laburity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Laburity\/CVE-2022-31814", - "description": "Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)", - "fork": false, - "created_at": "2024-07-23T09:44:46Z", - "updated_at": "2026-01-10T14:57:01Z", - "pushed_at": "2024-07-23T10:03:08Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 23, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 841455990, - "name": "CVE-2022-31814", - "full_name": "ArunHAtter\/CVE-2022-31814", - "owner": { - "login": "ArunHAtter", - "id": 53938283, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53938283?v=4", - "html_url": "https:\/\/github.com\/ArunHAtter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ArunHAtter\/CVE-2022-31814", - "description": "This script is a proof-of-concept exploit for pfBlockerNG <= 2.1.4_26 that allows for remote code execution. It takes a single target URL or a list of URLs, tries to upload a shell using multiple payloads, executes a command, and then deletes the shell.", - "fork": false, - "created_at": "2024-08-12T12:50:48Z", - "updated_at": "2024-08-12T12:57:41Z", - "pushed_at": "2024-08-12T12:57:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 917709059, "name": "CVE-2022-31814", diff --git a/2022/CVE-2022-31889.json b/2022/CVE-2022-31889.json deleted file mode 100644 index 0dd8477368..0000000000 --- a/2022/CVE-2022-31889.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 603422212, - "name": "CVE-2022-31889", - "full_name": "reewardius\/CVE-2022-31889", - "owner": { - "login": "reewardius", - "id": 68978608, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4", - "html_url": "https:\/\/github.com\/reewardius", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reewardius\/CVE-2022-31889", - "description": null, - "fork": false, - "created_at": "2023-02-18T13:14:53Z", - "updated_at": "2023-02-18T13:14:53Z", - "pushed_at": "2023-02-18T13:25:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-31890.json b/2022/CVE-2022-31890.json deleted file mode 100644 index 699d9a933c..0000000000 --- a/2022/CVE-2022-31890.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 603412932, - "name": "CVE-2022-31890", - "full_name": "reewardius\/CVE-2022-31890", - "owner": { - "login": "reewardius", - "id": 68978608, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4", - "html_url": "https:\/\/github.com\/reewardius", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reewardius\/CVE-2022-31890", - "description": null, - "fork": false, - "created_at": "2023-02-18T12:40:45Z", - "updated_at": "2023-09-13T12:24:53Z", - "pushed_at": "2023-02-18T13:09:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32074.json b/2022/CVE-2022-32074.json deleted file mode 100644 index 897e2d6e81..0000000000 --- a/2022/CVE-2022-32074.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 603423307, - "name": "CVE-2022-32074", - "full_name": "reewardius\/CVE-2022-32074", - "owner": { - "login": "reewardius", - "id": 68978608, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4", - "html_url": "https:\/\/github.com\/reewardius", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reewardius\/CVE-2022-32074", - "description": null, - "fork": false, - "created_at": "2023-02-18T13:19:03Z", - "updated_at": "2023-02-18T13:19:03Z", - "pushed_at": "2023-02-18T13:25:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32132.json b/2022/CVE-2022-32132.json deleted file mode 100644 index 2929a30a22..0000000000 --- a/2022/CVE-2022-32132.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 603421211, - "name": "CVE-2022-32132", - "full_name": "reewardius\/CVE-2022-32132", - "owner": { - "login": "reewardius", - "id": 68978608, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68978608?v=4", - "html_url": "https:\/\/github.com\/reewardius", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reewardius\/CVE-2022-32132", - "description": null, - "fork": false, - "created_at": "2023-02-18T13:11:13Z", - "updated_at": "2023-02-18T13:11:13Z", - "pushed_at": "2023-02-18T13:24:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32199.json b/2022/CVE-2022-32199.json deleted file mode 100644 index 40f37d6219..0000000000 --- a/2022/CVE-2022-32199.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 618754016, - "name": "CVE-2022-32199", - "full_name": "Toxich4\/CVE-2022-32199", - "owner": { - "login": "Toxich4", - "id": 47368696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47368696?v=4", - "html_url": "https:\/\/github.com\/Toxich4", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Toxich4\/CVE-2022-32199", - "description": null, - "fork": false, - "created_at": "2023-03-25T08:49:58Z", - "updated_at": "2023-03-26T15:11:43Z", - "pushed_at": "2023-03-29T12:58:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32250.json b/2022/CVE-2022-32250.json index 31e8e52955..5a7b68cc15 100644 --- a/2022/CVE-2022-32250.json +++ b/2022/CVE-2022-32250.json @@ -32,138 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 594075430, - "name": "CVE-2022-32250-LPE", - "full_name": "ysanatomic\/CVE-2022-32250-LPE", - "owner": { - "login": "ysanatomic", - "id": 41269324, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41269324?v=4", - "html_url": "https:\/\/github.com\/ysanatomic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ysanatomic\/CVE-2022-32250-LPE", - "description": "LPE PoC of a user-after-free vulnerability in the Linux netfilter subsystem.", - "fork": false, - "created_at": "2023-01-27T14:44:39Z", - "updated_at": "2024-07-18T04:25:27Z", - "pushed_at": "2023-02-04T16:27:22Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 716574497, - "name": "2022-32250LPE", - "full_name": "Decstor5\/2022-32250LPE", - "owner": { - "login": "Decstor5", - "id": 95436708, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95436708?v=4", - "html_url": "https:\/\/github.com\/Decstor5", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Decstor5\/2022-32250LPE", - "description": "CVE-2022-32250-LPE", - "fork": false, - "created_at": "2023-11-09T12:27:26Z", - "updated_at": "2026-04-17T14:29:09Z", - "pushed_at": "2023-11-09T13:47:35Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 812759874, - "name": "CVE-2022-32250", - "full_name": "Kristal-g\/CVE-2022-32250", - "owner": { - "login": "Kristal-g", - "id": 61376744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61376744?v=4", - "html_url": "https:\/\/github.com\/Kristal-g", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kristal-g\/CVE-2022-32250", - "description": "My exploit for CVE-2022-32250 for linux kernel 5.18", - "fork": false, - "created_at": "2024-06-09T19:53:54Z", - "updated_at": "2026-06-17T23:14:01Z", - "pushed_at": "2024-06-09T20:02:58Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 899547899, - "name": "CVE-2022-32250", - "full_name": "seadragnol\/CVE-2022-32250", - "owner": { - "login": "seadragnol", - "id": 55611051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55611051?v=4", - "html_url": "https:\/\/github.com\/seadragnol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/seadragnol\/CVE-2022-32250", - "description": null, - "fork": false, - "created_at": "2024-12-06T13:49:38Z", - "updated_at": "2024-12-07T11:26:47Z", - "pushed_at": "2024-12-07T11:26:43Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 1004673394, "name": "cve-testing", diff --git a/2022/CVE-2022-32548.json b/2022/CVE-2022-32548.json deleted file mode 100644 index b38d43cfb5..0000000000 --- a/2022/CVE-2022-32548.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 710702628, - "name": "CVE-2022-32548-RCE-POC", - "full_name": "MosaedH\/CVE-2022-32548-RCE-POC", - "owner": { - "login": "MosaedH", - "id": 75680991, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75680991?v=4", - "html_url": "https:\/\/github.com\/MosaedH", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MosaedH\/CVE-2022-32548-RCE-POC", - "description": null, - "fork": false, - "created_at": "2023-10-27T08:58:11Z", - "updated_at": "2025-08-22T08:15:31Z", - "pushed_at": "2023-10-27T09:00:33Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32862.json b/2022/CVE-2022-32862.json deleted file mode 100644 index f13f8ca0a6..0000000000 --- a/2022/CVE-2022-32862.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 691220861, - "name": "CVE-2022-32862", - "full_name": "rohitc33\/CVE-2022-32862", - "owner": { - "login": "rohitc33", - "id": 70339497, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70339497?v=4", - "html_url": "https:\/\/github.com\/rohitc33", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rohitc33\/CVE-2022-32862", - "description": "macOS TCC bypass", - "fork": false, - "created_at": "2023-09-13T18:29:27Z", - "updated_at": "2025-10-04T17:43:06Z", - "pushed_at": "2023-09-13T18:33:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32898.json b/2022/CVE-2022-32898.json deleted file mode 100644 index 2e1d908e09..0000000000 --- a/2022/CVE-2022-32898.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 776714071, - "name": "CVE-2022-32898", - "full_name": "ox1111\/CVE-2022-32898", - "owner": { - "login": "ox1111", - "id": 31942498, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31942498?v=4", - "html_url": "https:\/\/github.com\/ox1111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ox1111\/CVE-2022-32898", - "description": null, - "fork": false, - "created_at": "2024-03-24T09:26:29Z", - "updated_at": "2024-03-24T09:26:29Z", - "pushed_at": "2024-03-24T10:41:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32932.json b/2022/CVE-2022-32932.json deleted file mode 100644 index 01e69845c7..0000000000 --- a/2022/CVE-2022-32932.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 777471417, - "name": "CVE-2022-32932", - "full_name": "ox1111\/CVE-2022-32932", - "owner": { - "login": "ox1111", - "id": 31942498, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31942498?v=4", - "html_url": "https:\/\/github.com\/ox1111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ox1111\/CVE-2022-32932", - "description": null, - "fork": false, - "created_at": "2024-03-25T23:00:41Z", - "updated_at": "2025-06-07T03:54:17Z", - "pushed_at": "2024-03-25T23:26:17Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32947.json b/2022/CVE-2022-32947.json deleted file mode 100644 index f75b4bd6a2..0000000000 --- a/2022/CVE-2022-32947.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 692673503, - "name": "agx-exploit", - "full_name": "hoshinolina\/agx-exploit", - "owner": { - "login": "hoshinolina", - "id": 102031928, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102031928?v=4", - "html_url": "https:\/\/github.com\/hoshinolina", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hoshinolina\/agx-exploit", - "description": "CVE-2022-32947 walkthough and demo", - "fork": false, - "created_at": "2023-09-17T08:21:47Z", - "updated_at": "2026-06-18T15:56:47Z", - "pushed_at": "2023-09-18T03:04:48Z", - "stargazers_count": 192, - "watchers_count": 192, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 12, - "watchers": 192, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-32981.json b/2022/CVE-2022-32981.json deleted file mode 100644 index 46e53a440e..0000000000 --- a/2022/CVE-2022-32981.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 905956447, - "name": "CVE-2022-32981", - "full_name": "SpiralBL0CK\/CVE-2022-32981", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2022-32981", - "description": "poc for CVE-2022-32981 under work", - "fork": false, - "created_at": "2024-12-19T21:15:39Z", - "updated_at": "2024-12-20T20:37:02Z", - "pushed_at": "2024-12-20T20:36:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-33082.json b/2022/CVE-2022-33082.json deleted file mode 100644 index 8093e816bd..0000000000 --- a/2022/CVE-2022-33082.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 657277228, - "name": "cve-2022-33082-exploit", - "full_name": "cyberqueenmeg\/cve-2022-33082-exploit", - "owner": { - "login": "cyberqueenmeg", - "id": 62813469, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62813469?v=4", - "html_url": "https:\/\/github.com\/cyberqueenmeg", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cyberqueenmeg\/cve-2022-33082-exploit", - "description": null, - "fork": false, - "created_at": "2023-06-22T17:50:18Z", - "updated_at": "2023-06-22T18:49:31Z", - "pushed_at": "2023-06-22T22:53:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3317.json b/2022/CVE-2022-3317.json deleted file mode 100644 index 668dbefa1a..0000000000 --- a/2022/CVE-2022-3317.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 588477448, - "name": "CVE-2022-3317", - "full_name": "hfh86\/CVE-2022-3317", - "owner": { - "login": "hfh86", - "id": 42328886, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42328886?v=4", - "html_url": "https:\/\/github.com\/hfh86", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hfh86\/CVE-2022-3317", - "description": "Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)", - "fork": false, - "created_at": "2023-01-13T08:06:54Z", - "updated_at": "2023-01-13T08:06:54Z", - "pushed_at": "2023-01-13T08:06:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3357.json b/2022/CVE-2022-3357.json deleted file mode 100644 index d62c6bef7f..0000000000 --- a/2022/CVE-2022-3357.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 824252334, - "name": "CVE-2021-3493_CVE-2022-3357", - "full_name": "iamz24\/CVE-2021-3493_CVE-2022-3357", - "owner": { - "login": "iamz24", - "id": 97619614, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97619614?v=4", - "html_url": "https:\/\/github.com\/iamz24", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iamz24\/CVE-2021-3493_CVE-2022-3357", - "description": null, - "fork": false, - "created_at": "2024-07-04T17:29:28Z", - "updated_at": "2024-07-04T20:20:33Z", - "pushed_at": "2024-07-04T20:20:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3368.json b/2022/CVE-2022-3368.json index e2dc806042..463ee24879 100644 --- a/2022/CVE-2022-3368.json +++ b/2022/CVE-2022-3368.json @@ -31,38 +31,5 @@ "watchers": 29, "score": 0, "subscribers_count": 1 - }, - { - "id": 767696686, - "name": "CrackAVFee", - "full_name": "byt3n33dl3\/CrackAVFee", - "owner": { - "login": "byt3n33dl3", - "id": 151133481, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151133481?v=4", - "html_url": "https:\/\/github.com\/byt3n33dl3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/byt3n33dl3\/CrackAVFee", - "description": "it's a CVE-2022-3368 (Patched), but feel free to use it for check any outdated software or reseach", - "fork": false, - "created_at": "2024-03-05T18:31:29Z", - "updated_at": "2025-05-18T17:17:40Z", - "pushed_at": "2024-07-08T16:18:51Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-33891.json b/2022/CVE-2022-33891.json index 3cf878264e..34e6bbc79b 100644 --- a/2022/CVE-2022-33891.json +++ b/2022/CVE-2022-33891.json @@ -284,80 +284,6 @@ "score": 0, "subscribers_count": 5 }, - { - "id": 723685053, - "name": "cve-2022-33891-fix", - "full_name": "elsvital\/cve-2022-33891-fix", - "owner": { - "login": "elsvital", - "id": 4923784, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4923784?v=4", - "html_url": "https:\/\/github.com\/elsvital", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/elsvital\/cve-2022-33891-fix", - "description": null, - "fork": false, - "created_at": "2023-11-26T13:09:28Z", - "updated_at": "2023-11-26T13:47:47Z", - "pushed_at": "2023-11-26T13:52:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 761826205, - "name": "CVE-2022-33891-EXPLOIT", - "full_name": "K3ysTr0K3R\/CVE-2022-33891-EXPLOIT", - "owner": { - "login": "K3ysTr0K3R", - "id": 70909693, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", - "html_url": "https:\/\/github.com\/K3ysTr0K3R", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2022-33891-EXPLOIT", - "description": "A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)", - "fork": false, - "created_at": "2024-02-22T15:05:00Z", - "updated_at": "2026-02-25T03:30:43Z", - "pushed_at": "2024-02-22T16:19:49Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "command-injection", - "cve-2022-33891", - "cve-2022-33891-poc", - "exploit", - "hacking", - "poc", - "remote-code-execution" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 924796248, "name": "CVE-2022-33891", diff --git a/2022/CVE-2022-33980.json b/2022/CVE-2022-33980.json index ae8d39ae8c..559fbae133 100644 --- a/2022/CVE-2022-33980.json +++ b/2022/CVE-2022-33980.json @@ -133,38 +133,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 667968718, - "name": "riskootext4shell", - "full_name": "joseluisinigo\/riskootext4shell", - "owner": { - "login": "joseluisinigo", - "id": 7033429, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7033429?v=4", - "html_url": "https:\/\/github.com\/joseluisinigo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/joseluisinigo\/riskootext4shell", - "description": "text4shell script for text coomons < =1.10 CVE-2022-33980", - "fork": false, - "created_at": "2023-07-18T17:55:58Z", - "updated_at": "2023-07-18T20:20:09Z", - "pushed_at": "2023-07-18T17:58:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-34169.json b/2022/CVE-2022-34169.json index 159ad631bf..e1deb56a04 100644 --- a/2022/CVE-2022-34169.json +++ b/2022/CVE-2022-34169.json @@ -31,71 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 589838604, - "name": "AutoGenerateXalanPayload", - "full_name": "flowerwind\/AutoGenerateXalanPayload", - "owner": { - "login": "flowerwind", - "id": 35595721, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35595721?v=4", - "html_url": "https:\/\/github.com\/flowerwind", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/flowerwind\/AutoGenerateXalanPayload", - "description": "cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件", - "fork": false, - "created_at": "2023-01-17T03:48:11Z", - "updated_at": "2026-05-18T16:41:40Z", - "pushed_at": "2023-01-17T12:27:08Z", - "stargazers_count": 94, - "watchers_count": 94, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 94, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 918268815, - "name": "CVE-2022-34169", - "full_name": "Disnaming\/CVE-2022-34169", - "owner": { - "login": "Disnaming", - "id": 45449541, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45449541?v=4", - "html_url": "https:\/\/github.com\/Disnaming", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Disnaming\/CVE-2022-34169", - "description": "A PoC for CVE-2022-34169, for the SU_PWN challenge from SUCTF 2025", - "fork": false, - "created_at": "2025-01-17T15:32:37Z", - "updated_at": "2026-05-18T18:03:40Z", - "pushed_at": "2025-01-18T01:53:46Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-34527.json b/2022/CVE-2022-34527.json deleted file mode 100644 index ebdf65b813..0000000000 --- a/2022/CVE-2022-34527.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 629316987, - "name": "CVE-2022-34527_D-Link_DSL-3782_Router_command_injection", - "full_name": "FzBacon\/CVE-2022-34527_D-Link_DSL-3782_Router_command_injection", - "owner": { - "login": "FzBacon", - "id": 48304150, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48304150?v=4", - "html_url": "https:\/\/github.com\/FzBacon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FzBacon\/CVE-2022-34527_D-Link_DSL-3782_Router_command_injection", - "description": null, - "fork": false, - "created_at": "2023-04-18T04:26:49Z", - "updated_at": "2023-04-18T04:27:04Z", - "pushed_at": "2023-04-18T10:48:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-34556.json b/2022/CVE-2022-34556.json deleted file mode 100644 index 018f8963ca..0000000000 --- a/2022/CVE-2022-34556.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595824795, - "name": "CVE-2022-34556", - "full_name": "Halcy0nic\/CVE-2022-34556", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-34556", - "description": "Proof of concept for CVE-2022-34556", - "fork": false, - "created_at": "2023-01-31T22:07:50Z", - "updated_at": "2024-07-02T20:34:40Z", - "pushed_at": "2023-01-31T22:31:39Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-34683.json b/2022/CVE-2022-34683.json deleted file mode 100644 index 6dc8febbfb..0000000000 --- a/2022/CVE-2022-34683.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 588700609, - "name": "CVE-2022-34683", - "full_name": "gmh5225\/CVE-2022-34683", - "owner": { - "login": "gmh5225", - "id": 13917777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4", - "html_url": "https:\/\/github.com\/gmh5225", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gmh5225\/CVE-2022-34683", - "description": "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service. CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-13T19:18:02Z", - "updated_at": "2025-04-09T04:20:45Z", - "pushed_at": "2023-01-06T23:41:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-34753.json b/2022/CVE-2022-34753.json deleted file mode 100644 index c19fcd1e3e..0000000000 --- a/2022/CVE-2022-34753.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 695311817, - "name": "CVE-2022-34753-EXPLOIT", - "full_name": "K3ysTr0K3R\/CVE-2022-34753-EXPLOIT", - "owner": { - "login": "K3ysTr0K3R", - "id": 70909693, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", - "html_url": "https:\/\/github.com\/K3ysTr0K3R", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2022-34753-EXPLOIT", - "description": "A PoC exploit for CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller", - "fork": false, - "created_at": "2023-09-22T20:41:19Z", - "updated_at": "2026-02-25T03:31:12Z", - "pushed_at": "2023-09-22T20:58:54Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "exploitation", - "hacking" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-34913.json b/2022/CVE-2022-34913.json deleted file mode 100644 index 70826bac9c..0000000000 --- a/2022/CVE-2022-34913.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595832872, - "name": "CVE-2022-34913", - "full_name": "Halcy0nic\/CVE-2022-34913", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-34913", - "description": "Proof of concept for CVE-2022-34913", - "fork": false, - "created_at": "2023-01-31T22:37:29Z", - "updated_at": "2024-07-02T20:34:32Z", - "pushed_at": "2023-01-31T23:00:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-35411.json b/2022/CVE-2022-35411.json index 77f5ed1211..f318741b3d 100644 --- a/2022/CVE-2022-35411.json +++ b/2022/CVE-2022-35411.json @@ -1,37 +1,4 @@ [ - { - "id": 1020926480, - "name": "CVE-2022-35411", - "full_name": "Neo-okami\/CVE-2022-35411", - "owner": { - "login": "Neo-okami", - "id": 69397254, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69397254?v=4", - "html_url": "https:\/\/github.com\/Neo-okami", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Neo-okami\/CVE-2022-35411", - "description": "rpc.py 0.6.0 - Remote Code Execution (RCE)", - "fork": false, - "created_at": "2025-07-16T15:51:35Z", - "updated_at": "2025-07-16T15:51:36Z", - "pushed_at": "2024-04-25T09:14:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1027617939, "name": "rpc-rce.py", diff --git a/2022/CVE-2022-3552.json b/2022/CVE-2022-3552.json index 231c30feec..f896377a8a 100644 --- a/2022/CVE-2022-3552.json +++ b/2022/CVE-2022-3552.json @@ -1,37 +1,4 @@ [ - { - "id": 622192084, - "name": "CVE-2022-3552", - "full_name": "0xk4b1r\/CVE-2022-3552", - "owner": { - "login": "0xk4b1r", - "id": 44284877, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44284877?v=4", - "html_url": "https:\/\/github.com\/0xk4b1r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xk4b1r\/CVE-2022-3552", - "description": "BoxBilling<=4.22.1.5 - Remote Code Execution (RCE)", - "fork": false, - "created_at": "2023-04-01T11:53:14Z", - "updated_at": "2025-06-02T13:42:29Z", - "pushed_at": "2023-04-01T15:45:53Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, { "id": 973790605, "name": "CVE-2022-3552", diff --git a/2022/CVE-2022-3564.json b/2022/CVE-2022-3564.json deleted file mode 100644 index b36f5db0ae..0000000000 --- a/2022/CVE-2022-3564.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 691480377, - "name": "linux-4.1.15_CVE-2022-3564", - "full_name": "Trinadh465\/linux-4.1.15_CVE-2022-3564", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/linux-4.1.15_CVE-2022-3564", - "description": null, - "fork": false, - "created_at": "2023-09-14T09:07:11Z", - "updated_at": "2023-09-14T09:22:05Z", - "pushed_at": "2023-09-14T14:58:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-35649.json b/2022/CVE-2022-35649.json deleted file mode 100644 index 3742d47d9e..0000000000 --- a/2022/CVE-2022-35649.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 610209003, - "name": "CVE-2022-35649", - "full_name": "antoinenguyen-09\/CVE-2022-35649", - "owner": { - "login": "antoinenguyen-09", - "id": 61876488, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61876488?v=4", - "html_url": "https:\/\/github.com\/antoinenguyen-09", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/antoinenguyen-09\/CVE-2022-35649", - "description": "Payload Generator and Detailed Analysis about CVE-2022-35649 ", - "fork": false, - "created_at": "2023-03-06T10:09:59Z", - "updated_at": "2023-03-20T10:23:25Z", - "pushed_at": "2023-03-07T09:48:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-35737.json b/2022/CVE-2022-35737.json index d1d8c77ce4..bd07524c3e 100644 --- a/2022/CVE-2022-35737.json +++ b/2022/CVE-2022-35737.json @@ -31,38 +31,5 @@ "watchers": 13, "score": 0, "subscribers_count": 0 - }, - { - "id": 604796426, - "name": "codeql-cve-2022-35737", - "full_name": "rvermeulen\/codeql-cve-2022-35737", - "owner": { - "login": "rvermeulen", - "id": 636626, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/636626?v=4", - "html_url": "https:\/\/github.com\/rvermeulen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rvermeulen\/codeql-cve-2022-35737", - "description": "A CodeQL query to find CVE 2022-35737", - "fork": false, - "created_at": "2023-02-21T20:07:45Z", - "updated_at": "2023-03-09T10:00:52Z", - "pushed_at": "2023-02-21T20:11:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-3590.json b/2022/CVE-2022-3590.json index 81213830f8..4f44a0c336 100644 --- a/2022/CVE-2022-3590.json +++ b/2022/CVE-2022-3590.json @@ -1,70 +1,4 @@ [ - { - "id": 652624585, - "name": "CVE-2022-3590-WordPress-Vulnerability-Scanner", - "full_name": "hxlxmj\/CVE-2022-3590-WordPress-Vulnerability-Scanner", - "owner": { - "login": "hxlxmj", - "id": 96540322, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96540322?v=4", - "html_url": "https:\/\/github.com\/hxlxmj", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hxlxmj\/CVE-2022-3590-WordPress-Vulnerability-Scanner", - "description": " This repository contains a Python script that checks WordPress websites for the CVE-2022-3590 vulnerability, which exploits an unauthenticated blind Server-Side Request Forgery (SSRF) in the WordPress pingback feature.", - "fork": false, - "created_at": "2023-06-12T13:06:54Z", - "updated_at": "2026-05-26T08:42:56Z", - "pushed_at": "2023-06-12T18:25:51Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 839637099, - "name": "CVE-2022-3590-WordPress-Vulnerability-Scanner", - "full_name": "huynhvanphuc\/CVE-2022-3590-WordPress-Vulnerability-Scanner", - "owner": { - "login": "huynhvanphuc", - "id": 2069803, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2069803?v=4", - "html_url": "https:\/\/github.com\/huynhvanphuc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/huynhvanphuc\/CVE-2022-3590-WordPress-Vulnerability-Scanner", - "description": null, - "fork": false, - "created_at": "2024-08-08T03:02:05Z", - "updated_at": "2024-08-08T03:03:59Z", - "pushed_at": "2024-08-08T03:03:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1217970350, "name": "WordPress-6.9.1-Blind-SSRF", diff --git a/2022/CVE-2022-35914.json b/2022/CVE-2022-35914.json index ede1fb77dd..970028b387 100644 --- a/2022/CVE-2022-35914.json +++ b/2022/CVE-2022-35914.json @@ -130,137 +130,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 610523538, - "name": "CVE-2022-35914", - "full_name": "Johnermac\/CVE-2022-35914", - "owner": { - "login": "Johnermac", - "id": 115858996, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115858996?v=4", - "html_url": "https:\/\/github.com\/Johnermac", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Johnermac\/CVE-2022-35914", - "description": "Script in Ruby for the CVE-2022-35914 - RCE in GLPI ", - "fork": false, - "created_at": "2023-03-07T00:07:28Z", - "updated_at": "2023-07-18T00:58:55Z", - "pushed_at": "2023-03-07T00:20:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 791130439, - "name": "CVE-2022-35914", - "full_name": "senderend\/CVE-2022-35914", - "owner": { - "login": "senderend", - "id": 90939597, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90939597?v=4", - "html_url": "https:\/\/github.com\/senderend", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/senderend\/CVE-2022-35914", - "description": "PoC exploit for GLPI - Command injection using a third-party library script", - "fork": false, - "created_at": "2024-04-24T06:39:10Z", - "updated_at": "2026-04-04T05:59:03Z", - "pushed_at": "2024-10-17T17:56:45Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 847425433, - "name": "CVE-2022-35914_poc", - "full_name": "noxlumens\/CVE-2022-35914_poc", - "owner": { - "login": "noxlumens", - "id": 111706416, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111706416?v=4", - "html_url": "https:\/\/github.com\/noxlumens", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/noxlumens\/CVE-2022-35914_poc", - "description": "Modified for GLPI Offsec Lab: call_user_func, array_map, passthru", - "fork": false, - "created_at": "2024-08-25T19:32:59Z", - "updated_at": "2025-07-25T15:26:54Z", - "pushed_at": "2024-08-25T19:34:24Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 860618453, - "name": "exploit_CVE-2022-35914", - "full_name": "btar1gan\/exploit_CVE-2022-35914", - "owner": { - "login": "btar1gan", - "id": 92728059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92728059?v=4", - "html_url": "https:\/\/github.com\/btar1gan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/btar1gan\/exploit_CVE-2022-35914", - "description": null, - "fork": false, - "created_at": "2024-09-20T19:28:27Z", - "updated_at": "2024-09-20T19:43:22Z", - "pushed_at": "2024-09-20T19:43:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-35919.json b/2022/CVE-2022-35919.json deleted file mode 100644 index 3651be1944..0000000000 --- a/2022/CVE-2022-35919.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 742651580, - "name": "Minio-Security-Vulnerability-Checker", - "full_name": "ifulxploit\/Minio-Security-Vulnerability-Checker", - "owner": { - "login": "ifulxploit", - "id": 107668520, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107668520?v=4", - "html_url": "https:\/\/github.com\/ifulxploit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ifulxploit\/Minio-Security-Vulnerability-Checker", - "description": "Program ini adalah alat (tool) yang dibuat untuk memeriksa keamanan sistem Minio terkait dengan kerentanan CVE-2022-35919", - "fork": false, - "created_at": "2024-01-13T00:49:51Z", - "updated_at": "2024-01-13T00:56:58Z", - "pushed_at": "2024-01-13T00:56:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36193.json b/2022/CVE-2022-36193.json deleted file mode 100644 index 9f9eed8bf3..0000000000 --- a/2022/CVE-2022-36193.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 616849946, - "name": "CVE-2022-36193", - "full_name": "G37SYS73M\/CVE-2022-36193", - "owner": { - "login": "G37SYS73M", - "id": 77768845, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77768845?v=4", - "html_url": "https:\/\/github.com\/G37SYS73M", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G37SYS73M\/CVE-2022-36193", - "description": "SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.", - "fork": false, - "created_at": "2023-03-21T08:00:49Z", - "updated_at": "2023-03-21T08:00:49Z", - "pushed_at": "2023-03-21T08:01:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36234.json b/2022/CVE-2022-36234.json deleted file mode 100644 index 997e8bacbb..0000000000 --- a/2022/CVE-2022-36234.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595804172, - "name": "CVE-2022-36234", - "full_name": "Halcy0nic\/CVE-2022-36234", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-36234", - "description": "Proof of concept for CVE-2022-36234", - "fork": false, - "created_at": "2023-01-31T20:59:35Z", - "updated_at": "2024-07-02T20:33:25Z", - "pushed_at": "2023-07-19T16:13:01Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36267.json b/2022/CVE-2022-36267.json deleted file mode 100644 index c17f64457c..0000000000 --- a/2022/CVE-2022-36267.json +++ /dev/null @@ -1,45 +0,0 @@ -[ - { - "id": 740704394, - "name": "CVE-2022-36267-PoC", - "full_name": "0xNslabs\/CVE-2022-36267-PoC", - "owner": { - "login": "0xNslabs", - "id": 122338332, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122338332?v=4", - "html_url": "https:\/\/github.com\/0xNslabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xNslabs\/CVE-2022-36267-PoC", - "description": "PoC Script for CVE-2022-36267: Exploits an unauthenticated remote command injection vulnerability in Airspan AirSpot 5410 antenna.", - "fork": false, - "created_at": "2024-01-08T22:23:57Z", - "updated_at": "2026-04-27T03:16:12Z", - "pushed_at": "2024-01-08T22:37:55Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "command-injection", - "cve-2022-36267", - "ethical-hacking", - "exploit", - "iot-security", - "lte", - "reverse-shell", - "telecommunications", - "vulnerability" - ], - "visibility": "public", - "forks": 1, - "watchers": 12, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36446.json b/2022/CVE-2022-36446.json index 35700df376..747a118116 100644 --- a/2022/CVE-2022-36446.json +++ b/2022/CVE-2022-36446.json @@ -72,38 +72,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 813427958, - "name": "CVE-2022-36446", - "full_name": "Kang3639\/CVE-2022-36446", - "owner": { - "login": "Kang3639", - "id": 118144091, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118144091?v=4", - "html_url": "https:\/\/github.com\/Kang3639", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kang3639\/CVE-2022-36446", - "description": "CVE-2022-36446 POC 실습", - "fork": false, - "created_at": "2024-06-11T04:21:28Z", - "updated_at": "2024-06-11T05:01:36Z", - "pushed_at": "2024-06-11T05:01:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-36553.json b/2022/CVE-2022-36553.json deleted file mode 100644 index 541a989821..0000000000 --- a/2022/CVE-2022-36553.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 740696426, - "name": "CVE-2022-36553-PoC", - "full_name": "0xNslabs\/CVE-2022-36553-PoC", - "owner": { - "login": "0xNslabs", - "id": 122338332, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122338332?v=4", - "html_url": "https:\/\/github.com\/0xNslabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xNslabs\/CVE-2022-36553-PoC", - "description": "PoC Script for CVE-2022-36553: Exploits an unauthenticated remote command injection vulnerability in Hytec Inter HWL-2511-SS device.", - "fork": false, - "created_at": "2024-01-08T21:53:46Z", - "updated_at": "2024-03-04T15:23:45Z", - "pushed_at": "2024-01-08T22:39:33Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "command-injection", - "cve-2022-36553", - "ethical-hacking", - "exploit", - "iot-security", - "reverse-shell", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3656.json b/2022/CVE-2022-3656.json deleted file mode 100644 index 1228f03e89..0000000000 --- a/2022/CVE-2022-3656.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 588408716, - "name": "CVE-2022-3656", - "full_name": "momika233\/CVE-2022-3656", - "owner": { - "login": "momika233", - "id": 56291820, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56291820?v=4", - "html_url": "https:\/\/github.com\/momika233", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/momika233\/CVE-2022-3656", - "description": null, - "fork": false, - "created_at": "2023-01-13T03:26:14Z", - "updated_at": "2024-08-30T15:13:27Z", - "pushed_at": "2023-01-13T03:35:05Z", - "stargazers_count": 38, - "watchers_count": 38, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 38, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36752.json b/2022/CVE-2022-36752.json deleted file mode 100644 index e83b872b38..0000000000 --- a/2022/CVE-2022-36752.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595842528, - "name": "CVE-2022-36752", - "full_name": "Halcy0nic\/CVE-2022-36752", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-36752", - "description": "Proof of concept for CVE-2022-36752", - "fork": false, - "created_at": "2023-01-31T23:14:06Z", - "updated_at": "2024-07-02T20:34:25Z", - "pushed_at": "2023-01-31T23:51:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-36779.json b/2022/CVE-2022-36779.json index 0d3052938e..67b18340e9 100644 --- a/2022/CVE-2022-36779.json +++ b/2022/CVE-2022-36779.json @@ -1,70 +1,4 @@ [ - { - "id": 735282415, - "name": "CVE-2022-36779", - "full_name": "rootDR\/CVE-2022-36779", - "owner": { - "login": "rootDR", - "id": 107951097, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107951097?v=4", - "html_url": "https:\/\/github.com\/rootDR", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rootDR\/CVE-2022-36779", - "description": "Exploit for CVE-2022-36779 authenticated Command Injection", - "fork": false, - "created_at": "2023-12-24T10:46:50Z", - "updated_at": "2026-06-01T11:30:17Z", - "pushed_at": "2023-12-24T11:27:56Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 810016226, - "name": "CVE-2022-36779", - "full_name": "EmadYaY\/CVE-2022-36779", - "owner": { - "login": "EmadYaY", - "id": 80041099, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80041099?v=4", - "html_url": "https:\/\/github.com\/EmadYaY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/EmadYaY\/CVE-2022-36779", - "description": "exploit code", - "fork": false, - "created_at": "2024-06-03T22:25:31Z", - "updated_at": "2024-06-03T22:32:34Z", - "pushed_at": "2024-06-03T22:32:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1036089104, "name": "exploit-CVE-2022-36779", diff --git a/2022/CVE-2022-36804.json b/2022/CVE-2022-36804.json index 64b75c487c..5985560293 100644 --- a/2022/CVE-2022-36804.json +++ b/2022/CVE-2022-36804.json @@ -455,72 +455,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 592304483, - "name": "cve-2022-36804", - "full_name": "walnutsecurity\/cve-2022-36804", - "owner": { - "login": "walnutsecurity", - "id": 92915142, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92915142?v=4", - "html_url": "https:\/\/github.com\/walnutsecurity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/walnutsecurity\/cve-2022-36804", - "description": "A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions <7.6.17, <7.17.10, <7.21.4, <8.0.3, <8.1.2, <8.2.2, and <8.3.1", - "fork": false, - "created_at": "2023-01-23T12:51:09Z", - "updated_at": "2024-07-05T04:30:49Z", - "pushed_at": "2023-01-25T10:04:41Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 8, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 596350876, - "name": "Atlassian-Bitbucket-CVE-2022-36804", - "full_name": "imbas007\/Atlassian-Bitbucket-CVE-2022-36804", - "owner": { - "login": "imbas007", - "id": 100182585, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4", - "html_url": "https:\/\/github.com\/imbas007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/imbas007\/Atlassian-Bitbucket-CVE-2022-36804", - "description": null, - "fork": false, - "created_at": "2023-02-02T01:42:26Z", - "updated_at": "2023-02-02T01:55:08Z", - "pushed_at": "2023-02-02T02:58:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 924758621, "name": "CVE-2022-36804", diff --git a/2022/CVE-2022-36944.json b/2022/CVE-2022-36944.json deleted file mode 100644 index f3276e6ffa..0000000000 --- a/2022/CVE-2022-36944.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 641498684, - "name": "lazylist-cve-poc", - "full_name": "yarocher\/lazylist-cve-poc", - "owner": { - "login": "yarocher", - "id": 71639641, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71639641?v=4", - "html_url": "https:\/\/github.com\/yarocher", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yarocher\/lazylist-cve-poc", - "description": "POC for the CVE-2022-36944 vulnerability exploit", - "fork": false, - "created_at": "2023-05-16T15:38:49Z", - "updated_at": "2026-06-01T12:56:03Z", - "pushed_at": "2023-05-16T15:50:03Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3699.json b/2022/CVE-2022-3699.json index b1cd54cbda..6f34396586 100644 --- a/2022/CVE-2022-3699.json +++ b/2022/CVE-2022-3699.json @@ -64,38 +64,5 @@ "watchers": 72, "score": 0, "subscribers_count": 3 - }, - { - "id": 845287879, - "name": "CVE-2022-3699", - "full_name": "Eap2468\/CVE-2022-3699", - "owner": { - "login": "Eap2468", - "id": 68890963, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68890963?v=4", - "html_url": "https:\/\/github.com\/Eap2468", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Eap2468\/CVE-2022-3699", - "description": "Proof of Concept exploit for CVE-2022-3699", - "fork": false, - "created_at": "2024-08-21T00:42:40Z", - "updated_at": "2024-08-21T18:39:04Z", - "pushed_at": "2024-08-21T18:39:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-37017.json b/2022/CVE-2022-37017.json deleted file mode 100644 index 7b17fa75d8..0000000000 --- a/2022/CVE-2022-37017.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 831718045, - "name": "CVE-2022-37017", - "full_name": "apeppels\/CVE-2022-37017", - "owner": { - "login": "apeppels", - "id": 37070105, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37070105?v=4", - "html_url": "https:\/\/github.com\/apeppels", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/apeppels\/CVE-2022-37017", - "description": "Bypass for Symantec Endpoint Protection's Client User Interface Password", - "fork": false, - "created_at": "2024-07-21T12:26:35Z", - "updated_at": "2024-07-21T12:43:43Z", - "pushed_at": "2024-07-21T12:43:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-37032.json b/2022/CVE-2022-37032.json deleted file mode 100644 index 95ec8bcc1e..0000000000 --- a/2022/CVE-2022-37032.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 604134446, - "name": "CVE-2022-37032", - "full_name": "spwpun\/CVE-2022-37032", - "owner": { - "login": "spwpun", - "id": 32606457, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32606457?v=4", - "html_url": "https:\/\/github.com\/spwpun", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/spwpun\/CVE-2022-37032", - "description": "PoC for CVE-2022-37032，tested on frr-8.3。", - "fork": false, - "created_at": "2023-02-20T12:07:22Z", - "updated_at": "2023-06-08T00:39:31Z", - "pushed_at": "2023-02-20T12:13:53Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-37332.json b/2022/CVE-2022-37332.json deleted file mode 100644 index 84d6797e3e..0000000000 --- a/2022/CVE-2022-37332.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 590713271, - "name": "CVE-2022-37332-RCE-", - "full_name": "SpiralBL0CK\/CVE-2022-37332-RCE-", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2022-37332-RCE-", - "description": "CURRENTLY UNDER WORK... ALL I NEED TO IMPLEMENT IS JIT SPRAYING ..... ", - "fork": false, - "created_at": "2023-01-19T02:41:54Z", - "updated_at": "2023-01-19T02:43:59Z", - "pushed_at": "2023-01-19T03:11:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-37434.json b/2022/CVE-2022-37434.json index 4532a2bbd6..03f8da87af 100644 --- a/2022/CVE-2022-37434.json +++ b/2022/CVE-2022-37434.json @@ -31,71 +31,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 751714869, - "name": "external_zlib_android-6.0.1_r22_CVE-2022-37434", - "full_name": "Trinadh465\/external_zlib_android-6.0.1_r22_CVE-2022-37434", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/external_zlib_android-6.0.1_r22_CVE-2022-37434", - "description": null, - "fork": false, - "created_at": "2024-02-02T06:57:18Z", - "updated_at": "2024-02-02T06:57:18Z", - "pushed_at": "2024-02-02T06:57:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 751878497, - "name": "external_zlib_CVE-2022-37434", - "full_name": "Trinadh465\/external_zlib_CVE-2022-37434", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/external_zlib_CVE-2022-37434", - "description": null, - "fork": false, - "created_at": "2024-02-02T14:25:28Z", - "updated_at": "2024-02-02T14:29:25Z", - "pushed_at": "2024-02-02T14:29:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-37706.json b/2022/CVE-2022-37706.json index 3a7130424a..6b5a247196 100644 --- a/2022/CVE-2022-37706.json +++ b/2022/CVE-2022-37706.json @@ -65,171 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 809545292, - "name": "CVE-2022-37706", - "full_name": "junnythemarksman\/CVE-2022-37706", - "owner": { - "login": "junnythemarksman", - "id": 20056452, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20056452?v=4", - "html_url": "https:\/\/github.com\/junnythemarksman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/junnythemarksman\/CVE-2022-37706", - "description": "Exploit created by nu11secur1ty (https:\/\/github.com\/nu11secur1ty\/CVE-mitre\/tree\/main\/CVE-2022-37706)", - "fork": false, - "created_at": "2024-06-03T01:17:04Z", - "updated_at": "2024-06-03T01:30:01Z", - "pushed_at": "2024-06-03T01:29:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 831203901, - "name": "CVE-2022-37706-SUID", - "full_name": "TACTICAL-HACK\/CVE-2022-37706-SUID", - "owner": { - "login": "TACTICAL-HACK", - "id": 120341635, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120341635?v=4", - "html_url": "https:\/\/github.com\/TACTICAL-HACK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TACTICAL-HACK\/CVE-2022-37706-SUID", - "description": "CVE-2022-37706-Enlightenment v0.25.3 - Privilege escalation", - "fork": false, - "created_at": "2024-07-19T23:12:40Z", - "updated_at": "2024-07-20T15:53:52Z", - "pushed_at": "2024-07-20T15:53:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 844104873, - "name": "CVE-2022-37706", - "full_name": "sanan2004\/CVE-2022-37706", - "owner": { - "login": "sanan2004", - "id": 118365296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118365296?v=4", - "html_url": "https:\/\/github.com\/sanan2004", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sanan2004\/CVE-2022-37706", - "description": "PoC", - "fork": false, - "created_at": "2024-08-18T11:57:58Z", - "updated_at": "2024-08-21T10:03:16Z", - "pushed_at": "2024-08-18T11:59:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 855131874, - "name": "CVE-2022-37706", - "full_name": "KaoXx\/CVE-2022-37706", - "owner": { - "login": "KaoXx", - "id": 63966704, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63966704?v=4", - "html_url": "https:\/\/github.com\/KaoXx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KaoXx\/CVE-2022-37706", - "description": null, - "fork": false, - "created_at": "2024-09-10T11:14:10Z", - "updated_at": "2025-08-29T11:04:30Z", - "pushed_at": "2024-09-10T11:18:49Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 901320773, - "name": "CVE-2022-37706", - "full_name": "d3ndr1t30x\/CVE-2022-37706", - "owner": { - "login": "d3ndr1t30x", - "id": 117501042, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117501042?v=4", - "html_url": "https:\/\/github.com\/d3ndr1t30x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d3ndr1t30x\/CVE-2022-37706", - "description": "Privilege escaltion exploit script for Boardlight machine on HackTheBox. I had access as the Larissa user and ran this script from the \/tmp directory; script has been adjusted accordingly.", - "fork": false, - "created_at": "2024-12-10T12:52:29Z", - "updated_at": "2026-02-05T05:23:14Z", - "pushed_at": "2024-12-10T13:06:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1279198597, "name": "CVE-2022-37706", diff --git a/2022/CVE-2022-3786.json b/2022/CVE-2022-3786.json deleted file mode 100644 index c866be5096..0000000000 --- a/2022/CVE-2022-3786.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 587877422, - "name": "openssl-fuzz", - "full_name": "WhatTheFuzz\/openssl-fuzz", - "owner": { - "login": "WhatTheFuzz", - "id": 7316170, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7316170?v=4", - "html_url": "https:\/\/github.com\/WhatTheFuzz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WhatTheFuzz\/openssl-fuzz", - "description": "Finding CVE-2022-3786 (openssl) with Mayhem", - "fork": false, - "created_at": "2023-01-11T19:52:43Z", - "updated_at": "2025-10-07T09:09:39Z", - "pushed_at": "2023-01-11T19:55:11Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-37969.json b/2022/CVE-2022-37969.json index 6b55ca63be..4673cbee43 100644 --- a/2022/CVE-2022-37969.json +++ b/2022/CVE-2022-37969.json @@ -1,37 +1,4 @@ [ - { - "id": 611938110, - "name": "CVE-2022-37969", - "full_name": "fortra\/CVE-2022-37969", - "owner": { - "login": "fortra", - "id": 117669217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117669217?v=4", - "html_url": "https:\/\/github.com\/fortra", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fortra\/CVE-2022-37969", - "description": "Windows LPE exploit for CVE-2022-37969", - "fork": false, - "created_at": "2023-03-09T21:17:44Z", - "updated_at": "2026-06-14T08:41:32Z", - "pushed_at": "2023-07-11T16:50:28Z", - "stargazers_count": 135, - "watchers_count": 135, - "has_discussions": false, - "forks_count": 38, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 38, - "watchers": 135, - "score": 0, - "subscribers_count": 4 - }, { "id": 1001852471, "name": "CVE-2022-37969", diff --git a/2022/CVE-2022-38029.json b/2022/CVE-2022-38029.json deleted file mode 100644 index 65c7132c20..0000000000 --- a/2022/CVE-2022-38029.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 880145667, - "name": "SIDECHANNEL-CVE-2022-38029", - "full_name": "SpiralBL0CK\/SIDECHANNEL-CVE-2022-38029", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/SIDECHANNEL-CVE-2022-38029", - "description": "SIDECHANNEL+CVE-2022-38029", - "fork": false, - "created_at": "2024-10-29T07:47:01Z", - "updated_at": "2024-11-11T13:17:36Z", - "pushed_at": "2024-10-29T07:52:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-38181.json b/2022/CVE-2022-38181.json deleted file mode 100644 index 2af33d2620..0000000000 --- a/2022/CVE-2022-38181.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 627438040, - "name": "CVE_2022_38181_Raven", - "full_name": "Pro-me3us\/CVE_2022_38181_Raven", - "owner": { - "login": "Pro-me3us", - "id": 106105250, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106105250?v=4", - "html_url": "https:\/\/github.com\/Pro-me3us", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pro-me3us\/CVE_2022_38181_Raven", - "description": "CVE-2022-38181 POC for FireTV 2nd gen Cube (raven)", - "fork": false, - "created_at": "2023-04-13T13:19:04Z", - "updated_at": "2025-08-18T13:19:46Z", - "pushed_at": "2024-12-03T17:45:11Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 627440720, - "name": "CVE_2022_38181_Gazelle", - "full_name": "Pro-me3us\/CVE_2022_38181_Gazelle", - "owner": { - "login": "Pro-me3us", - "id": 106105250, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106105250?v=4", - "html_url": "https:\/\/github.com\/Pro-me3us", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pro-me3us\/CVE_2022_38181_Gazelle", - "description": "CVE-2022-38181 POC for FireTV 3rd gen Cube (gazelle)", - "fork": false, - "created_at": "2023-04-13T13:25:09Z", - "updated_at": "2025-04-01T20:25:06Z", - "pushed_at": "2023-06-29T01:56:06Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 639906669, - "name": "CVE-2022-38181", - "full_name": "R0rt1z2\/CVE-2022-38181", - "owner": { - "login": "R0rt1z2", - "id": 39171306, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39171306?v=4", - "html_url": "https:\/\/github.com\/R0rt1z2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/R0rt1z2\/CVE-2022-38181", - "description": null, - "fork": false, - "created_at": "2023-05-12T13:50:54Z", - "updated_at": "2025-10-07T09:10:23Z", - "pushed_at": "2023-07-03T20:49:37Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-38374.json b/2022/CVE-2022-38374.json index f2dbe111cf..8df68f1515 100644 --- a/2022/CVE-2022-38374.json +++ b/2022/CVE-2022-38374.json @@ -31,38 +31,5 @@ "watchers": 9, "score": 0, "subscribers_count": 1 - }, - { - "id": 609274446, - "name": "CVE-2022-38374", - "full_name": "M4fiaB0y\/CVE-2022-38374", - "owner": { - "login": "M4fiaB0y", - "id": 95071636, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95071636?v=4", - "html_url": "https:\/\/github.com\/M4fiaB0y", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/M4fiaB0y\/CVE-2022-38374", - "description": null, - "fork": false, - "created_at": "2023-03-03T18:43:02Z", - "updated_at": "2023-03-04T02:51:43Z", - "pushed_at": "2023-03-03T18:46:21Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-38601.json b/2022/CVE-2022-38601.json deleted file mode 100644 index ebf6dbe341..0000000000 --- a/2022/CVE-2022-38601.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 708832668, - "name": "CVE-2022-38601", - "full_name": "jet-pentest\/CVE-2022-38601", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2022-38601", - "description": "CVE-2022-38601", - "fork": false, - "created_at": "2023-10-23T13:34:53Z", - "updated_at": "2023-10-23T14:13:40Z", - "pushed_at": "2023-10-23T14:13:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-38725.json b/2022/CVE-2022-38725.json deleted file mode 100644 index 9545840ea6..0000000000 --- a/2022/CVE-2022-38725.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 841578878, - "name": "CVE-2022-38725", - "full_name": "wdahlenburg\/CVE-2022-38725", - "owner": { - "login": "wdahlenburg", - "id": 4451504, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4451504?v=4", - "html_url": "https:\/\/github.com\/wdahlenburg", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wdahlenburg\/CVE-2022-38725", - "description": "Proof of Concept for CVE-2022-38725 against syslog-ng", - "fork": false, - "created_at": "2024-08-12T17:27:57Z", - "updated_at": "2024-08-12T18:32:01Z", - "pushed_at": "2024-08-12T18:31:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3904.json b/2022/CVE-2022-3904.json deleted file mode 100644 index 4ece4a352c..0000000000 --- a/2022/CVE-2022-3904.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 665481628, - "name": "CVE-2022-3904", - "full_name": "RandomRobbieBF\/CVE-2022-3904", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-3904", - "description": "CVE-2022-3904 MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics", - "fork": false, - "created_at": "2023-07-12T09:51:32Z", - "updated_at": "2024-08-12T20:32:06Z", - "pushed_at": "2023-07-12T10:18:02Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-39073.json b/2022/CVE-2022-39073.json deleted file mode 100644 index 4e3fdf6cb8..0000000000 --- a/2022/CVE-2022-39073.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "id": 586354436, - "name": "CVE-2022-39073", - "full_name": "v0lp3\/CVE-2022-39073", - "owner": { - "login": "v0lp3", - "id": 20267645, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20267645?v=4", - "html_url": "https:\/\/github.com\/v0lp3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/v0lp3\/CVE-2022-39073", - "description": "Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.", - "fork": false, - "created_at": "2023-01-07T20:46:20Z", - "updated_at": "2026-03-08T23:24:22Z", - "pushed_at": "2023-01-07T20:54:07Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "command-injection", - "cve-2022-39073", - "exploit", - "iot", - "mf286r", - "rce", - "router", - "zte" - ], - "visibility": "public", - "forks": 4, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-3910.json b/2022/CVE-2022-3910.json index ce04cee24f..4e7f00c6a2 100644 --- a/2022/CVE-2022-3910.json +++ b/2022/CVE-2022-3910.json @@ -1,37 +1,4 @@ [ - { - "id": 613743412, - "name": "CVE-2022-3910", - "full_name": "veritas501\/CVE-2022-3910", - "owner": { - "login": "veritas501", - "id": 25763545, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25763545?v=4", - "html_url": "https:\/\/github.com\/veritas501", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/veritas501\/CVE-2022-3910", - "description": "CVE-2022-3910", - "fork": false, - "created_at": "2023-03-14T07:22:25Z", - "updated_at": "2026-05-13T19:49:52Z", - "pushed_at": "2023-03-14T11:58:41Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - }, { "id": 833901421, "name": "CVE-2022-3910", diff --git a/2022/CVE-2022-39197.json b/2022/CVE-2022-39197.json index d827ea5ce8..6ed6a67a98 100644 --- a/2022/CVE-2022-39197.json +++ b/2022/CVE-2022-39197.json @@ -435,75 +435,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 633726927, - "name": "pig_CS4.4", - "full_name": "xiao-zhu-zhu\/pig_CS4.4", - "owner": { - "login": "xiao-zhu-zhu", - "id": 85468097, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85468097?v=4", - "html_url": "https:\/\/github.com\/xiao-zhu-zhu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xiao-zhu-zhu\/pig_CS4.4", - "description": "Cobalt Strike 4.4 猪猪版 去暗桩 去流量特征 beacon仿造真实API服务 修补CVE-2022-39197补丁", - "fork": false, - "created_at": "2023-04-28T06:31:38Z", - "updated_at": "2026-06-07T16:20:56Z", - "pushed_at": "2023-04-28T07:10:00Z", - "stargazers_count": 37, - "watchers_count": 37, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 37, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 726816567, - "name": "Gui-poc-test", - "full_name": "Romanc9\/Gui-poc-test", - "owner": { - "login": "Romanc9", - "id": 55196564, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55196564?v=4", - "html_url": "https:\/\/github.com\/Romanc9", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Romanc9\/Gui-poc-test", - "description": "A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432", - "fork": false, - "created_at": "2023-12-03T13:45:34Z", - "updated_at": "2024-09-01T03:50:31Z", - "pushed_at": "2023-12-05T17:58:36Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-39197", - "cve-2023-21839", - "cve-2023-28432" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-39227.json b/2022/CVE-2022-39227.json index 29bb9df99e..5a1bf0c3dc 100644 --- a/2022/CVE-2022-39227.json +++ b/2022/CVE-2022-39227.json @@ -1,79 +1,4 @@ [ - { - "id": 650577290, - "name": "CVE-2022-39227", - "full_name": "user0x1337\/CVE-2022-39227", - "owner": { - "login": "user0x1337", - "id": 108862394, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108862394?v=4", - "html_url": "https:\/\/github.com\/user0x1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/user0x1337\/CVE-2022-39227", - "description": "CVE-2022-39227 : Proof of Concept ", - "fork": false, - "created_at": "2023-06-07T11:11:12Z", - "updated_at": "2025-12-05T02:48:49Z", - "pushed_at": "2024-03-19T14:37:31Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ctf", - "cve", - "cve-2022-39227", - "exploit", - "hackthebox", - "it-security", - "jwt", - "jwt-token" - ], - "visibility": "public", - "forks": 1, - "watchers": 22, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 778808151, - "name": "CVE-2022-39227", - "full_name": "NoSpaceAvailable\/CVE-2022-39227", - "owner": { - "login": "NoSpaceAvailable", - "id": 143888307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143888307?v=4", - "html_url": "https:\/\/github.com\/NoSpaceAvailable", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NoSpaceAvailable\/CVE-2022-39227", - "description": "A working POC found while doing a HTB challenge. Original: https:\/\/github.com\/user0x1337\/CVE-2022-39227", - "fork": false, - "created_at": "2024-03-28T12:55:13Z", - "updated_at": "2024-03-28T12:58:10Z", - "pushed_at": "2024-03-28T12:59:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1223008577, "name": "cve-2022-39227-jwt-auth-bypass-demo", diff --git a/2022/CVE-2022-39253.json b/2022/CVE-2022-39253.json index 1da4794dbe..b286086ebf 100644 --- a/2022/CVE-2022-39253.json +++ b/2022/CVE-2022-39253.json @@ -31,38 +31,5 @@ "watchers": 10, "score": 0, "subscribers_count": 1 - }, - { - "id": 640961335, - "name": "NetworkSecurityFinalProject", - "full_name": "HiImDarwin\/NetworkSecurityFinalProject", - "owner": { - "login": "HiImDarwin", - "id": 53218645, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53218645?v=4", - "html_url": "https:\/\/github.com\/HiImDarwin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HiImDarwin\/NetworkSecurityFinalProject", - "description": "https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2022-39253", - "fork": false, - "created_at": "2023-05-15T13:40:17Z", - "updated_at": "2023-05-15T13:40:17Z", - "pushed_at": "2023-05-15T15:36:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-39952.json b/2022/CVE-2022-39952.json deleted file mode 100644 index 3e31db04d7..0000000000 --- a/2022/CVE-2022-39952.json +++ /dev/null @@ -1,134 +0,0 @@ -[ - { - "id": 604210945, - "name": "CVE-2022-39952", - "full_name": "horizon3ai\/CVE-2022-39952", - "owner": { - "login": "horizon3ai", - "id": 79593994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4", - "html_url": "https:\/\/github.com\/horizon3ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2022-39952", - "description": "POC for CVE-2022-39952", - "fork": false, - "created_at": "2023-02-20T15:12:33Z", - "updated_at": "2026-04-05T11:55:32Z", - "pushed_at": "2023-02-25T08:52:03Z", - "stargazers_count": 265, - "watchers_count": 265, - "has_discussions": false, - "forks_count": 53, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 53, - "watchers": 265, - "score": 0, - "subscribers_count": 7 - }, - { - "id": 604936934, - "name": "CVE-2022-39952_webshell", - "full_name": "shiyeshu\/CVE-2022-39952_webshell", - "owner": { - "login": "shiyeshu", - "id": 23716358, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23716358?v=4", - "html_url": "https:\/\/github.com\/shiyeshu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shiyeshu\/CVE-2022-39952_webshell", - "description": "Write Behinder_webshell to target using CVE-2022-39952", - "fork": false, - "created_at": "2023-02-22T04:57:06Z", - "updated_at": "2023-02-22T06:36:43Z", - "pushed_at": "2023-02-22T05:01:29Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 606840385, - "name": "CVE-2022-39952", - "full_name": "Chocapikk\/CVE-2022-39952", - "owner": { - "login": "Chocapikk", - "id": 88535377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4", - "html_url": "https:\/\/github.com\/Chocapikk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2022-39952", - "description": "PoC for CVE-2022-39952 affecting Fortinet FortiNAC.", - "fork": false, - "created_at": "2023-02-26T18:10:04Z", - "updated_at": "2025-01-27T23:59:38Z", - "pushed_at": "2023-02-26T18:13:50Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 619925116, - "name": "CVE-2022-39952-better", - "full_name": "dkstar11q\/CVE-2022-39952-better", - "owner": { - "login": "dkstar11q", - "id": 123830677, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123830677?v=4", - "html_url": "https:\/\/github.com\/dkstar11q", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkstar11q\/CVE-2022-39952-better", - "description": "PoC for CVE-2022-39952 affecting Fortinet FortiNAC.", - "fork": false, - "created_at": "2023-03-27T17:25:17Z", - "updated_at": "2023-02-26T18:26:27Z", - "pushed_at": "2023-02-26T18:13:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-39986.json b/2022/CVE-2022-39986.json deleted file mode 100644 index 5556798ad6..0000000000 --- a/2022/CVE-2022-39986.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 682662263, - "name": "CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE", - "full_name": "mind2hex\/CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE", - "owner": { - "login": "mind2hex", - "id": 51345640, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51345640?v=4", - "html_url": "https:\/\/github.com\/mind2hex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mind2hex\/CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE", - "description": "bash script for automated discovery and exploitation of machines with the CVE-2022-39986 vulnerability", - "fork": false, - "created_at": "2023-08-24T16:48:27Z", - "updated_at": "2025-07-04T03:04:31Z", - "pushed_at": "2023-11-28T19:59:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40032.json b/2022/CVE-2022-40032.json deleted file mode 100644 index a12464ad89..0000000000 --- a/2022/CVE-2022-40032.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602335571, - "name": "CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "full_name": "h4md153v63n\/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "owner": { - "login": "h4md153v63n", - "id": 5091265, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5091265?v=4", - "html_url": "https:\/\/github.com\/h4md153v63n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h4md153v63n\/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "description": "CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection (Unauthenticated)", - "fork": false, - "created_at": "2023-02-16T01:42:48Z", - "updated_at": "2025-08-04T10:26:26Z", - "pushed_at": "2023-12-25T19:09:13Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40127.json b/2022/CVE-2022-40127.json index 3ed71f7123..5308fd8db2 100644 --- a/2022/CVE-2022-40127.json +++ b/2022/CVE-2022-40127.json @@ -36,38 +36,5 @@ "watchers": 41, "score": 0, "subscribers_count": 1 - }, - { - "id": 669143228, - "name": "CVE-2022-40127-Airflow-RCE", - "full_name": "jakabakos\/CVE-2022-40127-Airflow-RCE", - "owner": { - "login": "jakabakos", - "id": 42498816, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42498816?v=4", - "html_url": "https:\/\/github.com\/jakabakos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jakabakos\/CVE-2022-40127-Airflow-RCE", - "description": "CVE-2022-40127 PoC and exploit", - "fork": false, - "created_at": "2023-07-21T12:55:16Z", - "updated_at": "2024-06-06T11:58:59Z", - "pushed_at": "2023-08-03T11:10:16Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-40146.json b/2022/CVE-2022-40146.json index 36d5b1ea4a..d380e405b3 100644 --- a/2022/CVE-2022-40146.json +++ b/2022/CVE-2022-40146.json @@ -31,38 +31,5 @@ "watchers": 31, "score": 0, "subscribers_count": 1 - }, - { - "id": 835802970, - "name": "CVE-2022-40146", - "full_name": "soulfoodisgood\/CVE-2022-40146", - "owner": { - "login": "soulfoodisgood", - "id": 64322368, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64322368?v=4", - "html_url": "https:\/\/github.com\/soulfoodisgood", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/soulfoodisgood\/CVE-2022-40146", - "description": "Vulnerable svg-to-png service", - "fork": false, - "created_at": "2024-07-30T15:00:00Z", - "updated_at": "2024-07-30T15:07:08Z", - "pushed_at": "2024-07-30T15:07:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-40347.json b/2022/CVE-2022-40347.json deleted file mode 100644 index 03fccd6f85..0000000000 --- a/2022/CVE-2022-40347.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602344088, - "name": "CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "full_name": "h4md153v63n\/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "owner": { - "login": "h4md153v63n", - "id": 5091265, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5091265?v=4", - "html_url": "https:\/\/github.com\/h4md153v63n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h4md153v63n\/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated", - "description": "CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection (Unauthenticated)", - "fork": false, - "created_at": "2023-02-16T02:16:51Z", - "updated_at": "2024-05-03T10:38:31Z", - "pushed_at": "2023-12-25T19:02:04Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40348.json b/2022/CVE-2022-40348.json deleted file mode 100644 index 797ecbcf80..0000000000 --- a/2022/CVE-2022-40348.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602347294, - "name": "CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated", - "full_name": "h4md153v63n\/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated", - "owner": { - "login": "h4md153v63n", - "id": 5091265, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5091265?v=4", - "html_url": "https:\/\/github.com\/h4md153v63n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h4md153v63n\/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated", - "description": "CVE-2022-40348: Intern Record System - 'name' and 'email' Cross-site Scripting (Unauthenticated)", - "fork": false, - "created_at": "2023-02-16T02:29:33Z", - "updated_at": "2024-05-03T10:38:30Z", - "pushed_at": "2023-12-25T19:07:44Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40363.json b/2022/CVE-2022-40363.json deleted file mode 100644 index ee8cbb77d9..0000000000 --- a/2022/CVE-2022-40363.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 590734045, - "name": "CVE-2022-40363", - "full_name": "Olafdaf\/CVE-2022-40363", - "owner": { - "login": "Olafdaf", - "id": 123042506, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123042506?v=4", - "html_url": "https:\/\/github.com\/Olafdaf", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Olafdaf\/CVE-2022-40363", - "description": "A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file. CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-19T04:19:42Z", - "updated_at": "2023-12-05T04:28:03Z", - "pushed_at": "2022-12-29T11:12:27Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4047.json b/2022/CVE-2022-4047.json deleted file mode 100644 index b4b7e9d1ac..0000000000 --- a/2022/CVE-2022-4047.json +++ /dev/null @@ -1,79 +0,0 @@ -[ - { - "id": 696655758, - "name": "WooRefer", - "full_name": "im-hanzou\/WooRefer", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/WooRefer", - "description": "Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4047 - Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload", - "fork": false, - "created_at": "2023-09-26T07:23:44Z", - "updated_at": "2023-09-26T20:15:02Z", - "pushed_at": "2023-09-27T17:59:22Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "automation", - "bash", - "cve-2022-4047", - "exploit", - "mass-upload", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 731486666, - "name": "CVE-2022-4047", - "full_name": "entroychang\/CVE-2022-4047", - "owner": { - "login": "entroychang", - "id": 56551382, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56551382?v=4", - "html_url": "https:\/\/github.com\/entroychang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/entroychang\/CVE-2022-4047", - "description": "CVE-2022-4047 poc", - "fork": false, - "created_at": "2023-12-14T07:36:01Z", - "updated_at": "2024-03-11T01:47:14Z", - "pushed_at": "2023-12-15T10:13:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "python3" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4060.json b/2022/CVE-2022-4060.json deleted file mode 100644 index a4ce443d04..0000000000 --- a/2022/CVE-2022-4060.json +++ /dev/null @@ -1,45 +0,0 @@ -[ - { - "id": 692230555, - "name": "UPGer", - "full_name": "im-hanzou\/UPGer", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/UPGer", - "description": "Automatic Mass Tool for checking vulnerability in CVE-2022-4060 - WordPress Plugin : User Post Gallery <= 2.19 - Unauthenticated RCE", - "fork": false, - "created_at": "2023-09-15T21:38:47Z", - "updated_at": "2025-12-04T17:34:01Z", - "pushed_at": "2023-09-16T21:55:56Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "automation", - "bash", - "check", - "cve-2022-4060", - "exploit", - "vulnerability", - "vulnerability-scanners", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4061.json b/2022/CVE-2022-4061.json deleted file mode 100644 index 1be22757ee..0000000000 --- a/2022/CVE-2022-4061.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "id": 692616008, - "name": "JBWPer", - "full_name": "im-hanzou\/JBWPer", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/JBWPer", - "description": "Automatic Mass Tool for check and exploiting vulnerability in CVE-2022-4061 - JobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload", - "fork": false, - "created_at": "2023-09-17T03:20:23Z", - "updated_at": "2026-06-06T19:51:00Z", - "pushed_at": "2023-09-17T10:05:02Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "automation", - "bash", - "checker", - "cve-2022-4061", - "exploiter", - "shell-uploader", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 4, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4063.json b/2022/CVE-2022-4063.json deleted file mode 100644 index dad7bc3c77..0000000000 --- a/2022/CVE-2022-4063.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 690237690, - "name": "INPGer", - "full_name": "im-hanzou\/INPGer", - "owner": { - "login": "im-hanzou", - "id": 61415393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61415393?v=4", - "html_url": "https:\/\/github.com\/im-hanzou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/im-hanzou\/INPGer", - "description": "Automatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE", - "fork": false, - "created_at": "2023-09-11T20:01:04Z", - "updated_at": "2025-08-27T12:35:09Z", - "pushed_at": "2023-09-15T21:07:18Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "automation", - "checker", - "cve-2022-4063", - "exploit", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40634.json b/2022/CVE-2022-40634.json deleted file mode 100644 index 9c20ac34e7..0000000000 --- a/2022/CVE-2022-40634.json +++ /dev/null @@ -1,45 +0,0 @@ -[ - { - "id": 725995761, - "name": "CVE-2022-40634", - "full_name": "mbadanoiu\/CVE-2022-40634", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-40634", - "description": "CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS", - "fork": false, - "created_at": "2023-12-01T10:06:17Z", - "updated_at": "2023-12-01T10:26:02Z", - "pushed_at": "2023-12-01T10:22:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "authenticated", - "bypass", - "cve", - "cve-2020-25803", - "cve-2022-40634", - "cves", - "remote-code-execution", - "server-side-template-injection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40635.json b/2022/CVE-2022-40635.json deleted file mode 100644 index 54a9c97c88..0000000000 --- a/2022/CVE-2022-40635.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "id": 726003969, - "name": "CVE-2022-40635", - "full_name": "mbadanoiu\/CVE-2022-40635", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-40635", - "description": "CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS", - "fork": false, - "created_at": "2023-12-01T10:28:27Z", - "updated_at": "2023-12-08T07:22:30Z", - "pushed_at": "2023-12-01T10:33:28Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "authenticated", - "bypass", - "cve", - "cve-2022-40635", - "cves", - "groovy", - "remote-code-execution" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-40684.json b/2022/CVE-2022-40684.json index 82f5c9504b..2f3275785c 100644 --- a/2022/CVE-2022-40684.json +++ b/2022/CVE-2022-40684.json @@ -636,171 +636,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 589898622, - "name": "CVE-2022-40684-Rust", - "full_name": "notareaperbutDR34P3r\/CVE-2022-40684-Rust", - "owner": { - "login": "notareaperbutDR34P3r", - "id": 118025285, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118025285?v=4", - "html_url": "https:\/\/github.com\/notareaperbutDR34P3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/notareaperbutDR34P3r\/CVE-2022-40684-Rust", - "description": null, - "fork": false, - "created_at": "2023-01-17T07:49:25Z", - "updated_at": "2023-01-17T08:08:39Z", - "pushed_at": "2023-01-17T08:08:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 594486142, - "name": "CVE-2022-40684", - "full_name": "dkstar11q\/CVE-2022-40684", - "owner": { - "login": "dkstar11q", - "id": 123830677, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123830677?v=4", - "html_url": "https:\/\/github.com\/dkstar11q", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkstar11q\/CVE-2022-40684", - "description": "Exploit for CVE-2022-40684 vulnerability", - "fork": false, - "created_at": "2023-01-28T17:43:59Z", - "updated_at": "2022-11-05T13:15:15Z", - "pushed_at": "2022-10-15T17:03:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 607300331, - "name": "CVE-2022-40684", - "full_name": "z-bool\/CVE-2022-40684", - "owner": { - "login": "z-bool", - "id": 111605994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111605994?v=4", - "html_url": "https:\/\/github.com\/z-bool", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/z-bool\/CVE-2022-40684", - "description": "一键枚举所有用户名以及写入SSH公钥", - "fork": false, - "created_at": "2023-02-27T18:05:34Z", - "updated_at": "2023-03-21T04:01:30Z", - "pushed_at": "2023-02-27T18:10:44Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 691773632, - "name": "CVE-2022-40684", - "full_name": "Anthony1500\/CVE-2022-40684", - "owner": { - "login": "Anthony1500", - "id": 51546831, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51546831?v=4", - "html_url": "https:\/\/github.com\/Anthony1500", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Anthony1500\/CVE-2022-40684", - "description": null, - "fork": false, - "created_at": "2023-09-14T21:29:03Z", - "updated_at": "2023-09-14T21:29:27Z", - "pushed_at": "2023-09-14T21:29:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 917530506, - "name": "fortigate-belsen-leak", - "full_name": "arsolutioner\/fortigate-belsen-leak", - "owner": { - "login": "arsolutioner", - "id": 83581293, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83581293?v=4", - "html_url": "https:\/\/github.com\/arsolutioner", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/arsolutioner\/fortigate-belsen-leak", - "description": "Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group", - "fork": false, - "created_at": "2025-01-16T06:54:15Z", - "updated_at": "2026-06-16T07:58:14Z", - "pushed_at": "2025-01-16T09:56:36Z", - "stargazers_count": 86, - "watchers_count": 86, - "has_discussions": false, - "forks_count": 21, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 21, - "watchers": 86, - "score": 0, - "subscribers_count": 6 - }, { "id": 921262750, "name": "Fortigate-Belsen-Leak-Dump-CVE-2022-40684-", @@ -834,39 +669,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 921754162, - "name": "fortileak-01-2025-Be", - "full_name": "niklasmato\/fortileak-01-2025-Be", - "owner": { - "login": "niklasmato", - "id": 9307114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9307114?v=4", - "html_url": "https:\/\/github.com\/niklasmato", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/niklasmato\/fortileak-01-2025-Be", - "description": "This repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the Belsen Group. This information is being shared for security research and defensive purposes to help organizations identify if they were impacted.", - "fork": false, - "created_at": "2025-01-24T14:54:11Z", - "updated_at": "2025-01-24T14:55:00Z", - "pushed_at": "2025-01-24T14:54:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 930376146, "name": "Belsen_Group-et-exploitation-de-la-CVE-2022-40684", diff --git a/2022/CVE-2022-40769.json b/2022/CVE-2022-40769.json index c011da54ae..e8826abe4f 100644 --- a/2022/CVE-2022-40769.json +++ b/2022/CVE-2022-40769.json @@ -1,37 +1,4 @@ [ - { - "id": 594246349, - "name": "CVE-2022-40769", - "full_name": "PLSRcoin\/CVE-2022-40769", - "owner": { - "login": "PLSRcoin", - "id": 99826299, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99826299?v=4", - "html_url": "https:\/\/github.com\/PLSRcoin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PLSRcoin\/CVE-2022-40769", - "description": "profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022. CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-28T00:12:31Z", - "updated_at": "2025-02-18T03:17:28Z", - "pushed_at": "2022-12-29T15:29:39Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1277211875, "name": "CVE-2022-40769---Profanity", diff --git a/2022/CVE-2022-40881.json b/2022/CVE-2022-40881.json deleted file mode 100644 index 8174333d90..0000000000 --- a/2022/CVE-2022-40881.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 606333124, - "name": "CVE-2022-40881", - "full_name": "yilin1203\/CVE-2022-40881", - "owner": { - "login": "yilin1203", - "id": 71480339, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71480339?v=4", - "html_url": "https:\/\/github.com\/yilin1203", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yilin1203\/CVE-2022-40881", - "description": null, - "fork": false, - "created_at": "2023-02-25T06:54:52Z", - "updated_at": "2023-02-27T01:21:09Z", - "pushed_at": "2023-02-25T07:31:12Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4096.json b/2022/CVE-2022-4096.json deleted file mode 100644 index 4c66dbdbc1..0000000000 --- a/2022/CVE-2022-4096.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 640557970, - "name": "CVE-2022-4096", - "full_name": "aminetitrofine\/CVE-2022-4096", - "owner": { - "login": "aminetitrofine", - "id": 70074517, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70074517?v=4", - "html_url": "https:\/\/github.com\/aminetitrofine", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aminetitrofine\/CVE-2022-4096", - "description": "This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device, which can be controlled through a web interface (this is typical for many IoT devices).", - "fork": false, - "created_at": "2023-05-14T13:47:05Z", - "updated_at": "2023-05-14T13:50:54Z", - "pushed_at": "2023-05-14T13:50:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41034.json b/2022/CVE-2022-41034.json deleted file mode 100644 index 0a1a76e3cd..0000000000 --- a/2022/CVE-2022-41034.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 637284460, - "name": "CVE-2022-41034", - "full_name": "andyhsu024\/CVE-2022-41034", - "owner": { - "login": "andyhsu024", - "id": 131547485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131547485?v=4", - "html_url": "https:\/\/github.com\/andyhsu024", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/andyhsu024\/CVE-2022-41034", - "description": null, - "fork": false, - "created_at": "2023-05-07T04:30:30Z", - "updated_at": "2023-05-07T04:30:30Z", - "pushed_at": "2023-06-11T13:17:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41040.json b/2022/CVE-2022-41040.json index c880ad7dbe..b50ee8ae26 100644 --- a/2022/CVE-2022-41040.json +++ b/2022/CVE-2022-41040.json @@ -274,38 +274,5 @@ "watchers": 35, "score": 0, "subscribers_count": 1 - }, - { - "id": 893042972, - "name": "CVE-2022-41040", - "full_name": "0-Gram\/CVE-2022-41040", - "owner": { - "login": "0-Gram", - "id": 108672046, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108672046?v=4", - "html_url": "https:\/\/github.com\/0-Gram", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0-Gram\/CVE-2022-41040", - "description": null, - "fork": false, - "created_at": "2024-11-23T11:39:18Z", - "updated_at": "2024-11-23T11:39:52Z", - "pushed_at": "2024-11-23T11:39:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-41082.json b/2022/CVE-2022-41082.json index b5a3d64ece..daca0cae11 100644 --- a/2022/CVE-2022-41082.json +++ b/2022/CVE-2022-41082.json @@ -139,141 +139,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 604424331, - "name": "CVE-2022-41082-POC", - "full_name": "bigherocenter\/CVE-2022-41082-POC", - "owner": { - "login": "bigherocenter", - "id": 117562871, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117562871?v=4", - "html_url": "https:\/\/github.com\/bigherocenter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bigherocenter\/CVE-2022-41082-POC", - "description": null, - "fork": false, - "created_at": "2023-02-21T02:59:46Z", - "updated_at": "2025-02-03T08:32:55Z", - "pushed_at": "2023-02-21T02:59:55Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 617641356, - "name": "vuln-CVE-2022-41082", - "full_name": "notareaperbutDR34P3r\/vuln-CVE-2022-41082", - "owner": { - "login": "notareaperbutDR34P3r", - "id": 118025285, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118025285?v=4", - "html_url": "https:\/\/github.com\/notareaperbutDR34P3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/notareaperbutDR34P3r\/vuln-CVE-2022-41082", - "description": "https & http", - "fork": false, - "created_at": "2023-03-22T20:04:07Z", - "updated_at": "2023-03-22T20:11:03Z", - "pushed_at": "2023-03-22T20:10:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 686757637, - "name": "CVE-2022-41082", - "full_name": "SUPRAAA-1337\/CVE-2022-41082", - "owner": { - "login": "SUPRAAA-1337", - "id": 128395905, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128395905?v=4", - "html_url": "https:\/\/github.com\/SUPRAAA-1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SUPRAAA-1337\/CVE-2022-41082", - "description": null, - "fork": false, - "created_at": "2023-09-03T20:55:20Z", - "updated_at": "2024-03-18T17:53:10Z", - "pushed_at": "2023-09-03T21:02:22Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 877906940, - "name": "CVE-2022-41082", - "full_name": "soltanali0\/CVE-2022-41082", - "owner": { - "login": "soltanali0", - "id": 87374678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4", - "html_url": "https:\/\/github.com\/soltanali0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/soltanali0\/CVE-2022-41082", - "description": "CVE-2022-41082-poc", - "fork": false, - "created_at": "2024-10-24T12:56:52Z", - "updated_at": "2025-11-20T14:32:35Z", - "pushed_at": "2024-10-24T15:39:04Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "poc" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 984758507, "name": "LetsDefend-CVE-2022-41082-Exploitation-Attempt", diff --git a/2022/CVE-2022-41099.json b/2022/CVE-2022-41099.json deleted file mode 100644 index efab8ce566..0000000000 --- a/2022/CVE-2022-41099.json +++ /dev/null @@ -1,134 +0,0 @@ -[ - { - "id": 589494963, - "name": "CVE-2022-41099-Fix", - "full_name": "o0MattE0o\/CVE-2022-41099-Fix", - "owner": { - "login": "o0MattE0o", - "id": 80461805, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80461805?v=4", - "html_url": "https:\/\/github.com\/o0MattE0o", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/o0MattE0o\/CVE-2022-41099-Fix", - "description": "Update WINRE.WIM file to fix CVE-2022-41099", - "fork": false, - "created_at": "2023-01-16T08:57:29Z", - "updated_at": "2024-06-04T11:02:47Z", - "pushed_at": "2023-04-25T09:47:46Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 591093263, - "name": "UpdateWindowsRE-CVE-2022-41099", - "full_name": "tylermontneyacc\/UpdateWindowsRE-CVE-2022-41099", - "owner": { - "login": "tylermontneyacc", - "id": 96202873, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96202873?v=4", - "html_url": "https:\/\/github.com\/tylermontneyacc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tylermontneyacc\/UpdateWindowsRE-CVE-2022-41099", - "description": "Script to update Windows Recovery Environment to patch against CVE-2022-41099", - "fork": false, - "created_at": "2023-01-19T22:45:26Z", - "updated_at": "2023-01-20T17:37:20Z", - "pushed_at": "2023-01-20T17:37:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 595717372, - "name": "WinRE-Patch", - "full_name": "g-gill24\/WinRE-Patch", - "owner": { - "login": "g-gill24", - "id": 18432629, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18432629?v=4", - "html_url": "https:\/\/github.com\/g-gill24", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/g-gill24\/WinRE-Patch", - "description": "Patches CVE-2022-41099", - "fork": false, - "created_at": "2023-01-31T17:06:13Z", - "updated_at": "2023-01-31T17:07:16Z", - "pushed_at": "2023-01-31T17:07:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 627897478, - "name": "KB5025175-CVE-2022-41099", - "full_name": "dsn1321\/KB5025175-CVE-2022-41099", - "owner": { - "login": "dsn1321", - "id": 37174087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37174087?v=4", - "html_url": "https:\/\/github.com\/dsn1321", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dsn1321\/KB5025175-CVE-2022-41099", - "description": null, - "fork": false, - "created_at": "2023-04-14T12:48:39Z", - "updated_at": "2023-04-14T12:49:26Z", - "pushed_at": "2023-04-14T14:26:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41114.json b/2022/CVE-2022-41114.json deleted file mode 100644 index c8fd21bf3c..0000000000 --- a/2022/CVE-2022-41114.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 584184679, - "name": "CVE-2022-41114", - "full_name": "gmh5225\/CVE-2022-41114", - "owner": { - "login": "gmh5225", - "id": 13917777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13917777?v=4", - "html_url": "https:\/\/github.com\/gmh5225", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gmh5225\/CVE-2022-41114", - "description": "Windows Bind Filter Driver Elevation of Privilege Vulnerability. CVE project by @Sn0wAlice", - "fork": false, - "created_at": "2023-01-01T18:30:30Z", - "updated_at": "2025-10-22T07:15:24Z", - "pushed_at": "2022-12-28T09:34:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41220.json b/2022/CVE-2022-41220.json deleted file mode 100644 index f8eec75834..0000000000 --- a/2022/CVE-2022-41220.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595840391, - "name": "CVE-2022-41220", - "full_name": "Halcy0nic\/CVE-2022-41220", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-41220", - "description": "Proof of concept for CVE-2022-41220", - "fork": false, - "created_at": "2023-01-31T23:05:31Z", - "updated_at": "2024-07-02T20:33:18Z", - "pushed_at": "2023-07-27T23:01:05Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41333.json b/2022/CVE-2022-41333.json deleted file mode 100644 index 6ed73dac70..0000000000 --- a/2022/CVE-2022-41333.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 612324416, - "name": "CVE-2022-41333", - "full_name": "polar0x\/CVE-2022-41333", - "owner": { - "login": "polar0x", - "id": 115294515, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115294515?v=4", - "html_url": "https:\/\/github.com\/polar0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/polar0x\/CVE-2022-41333", - "description": "FortiRecorder Denial of Service Exploit (CVE-2022-41333)", - "fork": false, - "created_at": "2023-03-10T17:29:09Z", - "updated_at": "2023-09-11T16:07:58Z", - "pushed_at": "2023-03-14T15:41:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41343.json b/2022/CVE-2022-41343.json deleted file mode 100644 index 7fdefe3538..0000000000 --- a/2022/CVE-2022-41343.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 602302259, - "name": "CVE-2022-41343", - "full_name": "BKreisel\/CVE-2022-41343", - "owner": { - "login": "BKreisel", - "id": 1513073, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1513073?v=4", - "html_url": "https:\/\/github.com\/BKreisel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BKreisel\/CVE-2022-41343", - "description": "🐍 Python Exploit for CVE-2022-23935", - "fork": false, - "created_at": "2023-02-15T23:17:55Z", - "updated_at": "2024-01-17T19:11:33Z", - "pushed_at": "2023-02-17T18:37:12Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-41343", - "exploit", - "python" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41352.json b/2022/CVE-2022-41352.json index 944db356a8..008f839e21 100644 --- a/2022/CVE-2022-41352.json +++ b/2022/CVE-2022-41352.json @@ -71,38 +71,5 @@ "watchers": 109, "score": 0, "subscribers_count": 2 - }, - { - "id": 729969528, - "name": "cve-2022-41352-zimbra-rce", - "full_name": "qailanet\/cve-2022-41352-zimbra-rce", - "owner": { - "login": "qailanet", - "id": 128580194, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128580194?v=4", - "html_url": "https:\/\/github.com\/qailanet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/qailanet\/cve-2022-41352-zimbra-rce", - "description": null, - "fork": false, - "created_at": "2023-12-10T22:29:21Z", - "updated_at": "2023-12-10T23:02:12Z", - "pushed_at": "2023-12-10T23:02:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-41401.json b/2022/CVE-2022-41401.json deleted file mode 100644 index 09534b2025..0000000000 --- a/2022/CVE-2022-41401.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 673039429, - "name": "CVE-2022-41401", - "full_name": "ixSly\/CVE-2022-41401", - "owner": { - "login": "ixSly", - "id": 32583633, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32583633?v=4", - "html_url": "https:\/\/github.com\/ixSly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ixSly\/CVE-2022-41401", - "description": null, - "fork": false, - "created_at": "2023-07-31T18:20:35Z", - "updated_at": "2024-06-11T14:40:32Z", - "pushed_at": "2023-07-31T18:25:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41544.json b/2022/CVE-2022-41544.json index 0a4795ff5a..427fddc1ae 100644 --- a/2022/CVE-2022-41544.json +++ b/2022/CVE-2022-41544.json @@ -1,37 +1,4 @@ [ - { - "id": 641008000, - "name": "CVE-2022-41544", - "full_name": "yosef0x01\/CVE-2022-41544", - "owner": { - "login": "yosef0x01", - "id": 96077889, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96077889?v=4", - "html_url": "https:\/\/github.com\/yosef0x01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yosef0x01\/CVE-2022-41544", - "description": "Exploit script for CVE-2022-41544 - RCE in get-simple CMS", - "fork": false, - "created_at": "2023-05-15T15:24:55Z", - "updated_at": "2024-01-12T21:29:35Z", - "pushed_at": "2023-05-15T21:19:06Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 836386471, "name": "CVE-2022-41544", diff --git a/2022/CVE-2022-41678.json b/2022/CVE-2022-41678.json index f1d77365da..8d708afd7a 100644 --- a/2022/CVE-2022-41678.json +++ b/2022/CVE-2022-41678.json @@ -1,45 +1,4 @@ [ - { - "id": 895756163, - "name": "CVE-2022-41678", - "full_name": "mbadanoiu\/CVE-2022-41678", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-41678", - "description": "CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ", - "fork": false, - "created_at": "2024-11-28T20:48:21Z", - "updated_at": "2025-11-23T15:19:24Z", - "pushed_at": "2024-11-28T22:20:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "authenticated", - "cve", - "cve-2022-41678", - "cves", - "log4jmx", - "remote-code-execution" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1076189202, "name": "CVE-2022-41678", diff --git a/2022/CVE-2022-41741.json b/2022/CVE-2022-41741.json index 4383b8db3d..56a1a2203e 100644 --- a/2022/CVE-2022-41741.json +++ b/2022/CVE-2022-41741.json @@ -1,37 +1,4 @@ [ - { - "id": 792443354, - "name": "evilMP4", - "full_name": "dumbbutt0\/evilMP4", - "owner": { - "login": "dumbbutt0", - "id": 134574598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134574598?v=4", - "html_url": "https:\/\/github.com\/dumbbutt0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dumbbutt0\/evilMP4", - "description": "Explore CVE-2022-41741 with the Evil MP4 repository. It offers educational PoCs,and documentation on securing nginx against MP4 file vulnerabilities. For legal, ethical security testing only.", - "fork": false, - "created_at": "2024-04-26T17:18:52Z", - "updated_at": "2025-01-22T17:33:27Z", - "pushed_at": "2024-04-26T19:00:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 979694324, "name": "CVE-2022-41741-742-Nginx-Vulnerability-Scanner", diff --git a/2022/CVE-2022-41852.json b/2022/CVE-2022-41852.json index 68c8871cc2..faf917d9ca 100644 --- a/2022/CVE-2022-41852.json +++ b/2022/CVE-2022-41852.json @@ -43,38 +43,5 @@ "watchers": 74, "score": 0, "subscribers_count": 2 - }, - { - "id": 856170835, - "name": "CVE-2022-41852-Disable", - "full_name": "xpectomas\/CVE-2022-41852-Disable", - "owner": { - "login": "xpectomas", - "id": 103617578, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103617578?v=4", - "html_url": "https:\/\/github.com\/xpectomas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xpectomas\/CVE-2022-41852-Disable", - "description": null, - "fork": false, - "created_at": "2024-09-12T05:43:31Z", - "updated_at": "2024-09-12T05:51:40Z", - "pushed_at": "2024-09-12T05:51:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-41853.json b/2022/CVE-2022-41853.json deleted file mode 100644 index f6bd2faab9..0000000000 --- a/2022/CVE-2022-41853.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 722950810, - "name": "CVE-2022-41853", - "full_name": "mbadanoiu\/CVE-2022-41853", - "owner": { - "login": "mbadanoiu", - "id": 18383407, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18383407?v=4", - "html_url": "https:\/\/github.com\/mbadanoiu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbadanoiu\/CVE-2022-41853", - "description": "Research into CVE-2022-41853: Using static functions to obtian RCE via Java Deserialization & Remote Codebase Attack", - "fork": false, - "created_at": "2023-11-24T10:30:56Z", - "updated_at": "2023-12-08T10:02:05Z", - "pushed_at": "2023-11-24T11:44:35Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-41853", - "deserialization", - "remote-code-execution", - "security-research" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41876.json b/2022/CVE-2022-41876.json deleted file mode 100644 index 2a48b070ca..0000000000 --- a/2022/CVE-2022-41876.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 617083370, - "name": "CVE-2022-41876", - "full_name": "Skileau\/CVE-2022-41876", - "owner": { - "login": "Skileau", - "id": 83423277, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83423277?v=4", - "html_url": "https:\/\/github.com\/Skileau", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Skileau\/CVE-2022-41876", - "description": "PoC for CVE-2022-41876", - "fork": false, - "created_at": "2023-03-21T17:05:07Z", - "updated_at": "2023-06-06T17:38:25Z", - "pushed_at": "2023-03-24T11:20:21Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41903.json b/2022/CVE-2022-41903.json deleted file mode 100644 index c078031d91..0000000000 --- a/2022/CVE-2022-41903.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 593531640, - "name": "git-cveissues", - "full_name": "sondermc\/git-cveissues", - "owner": { - "login": "sondermc", - "id": 9403395, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9403395?v=4", - "html_url": "https:\/\/github.com\/sondermc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sondermc\/git-cveissues", - "description": "vulnerabilities, CVE-2022-41903, and CVE-2022-23521, that affect versions 2.39 and older. Git for Windows was also patched to address an additional, Windows-specific issue known as CVE-2022-41953.", - "fork": false, - "created_at": "2023-01-26T08:34:53Z", - "updated_at": "2023-01-26T08:47:29Z", - "pushed_at": "2023-01-31T07:52:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41924.json b/2022/CVE-2022-41924.json deleted file mode 100644 index c945ffce66..0000000000 --- a/2022/CVE-2022-41924.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 912115404, - "name": "CVE-2022-41924", - "full_name": "oalieno\/CVE-2022-41924", - "owner": { - "login": "oalieno", - "id": 18167730, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18167730?v=4", - "html_url": "https:\/\/github.com\/oalieno", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oalieno\/CVE-2022-41924", - "description": null, - "fork": false, - "created_at": "2025-01-04T16:40:35Z", - "updated_at": "2025-01-04T17:29:18Z", - "pushed_at": "2025-01-04T17:29:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-41966.json b/2022/CVE-2022-41966.json deleted file mode 100644 index 4be15c13aa..0000000000 --- a/2022/CVE-2022-41966.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585766378, - "name": "Xstream_cve-2022-41966", - "full_name": "111ddea\/Xstream_cve-2022-41966", - "owner": { - "login": "111ddea", - "id": 41444127, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41444127?v=4", - "html_url": "https:\/\/github.com\/111ddea", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/111ddea\/Xstream_cve-2022-41966", - "description": null, - "fork": false, - "created_at": "2023-01-06T02:37:07Z", - "updated_at": "2023-01-19T05:36:46Z", - "pushed_at": "2023-01-06T02:42:53Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-42475.json b/2022/CVE-2022-42475.json index 6c5a121b8e..438d1f3b22 100644 --- a/2022/CVE-2022-42475.json +++ b/2022/CVE-2022-42475.json @@ -1,239 +1,4 @@ [ - { - "id": 590172933, - "name": "ioc-cve-2022-42475", - "full_name": "bryanster\/ioc-cve-2022-42475", - "owner": { - "login": "bryanster", - "id": 45668775, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45668775?v=4", - "html_url": "https:\/\/github.com\/bryanster", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bryanster\/ioc-cve-2022-42475", - "description": "test for the ioc described for FG-IR-22-398", - "fork": false, - "created_at": "2023-01-17T20:11:04Z", - "updated_at": "2023-05-14T12:04:07Z", - "pushed_at": "2023-05-14T13:22:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-42475", - "fortigate-firewall", - "fortinet" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 605510069, - "name": "cve-2022-42475", - "full_name": "scrt\/cve-2022-42475", - "owner": { - "login": "scrt", - "id": 5999514, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5999514?v=4", - "html_url": "https:\/\/github.com\/scrt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scrt\/cve-2022-42475", - "description": "POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon", - "fork": false, - "created_at": "2023-02-23T10:04:58Z", - "updated_at": "2026-06-04T16:47:31Z", - "pushed_at": "2023-03-14T08:41:51Z", - "stargazers_count": 109, - "watchers_count": 109, - "has_discussions": false, - "forks_count": 26, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 26, - "watchers": 109, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 614608660, - "name": "cve-2022-42475", - "full_name": "Amir-hy\/cve-2022-42475", - "owner": { - "login": "Amir-hy", - "id": 24714998, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24714998?v=4", - "html_url": "https:\/\/github.com\/Amir-hy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Amir-hy\/cve-2022-42475", - "description": "FortiOS buffer overflow vulnerability", - "fork": false, - "created_at": "2023-03-16T00:05:30Z", - "updated_at": "2025-03-10T18:02:17Z", - "pushed_at": "2023-03-16T00:05:33Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 617289614, - "name": "cve-2022-42475-Fortinet", - "full_name": "Mustafa1986\/cve-2022-42475-Fortinet", - "owner": { - "login": "Mustafa1986", - "id": 27927358, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27927358?v=4", - "html_url": "https:\/\/github.com\/Mustafa1986", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mustafa1986\/cve-2022-42475-Fortinet", - "description": null, - "fork": false, - "created_at": "2023-03-22T04:26:22Z", - "updated_at": "2025-08-29T13:56:42Z", - "pushed_at": "2023-03-22T04:27:31Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 617811153, - "name": "CVE-2022-42475-RCE-POC", - "full_name": "P4x1s\/CVE-2022-42475-RCE-POC", - "owner": { - "login": "P4x1s", - "id": 7390055, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7390055?v=4", - "html_url": "https:\/\/github.com\/P4x1s", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/P4x1s\/CVE-2022-42475-RCE-POC", - "description": "CVE-2022-42475 飞塔RCE漏洞 POC", - "fork": false, - "created_at": "2023-03-23T06:48:14Z", - "updated_at": "2024-06-26T01:15:25Z", - "pushed_at": "2023-03-23T06:59:22Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 633227706, - "name": "cve-2022-42475", - "full_name": "natceil\/cve-2022-42475", - "owner": { - "login": "natceil", - "id": 62095406, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62095406?v=4", - "html_url": "https:\/\/github.com\/natceil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/natceil\/cve-2022-42475", - "description": null, - "fork": false, - "created_at": "2023-04-27T03:47:14Z", - "updated_at": "2023-04-27T03:51:54Z", - "pushed_at": "2023-04-27T04:20:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 656889059, - "name": "CVE-2022-42475", - "full_name": "0xhaggis\/CVE-2022-42475", - "owner": { - "login": "0xhaggis", - "id": 6735009, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6735009?v=4", - "html_url": "https:\/\/github.com\/0xhaggis", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xhaggis\/CVE-2022-42475", - "description": "An exploit for CVE-2022-42475, a pre-authentication heap overflow in Fortinet networking products", - "fork": false, - "created_at": "2023-06-21T21:22:35Z", - "updated_at": "2026-06-19T21:55:04Z", - "pushed_at": "2023-06-21T21:24:52Z", - "stargazers_count": 34, - "watchers_count": 34, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 34, - "score": 0, - "subscribers_count": 1 - }, { "id": 1168724016, "name": "CVE-2022-42475-POC", diff --git a/2022/CVE-2022-4262.json b/2022/CVE-2022-4262.json index 2e8bb17de7..1d50206152 100644 --- a/2022/CVE-2022-4262.json +++ b/2022/CVE-2022-4262.json @@ -31,71 +31,5 @@ "watchers": 106, "score": 0, "subscribers_count": 2 - }, - { - "id": 747666381, - "name": "CVE-2022-4262", - "full_name": "mistymntncop\/CVE-2022-4262", - "owner": { - "login": "mistymntncop", - "id": 105329747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105329747?v=4", - "html_url": "https:\/\/github.com\/mistymntncop", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mistymntncop\/CVE-2022-4262", - "description": null, - "fork": false, - "created_at": "2024-01-24T11:58:54Z", - "updated_at": "2025-12-03T13:15:44Z", - "pushed_at": "2024-01-29T22:03:03Z", - "stargazers_count": 58, - "watchers_count": 58, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 58, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 756021648, - "name": "CVE-2022-4262", - "full_name": "quangnh89\/CVE-2022-4262", - "owner": { - "login": "quangnh89", - "id": 10832563, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10832563?v=4", - "html_url": "https:\/\/github.com\/quangnh89", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/quangnh89\/CVE-2022-4262", - "description": null, - "fork": false, - "created_at": "2024-02-11T18:53:05Z", - "updated_at": "2024-02-11T18:53:05Z", - "pushed_at": "2024-02-11T18:53:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-42703.json b/2022/CVE-2022-42703.json deleted file mode 100644 index a3eaac3700..0000000000 --- a/2022/CVE-2022-42703.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 661279501, - "name": "hbp-attack-demo", - "full_name": "Squirre17\/hbp-attack-demo", - "owner": { - "login": "Squirre17", - "id": 79578430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79578430?v=4", - "html_url": "https:\/\/github.com\/Squirre17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Squirre17\/hbp-attack-demo", - "description": "Linux kernel hbp exploit method demo. (i.e. the degradation version of CVE-2022-42703)", - "fork": false, - "created_at": "2023-07-02T10:58:46Z", - "updated_at": "2025-10-21T07:12:12Z", - "pushed_at": "2023-07-02T12:59:37Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 701197900, - "name": "linux-4.1.15_CVE-2022-42703", - "full_name": "Satheesh575555\/linux-4.1.15_CVE-2022-42703", - "owner": { - "login": "Satheesh575555", - "id": 102573923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4", - "html_url": "https:\/\/github.com\/Satheesh575555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Satheesh575555\/linux-4.1.15_CVE-2022-42703", - "description": null, - "fork": false, - "created_at": "2023-10-06T06:18:32Z", - "updated_at": "2023-10-06T06:32:33Z", - "pushed_at": "2023-10-06T07:36:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-42864.json b/2022/CVE-2022-42864.json deleted file mode 100644 index 51809014a9..0000000000 --- a/2022/CVE-2022-42864.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 591057092, - "name": "CVE-2022-42864", - "full_name": "Muirey03\/CVE-2022-42864", - "owner": { - "login": "Muirey03", - "id": 31448720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31448720?v=4", - "html_url": "https:\/\/github.com\/Muirey03", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Muirey03\/CVE-2022-42864", - "description": "Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition", - "fork": false, - "created_at": "2023-01-19T20:36:49Z", - "updated_at": "2026-06-17T16:37:03Z", - "pushed_at": "2023-01-20T17:58:39Z", - "stargazers_count": 68, - "watchers_count": 68, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 68, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index 1880445679..d8507fc495 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -1097,105 +1097,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 607430692, - "name": "text4shell-cve-2022-42889", - "full_name": "devenes\/text4shell-cve-2022-42889", - "owner": { - "login": "devenes", - "id": 66560757, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66560757?v=4", - "html_url": "https:\/\/github.com\/devenes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/devenes\/text4shell-cve-2022-42889", - "description": "Kubernetes Lab for CVE-2022-42889", - "fork": false, - "created_at": "2023-02-28T00:32:01Z", - "updated_at": "2024-10-04T16:17:52Z", - "pushed_at": "2023-02-28T11:43:41Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 608352501, - "name": "text4shell", - "full_name": "hotblac\/text4shell", - "owner": { - "login": "hotblac", - "id": 4406140, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4406140?v=4", - "html_url": "https:\/\/github.com\/hotblac", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hotblac\/text4shell", - "description": "A demonstration of CVE-2022-42889 (text4shell) remote code execution vulnerability", - "fork": false, - "created_at": "2023-03-01T20:56:37Z", - "updated_at": "2023-03-01T20:57:17Z", - "pushed_at": "2023-03-12T17:34:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 623655257, - "name": "CVE-2022-42889", - "full_name": "necroteddy\/CVE-2022-42889", - "owner": { - "login": "necroteddy", - "id": 37003131, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37003131?v=4", - "html_url": "https:\/\/github.com\/necroteddy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/necroteddy\/CVE-2022-42889", - "description": "docker for CVE-2022-42889", - "fork": false, - "created_at": "2023-04-04T20:08:08Z", - "updated_at": "2023-04-19T05:53:19Z", - "pushed_at": "2023-04-19T05:53:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 625082348, "name": "cve-2022-42889-text4shell-docker", @@ -1229,171 +1130,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 629556451, - "name": "cve-2022-42889-text4shell", - "full_name": "Dima2021\/cve-2022-42889-text4shell", - "owner": { - "login": "Dima2021", - "id": 61808880, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61808880?v=4", - "html_url": "https:\/\/github.com\/Dima2021", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dima2021\/cve-2022-42889-text4shell", - "description": null, - "fork": false, - "created_at": "2023-04-18T14:49:45Z", - "updated_at": "2023-04-18T15:01:22Z", - "pushed_at": "2023-04-18T15:12:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 643789911, - "name": "text4shell-docker", - "full_name": "aaronm-sysdig\/text4shell-docker", - "owner": { - "login": "aaronm-sysdig", - "id": 132866139, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132866139?v=4", - "html_url": "https:\/\/github.com\/aaronm-sysdig", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aaronm-sysdig\/text4shell-docker", - "description": "Dockerized POC for CVE-2022-42889 Text4Shell", - "fork": false, - "created_at": "2023-05-22T06:57:55Z", - "updated_at": "2023-05-23T07:32:45Z", - "pushed_at": "2024-01-05T10:18:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 659148388, - "name": "CVE-2022-42889-Text4Shell-POC", - "full_name": "alealeluyah\/CVE-2022-42889-Text4Shell-POC", - "owner": { - "login": "alealeluyah", - "id": 47717581, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47717581?v=4", - "html_url": "https:\/\/github.com\/alealeluyah", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alealeluyah\/CVE-2022-42889-Text4Shell-POC", - "description": "This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id: CVE-2022-42889. ", - "fork": false, - "created_at": "2023-06-27T08:29:24Z", - "updated_at": "2026-05-15T22:33:13Z", - "pushed_at": "2023-06-27T09:01:14Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 13, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 687770707, - "name": "CVE-2022-42889", - "full_name": "Sic4rio\/CVE-2022-42889", - "owner": { - "login": "Sic4rio", - "id": 75425513, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75425513?v=4", - "html_url": "https:\/\/github.com\/Sic4rio", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sic4rio\/CVE-2022-42889", - "description": "Text4Shell", - "fork": false, - "created_at": "2023-09-06T01:13:26Z", - "updated_at": "2023-09-06T01:15:32Z", - "pushed_at": "2023-09-06T01:15:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 689311131, - "name": "CVE-2022-42889", - "full_name": "34006133\/CVE-2022-42889", - "owner": { - "login": "34006133", - "id": 143711860, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143711860?v=4", - "html_url": "https:\/\/github.com\/34006133", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/34006133\/CVE-2022-42889", - "description": "RCE PoC for Apache Commons Text vuln", - "fork": false, - "created_at": "2023-09-09T12:11:36Z", - "updated_at": "2023-09-11T00:54:20Z", - "pushed_at": "2023-09-10T13:32:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 695246530, "name": "cve-2022-42889-text4shell", @@ -1427,39 +1163,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 754828377, - "name": "cve-2022-42889-text4shell", - "full_name": "joshbnewton31080\/cve-2022-42889-text4shell", - "owner": { - "login": "joshbnewton31080", - "id": 88124465, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88124465?v=4", - "html_url": "https:\/\/github.com\/joshbnewton31080", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/joshbnewton31080\/cve-2022-42889-text4shell", - "description": null, - "fork": false, - "created_at": "2024-02-08T20:54:23Z", - "updated_at": "2024-02-08T20:54:36Z", - "pushed_at": "2024-02-08T20:54:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 954133118, "name": "text4shell-exploit", diff --git a/2022/CVE-2022-42896.json b/2022/CVE-2022-42896.json deleted file mode 100644 index 81af5f2c16..0000000000 --- a/2022/CVE-2022-42896.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 623797649, - "name": "linux-4.19.72_CVE-2022-42896", - "full_name": "Satheesh575555\/linux-4.19.72_CVE-2022-42896", - "owner": { - "login": "Satheesh575555", - "id": 102573923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4", - "html_url": "https:\/\/github.com\/Satheesh575555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Satheesh575555\/linux-4.19.72_CVE-2022-42896", - "description": null, - "fork": false, - "created_at": "2023-04-05T05:33:09Z", - "updated_at": "2023-04-05T06:24:18Z", - "pushed_at": "2023-04-05T05:36:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 623871240, - "name": "linux-4.19.72_CVE-2022-42896", - "full_name": "Trinadh465\/linux-4.19.72_CVE-2022-42896", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/linux-4.19.72_CVE-2022-42896", - "description": null, - "fork": false, - "created_at": "2023-04-05T09:10:38Z", - "updated_at": "2023-04-05T09:17:08Z", - "pushed_at": "2023-04-05T10:40:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 624531158, - "name": "kernel_v4.19.72_CVE-2022-42896", - "full_name": "himanshu667\/kernel_v4.19.72_CVE-2022-42896", - "owner": { - "login": "himanshu667", - "id": 130066224, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130066224?v=4", - "html_url": "https:\/\/github.com\/himanshu667", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/himanshu667\/kernel_v4.19.72_CVE-2022-42896", - "description": null, - "fork": false, - "created_at": "2023-04-06T17:17:25Z", - "updated_at": "2023-04-06T17:17:25Z", - "pushed_at": "2023-04-06T17:17:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4304.json b/2022/CVE-2022-4304.json deleted file mode 100644 index 85128b02f8..0000000000 --- a/2022/CVE-2022-4304.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 631842494, - "name": "Openssl-1.1.1g_CVE-2022-4304", - "full_name": "Trinadh465\/Openssl-1.1.1g_CVE-2022-4304", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/Openssl-1.1.1g_CVE-2022-4304", - "description": null, - "fork": false, - "created_at": "2023-04-24T07:15:33Z", - "updated_at": "2023-04-24T07:18:06Z", - "pushed_at": "2023-04-24T07:18:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-43293.json b/2022/CVE-2022-43293.json deleted file mode 100644 index 67c3b5899a..0000000000 --- a/2022/CVE-2022-43293.json +++ /dev/null @@ -1,56 +0,0 @@ -[ - { - "id": 624878736, - "name": "CVE-2022-43293", - "full_name": "LucaBarile\/CVE-2022-43293", - "owner": { - "login": "LucaBarile", - "id": 74877659, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74877659?v=4", - "html_url": "https:\/\/github.com\/LucaBarile", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LucaBarile\/CVE-2022-43293", - "description": "Exploit and report for CVE-2022-43293", - "fork": false, - "created_at": "2023-04-07T13:38:27Z", - "updated_at": "2023-04-07T16:47:13Z", - "pushed_at": "2023-04-07T15:12:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0-day", - "arbitrary-file-overwrite", - "arbitrary-file-write", - "cng-sys", - "denial-of-service", - "disclosure", - "exploit", - "impersonation", - "link-following", - "link-following-attack", - "mount-point", - "poc", - "proof-of-concept", - "symbolic-link", - "vulnerability", - "wacom", - "wacom-vulnerability", - "windows-denial-of-service", - "write-up", - "zero-day" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-43343.json b/2022/CVE-2022-43343.json deleted file mode 100644 index 2d751bc97c..0000000000 --- a/2022/CVE-2022-43343.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595861738, - "name": "CVE-2022-43343", - "full_name": "Halcy0nic\/CVE-2022-43343", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-43343", - "description": "Proof of concept for (CVE-2022-43343)", - "fork": false, - "created_at": "2023-02-01T00:33:57Z", - "updated_at": "2024-07-02T20:34:09Z", - "pushed_at": "2023-02-01T00:54:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4395.json b/2022/CVE-2022-4395.json deleted file mode 100644 index ee136b586b..0000000000 --- a/2022/CVE-2022-4395.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 611731156, - "name": "CVE-2022-4395", - "full_name": "MrG3P5\/CVE-2022-4395", - "owner": { - "login": "MrG3P5", - "id": 57594747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57594747?v=4", - "html_url": "https:\/\/github.com\/MrG3P5", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MrG3P5\/CVE-2022-4395", - "description": "Mass Auto Exploit CVE-2022-4395 Unauthenticated Arbitrary File Upload", - "fork": false, - "created_at": "2023-03-09T12:35:48Z", - "updated_at": "2024-02-21T18:34:48Z", - "pushed_at": "2023-03-09T12:46:45Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-43980.json b/2022/CVE-2022-43980.json deleted file mode 100644 index f8b0565b33..0000000000 --- a/2022/CVE-2022-43980.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602645546, - "name": "CVE-2022-43980", - "full_name": "Argonx21\/CVE-2022-43980", - "owner": { - "login": "Argonx21", - "id": 30073895, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30073895?v=4", - "html_url": "https:\/\/github.com\/Argonx21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Argonx21\/CVE-2022-43980", - "description": "Stored Cross Site Scripting Vulnerability in the network maps edit functionality", - "fork": false, - "created_at": "2023-02-16T16:42:12Z", - "updated_at": "2023-02-16T16:42:12Z", - "pushed_at": "2023-02-16T17:03:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44118.json b/2022/CVE-2022-44118.json deleted file mode 100644 index f4e7a634a2..0000000000 --- a/2022/CVE-2022-44118.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 600342998, - "name": "CVE-2022-44118-Exploit", - "full_name": "Athishpranav2003\/CVE-2022-44118-Exploit", - "owner": { - "login": "Athishpranav2003", - "id": 105591739, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105591739?v=4", - "html_url": "https:\/\/github.com\/Athishpranav2003", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Athishpranav2003\/CVE-2022-44118-Exploit", - "description": "PoC Exploit for RCE vulnerability in DedeCMS v6.1.9", - "fork": false, - "created_at": "2023-02-11T07:29:08Z", - "updated_at": "2023-02-11T07:30:47Z", - "pushed_at": "2023-07-04T07:17:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44136.json b/2022/CVE-2022-44136.json index 16e7ac4c60..41c48c9f8b 100644 --- a/2022/CVE-2022-44136.json +++ b/2022/CVE-2022-44136.json @@ -1,37 +1,4 @@ [ - { - "id": 653887200, - "name": "CVE-2022-44136-exploit", - "full_name": "IgorDuino\/CVE-2022-44136-exploit", - "owner": { - "login": "IgorDuino", - "id": 74809945, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74809945?v=4", - "html_url": "https:\/\/github.com\/IgorDuino", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/IgorDuino\/CVE-2022-44136-exploit", - "description": "Exploit for CVE-2022-44136 for chcking security of your site", - "fork": false, - "created_at": "2023-06-15T00:52:11Z", - "updated_at": "2023-06-15T00:52:11Z", - "pushed_at": "2023-06-15T00:52:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1021959957, "name": "CVE-2022-44136-poc", diff --git a/2022/CVE-2022-44149.json b/2022/CVE-2022-44149.json deleted file mode 100644 index 266e97e766..0000000000 --- a/2022/CVE-2022-44149.json +++ /dev/null @@ -1,83 +0,0 @@ -[ - { - "id": 586048910, - "name": "CVE-2022-44149", - "full_name": "yerodin\/CVE-2022-44149", - "owner": { - "login": "yerodin", - "id": 9205071, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9205071?v=4", - "html_url": "https:\/\/github.com\/yerodin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yerodin\/CVE-2022-44149", - "description": "POC Exploit for CVE-2022-44149", - "fork": false, - "created_at": "2023-01-06T20:00:25Z", - "updated_at": "2023-01-07T17:03:57Z", - "pushed_at": "2023-01-25T03:08:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 840469662, - "name": "CVE-2022-44149", - "full_name": "geniuszly\/CVE-2022-44149", - "owner": { - "login": "geniuszly", - "id": 137893386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4", - "html_url": "https:\/\/github.com\/geniuszly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geniuszly\/CVE-2022-44149", - "description": "it is script designed to interact with a router by sending a payload to its system tools. The script retrieves the router's configuration from environment variables to ensure security. It includes functions for generating an authorization header, sending a payload, and logging the process.", - "fork": false, - "created_at": "2024-08-09T19:27:22Z", - "updated_at": "2024-10-06T16:41:28Z", - "pushed_at": "2024-08-09T19:28:51Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-44149", - "cybersecurity", - "ethical-hacking", - "exploit", - "exploit-development", - "linux", - "payload", - "penetration-testing", - "poc", - "privilege-escalation", - "security", - "vulnerability", - "vulnerability-research" - ], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44268.json b/2022/CVE-2022-44268.json index 608f9828b5..75ebd5757c 100644 --- a/2022/CVE-2022-44268.json +++ b/2022/CVE-2022-44268.json @@ -1,205 +1,4 @@ [ - { - "id": 596623131, - "name": "CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC", - "full_name": "duc-nt\/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC", - "owner": { - "login": "duc-nt", - "id": 61867814, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61867814?v=4", - "html_url": "https:\/\/github.com\/duc-nt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/duc-nt\/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC", - "description": "CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator", - "fork": false, - "created_at": "2023-02-02T15:34:28Z", - "updated_at": "2026-07-02T17:17:59Z", - "pushed_at": "2023-02-02T16:53:37Z", - "stargazers_count": 276, - "watchers_count": 276, - "has_discussions": false, - "forks_count": 37, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 37, - "watchers": 276, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 596917149, - "name": "CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment", - "full_name": "y1nglamore\/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment", - "owner": { - "login": "y1nglamore", - "id": 46070281, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46070281?v=4", - "html_url": "https:\/\/github.com\/y1nglamore", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/y1nglamore\/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment", - "description": "The vulnerable recurrence docker environment for CVE-2022-44268", - "fork": false, - "created_at": "2023-02-03T08:02:28Z", - "updated_at": "2025-11-20T15:25:46Z", - "pushed_at": "2023-02-03T08:03:19Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 10, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 597160092, - "name": "cve-2022-44268", - "full_name": "agathanon\/cve-2022-44268", - "owner": { - "login": "agathanon", - "id": 88989307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88989307?v=4", - "html_url": "https:\/\/github.com\/agathanon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/agathanon\/cve-2022-44268", - "description": "Payload generator and extractor for CVE-2022-44268 written in Python.", - "fork": false, - "created_at": "2023-02-03T19:02:27Z", - "updated_at": "2023-11-07T11:34:49Z", - "pushed_at": "2023-02-03T21:19:31Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 597257490, - "name": "cve-2022-44268-detector", - "full_name": "jnschaeffer\/cve-2022-44268-detector", - "owner": { - "login": "jnschaeffer", - "id": 1588395, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1588395?v=4", - "html_url": "https:\/\/github.com\/jnschaeffer", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jnschaeffer\/cve-2022-44268-detector", - "description": "Detect images that likely exploit CVE-2022-44268", - "fork": false, - "created_at": "2023-02-04T01:35:08Z", - "updated_at": "2024-01-14T12:48:26Z", - "pushed_at": "2023-12-06T14:25:00Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-44268", - "imagemagick" - ], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 597283448, - "name": "CVE-2022-44268-automated-poc", - "full_name": "Ashifcoder\/CVE-2022-44268-automated-poc", - "owner": { - "login": "Ashifcoder", - "id": 46344066, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46344066?v=4", - "html_url": "https:\/\/github.com\/Ashifcoder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ashifcoder\/CVE-2022-44268-automated-poc", - "description": "An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image in Image Magic.", - "fork": false, - "created_at": "2023-02-04T03:50:07Z", - "updated_at": "2024-03-01T08:40:03Z", - "pushed_at": "2023-02-04T03:50:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 597372793, - "name": "CVE-2022-44268-PoC", - "full_name": "Baikuya\/CVE-2022-44268-PoC", - "owner": { - "login": "Baikuya", - "id": 52155445, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52155445?v=4", - "html_url": "https:\/\/github.com\/Baikuya", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Baikuya\/CVE-2022-44268-PoC", - "description": "CVE-2022-44268 PoC", - "fork": false, - "created_at": "2023-02-04T10:50:20Z", - "updated_at": "2023-07-16T11:02:28Z", - "pushed_at": "2023-02-04T11:01:43Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 597824177, "name": "CVE-2022-44268", @@ -233,591 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 598074036, - "name": "imagemagick-lfi-poc", - "full_name": "Sybil-Scan\/imagemagick-lfi-poc", - "owner": { - "login": "Sybil-Scan", - "id": 121743489, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121743489?v=4", - "html_url": "https:\/\/github.com\/Sybil-Scan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sybil-Scan\/imagemagick-lfi-poc", - "description": "ImageMagick LFI PoC [CVE-2022-44268]", - "fork": false, - "created_at": "2023-02-06T10:44:43Z", - "updated_at": "2026-01-26T09:13:53Z", - "pushed_at": "2023-11-06T00:38:18Z", - "stargazers_count": 52, - "watchers_count": 52, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-44268", - "imagemagick", - "lfi" - ], - "visibility": "public", - "forks": 9, - "watchers": 52, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 598074392, - "name": "imagemagick-CVE-2022-44268", - "full_name": "Vulnmachines\/imagemagick-CVE-2022-44268", - "owner": { - "login": "Vulnmachines", - "id": 79006904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79006904?v=4", - "html_url": "https:\/\/github.com\/Vulnmachines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulnmachines\/imagemagick-CVE-2022-44268", - "description": "Imagemagick CVE-2022-44268", - "fork": false, - "created_at": "2023-02-06T10:45:42Z", - "updated_at": "2025-09-22T14:03:35Z", - "pushed_at": "2023-02-06T10:51:45Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 600932755, - "name": "CVE-2022-44268", - "full_name": "kljunowsky\/CVE-2022-44268", - "owner": { - "login": "kljunowsky", - "id": 104329412, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104329412?v=4", - "html_url": "https:\/\/github.com\/kljunowsky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kljunowsky\/CVE-2022-44268", - "description": "CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit", - "fork": false, - "created_at": "2023-02-13T02:00:51Z", - "updated_at": "2026-05-10T07:18:10Z", - "pushed_at": "2023-12-29T14:53:55Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "applicati", - "bugbounty", - "bugbounty-tool", - "bugbountytips", - "cve-2022-44268", - "exploit", - "penetration-testing", - "penetration-testing-tools", - "proof-of-concept", - "security", - "web", - "webapplicationhacking" - ], - "visibility": "public", - "forks": 8, - "watchers": 27, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 604397718, - "name": "heroku-CVE-2022-44268-reproduction", - "full_name": "nfm\/heroku-CVE-2022-44268-reproduction", - "owner": { - "login": "nfm", - "id": 127960, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127960?v=4", - "html_url": "https:\/\/github.com\/nfm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nfm\/heroku-CVE-2022-44268-reproduction", - "description": null, - "fork": false, - "created_at": "2023-02-21T01:15:07Z", - "updated_at": "2023-02-21T02:02:09Z", - "pushed_at": "2023-02-21T04:03:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 617667621, - "name": "POC-CVE-2022-44268", - "full_name": "betillogalvanfbc\/POC-CVE-2022-44268", - "owner": { - "login": "betillogalvanfbc", - "id": 45644724, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45644724?v=4", - "html_url": "https:\/\/github.com\/betillogalvanfbc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/betillogalvanfbc\/POC-CVE-2022-44268", - "description": null, - "fork": false, - "created_at": "2023-03-22T21:26:20Z", - "updated_at": "2023-03-23T05:43:33Z", - "pushed_at": "2023-03-22T21:26:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 658471431, - "name": "CVE-2022-44268-MagiLeak", - "full_name": "adhikara13\/CVE-2022-44268-MagiLeak", - "owner": { - "login": "adhikara13", - "id": 44716348, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44716348?v=4", - "html_url": "https:\/\/github.com\/adhikara13", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/adhikara13\/CVE-2022-44268-MagiLeak", - "description": "Tools for working with ImageMagick to handle arbitrary file read vulnerabilities. Generate, read, and apply profile information to PNG files using a command-line interface.", - "fork": false, - "created_at": "2023-06-25T20:52:57Z", - "updated_at": "2023-06-27T09:57:01Z", - "pushed_at": "2023-06-26T18:16:50Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 661387078, - "name": "CVE-2022-44268-Exploit", - "full_name": "bhavikmalhotra\/CVE-2022-44268-Exploit", - "owner": { - "login": "bhavikmalhotra", - "id": 65305368, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65305368?v=4", - "html_url": "https:\/\/github.com\/bhavikmalhotra", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bhavikmalhotra\/CVE-2022-44268-Exploit", - "description": "Expoit for CVE-2022-44268", - "fork": false, - "created_at": "2023-07-02T17:24:00Z", - "updated_at": "2023-07-02T18:46:00Z", - "pushed_at": "2023-07-02T17:28:39Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 661819238, - "name": "CVE-2022-44268", - "full_name": "entr0pie\/CVE-2022-44268", - "owner": { - "login": "entr0pie", - "id": 73120825, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73120825?v=4", - "html_url": "https:\/\/github.com\/entr0pie", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/entr0pie\/CVE-2022-44268", - "description": "PoC of Imagemagick's Arbitrary File Read", - "fork": false, - "created_at": "2023-07-03T18:13:44Z", - "updated_at": "2026-02-18T22:34:27Z", - "pushed_at": "2023-07-03T18:34:24Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 13, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 666508345, - "name": "cve-2022-44268", - "full_name": "Pog-Frog\/cve-2022-44268", - "owner": { - "login": "Pog-Frog", - "id": 60003686, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60003686?v=4", - "html_url": "https:\/\/github.com\/Pog-Frog", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pog-Frog\/cve-2022-44268", - "description": null, - "fork": false, - "created_at": "2023-07-14T17:46:15Z", - "updated_at": "2023-07-14T17:46:23Z", - "pushed_at": "2023-07-14T17:46:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 667601703, - "name": "auto-cve-2022-44268.sh", - "full_name": "narekkay\/auto-cve-2022-44268.sh", - "owner": { - "login": "narekkay", - "id": 24856100, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24856100?v=4", - "html_url": "https:\/\/github.com\/narekkay", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/narekkay\/auto-cve-2022-44268.sh", - "description": "Automating Exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read", - "fork": false, - "created_at": "2023-07-17T22:21:33Z", - "updated_at": "2024-07-10T02:01:58Z", - "pushed_at": "2023-07-18T01:11:14Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 669707422, - "name": "ImageMagick-lfi-poc", - "full_name": "fanbyprinciple\/ImageMagick-lfi-poc", - "owner": { - "login": "fanbyprinciple", - "id": 29324589, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29324589?v=4", - "html_url": "https:\/\/github.com\/fanbyprinciple", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fanbyprinciple\/ImageMagick-lfi-poc", - "description": "ImageMagick Arbitrary Read Files - CVE-2022-44268", - "fork": false, - "created_at": "2023-07-23T06:56:59Z", - "updated_at": "2023-12-07T00:07:54Z", - "pushed_at": "2023-07-24T04:25:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-44268", - "hackthebox", - "htb", - "imagemagick", - "imageupload", - "lfi" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 677919510, - "name": "CVE-2022-44268_By_Kyokito", - "full_name": "chairat095\/CVE-2022-44268_By_Kyokito", - "owner": { - "login": "chairat095", - "id": 44226708, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44226708?v=4", - "html_url": "https:\/\/github.com\/chairat095", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chairat095\/CVE-2022-44268_By_Kyokito", - "description": "CVE-2022-44268_By_Kyokito", - "fork": false, - "created_at": "2023-08-13T04:43:12Z", - "updated_at": "2023-08-14T01:11:30Z", - "pushed_at": "2023-08-13T04:44:30Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 687632513, - "name": "Exploit-for-ImageMagick-CVE-2022-44268", - "full_name": "atici\/Exploit-for-ImageMagick-CVE-2022-44268", - "owner": { - "login": "atici", - "id": 68865673, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68865673?v=4", - "html_url": "https:\/\/github.com\/atici", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/atici\/Exploit-for-ImageMagick-CVE-2022-44268", - "description": "A bash script for easyly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268", - "fork": false, - "created_at": "2023-09-05T17:16:06Z", - "updated_at": "2025-11-29T23:53:50Z", - "pushed_at": "2023-09-05T18:57:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 704595452, - "name": "IMAGE-MAGICK-CVE-2022-44268", - "full_name": "Vagebondcur\/IMAGE-MAGICK-CVE-2022-44268", - "owner": { - "login": "Vagebondcur", - "id": 103751916, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103751916?v=4", - "html_url": "https:\/\/github.com\/Vagebondcur", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vagebondcur\/IMAGE-MAGICK-CVE-2022-44268", - "description": null, - "fork": false, - "created_at": "2023-10-13T15:43:49Z", - "updated_at": "2023-10-13T15:49:04Z", - "pushed_at": "2023-10-13T15:49:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 718826402, - "name": "-CVE-2022-44268", - "full_name": "NataliSemi\/-CVE-2022-44268", - "owner": { - "login": "NataliSemi", - "id": 43733113, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43733113?v=4", - "html_url": "https:\/\/github.com\/NataliSemi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NataliSemi\/-CVE-2022-44268", - "description": null, - "fork": false, - "created_at": "2023-11-14T21:54:17Z", - "updated_at": "2023-11-14T22:02:19Z", - "pushed_at": "2023-11-16T23:00:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 727130787, - "name": "CVE-2022-44268-fixed-PoC", - "full_name": "CygnusX-26\/CVE-2022-44268-fixed-PoC", - "owner": { - "login": "CygnusX-26", - "id": 42686923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42686923?v=4", - "html_url": "https:\/\/github.com\/CygnusX-26", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CygnusX-26\/CVE-2022-44268-fixed-PoC", - "description": null, - "fork": false, - "created_at": "2023-12-04T08:48:28Z", - "updated_at": "2023-12-04T08:48:34Z", - "pushed_at": "2023-12-04T08:48:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 851015122, - "name": "CVE-2022-44268", - "full_name": "FlojBoj\/CVE-2022-44268", - "owner": { - "login": "FlojBoj", - "id": 170850781, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170850781?v=4", - "html_url": "https:\/\/github.com\/FlojBoj", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FlojBoj\/CVE-2022-44268", - "description": "ImageMagick 7.1.0-49 vulnerable to Information Disclosure", - "fork": false, - "created_at": "2024-09-02T09:11:45Z", - "updated_at": "2024-09-02T09:56:19Z", - "pushed_at": "2024-09-02T09:56:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 976847118, "name": "CVE-2022-44268-pilgrimage", diff --git a/2022/CVE-2022-44276.json b/2022/CVE-2022-44276.json deleted file mode 100644 index 7518e82ea0..0000000000 --- a/2022/CVE-2022-44276.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 658104709, - "name": "CVE-2022-44276-PoC", - "full_name": "HerrLeStrate\/CVE-2022-44276-PoC", - "owner": { - "login": "HerrLeStrate", - "id": 26091132, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26091132?v=4", - "html_url": "https:\/\/github.com\/HerrLeStrate", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HerrLeStrate\/CVE-2022-44276-PoC", - "description": "PoC for Responsive Filemanager < 9.12.0 bypass upload restrictions lead to RCE", - "fork": false, - "created_at": "2023-06-24T19:28:44Z", - "updated_at": "2023-06-24T19:28:44Z", - "pushed_at": "2023-06-25T09:19:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44311.json b/2022/CVE-2022-44311.json deleted file mode 100644 index cf64927025..0000000000 --- a/2022/CVE-2022-44311.json +++ /dev/null @@ -1,73 +0,0 @@ -[ - { - "id": 595851923, - "name": "CVE-2022-44311", - "full_name": "Halcy0nic\/CVE-2022-44311", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-44311", - "description": "Proof of concept for CVE-2022-44311", - "fork": false, - "created_at": "2023-01-31T23:53:39Z", - "updated_at": "2024-07-02T20:34:18Z", - "pushed_at": "2023-02-01T00:32:46Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 603938610, - "name": "CVE-2022-44311", - "full_name": "DesmondSanctity\/CVE-2022-44311", - "owner": { - "login": "DesmondSanctity", - "id": 51109125, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51109125?v=4", - "html_url": "https:\/\/github.com\/DesmondSanctity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DesmondSanctity\/CVE-2022-44311", - "description": "Out-Of-Bounds Read in html2xhtml : CVE-2022-44311", - "fork": false, - "created_at": "2023-02-20T01:28:04Z", - "updated_at": "2023-03-17T15:48:31Z", - "pushed_at": "2023-02-21T01:55:23Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "advisory", - "security", - "vulnerabilities", - "vulnerability-assessment" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44312.json b/2022/CVE-2022-44312.json deleted file mode 100644 index 167181d207..0000000000 --- a/2022/CVE-2022-44312.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 657382893, - "name": "CVEs-for-picoc-3.2.2", - "full_name": "Halcy0nic\/CVEs-for-picoc-3.2.2", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVEs-for-picoc-3.2.2", - "description": "Reproduction files for CVE-2022-44312 through CVE-2022-44321", - "fork": false, - "created_at": "2023-06-23T00:16:52Z", - "updated_at": "2024-07-02T20:33:00Z", - "pushed_at": "2023-08-14T01:35:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44318.json b/2022/CVE-2022-44318.json deleted file mode 100644 index b7fd742e73..0000000000 --- a/2022/CVE-2022-44318.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595867993, - "name": "CVE-2022-44318", - "full_name": "Halcy0nic\/CVE-2022-44318", - "owner": { - "login": "Halcy0nic", - "id": 42481692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42481692?v=4", - "html_url": "https:\/\/github.com\/Halcy0nic", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Halcy0nic\/CVE-2022-44318", - "description": "Proof of concept for CVE-2022-44318", - "fork": false, - "created_at": "2023-02-01T01:00:33Z", - "updated_at": "2024-07-02T20:33:56Z", - "pushed_at": "2023-02-01T01:13:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44569.json b/2022/CVE-2022-44569.json deleted file mode 100644 index 130deb9ae5..0000000000 --- a/2022/CVE-2022-44569.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 797754300, - "name": "ivanti-automationmanager-exploit", - "full_name": "rweijnen\/ivanti-automationmanager-exploit", - "owner": { - "login": "rweijnen", - "id": 7575747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7575747?v=4", - "html_url": "https:\/\/github.com\/rweijnen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rweijnen\/ivanti-automationmanager-exploit", - "description": "Exploit for Ivanti Automation Manager CVE-2022-44569", - "fork": false, - "created_at": "2024-05-08T13:00:16Z", - "updated_at": "2024-05-08T20:41:45Z", - "pushed_at": "2024-05-08T13:26:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44666.json b/2022/CVE-2022-44666.json deleted file mode 100644 index 4e669cf909..0000000000 --- a/2022/CVE-2022-44666.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602207436, - "name": "CVE-2022-44666", - "full_name": "j00sean\/CVE-2022-44666", - "owner": { - "login": "j00sean", - "id": 22483317, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22483317?v=4", - "html_url": "https:\/\/github.com\/j00sean", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/j00sean\/CVE-2022-44666", - "description": "Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF\/Contact\/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on December, 2022.", - "fork": false, - "created_at": "2023-02-15T18:12:04Z", - "updated_at": "2026-05-23T10:54:11Z", - "pushed_at": "2023-06-18T21:10:39Z", - "stargazers_count": 154, - "watchers_count": 154, - "has_discussions": false, - "forks_count": 24, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 24, - "watchers": 154, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44875.json b/2022/CVE-2022-44875.json deleted file mode 100644 index 5756b73ec5..0000000000 --- a/2022/CVE-2022-44875.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 668761323, - "name": "CVE-2022-44875-Test", - "full_name": "AesirSec\/CVE-2022-44875-Test", - "owner": { - "login": "AesirSec", - "id": 62112812, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62112812?v=4", - "html_url": "https:\/\/github.com\/AesirSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AesirSec\/CVE-2022-44875-Test", - "description": "Testing CVE-2022-44875", - "fork": false, - "created_at": "2023-07-20T14:30:58Z", - "updated_at": "2024-05-06T20:50:03Z", - "pushed_at": "2023-07-26T00:27:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-44877.json b/2022/CVE-2022-44877.json deleted file mode 100644 index 3d109e51db..0000000000 --- a/2022/CVE-2022-44877.json +++ /dev/null @@ -1,271 +0,0 @@ -[ - { - "id": 585639540, - "name": "CVE-2022-44877", - "full_name": "numanturle\/CVE-2022-44877", - "owner": { - "login": "numanturle", - "id": 7007951, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7007951?v=4", - "html_url": "https:\/\/github.com\/numanturle", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/numanturle\/CVE-2022-44877", - "description": null, - "fork": false, - "created_at": "2023-01-05T17:29:10Z", - "updated_at": "2026-05-24T05:01:58Z", - "pushed_at": "2023-01-05T17:40:18Z", - "stargazers_count": 103, - "watchers_count": 103, - "has_discussions": false, - "forks_count": 23, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 23, - "watchers": 103, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 585996269, - "name": "CVE-2022-44877-RCE", - "full_name": "komomon\/CVE-2022-44877-RCE", - "owner": { - "login": "komomon", - "id": 52700174, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52700174?v=4", - "html_url": "https:\/\/github.com\/komomon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/komomon\/CVE-2022-44877-RCE", - "description": "CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution", - "fork": false, - "created_at": "2023-01-06T16:53:51Z", - "updated_at": "2023-12-21T10:22:09Z", - "pushed_at": "2023-01-06T17:00:09Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 596515870, - "name": "CVE-2022-44877-CWP7", - "full_name": "ColdFusionX\/CVE-2022-44877-CWP7", - "owner": { - "login": "ColdFusionX", - "id": 8522240, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8522240?v=4", - "html_url": "https:\/\/github.com\/ColdFusionX", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ColdFusionX\/CVE-2022-44877-CWP7", - "description": "Control Web Panel 7 (CWP7) Remote Code Execution (RCE) (CVE-2022-44877) (Unauthenticated)", - "fork": false, - "created_at": "2023-02-02T11:00:32Z", - "updated_at": "2023-02-08T03:17:49Z", - "pushed_at": "2023-02-02T11:01:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 600549630, - "name": "CVE-2022-44877", - "full_name": "Chocapikk\/CVE-2022-44877", - "owner": { - "login": "Chocapikk", - "id": 88535377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4", - "html_url": "https:\/\/github.com\/Chocapikk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2022-44877", - "description": "Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)", - "fork": false, - "created_at": "2023-02-11T20:45:08Z", - "updated_at": "2026-06-22T14:05:39Z", - "pushed_at": "2023-02-11T22:03:19Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 602139288, - "name": "CVE-2022-44877-white-box", - "full_name": "hotpotcookie\/CVE-2022-44877-white-box", - "owner": { - "login": "hotpotcookie", - "id": 68333318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68333318?v=4", - "html_url": "https:\/\/github.com\/hotpotcookie", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hotpotcookie\/CVE-2022-44877-white-box", - "description": "Red Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)", - "fork": false, - "created_at": "2023-02-15T15:22:48Z", - "updated_at": "2024-04-28T06:08:43Z", - "pushed_at": "2023-09-06T11:54:19Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2022-44877", - "cwp", - "os-command-injection", - "pentesting" - ], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 619926011, - "name": "CVE-2022-44877", - "full_name": "dkstar11q\/CVE-2022-44877", - "owner": { - "login": "dkstar11q", - "id": 123830677, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123830677?v=4", - "html_url": "https:\/\/github.com\/dkstar11q", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkstar11q\/CVE-2022-44877", - "description": "Bash Script for Checking Command Injection Vulnerability on CentOS Web Panel [CWP] (CVE-2022-44877)", - "fork": false, - "created_at": "2023-03-27T17:27:19Z", - "updated_at": "2023-02-13T09:30:39Z", - "pushed_at": "2023-02-11T22:03:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 720567207, - "name": "CVE-2022-44877-RCE", - "full_name": "rhymsc\/CVE-2022-44877-RCE", - "owner": { - "login": "rhymsc", - "id": 104529423, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104529423?v=4", - "html_url": "https:\/\/github.com\/rhymsc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rhymsc\/CVE-2022-44877-RCE", - "description": null, - "fork": false, - "created_at": "2023-11-18T21:53:54Z", - "updated_at": "2023-11-18T21:56:49Z", - "pushed_at": "2023-11-18T21:56:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 764149155, - "name": "CVE-2022-44877", - "full_name": "G01d3nW01f\/CVE-2022-44877", - "owner": { - "login": "G01d3nW01f", - "id": 75846902, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75846902?v=4", - "html_url": "https:\/\/github.com\/G01d3nW01f", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G01d3nW01f\/CVE-2022-44877", - "description": null, - "fork": false, - "created_at": "2024-02-27T15:09:50Z", - "updated_at": "2024-02-27T15:10:39Z", - "pushed_at": "2024-02-28T00:57:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45003.json b/2022/CVE-2022-45003.json deleted file mode 100644 index 6a9659b183..0000000000 --- a/2022/CVE-2022-45003.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 620455544, - "name": "CVE-2022-45003", - "full_name": "mha98\/CVE-2022-45003", - "owner": { - "login": "mha98", - "id": 129213216, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129213216?v=4", - "html_url": "https:\/\/github.com\/mha98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mha98\/CVE-2022-45003", - "description": null, - "fork": false, - "created_at": "2023-03-28T18:04:17Z", - "updated_at": "2023-03-28T18:04:17Z", - "pushed_at": "2023-03-28T18:05:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45004.json b/2022/CVE-2022-45004.json deleted file mode 100644 index fb6bd95624..0000000000 --- a/2022/CVE-2022-45004.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 620449786, - "name": "CVE-2022-45004", - "full_name": "mha98\/CVE-2022-45004", - "owner": { - "login": "mha98", - "id": 129213216, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129213216?v=4", - "html_url": "https:\/\/github.com\/mha98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mha98\/CVE-2022-45004", - "description": null, - "fork": false, - "created_at": "2023-03-28T17:49:59Z", - "updated_at": "2023-03-28T17:49:59Z", - "pushed_at": "2023-03-28T18:03:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45025.json b/2022/CVE-2022-45025.json index 60d87328f9..a2db0be4c4 100644 --- a/2022/CVE-2022-45025.json +++ b/2022/CVE-2022-45025.json @@ -37,38 +37,5 @@ "watchers": 89, "score": 0, "subscribers_count": 1 - }, - { - "id": 652218279, - "name": "CVE-2022-45025", - "full_name": "andyhsu024\/CVE-2022-45025", - "owner": { - "login": "andyhsu024", - "id": 131547485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131547485?v=4", - "html_url": "https:\/\/github.com\/andyhsu024", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/andyhsu024\/CVE-2022-45025", - "description": null, - "fork": false, - "created_at": "2023-06-11T13:18:12Z", - "updated_at": "2023-06-11T13:18:12Z", - "pushed_at": "2023-06-11T13:18:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-45047.json b/2022/CVE-2022-45047.json deleted file mode 100644 index bb03e68671..0000000000 --- a/2022/CVE-2022-45047.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 624692526, - "name": "CVE-2022-45047", - "full_name": "hktalent\/CVE-2022-45047", - "owner": { - "login": "hktalent", - "id": 18223385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18223385?v=4", - "html_url": "https:\/\/github.com\/hktalent", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hktalent\/CVE-2022-45047", - "description": "POC,EXP,chatGPT for me", - "fork": false, - "created_at": "2023-04-07T03:16:47Z", - "updated_at": "2023-04-07T03:25:11Z", - "pushed_at": "2023-04-07T03:17:10Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45059.json b/2022/CVE-2022-45059.json deleted file mode 100644 index 7077f44d26..0000000000 --- a/2022/CVE-2022-45059.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 717712143, - "name": "CVE-2022-45059-demo", - "full_name": "martinvks\/CVE-2022-45059-demo", - "owner": { - "login": "martinvks", - "id": 5469666, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5469666?v=4", - "html_url": "https:\/\/github.com\/martinvks", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/martinvks\/CVE-2022-45059-demo", - "description": null, - "fork": false, - "created_at": "2023-11-12T10:51:54Z", - "updated_at": "2023-11-14T08:03:46Z", - "pushed_at": "2023-11-14T08:04:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4510.json b/2022/CVE-2022-4510.json deleted file mode 100644 index 250d5a472e..0000000000 --- a/2022/CVE-2022-4510.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 598309338, - "name": "CVE-2022-4510", - "full_name": "electr0sm0g\/CVE-2022-4510", - "owner": { - "login": "electr0sm0g", - "id": 8340491, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8340491?v=4", - "html_url": "https:\/\/github.com\/electr0sm0g", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/electr0sm0g\/CVE-2022-4510", - "description": "Binwalk Remote Command Execution", - "fork": false, - "created_at": "2023-02-06T20:53:49Z", - "updated_at": "2025-10-25T01:41:31Z", - "pushed_at": "2023-02-06T20:54:33Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 659028420, - "name": "CVE-2022-4510-WalkingPath", - "full_name": "adhikara13\/CVE-2022-4510-WalkingPath", - "owner": { - "login": "adhikara13", - "id": 44716348, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44716348?v=4", - "html_url": "https:\/\/github.com\/adhikara13", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/adhikara13\/CVE-2022-4510-WalkingPath", - "description": "A Python script for generating exploits targeting CVE-2022-4510 RCE Binwalk. It supports SSH, command execution, and reverse shell options. Exploits are saved in PNG format. Ideal for testing and demonstrations.", - "fork": false, - "created_at": "2023-06-27T02:20:13Z", - "updated_at": "2024-11-22T19:48:06Z", - "pushed_at": "2023-06-27T02:29:26Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 14, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 665275498, - "name": "BadPfs-CVE-2022-4510", - "full_name": "Kalagious\/BadPfs-CVE-2022-4510", - "owner": { - "login": "Kalagious", - "id": 44515549, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44515549?v=4", - "html_url": "https:\/\/github.com\/Kalagious", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kalagious\/BadPfs-CVE-2022-4510", - "description": "Python script that generates pfs payloads to exploit CVE-2022-4510", - "fork": false, - "created_at": "2023-07-11T20:55:58Z", - "updated_at": "2025-02-14T17:11:42Z", - "pushed_at": "2023-07-11T20:59:48Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45354.json b/2022/CVE-2022-45354.json deleted file mode 100644 index 0d60c3d088..0000000000 --- a/2022/CVE-2022-45354.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 665038717, - "name": "CVE-2022-45354", - "full_name": "RandomRobbieBF\/CVE-2022-45354", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-45354", - "description": "Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API ", - "fork": false, - "created_at": "2023-07-11T09:51:40Z", - "updated_at": "2024-08-12T20:32:05Z", - "pushed_at": "2023-07-11T10:14:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4539.json b/2022/CVE-2022-4539.json deleted file mode 100644 index 3219e6bfa9..0000000000 --- a/2022/CVE-2022-4539.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 850688674, - "name": "CVE-2022-4539", - "full_name": "Abdurahmon3236\/CVE-2022-4539", - "owner": { - "login": "Abdurahmon3236", - "id": 76862934, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76862934?v=4", - "html_url": "https:\/\/github.com\/Abdurahmon3236", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Abdurahmon3236\/CVE-2022-4539", - "description": null, - "fork": false, - "created_at": "2024-09-01T13:59:21Z", - "updated_at": "2024-09-01T13:59:38Z", - "pushed_at": "2024-09-01T13:59:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4543.json b/2022/CVE-2022-4543.json index e233501f7a..5461670c28 100644 --- a/2022/CVE-2022-4543.json +++ b/2022/CVE-2022-4543.json @@ -1,37 +1,4 @@ [ - { - "id": 664453374, - "name": "cve-2022-4543-wrapper", - "full_name": "sunichi\/cve-2022-4543-wrapper", - "owner": { - "login": "sunichi", - "id": 14269425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14269425?v=4", - "html_url": "https:\/\/github.com\/sunichi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sunichi\/cve-2022-4543-wrapper", - "description": null, - "fork": false, - "created_at": "2023-07-10T02:34:01Z", - "updated_at": "2025-10-30T07:14:19Z", - "pushed_at": "2023-11-22T07:48:54Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - }, { "id": 1214259134, "name": "CVE-2022-4543-EntryBleed", diff --git a/2022/CVE-2022-45436.json b/2022/CVE-2022-45436.json deleted file mode 100644 index 057061560a..0000000000 --- a/2022/CVE-2022-45436.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602654488, - "name": "CVE-2022-45436", - "full_name": "damodarnaik\/CVE-2022-45436", - "owner": { - "login": "damodarnaik", - "id": 48156631, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48156631?v=4", - "html_url": "https:\/\/github.com\/damodarnaik", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/damodarnaik\/CVE-2022-45436", - "description": null, - "fork": false, - "created_at": "2023-02-16T17:03:30Z", - "updated_at": "2023-02-16T17:03:30Z", - "pushed_at": "2023-02-16T17:26:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45477.json b/2022/CVE-2022-45477.json deleted file mode 100644 index 385b50bcae..0000000000 --- a/2022/CVE-2022-45477.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 606922362, - "name": "nmap-vulnerability-scan-scripts", - "full_name": "M507\/nmap-vulnerability-scan-scripts", - "owner": { - "login": "M507", - "id": 38591075, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38591075?v=4", - "html_url": "https:\/\/github.com\/M507", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/M507\/nmap-vulnerability-scan-scripts", - "description": "nmap detection scripts for CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481", - "fork": false, - "created_at": "2023-02-26T23:39:42Z", - "updated_at": "2026-02-05T10:50:18Z", - "pushed_at": "2024-04-19T19:57:39Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "network-discovery", - "nmap-scan-script", - "nmap-scripts", - "vulnerability-detection", - "vulnerability-scanners" - ], - "visibility": "public", - "forks": 1, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45599.json b/2022/CVE-2022-45599.json deleted file mode 100644 index 1939c881e9..0000000000 --- a/2022/CVE-2022-45599.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 604672421, - "name": "CVE-2022-45599", - "full_name": "ethancunt\/CVE-2022-45599", - "owner": { - "login": "ethancunt", - "id": 25339018, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25339018?v=4", - "html_url": "https:\/\/github.com\/ethancunt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ethancunt\/CVE-2022-45599", - "description": null, - "fork": false, - "created_at": "2023-02-21T14:55:21Z", - "updated_at": "2023-02-21T14:58:57Z", - "pushed_at": "2023-02-21T15:05:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45600.json b/2022/CVE-2022-45600.json deleted file mode 100644 index 7975587809..0000000000 --- a/2022/CVE-2022-45600.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 604671777, - "name": "CVE-2022-45600", - "full_name": "ethancunt\/CVE-2022-45600", - "owner": { - "login": "ethancunt", - "id": 25339018, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25339018?v=4", - "html_url": "https:\/\/github.com\/ethancunt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ethancunt\/CVE-2022-45600", - "description": null, - "fork": false, - "created_at": "2023-02-21T14:53:54Z", - "updated_at": "2023-02-21T14:58:54Z", - "pushed_at": "2023-02-21T14:54:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45688.json b/2022/CVE-2022-45688.json deleted file mode 100644 index a0fcb770df..0000000000 --- a/2022/CVE-2022-45688.json +++ /dev/null @@ -1,167 +0,0 @@ -[ - { - "id": 736427980, - "name": "jsonorg-tp1", - "full_name": "scabench\/jsonorg-tp1", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/jsonorg-tp1", - "description": "simple application with a CVE-2022-45688 vulnerability", - "fork": false, - "created_at": "2023-12-27T22:05:06Z", - "updated_at": "2023-12-27T22:58:41Z", - "pushed_at": "2024-01-21T01:37:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 736807099, - "name": "jsonorg-fp1", - "full_name": "scabench\/jsonorg-fp1", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/jsonorg-fp1", - "description": "simple application with a (unreachable!) CVE-2022-45688 vulnerability", - "fork": false, - "created_at": "2023-12-28T23:52:36Z", - "updated_at": "2024-01-08T20:16:26Z", - "pushed_at": "2024-01-05T06:20:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 736810389, - "name": "jsonorg-fp2", - "full_name": "scabench\/jsonorg-fp2", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/jsonorg-fp2", - "description": "simple application with a (unreachable!) CVE-2022-45688 vulnerability", - "fork": false, - "created_at": "2023-12-29T00:14:20Z", - "updated_at": "2023-12-29T02:00:00Z", - "pushed_at": "2024-01-05T06:22:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 736826577, - "name": "jsonorg-fp3", - "full_name": "scabench\/jsonorg-fp3", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/jsonorg-fp3", - "description": "simple application with a (unreachable!) CVE-2022-45688 vulnerability", - "fork": false, - "created_at": "2023-12-29T02:01:22Z", - "updated_at": "2023-12-29T08:19:56Z", - "pushed_at": "2024-01-05T06:24:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 746077851, - "name": "jsonorg-fn1", - "full_name": "scabench\/jsonorg-fn1", - "owner": { - "login": "scabench", - "id": 154115874, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154115874?v=4", - "html_url": "https:\/\/github.com\/scabench", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scabench\/jsonorg-fn1", - "description": "simple application with a CVE-2022-45688 vulnerability", - "fork": false, - "created_at": "2024-01-21T01:28:23Z", - "updated_at": "2024-01-21T12:04:15Z", - "pushed_at": "2024-01-21T01:44:29Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45701.json b/2022/CVE-2022-45701.json deleted file mode 100644 index 62344c802d..0000000000 --- a/2022/CVE-2022-45701.json +++ /dev/null @@ -1,87 +0,0 @@ -[ - { - "id": 602214790, - "name": "CVE-2022-45701", - "full_name": "yerodin\/CVE-2022-45701", - "owner": { - "login": "yerodin", - "id": 9205071, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9205071?v=4", - "html_url": "https:\/\/github.com\/yerodin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yerodin\/CVE-2022-45701", - "description": "Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated) POC Exploit (CVE-2022-45701)", - "fork": false, - "created_at": "2023-02-15T18:31:32Z", - "updated_at": "2026-03-18T16:45:29Z", - "pushed_at": "2023-02-16T18:15:55Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 840470520, - "name": "CVE-2022-45701", - "full_name": "geniuszly\/CVE-2022-45701", - "owner": { - "login": "geniuszly", - "id": 137893386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4", - "html_url": "https:\/\/github.com\/geniuszly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geniuszly\/CVE-2022-45701", - "description": "it is script designed to exploit certain vulnerabilities in routers by sending payloads through SNMP (Simple Network Management Protocol). The script automates the process of authorization, payload generation, and execution, allowing for remote command execution on the target device.", - "fork": false, - "created_at": "2024-08-09T19:30:20Z", - "updated_at": "2024-10-06T16:41:27Z", - "pushed_at": "2024-08-09T19:31:12Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "arris", - "arris-modem", - "arris-router", - "buffer-overflow", - "cve", - "cve-2022-45701", - "cybersecurity", - "ethical-hacking", - "exploit", - "exploit-development", - "linux", - "penetration-testing", - "poc", - "python", - "security", - "snmp", - "vulnerability", - "vulnerability-research" - ], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45728.json b/2022/CVE-2022-45728.json deleted file mode 100644 index dfcba3e095..0000000000 --- a/2022/CVE-2022-45728.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585251034, - "name": "CVE-2022-45728", - "full_name": "sudoninja-noob\/CVE-2022-45728", - "owner": { - "login": "sudoninja-noob", - "id": 18701598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18701598?v=4", - "html_url": "https:\/\/github.com\/sudoninja-noob", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sudoninja-noob\/CVE-2022-45728", - "description": null, - "fork": false, - "created_at": "2023-01-04T17:41:57Z", - "updated_at": "2023-01-04T17:41:57Z", - "pushed_at": "2023-01-04T17:43:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45729.json b/2022/CVE-2022-45729.json deleted file mode 100644 index c35cb35952..0000000000 --- a/2022/CVE-2022-45729.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585253557, - "name": "CVE-2022-45729", - "full_name": "sudoninja-noob\/CVE-2022-45729", - "owner": { - "login": "sudoninja-noob", - "id": 18701598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18701598?v=4", - "html_url": "https:\/\/github.com\/sudoninja-noob", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sudoninja-noob\/CVE-2022-45729", - "description": null, - "fork": false, - "created_at": "2023-01-04T17:50:00Z", - "updated_at": "2023-01-04T17:50:00Z", - "pushed_at": "2023-01-04T17:50:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45770.json b/2022/CVE-2022-45770.json deleted file mode 100644 index b1400ba768..0000000000 --- a/2022/CVE-2022-45770.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 591626374, - "name": "CVE-2022-45770", - "full_name": "Marsel-marsel\/CVE-2022-45770", - "owner": { - "login": "Marsel-marsel", - "id": 19998507, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19998507?v=4", - "html_url": "https:\/\/github.com\/Marsel-marsel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Marsel-marsel\/CVE-2022-45770", - "description": "LPE exploit via windows driver", - "fork": false, - "created_at": "2023-01-21T10:32:02Z", - "updated_at": "2023-09-02T18:57:44Z", - "pushed_at": "2023-04-25T07:54:36Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45771.json b/2022/CVE-2022-45771.json index cdb197f82d..9bfbf200bb 100644 --- a/2022/CVE-2022-45771.json +++ b/2022/CVE-2022-45771.json @@ -36,44 +36,5 @@ "watchers": 47, "score": 0, "subscribers_count": 1 - }, - { - "id": 600465186, - "name": "CVE-2022-45771", - "full_name": "yuriisanin\/CVE-2022-45771", - "owner": { - "login": "yuriisanin", - "id": 11749007, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11749007?v=4", - "html_url": "https:\/\/github.com\/yuriisanin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yuriisanin\/CVE-2022-45771", - "description": "[PoC] Privilege escalation & code execution via LFI in PwnDoC ", - "fork": false, - "created_at": "2023-02-11T15:26:14Z", - "updated_at": "2025-08-29T16:33:48Z", - "pushed_at": "2023-02-11T15:30:56Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "privesc", - "privilege-escalation", - "pwndoc", - "rce" - ], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-45808.json b/2022/CVE-2022-45808.json deleted file mode 100644 index 594092dcba..0000000000 --- a/2022/CVE-2022-45808.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 680205273, - "name": "CVE-2022-45808", - "full_name": "RandomRobbieBF\/CVE-2022-45808", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-45808", - "description": "LearnPress Plugin < 4.2.0 - Unauthenticated SQLi", - "fork": false, - "created_at": "2023-08-18T15:43:50Z", - "updated_at": "2024-08-12T20:32:31Z", - "pushed_at": "2023-08-18T15:45:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-45934.json b/2022/CVE-2022-45934.json deleted file mode 100644 index a8be994854..0000000000 --- a/2022/CVE-2022-45934.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 591176120, - "name": "linux-4.19.72_CVE-2022-45934", - "full_name": "Trinadh465\/linux-4.19.72_CVE-2022-45934", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/linux-4.19.72_CVE-2022-45934", - "description": null, - "fork": false, - "created_at": "2023-01-20T05:00:05Z", - "updated_at": "2023-03-10T01:13:39Z", - "pushed_at": "2023-01-20T05:09:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 591256259, - "name": "linux-4.1.15_CVE-2022-45934", - "full_name": "Trinadh465\/linux-4.1.15_CVE-2022-45934", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/linux-4.1.15_CVE-2022-45934", - "description": null, - "fork": false, - "created_at": "2023-01-20T10:03:07Z", - "updated_at": "2023-03-10T01:20:04Z", - "pushed_at": "2023-01-20T10:08:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 618323077, - "name": "linux-4.1.15_CVE-2022-45934", - "full_name": "Satheesh575555\/linux-4.1.15_CVE-2022-45934", - "owner": { - "login": "Satheesh575555", - "id": 102573923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4", - "html_url": "https:\/\/github.com\/Satheesh575555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Satheesh575555\/linux-4.1.15_CVE-2022-45934", - "description": null, - "fork": false, - "created_at": "2023-03-24T08:16:44Z", - "updated_at": "2023-03-24T08:21:50Z", - "pushed_at": "2023-03-24T08:19:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46080.json b/2022/CVE-2022-46080.json deleted file mode 100644 index 125ad187f2..0000000000 --- a/2022/CVE-2022-46080.json +++ /dev/null @@ -1,88 +0,0 @@ -[ - { - "id": 662043677, - "name": "CVE-2022-46080", - "full_name": "yerodin\/CVE-2022-46080", - "owner": { - "login": "yerodin", - "id": 9205071, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9205071?v=4", - "html_url": "https:\/\/github.com\/yerodin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yerodin\/CVE-2022-46080", - "description": "Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution", - "fork": false, - "created_at": "2023-07-04T08:31:04Z", - "updated_at": "2025-08-28T19:10:09Z", - "pushed_at": "2023-07-04T08:31:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 840471119, - "name": "CVE-2022-46080", - "full_name": "geniuszly\/CVE-2022-46080", - "owner": { - "login": "geniuszly", - "id": 137893386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137893386?v=4", - "html_url": "https:\/\/github.com\/geniuszly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geniuszly\/CVE-2022-46080", - "description": "it is script that enables Telnet on routers by sending a specially crafted request. The script allows users to specify the router's URL, Telnet port, and password. It validates the inputs and logs the process, providing feedback on whether the exploit was successful.", - "fork": false, - "created_at": "2024-08-09T19:32:32Z", - "updated_at": "2026-01-19T00:01:16Z", - "pushed_at": "2024-08-11T07:29:30Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "buffer-overflow", - "cve", - "cve-2022-46080", - "cybersecurity", - "ethical-hacking", - "exploit", - "exploit-development", - "linux", - "nexxt", - "nexxt-router", - "penetration-testing", - "poc", - "rce", - "rce-exploit", - "router", - "security", - "telnet", - "vulnerability", - "vulnerability-research" - ], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46087.json b/2022/CVE-2022-46087.json deleted file mode 100644 index 1c191cdebc..0000000000 --- a/2022/CVE-2022-46087.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 616850712, - "name": "CVE-2022-46087", - "full_name": "G37SYS73M\/CVE-2022-46087", - "owner": { - "login": "G37SYS73M", - "id": 77768845, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77768845?v=4", - "html_url": "https:\/\/github.com\/G37SYS73M", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G37SYS73M\/CVE-2022-46087", - "description": "CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.", - "fork": false, - "created_at": "2023-03-21T08:02:48Z", - "updated_at": "2023-03-21T08:02:48Z", - "pushed_at": "2023-03-21T08:03:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46104.json b/2022/CVE-2022-46104.json deleted file mode 100644 index 7053aac0e0..0000000000 --- a/2022/CVE-2022-46104.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 590562074, - "name": "CVE-2022-46104---POC", - "full_name": "NurSec747\/CVE-2022-46104---POC", - "owner": { - "login": "NurSec747", - "id": 123009127, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123009127?v=4", - "html_url": "https:\/\/github.com\/NurSec747", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NurSec747\/CVE-2022-46104---POC", - "description": null, - "fork": false, - "created_at": "2023-01-18T17:41:06Z", - "updated_at": "2023-01-18T17:41:06Z", - "pushed_at": "2023-01-18T17:51:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4611.json b/2022/CVE-2022-4611.json deleted file mode 100644 index bda383b545..0000000000 --- a/2022/CVE-2022-4611.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 663142991, - "name": "CVE-2022-4611", - "full_name": "Phamchie\/CVE-2022-4611", - "owner": { - "login": "Phamchie", - "id": 97181079, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97181079?v=4", - "html_url": "https:\/\/github.com\/Phamchie", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Phamchie\/CVE-2022-4611", - "description": null, - "fork": false, - "created_at": "2023-07-06T16:40:08Z", - "updated_at": "2023-08-05T15:42:03Z", - "pushed_at": "2023-07-06T16:50:24Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 663236213, - "name": "CVE-2022-4611", - "full_name": "fgsoftware1\/CVE-2022-4611", - "owner": { - "login": "fgsoftware1", - "id": 60277618, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60277618?v=4", - "html_url": "https:\/\/github.com\/fgsoftware1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fgsoftware1\/CVE-2022-4611", - "description": null, - "fork": false, - "created_at": "2023-07-06T21:28:29Z", - "updated_at": "2023-07-06T21:31:15Z", - "pushed_at": "2023-07-06T21:31:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4616.json b/2022/CVE-2022-4616.json deleted file mode 100644 index 659a2cd5b3..0000000000 --- a/2022/CVE-2022-4616.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 639674200, - "name": "CVE-2022-4616-POC", - "full_name": "ahanel13\/CVE-2022-4616-POC", - "owner": { - "login": "ahanel13", - "id": 47185077, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47185077?v=4", - "html_url": "https:\/\/github.com\/ahanel13", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ahanel13\/CVE-2022-4616-POC", - "description": "This Python script aids in exploiting CVE-2022-46169 by automating payload delivery and response handling. It starts an HTTP server, listens for requests, and enables command input for real-time interaction with a vulnerable target.", - "fork": false, - "created_at": "2023-05-12T01:20:15Z", - "updated_at": "2023-05-24T22:36:05Z", - "pushed_at": "2023-05-24T22:36:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46164.json b/2022/CVE-2022-46164.json deleted file mode 100644 index 69507f9013..0000000000 --- a/2022/CVE-2022-46164.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585004232, - "name": "CVE-2022-46164-poc", - "full_name": "stephenbradshaw\/CVE-2022-46164-poc", - "owner": { - "login": "stephenbradshaw", - "id": 7692557, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7692557?v=4", - "html_url": "https:\/\/github.com\/stephenbradshaw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/stephenbradshaw\/CVE-2022-46164-poc", - "description": "Basic POC exploit for CVE-2022-46164", - "fork": false, - "created_at": "2023-01-04T04:17:30Z", - "updated_at": "2026-01-02T13:30:24Z", - "pushed_at": "2023-01-11T07:16:34Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46169.json b/2022/CVE-2022-46169.json index 212a32948d..be9dc9c43a 100644 --- a/2022/CVE-2022-46169.json +++ b/2022/CVE-2022-46169.json @@ -139,955 +139,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 585629170, - "name": "CVE-2022-46169", - "full_name": "sAsPeCt488\/CVE-2022-46169", - "owner": { - "login": "sAsPeCt488", - "id": 55363474, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55363474?v=4", - "html_url": "https:\/\/github.com\/sAsPeCt488", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sAsPeCt488\/CVE-2022-46169", - "description": "PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22", - "fork": false, - "created_at": "2023-01-05T16:56:06Z", - "updated_at": "2026-01-26T09:13:50Z", - "pushed_at": "2023-05-05T18:06:58Z", - "stargazers_count": 29, - "watchers_count": 29, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cacti", - "cve-2022-46169", - "poc" - ], - "visibility": "public", - "forks": 7, - "watchers": 29, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 588437634, - "name": "CVE-2022-46169", - "full_name": "c3rrberu5\/CVE-2022-46169", - "owner": { - "login": "c3rrberu5", - "id": 109983457, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109983457?v=4", - "html_url": "https:\/\/github.com\/c3rrberu5", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/c3rrberu5\/CVE-2022-46169", - "description": "Exploit to CVE-2022-46169 vulnerability", - "fork": false, - "created_at": "2023-01-13T05:37:56Z", - "updated_at": "2025-10-30T19:32:04Z", - "pushed_at": "2023-01-16T23:14:04Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 589360535, - "name": "CVE-2022-46169", - "full_name": "Habib0x0\/CVE-2022-46169", - "owner": { - "login": "Habib0x0", - "id": 24976957, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24976957?v=4", - "html_url": "https:\/\/github.com\/Habib0x0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Habib0x0\/CVE-2022-46169", - "description": "Cacti: Unauthenticated Remote Code Execution Exploit in Ruby ", - "fork": false, - "created_at": "2023-01-15T22:46:52Z", - "updated_at": "2023-02-13T09:30:29Z", - "pushed_at": "2023-01-20T07:10:39Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 589524043, - "name": "CVE-2022-46169_POC", - "full_name": "N1arut\/CVE-2022-46169_POC", - "owner": { - "login": "N1arut", - "id": 41994914, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41994914?v=4", - "html_url": "https:\/\/github.com\/N1arut", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/N1arut\/CVE-2022-46169_POC", - "description": "RCE POC for CVE-2022-46169", - "fork": false, - "created_at": "2023-01-16T10:21:26Z", - "updated_at": "2023-10-08T20:21:44Z", - "pushed_at": "2023-01-17T16:32:46Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 596690527, - "name": "CVE-2022-46169", - "full_name": "miko550\/CVE-2022-46169", - "owner": { - "login": "miko550", - "id": 83682793, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83682793?v=4", - "html_url": "https:\/\/github.com\/miko550", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/miko550\/CVE-2022-46169", - "description": null, - "fork": false, - "created_at": "2023-02-02T18:21:08Z", - "updated_at": "2023-02-02T18:25:02Z", - "pushed_at": "2023-02-02T18:42:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 612724556, - "name": "cacti-cve-2022-46169-exploit", - "full_name": "ariyaadinatha\/cacti-cve-2022-46169-exploit", - "owner": { - "login": "ariyaadinatha", - "id": 54601298, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54601298?v=4", - "html_url": "https:\/\/github.com\/ariyaadinatha", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ariyaadinatha\/cacti-cve-2022-46169-exploit", - "description": "This is poc of CVE-2022-46169 authentication bypass and remote code execution", - "fork": false, - "created_at": "2023-03-11T19:39:44Z", - "updated_at": "2026-02-07T11:12:05Z", - "pushed_at": "2023-05-18T19:06:36Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 616701865, - "name": "CVE-2022-46169", - "full_name": "0x0Jackal\/CVE-2022-46169", - "owner": { - "login": "0x0Jackal", - "id": 128431701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128431701?v=4", - "html_url": "https:\/\/github.com\/0x0Jackal", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0x0Jackal\/CVE-2022-46169", - "description": "Repo for CVE-2022-46169", - "fork": false, - "created_at": "2023-03-20T22:54:18Z", - "updated_at": "2025-09-22T01:02:23Z", - "pushed_at": "2023-03-21T04:56:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 622325901, - "name": "cacti-rce-cve-2022-46169-vulnerable-application", - "full_name": "m3ssap0\/cacti-rce-cve-2022-46169-vulnerable-application", - "owner": { - "login": "m3ssap0", - "id": 705120, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/705120?v=4", - "html_url": "https:\/\/github.com\/m3ssap0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/m3ssap0\/cacti-rce-cve-2022-46169-vulnerable-application", - "description": "WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk!", - "fork": false, - "created_at": "2023-04-01T19:20:29Z", - "updated_at": "2023-09-22T17:23:40Z", - "pushed_at": "2023-04-03T11:01:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cacti", - "command-injection", - "cve-2022-46169", - "rce", - "vulnerable-application" - ], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 622368239, - "name": "CVE-2022-46169_poc", - "full_name": "devAL3X\/CVE-2022-46169_poc", - "owner": { - "login": "devAL3X", - "id": 40294005, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40294005?v=4", - "html_url": "https:\/\/github.com\/devAL3X", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/devAL3X\/CVE-2022-46169_poc", - "description": null, - "fork": false, - "created_at": "2023-04-01T22:37:37Z", - "updated_at": "2023-04-01T22:37:46Z", - "pushed_at": "2023-04-13T15:18:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 626318342, - "name": "CVE-2022-46169_unauth_remote_code_execution", - "full_name": "svchost9913\/CVE-2022-46169_unauth_remote_code_execution", - "owner": { - "login": "svchost9913", - "id": 104246313, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104246313?v=4", - "html_url": "https:\/\/github.com\/svchost9913", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/svchost9913\/CVE-2022-46169_unauth_remote_code_execution", - "description": "Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti < 1.2.23 and < 1.3.0", - "fork": false, - "created_at": "2023-04-11T08:21:53Z", - "updated_at": "2023-04-11T08:16:52Z", - "pushed_at": "2023-04-09T11:02:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 627335815, - "name": "CVE-2022-46169", - "full_name": "icebreack\/CVE-2022-46169", - "owner": { - "login": "icebreack", - "id": 6855402, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6855402?v=4", - "html_url": "https:\/\/github.com\/icebreack", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/icebreack\/CVE-2022-46169", - "description": "Fixed exploit for CVE-2022-46169 (originally from https:\/\/www.exploit-db.com\/exploits\/51166)", - "fork": false, - "created_at": "2023-04-13T08:55:08Z", - "updated_at": "2025-04-13T23:30:25Z", - "pushed_at": "2023-04-13T08:55:51Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 634367688, - "name": "CVE-2022-46169", - "full_name": "devilgothies\/CVE-2022-46169", - "owner": { - "login": "devilgothies", - "id": 104858033, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104858033?v=4", - "html_url": "https:\/\/github.com\/devilgothies", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/devilgothies\/CVE-2022-46169", - "description": "PoC for CVE-2022-46169 that affects Cacti 1.2.22 version", - "fork": false, - "created_at": "2023-04-29T22:14:17Z", - "updated_at": "2023-04-29T22:28:21Z", - "pushed_at": "2023-04-29T22:25:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cacti", - "cve-2022-46169", - "poc", - "rce" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 634502064, - "name": "CVE-2022-46169", - "full_name": "yassinebk\/CVE-2022-46169", - "owner": { - "login": "yassinebk", - "id": 62627838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62627838?v=4", - "html_url": "https:\/\/github.com\/yassinebk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yassinebk\/CVE-2022-46169", - "description": "CVE-2022-46169", - "fork": false, - "created_at": "2023-04-30T10:37:44Z", - "updated_at": "2023-04-30T10:37:52Z", - "pushed_at": "2023-04-30T10:37:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 634912432, - "name": "CVE-2022-46169", - "full_name": "ruycr4ft\/CVE-2022-46169", - "owner": { - "login": "ruycr4ft", - "id": 103446004, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103446004?v=4", - "html_url": "https:\/\/github.com\/ruycr4ft", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ruycr4ft\/CVE-2022-46169", - "description": "Exploit for cacti version 1.2.22", - "fork": false, - "created_at": "2023-05-01T14:29:28Z", - "updated_at": "2025-05-22T08:44:28Z", - "pushed_at": "2023-10-11T14:48:53Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 635027757, - "name": "CVE-2022-46169-CACTI-1.2.22", - "full_name": "FredBrave\/CVE-2022-46169-CACTI-1.2.22", - "owner": { - "login": "FredBrave", - "id": 114189847, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114189847?v=4", - "html_url": "https:\/\/github.com\/FredBrave", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FredBrave\/CVE-2022-46169-CACTI-1.2.22", - "description": "This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer.", - "fork": false, - "created_at": "2023-05-01T20:00:23Z", - "updated_at": "2026-06-12T14:45:42Z", - "pushed_at": "2023-09-11T17:56:27Z", - "stargazers_count": 42, - "watchers_count": 42, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 42, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 635123796, - "name": "RCE-Cacti-1.2.22", - "full_name": "r1nzleer\/RCE-Cacti-1.2.22", - "owner": { - "login": "r1nzleer", - "id": 89037170, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89037170?v=4", - "html_url": "https:\/\/github.com\/r1nzleer", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r1nzleer\/RCE-Cacti-1.2.22", - "description": "Este es un código del exploit CVE-2022-46169, que recree utilizando Python3! Si por ahí estás haciendo una máquina de HTB, esto te puede ser útil... 🤞✨ ", - "fork": false, - "created_at": "2023-05-02T02:41:44Z", - "updated_at": "2024-10-31T16:23:19Z", - "pushed_at": "2023-05-02T03:36:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 635433764, - "name": "CVE-2022-46169", - "full_name": "Safarchand\/CVE-2022-46169", - "owner": { - "login": "Safarchand", - "id": 38681779, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38681779?v=4", - "html_url": "https:\/\/github.com\/Safarchand", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Safarchand\/CVE-2022-46169", - "description": "Improved PoC for Unauthenticated RCE on Cacti <= 1.2.22 - CVE-2022-46169", - "fork": false, - "created_at": "2023-05-02T17:26:11Z", - "updated_at": "2023-05-04T17:07:23Z", - "pushed_at": "2023-05-02T17:50:20Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cacti-rce", - "cve-2022-46169", - "poc", - "rce" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 636441307, - "name": "CVE-2022-46169", - "full_name": "BKreisel\/CVE-2022-46169", - "owner": { - "login": "BKreisel", - "id": 1513073, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1513073?v=4", - "html_url": "https:\/\/github.com\/BKreisel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BKreisel\/CVE-2022-46169", - "description": "🐍 Python Exploit for CVE-2022-46169", - "fork": false, - "created_at": "2023-05-04T21:21:05Z", - "updated_at": "2023-05-04T22:04:32Z", - "pushed_at": "2023-05-04T22:03:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-46169", - "exploit", - "python" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 640014872, - "name": "EH2-PoC", - "full_name": "Rickster5555\/EH2-PoC", - "owner": { - "login": "Rickster5555", - "id": 92229061, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92229061?v=4", - "html_url": "https:\/\/github.com\/Rickster5555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rickster5555\/EH2-PoC", - "description": "A simple PoC for CVE-2022-46169 a.k.a Cacti Unauthenticated Command Injection, a vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti prior from version 1.2.17 to 1.2.22", - "fork": false, - "created_at": "2023-05-12T19:08:45Z", - "updated_at": "2023-05-12T19:29:22Z", - "pushed_at": "2023-05-15T02:36:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 643437445, - "name": "CVE-2022-46169", - "full_name": "antisecc\/CVE-2022-46169", - "owner": { - "login": "antisecc", - "id": 92209707, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92209707?v=4", - "html_url": "https:\/\/github.com\/antisecc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/antisecc\/CVE-2022-46169", - "description": null, - "fork": false, - "created_at": "2023-05-21T06:43:17Z", - "updated_at": "2023-05-21T06:44:18Z", - "pushed_at": "2023-05-21T06:48:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 649645452, - "name": "CVE-2022-46169", - "full_name": "nou-man\/CVE-2022-46169", - "owner": { - "login": "nou-man", - "id": 100760464, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100760464?v=4", - "html_url": "https:\/\/github.com\/nou-man", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nou-man\/CVE-2022-46169", - "description": "Proof of concept \/ CTF script for exploiting CVE-2022-46169 in Cacti, versions >=1.2.22", - "fork": false, - "created_at": "2023-06-05T10:28:32Z", - "updated_at": "2023-06-05T10:28:33Z", - "pushed_at": "2023-05-03T19:56:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 673282845, - "name": "CVE-2022-46169", - "full_name": "dawnl3ss\/CVE-2022-46169", - "owner": { - "login": "dawnl3ss", - "id": 52249849, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52249849?v=4", - "html_url": "https:\/\/github.com\/dawnl3ss", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dawnl3ss\/CVE-2022-46169", - "description": "Unauthenticated Command Injection in Cacti <= 1.2.22", - "fork": false, - "created_at": "2023-08-01T09:29:30Z", - "updated_at": "2023-08-01T09:30:11Z", - "pushed_at": "2023-08-01T09:31:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 685095951, - "name": "CVE-2022-46169", - "full_name": "a1665454764\/CVE-2022-46169", - "owner": { - "login": "a1665454764", - "id": 143511005, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143511005?v=4", - "html_url": "https:\/\/github.com\/a1665454764", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/a1665454764\/CVE-2022-46169", - "description": "CVE-2022-46169", - "fork": false, - "created_at": "2023-08-30T14:03:41Z", - "updated_at": "2023-11-09T02:46:53Z", - "pushed_at": "2023-08-30T14:06:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 689539220, - "name": "CVE-2022-46169-Exploit", - "full_name": "0xZon\/CVE-2022-46169-Exploit", - "owner": { - "login": "0xZon", - "id": 52760493, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52760493?v=4", - "html_url": "https:\/\/github.com\/0xZon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xZon\/CVE-2022-46169-Exploit", - "description": null, - "fork": false, - "created_at": "2023-09-10T06:03:22Z", - "updated_at": "2023-09-10T06:03:53Z", - "pushed_at": "2023-09-10T06:28:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 722684867, - "name": "CVE-2022-46169", - "full_name": "0xN7y\/CVE-2022-46169", - "owner": { - "login": "0xN7y", - "id": 70061541, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70061541?v=4", - "html_url": "https:\/\/github.com\/0xN7y", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xN7y\/CVE-2022-46169", - "description": "Exploit for CVE-2022-46169 ", - "fork": false, - "created_at": "2023-11-23T17:36:20Z", - "updated_at": "2023-11-24T04:38:07Z", - "pushed_at": "2023-12-07T08:02:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 778972816, - "name": "CVE-2022-46169-Cacti-v1.2.22-RCE", - "full_name": "mind2hex\/CVE-2022-46169-Cacti-v1.2.22-RCE", - "owner": { - "login": "mind2hex", - "id": 51345640, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51345640?v=4", - "html_url": "https:\/\/github.com\/mind2hex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mind2hex\/CVE-2022-46169-Cacti-v1.2.22-RCE", - "description": null, - "fork": false, - "created_at": "2024-03-28T19:23:56Z", - "updated_at": "2025-07-04T03:03:16Z", - "pushed_at": "2024-03-28T19:24:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 814041598, - "name": "CVE-2022-46169", - "full_name": "HPT-Intern-Task-Submission\/CVE-2022-46169", - "owner": { - "login": "HPT-Intern-Task-Submission", - "id": 169382051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169382051?v=4", - "html_url": "https:\/\/github.com\/HPT-Intern-Task-Submission", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HPT-Intern-Task-Submission\/CVE-2022-46169", - "description": null, - "fork": false, - "created_at": "2024-06-12T08:24:30Z", - "updated_at": "2024-06-14T03:02:02Z", - "pushed_at": "2024-06-14T03:01:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 912195951, - "name": "CVE-2022-46169", - "full_name": "lof1sec\/CVE-2022-46169", - "owner": { - "login": "lof1sec", - "id": 105061690, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105061690?v=4", - "html_url": "https:\/\/github.com\/lof1sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lof1sec\/CVE-2022-46169", - "description": "Cacti v1.2.22: Unauthenticated Command Injection Vulnerability (CVE-2022-46169)", - "fork": false, - "created_at": "2025-01-04T21:53:47Z", - "updated_at": "2025-01-06T11:49:57Z", - "pushed_at": "2025-01-06T11:49:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 987698830, "name": "SHELL-POC-CVE-2022-46169", diff --git a/2022/CVE-2022-46175.json b/2022/CVE-2022-46175.json deleted file mode 100644 index 530d5c72c3..0000000000 --- a/2022/CVE-2022-46175.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 587725691, - "name": "quasar-app-webpack-json5-vulnerability", - "full_name": "giz-berlin\/quasar-app-webpack-json5-vulnerability", - "owner": { - "login": "giz-berlin", - "id": 82261342, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82261342?v=4", - "html_url": "https:\/\/github.com\/giz-berlin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/giz-berlin\/quasar-app-webpack-json5-vulnerability", - "description": "Reproduction for CVE-2022-46175", - "fork": false, - "created_at": "2023-01-11T12:48:17Z", - "updated_at": "2023-05-08T07:15:54Z", - "pushed_at": "2023-01-11T12:48:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46196.json b/2022/CVE-2022-46196.json deleted file mode 100644 index 28a06c6c52..0000000000 --- a/2022/CVE-2022-46196.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 634625371, - "name": "CVE-2022-46196", - "full_name": "dpgg101\/CVE-2022-46196", - "owner": { - "login": "dpgg101", - "id": 16139822, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16139822?v=4", - "html_url": "https:\/\/github.com\/dpgg101", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dpgg101\/CVE-2022-46196", - "description": null, - "fork": false, - "created_at": "2023-04-30T18:23:41Z", - "updated_at": "2023-09-02T15:53:16Z", - "pushed_at": "2023-04-30T18:31:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46395.json b/2022/CVE-2022-46395.json index c345cecc1f..6639d8e464 100644 --- a/2022/CVE-2022-46395.json +++ b/2022/CVE-2022-46395.json @@ -1,103 +1,4 @@ [ - { - "id": 660325966, - "name": "CVE_2022_46395_Gazelle", - "full_name": "Pro-me3us\/CVE_2022_46395_Gazelle", - "owner": { - "login": "Pro-me3us", - "id": 106105250, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106105250?v=4", - "html_url": "https:\/\/github.com\/Pro-me3us", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pro-me3us\/CVE_2022_46395_Gazelle", - "description": "CVE-2022-46395 POC for FireTV 3rd gen Cube (gazelle) ", - "fork": false, - "created_at": "2023-06-29T18:54:27Z", - "updated_at": "2024-03-19T15:37:48Z", - "pushed_at": "2023-12-06T15:17:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 660326548, - "name": "CVE_2022_46395_Raven", - "full_name": "Pro-me3us\/CVE_2022_46395_Raven", - "owner": { - "login": "Pro-me3us", - "id": 106105250, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106105250?v=4", - "html_url": "https:\/\/github.com\/Pro-me3us", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pro-me3us\/CVE_2022_46395_Raven", - "description": "CVE-2022-46395 POC for FireTV 2nd gen Cube (raven) ", - "fork": false, - "created_at": "2023-06-29T18:56:04Z", - "updated_at": "2024-03-19T15:37:19Z", - "pushed_at": "2024-03-19T15:28:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 821484239, - "name": "CVE-2022-46395", - "full_name": "SmileTabLabo\/CVE-2022-46395", - "owner": { - "login": "SmileTabLabo", - "id": 112930114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112930114?v=4", - "html_url": "https:\/\/github.com\/SmileTabLabo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SmileTabLabo\/CVE-2022-46395", - "description": null, - "fork": false, - "created_at": "2024-06-28T16:37:46Z", - "updated_at": "2026-05-25T07:28:43Z", - "pushed_at": "2024-06-28T17:07:23Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": true, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1259888858, "name": "cve-2022-46395-qemu", diff --git a/2022/CVE-2022-46463.json b/2022/CVE-2022-46463.json index eecc8d7f21..96292589f4 100644 --- a/2022/CVE-2022-46463.json +++ b/2022/CVE-2022-46463.json @@ -31,71 +31,5 @@ "watchers": 31, "score": 0, "subscribers_count": 1 - }, - { - "id": 616913153, - "name": "CVE-2022-46463", - "full_name": "404tk\/CVE-2022-46463", - "owner": { - "login": "404tk", - "id": 54827262, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54827262?v=4", - "html_url": "https:\/\/github.com\/404tk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/404tk\/CVE-2022-46463", - "description": "harbor unauthorized detection", - "fork": false, - "created_at": "2023-03-21T10:40:19Z", - "updated_at": "2026-04-20T07:18:34Z", - "pushed_at": "2024-12-12T07:37:01Z", - "stargazers_count": 57, - "watchers_count": 57, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 57, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 907282734, - "name": "harbor", - "full_name": "CodeSecurityTeam\/harbor", - "owner": { - "login": "CodeSecurityTeam", - "id": 177533437, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177533437?v=4", - "html_url": "https:\/\/github.com\/CodeSecurityTeam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CodeSecurityTeam\/harbor", - "description": "CVE-2022-46463 harbor公开镜像全自动下载脚本", - "fork": false, - "created_at": "2024-12-23T08:35:30Z", - "updated_at": "2026-06-20T09:56:55Z", - "pushed_at": "2024-12-23T08:40:16Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 15, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-46505.json b/2022/CVE-2022-46505.json deleted file mode 100644 index 1dbf9dd92b..0000000000 --- a/2022/CVE-2022-46505.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 588404620, - "name": "details-for-CVE-2022-46505", - "full_name": "SmallTown123\/details-for-CVE-2022-46505", - "owner": { - "login": "SmallTown123", - "id": 101922357, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101922357?v=4", - "html_url": "https:\/\/github.com\/SmallTown123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SmallTown123\/details-for-CVE-2022-46505", - "description": "MatrixSSL session resume bug", - "fork": false, - "created_at": "2023-01-13T03:07:52Z", - "updated_at": "2023-01-13T03:07:52Z", - "pushed_at": "2023-01-13T03:38:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46604.json b/2022/CVE-2022-46604.json index e286743900..3260fdacda 100644 --- a/2022/CVE-2022-46604.json +++ b/2022/CVE-2022-46604.json @@ -1,41 +1,4 @@ [ - { - "id": 596935402, - "name": "ResponsiveFileManager-CVE-2022-46604", - "full_name": "galoget\/ResponsiveFileManager-CVE-2022-46604", - "owner": { - "login": "galoget", - "id": 8353133, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8353133?v=4", - "html_url": "https:\/\/github.com\/galoget", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/galoget\/ResponsiveFileManager-CVE-2022-46604", - "description": "Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604.", - "fork": false, - "created_at": "2023-02-03T08:56:16Z", - "updated_at": "2026-05-16T17:12:49Z", - "pushed_at": "2023-04-09T23:34:28Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "python3", - "responsivefilemanager" - ], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, { "id": 996479829, "name": "CVE-2022-46604-Responsive-File-Manager", diff --git a/2022/CVE-2022-46622.json b/2022/CVE-2022-46622.json deleted file mode 100644 index 7dc0ce9b94..0000000000 --- a/2022/CVE-2022-46622.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585254254, - "name": "CVE-2022-46622", - "full_name": "sudoninja-noob\/CVE-2022-46622", - "owner": { - "login": "sudoninja-noob", - "id": 18701598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18701598?v=4", - "html_url": "https:\/\/github.com\/sudoninja-noob", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sudoninja-noob\/CVE-2022-46622", - "description": null, - "fork": false, - "created_at": "2023-01-04T17:52:13Z", - "updated_at": "2023-01-04T17:52:13Z", - "pushed_at": "2023-01-04T17:52:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46623.json b/2022/CVE-2022-46623.json deleted file mode 100644 index 67ae0017af..0000000000 --- a/2022/CVE-2022-46623.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585254938, - "name": "CVE-2022-46623", - "full_name": "sudoninja-noob\/CVE-2022-46623", - "owner": { - "login": "sudoninja-noob", - "id": 18701598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18701598?v=4", - "html_url": "https:\/\/github.com\/sudoninja-noob", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sudoninja-noob\/CVE-2022-46623", - "description": null, - "fork": false, - "created_at": "2023-01-04T17:54:29Z", - "updated_at": "2023-01-04T17:54:29Z", - "pushed_at": "2023-01-04T17:54:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46689.json b/2022/CVE-2022-46689.json index e111976635..dbce4f54f8 100644 --- a/2022/CVE-2022-46689.json +++ b/2022/CVE-2022-46689.json @@ -14,10 +14,10 @@ "description": "Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.", "fork": false, "created_at": "2022-12-17T16:45:24Z", - "updated_at": "2026-06-05T08:55:56Z", + "updated_at": "2026-07-02T20:45:44Z", "pushed_at": "2022-12-21T17:53:19Z", - "stargazers_count": 409, - "watchers_count": 409, + "stargazers_count": 410, + "watchers_count": 410, "has_discussions": false, "forks_count": 35, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 35, - "watchers": 409, + "watchers": 410, "score": 0, "subscribers_count": 7 }, @@ -164,289 +164,6 @@ "score": 0, "subscribers_count": 6 }, - { - "id": 584925426, - "name": "NoHomeBar", - "full_name": "straight-tamago\/NoHomeBar", - "owner": { - "login": "straight-tamago", - "id": 121408851, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121408851?v=4", - "html_url": "https:\/\/github.com\/straight-tamago", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/straight-tamago\/NoHomeBar", - "description": "CVE-2022-46689", - "fork": false, - "created_at": "2023-01-03T21:46:37Z", - "updated_at": "2026-04-20T15:56:52Z", - "pushed_at": "2023-01-19T08:04:02Z", - "stargazers_count": 74, - "watchers_count": 74, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 74, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 585014885, - "name": "DockTransparent", - "full_name": "straight-tamago\/DockTransparent", - "owner": { - "login": "straight-tamago", - "id": 121408851, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121408851?v=4", - "html_url": "https:\/\/github.com\/straight-tamago", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/straight-tamago\/DockTransparent", - "description": "CVE-2022-46689", - "fork": false, - "created_at": "2023-01-04T05:08:20Z", - "updated_at": "2026-01-27T19:19:27Z", - "pushed_at": "2023-01-19T08:12:40Z", - "stargazers_count": 57, - "watchers_count": 57, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 57, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 585711274, - "name": "FileSwitcherX", - "full_name": "straight-tamago\/FileSwitcherX", - "owner": { - "login": "straight-tamago", - "id": 121408851, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121408851?v=4", - "html_url": "https:\/\/github.com\/straight-tamago", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/straight-tamago\/FileSwitcherX", - "description": "CVE-2022-46689", - "fork": false, - "created_at": "2023-01-05T21:50:25Z", - "updated_at": "2026-05-26T12:55:09Z", - "pushed_at": "2023-06-13T08:55:50Z", - "stargazers_count": 151, - "watchers_count": 151, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ios" - ], - "visibility": "public", - "forks": 9, - "watchers": 151, - "score": 0, - "subscribers_count": 11 - }, - { - "id": 588186913, - "name": "Mandela-Legacy", - "full_name": "bomberfish\/Mandela-Legacy", - "owner": { - "login": "bomberfish", - "id": 87151697, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87151697?v=4", - "html_url": "https:\/\/github.com\/bomberfish", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bomberfish\/Mandela-Legacy", - "description": "iOS customization app powered by CVE-2022-46689", - "fork": false, - "created_at": "2023-01-12T14:31:30Z", - "updated_at": "2025-09-24T04:38:01Z", - "pushed_at": "2023-02-12T01:37:16Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-46689", - "dirtycow", - "exploit", - "ios", - "macdirtycow", - "swift", - "swiftui", - "tweak" - ], - "visibility": "public", - "forks": 2, - "watchers": 23, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 592970139, - "name": "JailedCement", - "full_name": "iswaxan\/JailedCement", - "owner": { - "login": "iswaxan", - "id": 78171263, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78171263?v=4", - "html_url": "https:\/\/github.com\/iswaxan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iswaxan\/JailedCement", - "description": "Simple iOS bootlooper using CVE-2022-46689. Desguised as onlyfans", - "fork": false, - "created_at": "2023-01-24T23:13:44Z", - "updated_at": "2026-05-12T14:50:22Z", - "pushed_at": "2023-01-24T23:15:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 600600917, - "name": "Mandela-Classic", - "full_name": "bomberfish\/Mandela-Classic", - "owner": { - "login": "bomberfish", - "id": 87151697, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87151697?v=4", - "html_url": "https:\/\/github.com\/bomberfish", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bomberfish\/Mandela-Classic", - "description": "iOS customization app powered by CVE-2022-46689. No jailbreak required.", - "fork": false, - "created_at": "2023-02-12T01:33:45Z", - "updated_at": "2026-06-03T13:29:22Z", - "pushed_at": "2023-02-12T01:33:48Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 19, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 608056893, - "name": "MacDirtyCow", - "full_name": "enty8080\/MacDirtyCow", - "owner": { - "login": "enty8080", - "id": 54115104, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54115104?v=4", - "html_url": "https:\/\/github.com\/enty8080", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/enty8080\/MacDirtyCow", - "description": "Example of CVE-2022-46689 aka MacDirtyCow.", - "fork": false, - "created_at": "2023-03-01T08:23:49Z", - "updated_at": "2026-03-28T09:33:36Z", - "pushed_at": "2023-03-01T08:25:46Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-46689", - "exploit", - "jailbreak", - "macdirtycow", - "macos" - ], - "visibility": "public", - "forks": 1, - "watchers": 14, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 628471421, - "name": "MDC", - "full_name": "tdquang266\/MDC", - "owner": { - "login": "tdquang266", - "id": 72800859, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72800859?v=4", - "html_url": "https:\/\/github.com\/tdquang266", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tdquang266\/MDC", - "description": "I do some tweaking for iOS from 16.0 to 16.1.2 based on MacDirtyCow (CVE-2022-46689) exploit.", - "fork": false, - "created_at": "2023-04-16T03:33:38Z", - "updated_at": "2023-09-03T08:43:36Z", - "pushed_at": "2023-09-03T10:06:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1018901995, "name": "overwrite", diff --git a/2022/CVE-2022-46718.json b/2022/CVE-2022-46718.json deleted file mode 100644 index 27a23b287c..0000000000 --- a/2022/CVE-2022-46718.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 635000348, - "name": "cve-2022-46718-leaky-location", - "full_name": "biscuitehh\/cve-2022-46718-leaky-location", - "owner": { - "login": "biscuitehh", - "id": 507442, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/507442?v=4", - "html_url": "https:\/\/github.com\/biscuitehh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/biscuitehh\/cve-2022-46718-leaky-location", - "description": "CVE-2022-46718: an app may be able to read sensitive location information.", - "fork": false, - "created_at": "2023-05-01T18:34:52Z", - "updated_at": "2025-02-05T04:43:05Z", - "pushed_at": "2023-05-01T18:48:34Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 27, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47102.json b/2022/CVE-2022-47102.json deleted file mode 100644 index cccada8298..0000000000 --- a/2022/CVE-2022-47102.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 585255498, - "name": "CVE-2022-47102", - "full_name": "sudoninja-noob\/CVE-2022-47102", - "owner": { - "login": "sudoninja-noob", - "id": 18701598, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18701598?v=4", - "html_url": "https:\/\/github.com\/sudoninja-noob", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sudoninja-noob\/CVE-2022-47102", - "description": null, - "fork": false, - "created_at": "2023-01-04T17:56:09Z", - "updated_at": "2023-01-04T17:56:09Z", - "pushed_at": "2023-01-04T17:56:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47130.json b/2022/CVE-2022-47130.json deleted file mode 100644 index abe7074133..0000000000 --- a/2022/CVE-2022-47130.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 859926326, - "name": "CVE-2022-47130", - "full_name": "OpenXP-Research\/CVE-2022-47130", - "owner": { - "login": "OpenXP-Research", - "id": 124332420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4", - "html_url": "https:\/\/github.com\/OpenXP-Research", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2022-47130", - "description": "Academy LMS <= 5.10 CSRF", - "fork": false, - "created_at": "2024-09-19T14:14:14Z", - "updated_at": "2024-09-19T14:14:40Z", - "pushed_at": "2024-09-19T14:14:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47131.json b/2022/CVE-2022-47131.json deleted file mode 100644 index b5081848ed..0000000000 --- a/2022/CVE-2022-47131.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 859925470, - "name": "CVE-2022-47131", - "full_name": "OpenXP-Research\/CVE-2022-47131", - "owner": { - "login": "OpenXP-Research", - "id": 124332420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4", - "html_url": "https:\/\/github.com\/OpenXP-Research", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2022-47131", - "description": "Academy LMS <= 5.10 CSRF \/ XSS", - "fork": false, - "created_at": "2024-09-19T14:12:43Z", - "updated_at": "2024-09-19T14:13:09Z", - "pushed_at": "2024-09-19T14:13:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47132.json b/2022/CVE-2022-47132.json deleted file mode 100644 index 5ada09a0ec..0000000000 --- a/2022/CVE-2022-47132.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 859924903, - "name": "CVE-2022-47132", - "full_name": "OpenXP-Research\/CVE-2022-47132", - "owner": { - "login": "OpenXP-Research", - "id": 124332420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4", - "html_url": "https:\/\/github.com\/OpenXP-Research", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2022-47132", - "description": "Academy LMS <= 5.10 CSRF", - "fork": false, - "created_at": "2024-09-19T14:11:42Z", - "updated_at": "2024-09-19T14:12:11Z", - "pushed_at": "2024-09-19T14:12:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47373.json b/2022/CVE-2022-47373.json deleted file mode 100644 index f80eb0608e..0000000000 --- a/2022/CVE-2022-47373.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 602657363, - "name": "CVE-2022-47373", - "full_name": "Argonx21\/CVE-2022-47373", - "owner": { - "login": "Argonx21", - "id": 30073895, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30073895?v=4", - "html_url": "https:\/\/github.com\/Argonx21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Argonx21\/CVE-2022-47373", - "description": "Reflected Cross Site Scripting Vulnerability in PandoraFMS <= v766", - "fork": false, - "created_at": "2023-02-16T17:10:25Z", - "updated_at": "2023-02-16T17:10:25Z", - "pushed_at": "2023-10-15T15:07:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47529.json b/2022/CVE-2022-47529.json deleted file mode 100644 index 3e0d7b9996..0000000000 --- a/2022/CVE-2022-47529.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 618631888, - "name": "CVE-2022-47529", - "full_name": "hyp3rlinx\/CVE-2022-47529", - "owner": { - "login": "hyp3rlinx", - "id": 12366009, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12366009?v=4", - "html_url": "https:\/\/github.com\/hyp3rlinx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hyp3rlinx\/CVE-2022-47529", - "description": "RSA NetWitness Platform EDR Agent \/ Incorrect Access Control - Code Execution", - "fork": false, - "created_at": "2023-03-24T22:50:26Z", - "updated_at": "2023-05-23T11:03:27Z", - "pushed_at": "2023-03-24T23:07:40Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47615.json b/2022/CVE-2022-47615.json deleted file mode 100644 index 1456b1f954..0000000000 --- a/2022/CVE-2022-47615.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 680191554, - "name": "CVE-2022-47615", - "full_name": "RandomRobbieBF\/CVE-2022-47615", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2022-47615", - "description": "LearnPress Plugin < 4.2.0 - Unauthenticated LFI Description ", - "fork": false, - "created_at": "2023-08-18T15:04:36Z", - "updated_at": "2025-04-07T15:29:35Z", - "pushed_at": "2023-08-18T15:14:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47872.json b/2022/CVE-2022-47872.json deleted file mode 100644 index a664261149..0000000000 --- a/2022/CVE-2022-47872.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 595891677, - "name": "CVE-2022-47872", - "full_name": "Cedric1314\/CVE-2022-47872", - "owner": { - "login": "Cedric1314", - "id": 42855430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42855430?v=4", - "html_url": "https:\/\/github.com\/Cedric1314", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cedric1314\/CVE-2022-47872", - "description": null, - "fork": false, - "created_at": "2023-02-01T02:34:19Z", - "updated_at": "2023-02-01T02:34:19Z", - "pushed_at": "2023-02-01T03:13:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-47966.json b/2022/CVE-2022-47966.json index 4779452b67..77d94407fe 100644 --- a/2022/CVE-2022-47966.json +++ b/2022/CVE-2022-47966.json @@ -1,70 +1,4 @@ [ - { - "id": 590196501, - "name": "CVE-2022-47966", - "full_name": "horizon3ai\/CVE-2022-47966", - "owner": { - "login": "horizon3ai", - "id": 79593994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4", - "html_url": "https:\/\/github.com\/horizon3ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2022-47966", - "description": "POC for CVE-2022-47966 affecting multiple ManageEngine products", - "fork": false, - "created_at": "2023-01-17T21:26:28Z", - "updated_at": "2026-06-12T19:13:56Z", - "pushed_at": "2023-01-19T13:10:07Z", - "stargazers_count": 129, - "watchers_count": 129, - "has_discussions": false, - "forks_count": 30, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 30, - "watchers": 129, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 590861031, - "name": "PoC-for-ME-SAML-Vulnerability", - "full_name": "shameem-testing\/PoC-for-ME-SAML-Vulnerability", - "owner": { - "login": "shameem-testing", - "id": 83210904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83210904?v=4", - "html_url": "https:\/\/github.com\/shameem-testing", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shameem-testing\/PoC-for-ME-SAML-Vulnerability", - "description": "PoC for cve-2022-47966", - "fork": false, - "created_at": "2023-01-19T11:41:05Z", - "updated_at": "2023-01-19T11:41:05Z", - "pushed_at": "2023-01-19T12:29:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 592261667, "name": "CVE-2022-47966", @@ -105,78 +39,5 @@ "watchers": 7, "score": 0, "subscribers_count": 1 - }, - { - "id": 592277196, - "name": "CVE-2022-47966_checker", - "full_name": "ACE-Responder\/CVE-2022-47966_checker", - "owner": { - "login": "ACE-Responder", - "id": 123371860, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123371860?v=4", - "html_url": "https:\/\/github.com\/ACE-Responder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ACE-Responder\/CVE-2022-47966_checker", - "description": "Run on your ManageEngine server", - "fork": false, - "created_at": "2023-01-23T11:33:29Z", - "updated_at": "2024-01-04T14:45:12Z", - "pushed_at": "2023-01-23T12:09:00Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 592376575, - "name": "CVE-2022-47966-Scan", - "full_name": "vonahisec\/CVE-2022-47966-Scan", - "owner": { - "login": "vonahisec", - "id": 31076758, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31076758?v=4", - "html_url": "https:\/\/github.com\/vonahisec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vonahisec\/CVE-2022-47966-Scan", - "description": "Python scanner for CVE-2022-47966. Supports ~10 of the 24 affected products.", - "fork": false, - "created_at": "2023-01-23T15:49:10Z", - "updated_at": "2025-10-29T02:45:03Z", - "pushed_at": "2023-02-08T19:25:50Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "blue-team", - "pentesting", - "python", - "red-team", - "vulnerability", - "vulnerability-scanners" - ], - "visibility": "public", - "forks": 5, - "watchers": 28, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-47986.json b/2022/CVE-2022-47986.json deleted file mode 100644 index e999ba9d8c..0000000000 --- a/2022/CVE-2022-47986.json +++ /dev/null @@ -1,83 +0,0 @@ -[ - { - "id": 596890339, - "name": "CVE-2022-47986", - "full_name": "ohnonoyesyes\/CVE-2022-47986", - "owner": { - "login": "ohnonoyesyes", - "id": 93457304, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93457304?v=4", - "html_url": "https:\/\/github.com\/ohnonoyesyes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ohnonoyesyes\/CVE-2022-47986", - "description": "Aspera Faspex Pre Auth RCE", - "fork": false, - "created_at": "2023-02-03T06:32:13Z", - "updated_at": "2023-06-21T05:14:03Z", - "pushed_at": "2023-02-03T06:33:42Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 611950909, - "name": "CVE-2022-47986", - "full_name": "mauricelambert\/CVE-2022-47986", - "owner": { - "login": "mauricelambert", - "id": 50479118, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50479118?v=4", - "html_url": "https:\/\/github.com\/mauricelambert", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mauricelambert\/CVE-2022-47986", - "description": "CVE-2022-47986: Python, Ruby, NMAP and Metasploit modules to exploit the vulnerability.", - "fork": false, - "created_at": "2023-03-09T22:03:48Z", - "updated_at": "2026-05-24T17:58:07Z", - "pushed_at": "2023-03-09T22:31:44Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "aspera", - "cve-2022-47986", - "deserialization", - "exploit", - "faspex", - "ibm", - "metasploit", - "nmap", - "poc", - "python3", - "rce", - "ruby", - "vulnerability", - "yaml" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48150.json b/2022/CVE-2022-48150.json deleted file mode 100644 index 851a9299cf..0000000000 --- a/2022/CVE-2022-48150.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 624508549, - "name": "-CVE-2022-48150", - "full_name": "SahilH4ck4you\/-CVE-2022-48150", - "owner": { - "login": "SahilH4ck4you", - "id": 95895762, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95895762?v=4", - "html_url": "https:\/\/github.com\/SahilH4ck4you", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SahilH4ck4you\/-CVE-2022-48150", - "description": "I Found the reflected xss vulnerability in shopware 5 .for more details check my poc video ", - "fork": false, - "created_at": "2023-04-06T16:14:42Z", - "updated_at": "2023-12-14T09:35:20Z", - "pushed_at": "2023-04-06T19:01:17Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48197.json b/2022/CVE-2022-48197.json deleted file mode 100644 index 327e804222..0000000000 --- a/2022/CVE-2022-48197.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 584354205, - "name": "CVE-2022-48197", - "full_name": "ryan412\/CVE-2022-48197", - "owner": { - "login": "ryan412", - "id": 54446262, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54446262?v=4", - "html_url": "https:\/\/github.com\/ryan412", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ryan412\/CVE-2022-48197", - "description": null, - "fork": false, - "created_at": "2023-01-02T10:27:04Z", - "updated_at": "2023-01-02T10:27:04Z", - "pushed_at": "2023-01-02T10:31:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48311.json b/2022/CVE-2022-48311.json deleted file mode 100644 index 96c755afa9..0000000000 --- a/2022/CVE-2022-48311.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 598664381, - "name": "CVE-2022-48311", - "full_name": "swzhouu\/CVE-2022-48311", - "owner": { - "login": "swzhouu", - "id": 74352439, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74352439?v=4", - "html_url": "https:\/\/github.com\/swzhouu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/swzhouu\/CVE-2022-48311", - "description": "HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting (XSS) Vulnerability", - "fork": false, - "created_at": "2023-02-07T15:13:33Z", - "updated_at": "2023-02-07T15:14:08Z", - "pushed_at": "2023-02-07T15:13:55Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48429.json b/2022/CVE-2022-48429.json deleted file mode 100644 index b45d93bf67..0000000000 --- a/2022/CVE-2022-48429.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 636352279, - "name": "CVE-2022-48429_poc", - "full_name": "echo-devim\/CVE-2022-48429_poc", - "owner": { - "login": "echo-devim", - "id": 11312542, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11312542?v=4", - "html_url": "https:\/\/github.com\/echo-devim", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/echo-devim\/CVE-2022-48429_poc", - "description": "PoC for CVE-2022-48429 - Youtrack stored XSS", - "fork": false, - "created_at": "2023-05-04T16:55:20Z", - "updated_at": "2024-07-09T11:39:18Z", - "pushed_at": "2023-05-04T17:01:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48474.json b/2022/CVE-2022-48474.json deleted file mode 100644 index 355b209ffe..0000000000 --- a/2022/CVE-2022-48474.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 629982721, - "name": "CVE-2022-48474_CVE-2022-48475", - "full_name": "sapellaniz\/CVE-2022-48474_CVE-2022-48475", - "owner": { - "login": "sapellaniz", - "id": 60947777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60947777?v=4", - "html_url": "https:\/\/github.com\/sapellaniz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sapellaniz\/CVE-2022-48474_CVE-2022-48475", - "description": "CVE-2022-48474 &CVE-2022-48475 PoCs & exploits ", - "fork": false, - "created_at": "2023-04-19T12:27:52Z", - "updated_at": "2024-07-15T20:18:17Z", - "pushed_at": "2023-04-19T12:50:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-48565.json b/2022/CVE-2022-48565.json deleted file mode 100644 index 30441f931d..0000000000 --- a/2022/CVE-2022-48565.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 876527302, - "name": "CVE-2022-48565-POC", - "full_name": "Einstein2150\/CVE-2022-48565-POC", - "owner": { - "login": "Einstein2150", - "id": 22019133, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22019133?v=4", - "html_url": "https:\/\/github.com\/Einstein2150", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Einstein2150\/CVE-2022-48565-POC", - "description": "A proof-of-concept for CVE-2022-48565 - python plistlib XML deserialisation attack", - "fork": false, - "created_at": "2024-10-22T05:58:24Z", - "updated_at": "2024-11-13T13:42:39Z", - "pushed_at": "2024-10-28T16:07:13Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4896.json b/2022/CVE-2022-4896.json deleted file mode 100644 index 86746fb9e2..0000000000 --- a/2022/CVE-2022-4896.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 629992953, - "name": "CVE-2022-4896", - "full_name": "sapellaniz\/CVE-2022-4896", - "owner": { - "login": "sapellaniz", - "id": 60947777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60947777?v=4", - "html_url": "https:\/\/github.com\/sapellaniz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sapellaniz\/CVE-2022-4896", - "description": "CVE-2022-4896 PoCs & exploits ", - "fork": false, - "created_at": "2023-04-19T12:53:03Z", - "updated_at": "2023-04-19T12:55:00Z", - "pushed_at": "2023-04-19T12:54:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4939.json b/2022/CVE-2022-4939.json deleted file mode 100644 index b1ad62c7c2..0000000000 --- a/2022/CVE-2022-4939.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 624443836, - "name": "PoC-CVE-2022-4939-", - "full_name": "BaconCriCRi\/PoC-CVE-2022-4939-", - "owner": { - "login": "BaconCriCRi", - "id": 130064933, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130064933?v=4", - "html_url": "https:\/\/github.com\/BaconCriCRi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BaconCriCRi\/PoC-CVE-2022-4939-", - "description": null, - "fork": false, - "created_at": "2023-04-06T13:34:09Z", - "updated_at": "2023-04-06T13:37:46Z", - "pushed_at": "2023-04-06T13:50:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-4944.json b/2022/CVE-2022-4944.json deleted file mode 100644 index 0e2da15a3f..0000000000 --- a/2022/CVE-2022-4944.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 630962699, - "name": "CVE-2022-4944", - "full_name": "brosck\/CVE-2022-4944", - "owner": { - "login": "brosck", - "id": 71796063, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71796063?v=4", - "html_url": "https:\/\/github.com\/brosck", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/brosck\/CVE-2022-4944", - "description": "「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload", - "fork": false, - "created_at": "2023-04-21T15:09:37Z", - "updated_at": "2025-02-14T17:11:31Z", - "pushed_at": "2024-12-07T01:40:55Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-0266.json b/2023/CVE-2023-0266.json deleted file mode 100644 index ea7a5e458e..0000000000 --- a/2023/CVE-2023-0266.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 769797107, - "name": "claude_opus_cve_2023_0266", - "full_name": "SeanHeelan\/claude_opus_cve_2023_0266", - "owner": { - "login": "SeanHeelan", - "id": 1920339, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1920339?v=4", - "html_url": "https:\/\/github.com\/SeanHeelan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SeanHeelan\/claude_opus_cve_2023_0266", - "description": "Demo showing Claude Opus does not find CVE-2023-0266", - "fork": false, - "created_at": "2024-03-10T04:41:34Z", - "updated_at": "2026-01-21T04:19:35Z", - "pushed_at": "2024-03-19T14:18:20Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 17, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-0297.json b/2023/CVE-2023-0297.json index 5f38f66106..82d2dbdf16 100644 --- a/2023/CVE-2023-0297.json +++ b/2023/CVE-2023-0297.json @@ -130,71 +130,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 857813726, - "name": "exploit_CVE-2023-0297", - "full_name": "btar1gan\/exploit_CVE-2023-0297", - "owner": { - "login": "btar1gan", - "id": 92728059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92728059?v=4", - "html_url": "https:\/\/github.com\/btar1gan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/btar1gan\/exploit_CVE-2023-0297", - "description": "New exploit for pyLoad v0.5.0 - Unauthenticated remote code excecution", - "fork": false, - "created_at": "2024-09-15T17:15:33Z", - "updated_at": "2024-09-15T17:19:52Z", - "pushed_at": "2024-09-15T17:18:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 867618979, - "name": "CVE-2023-0297", - "full_name": "S4MY9\/CVE-2023-0297", - "owner": { - "login": "S4MY9", - "id": 119887905, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119887905?v=4", - "html_url": "https:\/\/github.com\/S4MY9", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/S4MY9\/CVE-2023-0297", - "description": "RCE in pyload prior to 0.5.0b3.dev31.", - "fork": false, - "created_at": "2024-10-04T12:03:54Z", - "updated_at": "2024-10-04T12:09:24Z", - "pushed_at": "2024-10-04T12:09:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-0386.json b/2023/CVE-2023-0386.json index a11671215c..39c52f4392 100644 --- a/2023/CVE-2023-0386.json +++ b/2023/CVE-2023-0386.json @@ -265,171 +265,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 765025096, - "name": "CVE-2023-0386", - "full_name": "letsr00t\/CVE-2023-0386", - "owner": { - "login": "letsr00t", - "id": 38699989, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38699989?v=4", - "html_url": "https:\/\/github.com\/letsr00t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/letsr00t\/CVE-2023-0386", - "description": null, - "fork": false, - "created_at": "2024-02-29T06:22:50Z", - "updated_at": "2024-02-29T06:22:51Z", - "pushed_at": "2024-02-29T06:23:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 782345345, - "name": "CVE-2023-0386", - "full_name": "churamanib\/CVE-2023-0386", - "owner": { - "login": "churamanib", - "id": 155580704, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155580704?v=4", - "html_url": "https:\/\/github.com\/churamanib", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/churamanib\/CVE-2023-0386", - "description": null, - "fork": false, - "created_at": "2024-04-05T05:47:00Z", - "updated_at": "2024-04-05T05:49:33Z", - "pushed_at": "2024-04-05T06:01:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 790464197, - "name": "CVE-2023-0386-libs", - "full_name": "EstamelGG\/CVE-2023-0386-libs", - "owner": { - "login": "EstamelGG", - "id": 46676047, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46676047?v=4", - "html_url": "https:\/\/github.com\/EstamelGG", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/EstamelGG\/CVE-2023-0386-libs", - "description": "CVE-2023-0386 包含所需运行库", - "fork": false, - "created_at": "2024-04-22T23:33:35Z", - "updated_at": "2024-04-23T12:53:20Z", - "pushed_at": "2024-04-23T12:53:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 949861403, - "name": "cve-2023-0386", - "full_name": "orilevy8\/cve-2023-0386", - "owner": { - "login": "orilevy8", - "id": 203621089, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/203621089?v=4", - "html_url": "https:\/\/github.com\/orilevy8", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/orilevy8\/cve-2023-0386", - "description": null, - "fork": false, - "created_at": "2025-03-17T09:01:28Z", - "updated_at": "2025-06-18T07:59:18Z", - "pushed_at": "2025-03-17T09:02:01Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1137889093, - "name": "CVE-2023-0386_POC", - "full_name": "dragosbanica\/CVE-2023-0386_POC", - "owner": { - "login": "dragosbanica", - "id": 145229192, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145229192?v=4", - "html_url": "https:\/\/github.com\/dragosbanica", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dragosbanica\/CVE-2023-0386_POC", - "description": null, - "fork": false, - "created_at": "2026-01-20T01:16:51Z", - "updated_at": "2026-01-20T18:06:35Z", - "pushed_at": "2026-01-20T18:06:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1218964785, "name": "HTB-TwoMillion-Writeup", diff --git a/2023/CVE-2023-0400.json b/2023/CVE-2023-0400.json deleted file mode 100644 index 9bfaa00d34..0000000000 --- a/2023/CVE-2023-0400.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 833053713, - "name": "CVE-2023-0400", - "full_name": "pinpinsec\/CVE-2023-0400", - "owner": { - "login": "pinpinsec", - "id": 94911442, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94911442?v=4", - "html_url": "https:\/\/github.com\/pinpinsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pinpinsec\/CVE-2023-0400", - "description": "trellix DLP Bypass", - "fork": false, - "created_at": "2024-07-24T09:04:55Z", - "updated_at": "2024-07-24T09:22:49Z", - "pushed_at": "2024-07-24T09:22:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-0461.json b/2023/CVE-2023-0461.json deleted file mode 100644 index b85aea606c..0000000000 --- a/2023/CVE-2023-0461.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1031196215, - "name": "CVE-2023-0461", - "full_name": "b1nhack\/CVE-2023-0461", - "owner": { - "login": "b1nhack", - "id": 120295547, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120295547?v=4", - "html_url": "https:\/\/github.com\/b1nhack", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/b1nhack\/CVE-2023-0461", - "description": null, - "fork": false, - "created_at": "2025-08-03T08:12:39Z", - "updated_at": "2025-08-03T08:12:57Z", - "pushed_at": "2025-08-03T08:12:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-0669.json b/2023/CVE-2023-0669.json index 60cdf21c21..698acbdbf0 100644 --- a/2023/CVE-2023-0669.json +++ b/2023/CVE-2023-0669.json @@ -167,38 +167,5 @@ "watchers": 8, "score": 0, "subscribers_count": 1 - }, - { - "id": 1122311251, - "name": "cve-2023-0669-simulation", - "full_name": "zakaria-laouani\/cve-2023-0669-simulation", - "owner": { - "login": "zakaria-laouani", - "id": 202960218, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202960218?v=4", - "html_url": "https:\/\/github.com\/zakaria-laouani", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zakaria-laouani\/cve-2023-0669-simulation", - "description": null, - "fork": false, - "created_at": "2025-12-24T13:22:43Z", - "updated_at": "2025-12-24T13:26:48Z", - "pushed_at": "2025-12-24T13:26:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-1177.json b/2023/CVE-2023-1177.json index d9e4207e1e..4e6154eaef 100644 --- a/2023/CVE-2023-1177.json +++ b/2023/CVE-2023-1177.json @@ -64,110 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 845632603, - "name": "MLflow-Vuln", - "full_name": "saimahmed\/MLflow-Vuln", - "owner": { - "login": "saimahmed", - "id": 25364793, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25364793?v=4", - "html_url": "https:\/\/github.com\/saimahmed", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/saimahmed\/MLflow-Vuln", - "description": "MLflow LFI\/RFI Vulnerability -CVE-2023-1177 - Reproduced", - "fork": false, - "created_at": "2024-08-21T16:11:31Z", - "updated_at": "2024-09-01T03:56:50Z", - "pushed_at": "2024-09-01T03:56:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 859830353, - "name": "CVE-2023-1177", - "full_name": "charlesgargasson\/CVE-2023-1177", - "owner": { - "login": "charlesgargasson", - "id": 26895987, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26895987?v=4", - "html_url": "https:\/\/github.com\/charlesgargasson", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/charlesgargasson\/CVE-2023-1177", - "description": "MLFlow Path Traversal", - "fork": false, - "created_at": "2024-09-19T10:59:31Z", - "updated_at": "2024-09-19T11:04:13Z", - "pushed_at": "2024-09-19T11:02:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2023-1177", - "exploit", - "mlflow", - "poc" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 965064880, - "name": "CVE-2023-1177-PoC-reproduce", - "full_name": "paultheal1en\/CVE-2023-1177-PoC-reproduce", - "owner": { - "login": "paultheal1en", - "id": 114815683, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114815683?v=4", - "html_url": "https:\/\/github.com\/paultheal1en", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/paultheal1en\/CVE-2023-1177-PoC-reproduce", - "description": "PoC of CVE-2023-1177 vulnerability in MLflow (Reproduce)", - "fork": false, - "created_at": "2025-04-12T10:33:38Z", - "updated_at": "2025-04-12T10:49:38Z", - "pushed_at": "2025-04-12T10:49:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-1189.json b/2023/CVE-2023-1189.json deleted file mode 100644 index ac5d2e6bb4..0000000000 --- a/2023/CVE-2023-1189.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1104626995, - "name": "CVE-2023-1189", - "full_name": "le0s1mba\/CVE-2023-1189", - "owner": { - "login": "le0s1mba", - "id": 142793060, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142793060?v=4", - "html_url": "https:\/\/github.com\/le0s1mba", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/le0s1mba\/CVE-2023-1189", - "description": "CVE-2023-1189 PoC & Exploit", - "fork": false, - "created_at": "2025-11-26T13:18:00Z", - "updated_at": "2025-12-22T00:31:54Z", - "pushed_at": "2025-11-26T14:28:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1206.json b/2023/CVE-2023-1206.json deleted file mode 100644 index 4700f2cb58..0000000000 --- a/2023/CVE-2023-1206.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1107995641, - "name": "CVE-2023-1206-CVE-2025-40040-CVE-2024-49882", - "full_name": "SpiralBL0CK\/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882", - "description": "3 linux kernel bugs chains to do secure comm app using side channel to establish key and establish covert channe;", - "fork": false, - "created_at": "2025-12-01T22:12:05Z", - "updated_at": "2026-01-28T07:17:23Z", - "pushed_at": "2025-12-02T21:04:28Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 13, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1326.json b/2023/CVE-2023-1326.json index 36517c1e35..6b1c33f5bb 100644 --- a/2023/CVE-2023-1326.json +++ b/2023/CVE-2023-1326.json @@ -31,104 +31,5 @@ "watchers": 21, "score": 0, "subscribers_count": 1 - }, - { - "id": 743946606, - "name": "CVE-2023-1326", - "full_name": "Pol-Ruiz\/CVE-2023-1326", - "owner": { - "login": "Pol-Ruiz", - "id": 151052652, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151052652?v=4", - "html_url": "https:\/\/github.com\/Pol-Ruiz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pol-Ruiz\/CVE-2023-1326", - "description": "Esto es una prueba de concepto propia i basica de la vulneravilidad CVE-2023-1326", - "fork": false, - "created_at": "2024-01-16T10:20:53Z", - "updated_at": "2024-01-16T10:20:53Z", - "pushed_at": "2024-01-26T13:55:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 796053569, - "name": "CVE-2023-1326", - "full_name": "h3x0v3rl0rd\/CVE-2023-1326", - "owner": { - "login": "h3x0v3rl0rd", - "id": 66146701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66146701?v=4", - "html_url": "https:\/\/github.com\/h3x0v3rl0rd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h3x0v3rl0rd\/CVE-2023-1326", - "description": null, - "fork": false, - "created_at": "2024-05-04T19:47:58Z", - "updated_at": "2024-05-05T02:19:49Z", - "pushed_at": "2024-05-04T19:56:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 815018186, - "name": "CVE-2023-1326-PoC", - "full_name": "cve-2024\/CVE-2023-1326-PoC", - "owner": { - "login": "cve-2024", - "id": 172750025, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172750025?v=4", - "html_url": "https:\/\/github.com\/cve-2024", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cve-2024\/CVE-2023-1326-PoC", - "description": null, - "fork": false, - "created_at": "2024-06-14T07:15:50Z", - "updated_at": "2024-06-14T07:18:15Z", - "pushed_at": "2024-06-14T07:18:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-1405.json b/2023/CVE-2023-1405.json deleted file mode 100644 index 6640e8d9c4..0000000000 --- a/2023/CVE-2023-1405.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 887951907, - "name": "CVE-2023-1405", - "full_name": "RandomRobbieBF\/CVE-2023-1405", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-1405", - "description": "Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection", - "fork": false, - "created_at": "2024-11-13T15:04:51Z", - "updated_at": "2026-01-16T23:38:55Z", - "pushed_at": "2024-11-13T16:13:42Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1514.json b/2023/CVE-2023-1514.json deleted file mode 100644 index 8015c14957..0000000000 --- a/2023/CVE-2023-1514.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 966463207, - "name": "CVE-2023-1514-SQL-Injection-Teampass-", - "full_name": "wsx-rootdeef\/CVE-2023-1514-SQL-Injection-Teampass-", - "owner": { - "login": "wsx-rootdeef", - "id": 155933948, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155933948?v=4", - "html_url": "https:\/\/github.com\/wsx-rootdeef", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wsx-rootdeef\/CVE-2023-1514-SQL-Injection-Teampass-", - "description": null, - "fork": false, - "created_at": "2025-04-15T00:54:08Z", - "updated_at": "2025-04-15T00:57:48Z", - "pushed_at": "2025-04-15T00:57:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1545.json b/2023/CVE-2023-1545.json deleted file mode 100644 index 792cfe3847..0000000000 --- a/2023/CVE-2023-1545.json +++ /dev/null @@ -1,134 +0,0 @@ -[ - { - "id": 937303928, - "name": "CVE-2023-1545-Exploit", - "full_name": "HarshRajSinghania\/CVE-2023-1545-Exploit", - "owner": { - "login": "HarshRajSinghania", - "id": 40535627, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40535627?v=4", - "html_url": "https:\/\/github.com\/HarshRajSinghania", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HarshRajSinghania\/CVE-2023-1545-Exploit", - "description": "Example usage: exploit.sh http:\/\/site.com", - "fork": false, - "created_at": "2025-02-22T20:15:54Z", - "updated_at": "2025-02-22T20:17:52Z", - "pushed_at": "2025-02-22T20:17:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 938286262, - "name": "CVE-2023-1545-POC", - "full_name": "zer0-dave\/CVE-2023-1545-POC", - "owner": { - "login": "zer0-dave", - "id": 91299560, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91299560?v=4", - "html_url": "https:\/\/github.com\/zer0-dave", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zer0-dave\/CVE-2023-1545-POC", - "description": "Copy of the POC for CVE-2023-1545", - "fork": false, - "created_at": "2025-02-24T18:01:07Z", - "updated_at": "2025-03-01T10:14:57Z", - "pushed_at": "2025-02-24T18:08:20Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 941032128, - "name": "CVE-2023-1545-POC-python", - "full_name": "sternstundes\/CVE-2023-1545-POC-python", - "owner": { - "login": "sternstundes", - "id": 114897201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114897201?v=4", - "html_url": "https:\/\/github.com\/sternstundes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sternstundes\/CVE-2023-1545-POC-python", - "description": "CVE-2023-1545-POC with python ", - "fork": false, - "created_at": "2025-03-01T10:15:38Z", - "updated_at": "2025-03-01T10:25:09Z", - "pushed_at": "2025-03-01T10:25:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 972836911, - "name": "CVE-2023-1545", - "full_name": "gunzf0x\/CVE-2023-1545", - "owner": { - "login": "gunzf0x", - "id": 31874167, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31874167?v=4", - "html_url": "https:\/\/github.com\/gunzf0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gunzf0x\/CVE-2023-1545", - "description": "Python Proof of Concept for CVE-2023-1545 (SQL Injection for Teampass versions prior to 3.0.0.23).", - "fork": false, - "created_at": "2025-04-25T18:43:06Z", - "updated_at": "2025-06-02T01:56:43Z", - "pushed_at": "2025-06-02T01:56:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1698.json b/2023/CVE-2023-1698.json index 361e43177e..0cbe024d6d 100644 --- a/2023/CVE-2023-1698.json +++ b/2023/CVE-2023-1698.json @@ -97,71 +97,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 936733092, - "name": "CVE-2023-1698", - "full_name": "X3RX3SSec\/CVE-2023-1698", - "owner": { - "login": "X3RX3SSec", - "id": 141476851, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141476851?v=4", - "html_url": "https:\/\/github.com\/X3RX3SSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/X3RX3SSec\/CVE-2023-1698", - "description": "CVE-2023-1698 Proof of Concept (PoC)", - "fork": false, - "created_at": "2025-02-21T15:38:24Z", - "updated_at": "2026-04-06T23:29:04Z", - "pushed_at": "2025-02-22T09:14:57Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1002544410, - "name": "CVE-2023-1698", - "full_name": "ibrahmsql\/CVE-2023-1698", - "owner": { - "login": "ibrahmsql", - "id": 216335158, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216335158?v=4", - "html_url": "https:\/\/github.com\/ibrahmsql", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ibrahmsql\/CVE-2023-1698", - "description": "CVE-2023-1698 exploit with golang ", - "fork": false, - "created_at": "2025-06-15T17:37:09Z", - "updated_at": "2025-07-21T10:43:20Z", - "pushed_at": "2025-06-15T17:40:55Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-1773.json b/2023/CVE-2023-1773.json deleted file mode 100644 index ddfafe6479..0000000000 --- a/2023/CVE-2023-1773.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 832270686, - "name": "xinhu-v2.3.2", - "full_name": "CRONUS-Security\/xinhu-v2.3.2", - "owner": { - "login": "CRONUS-Security", - "id": 214235974, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214235974?v=4", - "html_url": "https:\/\/github.com\/CRONUS-Security", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CRONUS-Security\/xinhu-v2.3.2", - "description": "信呼 v2.3.2 针对CVE-2023-1773的研究环境", - "fork": false, - "created_at": "2024-07-22T17:07:33Z", - "updated_at": "2025-09-03T02:19:13Z", - "pushed_at": "2024-07-24T07:57:57Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1131459627, - "name": "CVE-2023-1773-Exploit", - "full_name": "C1oudfL0w0\/CVE-2023-1773-Exploit", - "owner": { - "login": "C1oudfL0w0", - "id": 124665577, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124665577?v=4", - "html_url": "https:\/\/github.com\/C1oudfL0w0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/C1oudfL0w0\/CVE-2023-1773-Exploit", - "description": "CVE-2023-1773 Exploit", - "fork": false, - "created_at": "2026-01-10T03:55:18Z", - "updated_at": "2026-01-10T04:03:49Z", - "pushed_at": "2026-01-10T04:03:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1874.json b/2023/CVE-2023-1874.json deleted file mode 100644 index 7d2a0cd6a0..0000000000 --- a/2023/CVE-2023-1874.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 867857150, - "name": "cve-2023-1874", - "full_name": "thomas-osgood\/cve-2023-1874", - "owner": { - "login": "thomas-osgood", - "id": 20747585, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20747585?v=4", - "html_url": "https:\/\/github.com\/thomas-osgood", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thomas-osgood\/cve-2023-1874", - "description": null, - "fork": false, - "created_at": "2024-10-04T21:34:02Z", - "updated_at": "2026-02-20T23:35:41Z", - "pushed_at": "2024-10-04T21:34:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-1874", - "cybersecurity", - "exploit", - "python3", - "wordpress" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-1999.json b/2023/CVE-2023-1999.json deleted file mode 100644 index e0648331ea..0000000000 --- a/2023/CVE-2023-1999.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 887214831, - "name": "webp_Android10_r33_CVE-2023-1999", - "full_name": "Pazhanivelmani\/webp_Android10_r33_CVE-2023-1999", - "owner": { - "login": "Pazhanivelmani", - "id": 178174306, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178174306?v=4", - "html_url": "https:\/\/github.com\/Pazhanivelmani", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pazhanivelmani\/webp_Android10_r33_CVE-2023-1999", - "description": null, - "fork": false, - "created_at": "2024-11-12T11:12:23Z", - "updated_at": "2024-11-12T11:13:54Z", - "pushed_at": "2024-11-12T11:13:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20048.json b/2023/CVE-2023-20048.json deleted file mode 100644 index 1893ad96c6..0000000000 --- a/2023/CVE-2023-20048.json +++ /dev/null @@ -1,72 +0,0 @@ -[ - { - "id": 771806530, - "name": "FuegoTest", - "full_name": "0zer0d4y\/FuegoTest", - "owner": { - "login": "0zer0d4y", - "id": 163229114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163229114?v=4", - "html_url": "https:\/\/github.com\/0zer0d4y", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0zer0d4y\/FuegoTest", - "description": "A CLI tool for detecting CVE-2023-20048 vulnerability in Cisco Firepower Management Center.", - "fork": false, - "created_at": "2024-03-14T01:32:41Z", - "updated_at": "2024-03-14T02:00:34Z", - "pushed_at": "2024-03-14T01:59:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco-firepower-management-center", - "cve-2023-20048", - "security-tools" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1061959505, - "name": "cisco-rv-rce-poc", - "full_name": "oguzhanozuzun301\/cisco-rv-rce-poc", - "owner": { - "login": "oguzhanozuzun301", - "id": 232986490, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/232986490?v=4", - "html_url": "https:\/\/github.com\/oguzhanozuzun301", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oguzhanozuzun301\/cisco-rv-rce-poc", - "description": "PoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker (PoC) and a working exploit for gaining remote shell access. For educational and research purposes only.", - "fork": false, - "created_at": "2025-09-22T16:02:35Z", - "updated_at": "2026-03-10T11:49:34Z", - "pushed_at": "2025-09-22T16:09:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20198.json b/2023/CVE-2023-20198.json index 5b1a603c8e..a6a527754e 100644 --- a/2023/CVE-2023-20198.json +++ b/2023/CVE-2023-20198.json @@ -734,270 +734,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 791680827, - "name": "CVE-2023-20198-RCE", - "full_name": "W01fh4cker\/CVE-2023-20198-RCE", - "owner": { - "login": "W01fh4cker", - "id": 101872898, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101872898?v=4", - "html_url": "https:\/\/github.com\/W01fh4cker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/W01fh4cker\/CVE-2023-20198-RCE", - "description": "CVE-2023-20198-RCE, support adding\/deleting users and executing cli commands\/system commands.", - "fork": false, - "created_at": "2024-04-25T06:59:53Z", - "updated_at": "2025-11-13T15:09:04Z", - "pushed_at": "2024-04-25T07:32:57Z", - "stargazers_count": 42, - "watchers_count": 42, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 42, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 847623387, - "name": "CVE-2023-20198", - "full_name": "sanan2004\/CVE-2023-20198", - "owner": { - "login": "sanan2004", - "id": 118365296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118365296?v=4", - "html_url": "https:\/\/github.com\/sanan2004", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sanan2004\/CVE-2023-20198", - "description": null, - "fork": false, - "created_at": "2024-08-26T08:16:28Z", - "updated_at": "2024-08-26T08:31:22Z", - "pushed_at": "2024-08-26T08:31:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 856822730, - "name": "Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-", - "full_name": "AhmedMansour93\/Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-", - "owner": { - "login": "AhmedMansour93", - "id": 179945455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179945455?v=4", - "html_url": "https:\/\/github.com\/AhmedMansour93", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AhmedMansour93\/Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-", - "description": "🚨 Just completed a detailed investigation for Event ID 193: \"SOC231 - Cisco IOS XE Web UI ZeroDay (CVE-2023-20198)\" via @LetsDefend.io. The attacker successfully bypassed authentication, gaining admin control over the device! Immediate containment was critical. Stay vigilant! 💻🔐", - "fork": false, - "created_at": "2024-09-13T09:17:49Z", - "updated_at": "2024-09-13T09:18:45Z", - "pushed_at": "2024-09-13T09:18:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 892939146, - "name": "cve-2023-20198-poc-cisco", - "full_name": "djayaGit\/cve-2023-20198-poc-cisco", - "owner": { - "login": "djayaGit", - "id": 171713266, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171713266?v=4", - "html_url": "https:\/\/github.com\/djayaGit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/djayaGit\/cve-2023-20198-poc-cisco", - "description": "CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。", - "fork": false, - "created_at": "2024-11-23T05:13:24Z", - "updated_at": "2026-04-14T06:24:21Z", - "pushed_at": "2024-11-22T04:12:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 964670754, - "name": "Cisco-IOS-XE-CVE-2023-20198", - "full_name": "G4sul1n\/Cisco-IOS-XE-CVE-2023-20198", - "owner": { - "login": "G4sul1n", - "id": 169263009, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169263009?v=4", - "html_url": "https:\/\/github.com\/G4sul1n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G4sul1n\/Cisco-IOS-XE-CVE-2023-20198", - "description": "Exploit PoC for CVE-2023-20198", - "fork": false, - "created_at": "2025-04-11T15:37:02Z", - "updated_at": "2026-03-11T18:10:51Z", - "pushed_at": "2025-04-11T16:00:44Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 984370405, - "name": "qub-network-security-cve-2023-20198", - "full_name": "DOMINIC471\/qub-network-security-cve-2023-20198", - "owner": { - "login": "DOMINIC471", - "id": 85890532, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85890532?v=4", - "html_url": "https:\/\/github.com\/DOMINIC471", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DOMINIC471\/qub-network-security-cve-2023-20198", - "description": "Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE – QUB CSC3064 Network Security Assessment", - "fork": false, - "created_at": "2025-05-15T20:25:58Z", - "updated_at": "2026-04-21T16:10:16Z", - "pushed_at": "2025-05-15T21:44:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 998829509, - "name": "CVE-2023-20198", - "full_name": "Arshit01\/CVE-2023-20198", - "owner": { - "login": "Arshit01", - "id": 68898405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68898405?v=4", - "html_url": "https:\/\/github.com\/Arshit01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Arshit01\/CVE-2023-20198", - "description": null, - "fork": false, - "created_at": "2025-06-09T10:13:43Z", - "updated_at": "2025-06-09T10:15:23Z", - "pushed_at": "2025-06-09T10:15:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1116738205, - "name": "CVE-2023-20198", - "full_name": "Religan\/CVE-2023-20198", - "owner": { - "login": "Religan", - "id": 52894013, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52894013?v=4", - "html_url": "https:\/\/github.com\/Religan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Religan\/CVE-2023-20198", - "description": "A cybersecurity case study analysing CVE-2023-20198 in Cisco IOS XE, covering vulnerability exploitation, mitigation strategies, secure software development frameworks, and patch management policies, with practical insights from a controlled lab environment", - "fork": false, - "created_at": "2025-12-15T10:04:12Z", - "updated_at": "2025-12-15T10:08:31Z", - "pushed_at": "2025-12-15T10:08:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1160124691, "name": "CVE-2023-20198-Exploit", diff --git a/2023/CVE-2023-2023.json b/2023/CVE-2023-2023.json index 97eeb9aaa4..8d1fa64005 100644 --- a/2023/CVE-2023-2023.json +++ b/2023/CVE-2023-2023.json @@ -31,38 +31,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 758110379, - "name": "PHP-CVE-2023-2023-2640-POC-Escalation", - "full_name": "druxter-x\/PHP-CVE-2023-2023-2640-POC-Escalation", - "owner": { - "login": "druxter-x", - "id": 1912258, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1912258?v=4", - "html_url": "https:\/\/github.com\/druxter-x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/druxter-x\/PHP-CVE-2023-2023-2640-POC-Escalation", - "description": null, - "fork": false, - "created_at": "2024-02-15T16:35:59Z", - "updated_at": "2024-02-15T16:39:41Z", - "pushed_at": "2024-02-15T17:10:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-20352.json b/2023/CVE-2023-20352.json deleted file mode 100644 index 05d542160b..0000000000 --- a/2023/CVE-2023-20352.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1066099384, - "name": "SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices", - "full_name": "mrk336\/SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices", - "owner": { - "login": "mrk336", - "id": 225503019, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225503019?v=4", - "html_url": "https:\/\/github.com\/mrk336", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mrk336\/SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices", - "description": "CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS\/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total compromise", - "fork": false, - "created_at": "2025-09-29T02:45:45Z", - "updated_at": "2025-11-17T13:01:13Z", - "pushed_at": "2025-09-29T02:58:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20564.json b/2023/CVE-2023-20564.json deleted file mode 100644 index 80bac3aecf..0000000000 --- a/2023/CVE-2023-20564.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1099020373, - "name": "CVE-2023-20564", - "full_name": "NtGabrielGomes\/CVE-2023-20564", - "owner": { - "login": "NtGabrielGomes", - "id": 196732358, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196732358?v=4", - "html_url": "https:\/\/github.com\/NtGabrielGomes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NtGabrielGomes\/CVE-2023-20564", - "description": "PoC for AMD Ryzen driver. ", - "fork": false, - "created_at": "2025-11-18T12:59:55Z", - "updated_at": "2026-06-29T20:19:59Z", - "pushed_at": "2026-01-12T18:32:35Z", - "stargazers_count": 20, - "watchers_count": 20, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 20, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20598.json b/2023/CVE-2023-20598.json deleted file mode 100644 index b0a7aa8096..0000000000 --- a/2023/CVE-2023-20598.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 813857053, - "name": "CVE-2023-20598-PDFWKRNL", - "full_name": "H4rk3nz0\/CVE-2023-20598-PDFWKRNL", - "owner": { - "login": "H4rk3nz0", - "id": 54619779, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54619779?v=4", - "html_url": "https:\/\/github.com\/H4rk3nz0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/H4rk3nz0\/CVE-2023-20598-PDFWKRNL", - "description": "CVE-2023-20598 Kernel Driver - Elevation of Privilege", - "fork": false, - "created_at": "2024-06-11T22:03:51Z", - "updated_at": "2025-07-17T16:51:30Z", - "pushed_at": "2024-06-13T21:34:45Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20696.json b/2023/CVE-2023-20696.json index 6a2b45756c..10788d9ef3 100644 --- a/2023/CVE-2023-20696.json +++ b/2023/CVE-2023-20696.json @@ -14,10 +14,10 @@ "description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.", "fork": false, "created_at": "2026-06-22T02:09:35Z", - "updated_at": "2026-07-02T17:09:20Z", + "updated_at": "2026-07-02T22:26:51Z", "pushed_at": "2026-07-01T00:45:22Z", - "stargazers_count": 80, - "watchers_count": 80, + "stargazers_count": 81, + "watchers_count": 81, "has_discussions": false, "forks_count": 46, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 46, - "watchers": 80, + "watchers": 81, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-20872.json b/2023/CVE-2023-20872.json deleted file mode 100644 index 816401ebf4..0000000000 --- a/2023/CVE-2023-20872.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 830497211, - "name": "vmware-escape-CVE-2023-20872-poc", - "full_name": "ze0r\/vmware-escape-CVE-2023-20872-poc", - "owner": { - "login": "ze0r", - "id": 43227253, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43227253?v=4", - "html_url": "https:\/\/github.com\/ze0r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ze0r\/vmware-escape-CVE-2023-20872-poc", - "description": null, - "fork": false, - "created_at": "2024-07-18T11:45:30Z", - "updated_at": "2026-05-08T08:46:50Z", - "pushed_at": "2024-07-19T14:01:31Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 28, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20904.json b/2023/CVE-2023-20904.json deleted file mode 100644 index 018701c211..0000000000 --- a/2023/CVE-2023-20904.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 964308018, - "name": "CVE-2023-20904", - "full_name": "FishMan132\/CVE-2023-20904", - "owner": { - "login": "FishMan132", - "id": 16998631, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16998631?v=4", - "html_url": "https:\/\/github.com\/FishMan132", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FishMan132\/CVE-2023-20904", - "description": null, - "fork": false, - "created_at": "2025-04-11T02:29:07Z", - "updated_at": "2025-09-04T01:43:19Z", - "pushed_at": "2025-04-11T02:31:08Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-20938.json b/2023/CVE-2023-20938.json index ca957e2acb..51a484cf0a 100644 --- a/2023/CVE-2023-20938.json +++ b/2023/CVE-2023-20938.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 1134153135, - "name": "CVE-2023-20938-Public", - "full_name": "0xAtharv\/CVE-2023-20938-Public", - "owner": { - "login": "0xAtharv", - "id": 129277822, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129277822?v=4", - "html_url": "https:\/\/github.com\/0xAtharv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xAtharv\/CVE-2023-20938-Public", - "description": "A bug trigger for CVE-2023-20938 for Android Binder.", - "fork": false, - "created_at": "2026-01-14T10:21:53Z", - "updated_at": "2026-04-30T14:20:42Z", - "pushed_at": "2026-01-14T10:27:26Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1276690297, "name": "CVE-2023-20938-poc", diff --git a/2023/CVE-2023-21118.json b/2023/CVE-2023-21118.json index 3b7b6b6699..d52f2035a8 100644 --- a/2023/CVE-2023-21118.json +++ b/2023/CVE-2023-21118.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 763868272, - "name": "frameworks_native_AOSP10_r33_CVE-2023-21118", - "full_name": "Satheesh575555\/frameworks_native_AOSP10_r33_CVE-2023-21118", - "owner": { - "login": "Satheesh575555", - "id": 102573923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102573923?v=4", - "html_url": "https:\/\/github.com\/Satheesh575555", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Satheesh575555\/frameworks_native_AOSP10_r33_CVE-2023-21118", - "description": null, - "fork": false, - "created_at": "2024-02-27T03:59:23Z", - "updated_at": "2024-02-27T04:13:46Z", - "pushed_at": "2024-02-27T04:14:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-21125.json b/2023/CVE-2023-21125.json deleted file mode 100644 index a137acf1f4..0000000000 --- a/2023/CVE-2023-21125.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 953920506, - "name": "Mahesh-970-CVE-2023-21125_bluedriod_repo", - "full_name": "761669642\/Mahesh-970-CVE-2023-21125_bluedriod_repo", - "owner": { - "login": "761669642", - "id": 42378385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42378385?v=4", - "html_url": "https:\/\/github.com\/761669642", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/761669642\/Mahesh-970-CVE-2023-21125_bluedriod_repo", - "description": null, - "fork": false, - "created_at": "2025-03-24T09:40:42Z", - "updated_at": "2025-03-24T09:40:42Z", - "pushed_at": "2025-03-17T13:00:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-21173.json b/2023/CVE-2023-21173.json deleted file mode 100644 index 225ad9a73b..0000000000 --- a/2023/CVE-2023-21173.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 950450314, - "name": "MultiExploit", - "full_name": "vesu-nights\/MultiExploit", - "owner": { - "login": "vesu-nights", - "id": 135824891, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135824891?v=4", - "html_url": "https:\/\/github.com\/vesu-nights", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vesu-nights\/MultiExploit", - "description": " CVE-2023-21173 Exploit - Remote Code Execution in SQL Server 2022", - "fork": false, - "created_at": "2025-03-18T07:19:07Z", - "updated_at": "2025-03-18T07:20:58Z", - "pushed_at": "2025-03-18T07:20:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-21282.json b/2023/CVE-2023-21282.json index 2e7b10c93e..7ca69673cc 100644 --- a/2023/CVE-2023-21282.json +++ b/2023/CVE-2023-21282.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 774784509, - "name": "external_aac_android-4.2.2_r1_CVE-2023-21282", - "full_name": "Trinadh465\/external_aac_android-4.2.2_r1_CVE-2023-21282", - "owner": { - "login": "Trinadh465", - "id": 102574296, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4", - "html_url": "https:\/\/github.com\/Trinadh465", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trinadh465\/external_aac_android-4.2.2_r1_CVE-2023-21282", - "description": null, - "fork": false, - "created_at": "2024-03-20T07:15:49Z", - "updated_at": "2024-03-20T07:18:33Z", - "pushed_at": "2024-03-20T07:18:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-21537.json b/2023/CVE-2023-21537.json deleted file mode 100644 index c19021c1dc..0000000000 --- a/2023/CVE-2023-21537.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 910730197, - "name": "CVE-2023-21537", - "full_name": "stevenjoezhang\/CVE-2023-21537", - "owner": { - "login": "stevenjoezhang", - "id": 16272760, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16272760?v=4", - "html_url": "https:\/\/github.com\/stevenjoezhang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/stevenjoezhang\/CVE-2023-21537", - "description": null, - "fork": false, - "created_at": "2025-01-01T08:17:26Z", - "updated_at": "2025-01-12T08:34:52Z", - "pushed_at": "2025-01-01T08:17:29Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-21554.json b/2023/CVE-2023-21554.json index 3cadd2bce4..f2ecfbf292 100644 --- a/2023/CVE-2023-21554.json +++ b/2023/CVE-2023-21554.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 904027205, - "name": "CVE-2023-21554", - "full_name": "Rahul-Thakur7\/CVE-2023-21554", - "owner": { - "login": "Rahul-Thakur7", - "id": 69378114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69378114?v=4", - "html_url": "https:\/\/github.com\/Rahul-Thakur7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rahul-Thakur7\/CVE-2023-21554", - "description": null, - "fork": false, - "created_at": "2024-12-16T05:39:53Z", - "updated_at": "2024-12-16T05:40:26Z", - "pushed_at": "2024-12-16T05:40:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 957864824, "name": "MSMQ-Vulnerability", @@ -130,38 +97,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 1073202511, - "name": "CVE-2023-21554", - "full_name": "shootweb\/CVE-2023-21554", - "owner": { - "login": "shootweb", - "id": 120383091, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120383091?v=4", - "html_url": "https:\/\/github.com\/shootweb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shootweb\/CVE-2023-21554", - "description": "CVE-2023-21554 PoC", - "fork": false, - "created_at": "2025-10-09T19:02:16Z", - "updated_at": "2026-03-23T07:35:30Z", - "pushed_at": "2025-10-09T20:18:51Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-21560.json b/2023/CVE-2023-21560.json deleted file mode 100644 index 8c85f6ce70..0000000000 --- a/2023/CVE-2023-21560.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 811928581, - "name": "dubiousdisk", - "full_name": "Wack0\/dubiousdisk", - "owner": { - "login": "Wack0", - "id": 2650838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2650838?v=4", - "html_url": "https:\/\/github.com\/Wack0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Wack0\/dubiousdisk", - "description": "The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)", - "fork": false, - "created_at": "2024-06-07T15:25:33Z", - "updated_at": "2025-04-02T07:54:21Z", - "pushed_at": "2024-06-07T15:26:02Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bitlocker", - "cve-2022-30203", - "cve-2023-21560", - "cve-2023-28249", - "cve-2023-28269", - "secure-boot", - "uefi", - "vulnerability", - "windows-boot", - "writeup" - ], - "visibility": "public", - "forks": 3, - "watchers": 10, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-2163.json b/2023/CVE-2023-2163.json deleted file mode 100644 index e4553ffa72..0000000000 --- a/2023/CVE-2023-2163.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 895141993, - "name": "CVE-2023-2163", - "full_name": "letsr00t\/CVE-2023-2163", - "owner": { - "login": "letsr00t", - "id": 38699989, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38699989?v=4", - "html_url": "https:\/\/github.com\/letsr00t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/letsr00t\/CVE-2023-2163", - "description": null, - "fork": false, - "created_at": "2024-11-27T16:25:48Z", - "updated_at": "2025-10-24T09:17:31Z", - "pushed_at": "2024-11-27T16:26:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-21674.json b/2023/CVE-2023-21674.json deleted file mode 100644 index 7f2cea481f..0000000000 --- a/2023/CVE-2023-21674.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 768456651, - "name": "CVE-2023-21674", - "full_name": "hd3s5aa\/CVE-2023-21674", - "owner": { - "login": "hd3s5aa", - "id": 160862061, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160862061?v=4", - "html_url": "https:\/\/github.com\/hd3s5aa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hd3s5aa\/CVE-2023-21674", - "description": null, - "fork": false, - "created_at": "2024-03-07T05:43:48Z", - "updated_at": "2026-04-19T21:19:17Z", - "pushed_at": "2024-04-05T00:05:44Z", - "stargazers_count": 39, - "watchers_count": 39, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 39, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-21716.json b/2023/CVE-2023-21716.json index ba5d4d42b7..2b7d498d45 100644 --- a/2023/CVE-2023-21716.json +++ b/2023/CVE-2023-21716.json @@ -296,39 +296,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 858182132, - "name": "CVE-2023-21716-POC", - "full_name": "RonF98\/CVE-2023-21716-POC", - "owner": { - "login": "RonF98", - "id": 181740430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181740430?v=4", - "html_url": "https:\/\/github.com\/RonF98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RonF98\/CVE-2023-21716-POC", - "description": "Proof Of Concept for CVE-2023-21716 Microsoft Word Heap Corruption", - "fork": false, - "created_at": "2024-09-16T13:04:45Z", - "updated_at": "2026-04-09T19:06:08Z", - "pushed_at": "2025-07-07T14:58:18Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1188580065, "name": "CVE-2023-21716", diff --git a/2023/CVE-2023-21768.json b/2023/CVE-2023-21768.json index 0961720018..03afca128a 100644 --- a/2023/CVE-2023-21768.json +++ b/2023/CVE-2023-21768.json @@ -304,171 +304,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 783126137, - "name": "CVE-2023-21768", - "full_name": "ldrx30\/CVE-2023-21768", - "owner": { - "login": "ldrx30", - "id": 102413682, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102413682?v=4", - "html_url": "https:\/\/github.com\/ldrx30", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ldrx30\/CVE-2023-21768", - "description": "CVE-2023-21768 Proof of Concept", - "fork": false, - "created_at": "2024-04-07T02:26:36Z", - "updated_at": "2024-04-07T02:53:21Z", - "pushed_at": "2024-04-07T02:53:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 801154640, - "name": "CVE-2023-21768-dotnet", - "full_name": "xboxoneresearch\/CVE-2023-21768-dotnet", - "owner": { - "login": "xboxoneresearch", - "id": 43215579, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43215579?v=4", - "html_url": "https:\/\/github.com\/xboxoneresearch", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xboxoneresearch\/CVE-2023-21768-dotnet", - "description": "C# \/ .NET version of CVE-2023-21768", - "fork": false, - "created_at": "2024-05-15T17:42:10Z", - "updated_at": "2026-06-01T09:06:25Z", - "pushed_at": "2024-09-06T18:19:31Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 910182976, - "name": "CVE-2023-21768", - "full_name": "IlanDudnik\/CVE-2023-21768", - "owner": { - "login": "IlanDudnik", - "id": 16364955, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16364955?v=4", - "html_url": "https:\/\/github.com\/IlanDudnik", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/IlanDudnik\/CVE-2023-21768", - "description": "Exploit implementation with IO Rings for CVE-2023-21768", - "fork": false, - "created_at": "2024-12-30T17:27:56Z", - "updated_at": "2025-01-12T16:49:10Z", - "pushed_at": "2025-01-08T11:57:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1044303683, - "name": "CVE-2023-21768-DSE-Bypass", - "full_name": "radoi-teodor\/CVE-2023-21768-DSE-Bypass", - "owner": { - "login": "radoi-teodor", - "id": 64803961, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64803961?v=4", - "html_url": "https:\/\/github.com\/radoi-teodor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/radoi-teodor\/CVE-2023-21768-DSE-Bypass", - "description": null, - "fork": false, - "created_at": "2025-08-25T13:35:25Z", - "updated_at": "2025-08-28T18:25:58Z", - "pushed_at": "2025-08-28T18:25:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1137898005, - "name": "Windows-11-Exploit", - "full_name": "Feede33\/Windows-11-Exploit", - "owner": { - "login": "Feede33", - "id": 99533401, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99533401?v=4", - "html_url": "https:\/\/github.com\/Feede33", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Feede33\/Windows-11-Exploit", - "description": "https:\/\/github.com\/chompie1337\/Windows_LPE_AFD_CVE-2023-21768", - "fork": false, - "created_at": "2026-01-20T01:40:31Z", - "updated_at": "2026-01-20T01:40:31Z", - "pushed_at": "2026-01-20T01:40:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1266070651, "name": "CVE-2023-21768", diff --git a/2023/CVE-2023-21839.json b/2023/CVE-2023-21839.json index a89b6b01b0..b8de75adab 100644 --- a/2023/CVE-2023-21839.json +++ b/2023/CVE-2023-21839.json @@ -201,39 +201,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 753664721, - "name": "CVE-2024-20931", - "full_name": "dinosn\/CVE-2024-20931", - "owner": { - "login": "dinosn", - "id": 3851678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4", - "html_url": "https:\/\/github.com\/dinosn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dinosn\/CVE-2024-20931", - "description": "CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839", - "fork": false, - "created_at": "2024-02-06T15:09:33Z", - "updated_at": "2026-03-05T02:50:53Z", - "pushed_at": "2024-02-06T15:56:12Z", - "stargazers_count": 61, - "watchers_count": 61, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 61, - "score": 0, - "subscribers_count": 1 - }, { "id": 1257262452, "name": "CVE-2024-21182", diff --git a/2023/CVE-2023-21987.json b/2023/CVE-2023-21987.json index 1043b2e0eb..ccd9e12aea 100644 --- a/2023/CVE-2023-21987.json +++ b/2023/CVE-2023-21987.json @@ -1,37 +1,4 @@ [ - { - "id": 862382230, - "name": "cve-2023-21987-poc", - "full_name": "chunzhennn\/cve-2023-21987-poc", - "owner": { - "login": "chunzhennn", - "id": 38834411, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38834411?v=4", - "html_url": "https:\/\/github.com\/chunzhennn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chunzhennn\/cve-2023-21987-poc", - "description": "Oracle VirtualBox VGA OOB-Read Vulnerability", - "fork": false, - "created_at": "2024-09-24T14:01:57Z", - "updated_at": "2025-09-27T09:19:43Z", - "pushed_at": "2024-10-21T18:15:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1273243286, "name": "CVE-2023-21987-and-CVE-2023-21991", diff --git a/2023/CVE-2023-22047.json b/2023/CVE-2023-22047.json deleted file mode 100644 index e3e7e8979e..0000000000 --- a/2023/CVE-2023-22047.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 958968617, - "name": "CVE-2023-22047", - "full_name": "tuo4n8\/CVE-2023-22047", - "owner": { - "login": "tuo4n8", - "id": 21272757, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21272757?v=4", - "html_url": "https:\/\/github.com\/tuo4n8", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tuo4n8\/CVE-2023-22047", - "description": "Leveraging arbitrary file read to RCE on Oracle PeopleSoft", - "fork": false, - "created_at": "2025-04-02T03:54:56Z", - "updated_at": "2026-06-17T01:32:22Z", - "pushed_at": "2025-04-02T03:56:30Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-22077.json b/2023/CVE-2023-22077.json deleted file mode 100644 index f7b5ec0cf8..0000000000 --- a/2023/CVE-2023-22077.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1032006582, - "name": "CVE-2023-22077", - "full_name": "emad-almousa\/CVE-2023-22077", - "owner": { - "login": "emad-almousa", - "id": 48997609, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48997609?v=4", - "html_url": "https:\/\/github.com\/emad-almousa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/emad-almousa\/CVE-2023-22077", - "description": null, - "fork": false, - "created_at": "2025-08-04T16:55:21Z", - "updated_at": "2025-08-04T16:55:52Z", - "pushed_at": "2025-08-04T16:55:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-22098.json b/2023/CVE-2023-22098.json deleted file mode 100644 index 5573057d2e..0000000000 --- a/2023/CVE-2023-22098.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 870976805, - "name": "CVE-2023-22098", - "full_name": "Diego-AltF4\/CVE-2023-22098", - "owner": { - "login": "Diego-AltF4", - "id": 55554183, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55554183?v=4", - "html_url": "https:\/\/github.com\/Diego-AltF4", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Diego-AltF4\/CVE-2023-22098", - "description": "Oracle VM VirtualBox 7.0.10 r158379 Escape", - "fork": false, - "created_at": "2024-10-11T02:53:14Z", - "updated_at": "2026-05-13T19:50:12Z", - "pushed_at": "2024-10-23T18:01:48Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-2245.json b/2023/CVE-2023-2245.json deleted file mode 100644 index 5d2de06476..0000000000 --- a/2023/CVE-2023-2245.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927468812, - "name": "2023-2245", - "full_name": "tpdlshdmlrkfmcla\/2023-2245", - "owner": { - "login": "tpdlshdmlrkfmcla", - "id": 58906858, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58906858?v=4", - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla\/2023-2245", - "description": "cve-2023-2245", - "fork": false, - "created_at": "2025-02-05T02:17:26Z", - "updated_at": "2025-02-05T02:18:00Z", - "pushed_at": "2025-02-05T02:17:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-22493.json b/2023/CVE-2023-22493.json deleted file mode 100644 index 0ead6527a9..0000000000 --- a/2023/CVE-2023-22493.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1029301083, - "name": "SSRF-CVE-2023-22493", - "full_name": "buitanhung144\/SSRF-CVE-2023-22493", - "owner": { - "login": "buitanhung144", - "id": 97713586, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97713586?v=4", - "html_url": "https:\/\/github.com\/buitanhung144", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/buitanhung144\/SSRF-CVE-2023-22493", - "description": "Phân tích CVE-2023-22493", - "fork": false, - "created_at": "2025-07-30T20:38:33Z", - "updated_at": "2025-07-30T21:32:11Z", - "pushed_at": "2025-07-30T21:32:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-22515.json b/2023/CVE-2023-22515.json index 832adfdfc5..84dad91b71 100644 --- a/2023/CVE-2023-22515.json +++ b/2023/CVE-2023-22515.json @@ -595,406 +595,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 762759550, - "name": "CVE-2023-22515", - "full_name": "rxerium\/CVE-2023-22515", - "owner": { - "login": "rxerium", - "id": 59293085, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59293085?v=4", - "html_url": "https:\/\/github.com\/rxerium", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rxerium\/CVE-2023-22515", - "description": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", - "fork": false, - "created_at": "2024-02-24T16:04:35Z", - "updated_at": "2025-10-14T06:44:10Z", - "pushed_at": "2025-10-14T06:44:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0day", - "atlassian", - "atlassian-confluence", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 792458695, - "name": "NSE--CVE-2023-22515", - "full_name": "fyx1t\/NSE--CVE-2023-22515", - "owner": { - "login": "fyx1t", - "id": 57405939, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57405939?v=4", - "html_url": "https:\/\/github.com\/fyx1t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fyx1t\/NSE--CVE-2023-22515", - "description": "NSE script for checking the presence of CVE-2023-22515", - "fork": false, - "created_at": "2024-04-26T17:57:33Z", - "updated_at": "2024-11-15T21:14:17Z", - "pushed_at": "2024-04-26T17:58:10Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 811026888, - "name": "CVE-2023-22515-check", - "full_name": "s1d6point7bugcrowd\/CVE-2023-22515-check", - "owner": { - "login": "s1d6point7bugcrowd", - "id": 163605035, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163605035?v=4", - "html_url": "https:\/\/github.com\/s1d6point7bugcrowd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s1d6point7bugcrowd\/CVE-2023-22515-check", - "description": "This script will inform the user if the Confluence instance is vulnerable, but it will not proceed with the exploitation steps.", - "fork": false, - "created_at": "2024-06-05T19:56:16Z", - "updated_at": "2024-06-20T19:03:26Z", - "pushed_at": "2024-06-20T19:03:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 812408801, - "name": "cve-2023-22515", - "full_name": "xorbbo\/cve-2023-22515", - "owner": { - "login": "xorbbo", - "id": 172144274, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172144274?v=4", - "html_url": "https:\/\/github.com\/xorbbo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xorbbo\/cve-2023-22515", - "description": "NSE script to check if app is vulnerable to cve-2023-22515", - "fork": false, - "created_at": "2024-06-08T20:04:44Z", - "updated_at": "2024-06-08T20:10:35Z", - "pushed_at": "2024-06-08T20:09:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 830699904, - "name": "CVE-2023-22515-NSE", - "full_name": "spareack\/CVE-2023-22515-NSE", - "owner": { - "login": "spareack", - "id": 92234381, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92234381?v=4", - "html_url": "https:\/\/github.com\/spareack", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/spareack\/CVE-2023-22515-NSE", - "description": "Vulnerability checking tool via Nmap Scripting Engine", - "fork": false, - "created_at": "2024-07-18T19:55:59Z", - "updated_at": "2024-12-02T17:57:36Z", - "pushed_at": "2024-11-19T23:11:14Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 831810309, - "name": "CVE-2023-22515-Confluence", - "full_name": "Onedy1703\/CVE-2023-22515-Confluence", - "owner": { - "login": "Onedy1703", - "id": 74649794, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74649794?v=4", - "html_url": "https:\/\/github.com\/Onedy1703", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Onedy1703\/CVE-2023-22515-Confluence", - "description": "CVE 2023-22515", - "fork": false, - "created_at": "2024-07-21T17:19:36Z", - "updated_at": "2026-01-12T11:20:00Z", - "pushed_at": "2026-01-12T11:19:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 938079728, - "name": "CVE-2023-22515-Exploit-Script", - "full_name": "vivigotnotime\/CVE-2023-22515-Exploit-Script", - "owner": { - "login": "vivigotnotime", - "id": 196263105, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196263105?v=4", - "html_url": "https:\/\/github.com\/vivigotnotime", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vivigotnotime\/CVE-2023-22515-Exploit-Script", - "description": null, - "fork": false, - "created_at": "2025-02-24T11:44:20Z", - "updated_at": "2025-02-24T12:53:08Z", - "pushed_at": "2025-02-24T12:53:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1051594198, - "name": "CVE-2023-22515", - "full_name": "tranphuc2005\/CVE-2023-22515", - "owner": { - "login": "tranphuc2005", - "id": 183067711, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183067711?v=4", - "html_url": "https:\/\/github.com\/tranphuc2005", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tranphuc2005\/CVE-2023-22515", - "description": null, - "fork": false, - "created_at": "2025-09-06T10:21:26Z", - "updated_at": "2025-12-13T13:34:19Z", - "pushed_at": "2025-09-06T10:30:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1082375643, - "name": "LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197", - "full_name": "Arkha-Corvus\/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197", - "owner": { - "login": "Arkha-Corvus", - "id": 96014266, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96014266?v=4", - "html_url": "https:\/\/github.com\/Arkha-Corvus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Arkha-Corvus\/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197", - "description": "I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an external IP targeting the Confluence server, suggesting an attempt to gain unauthorised admin access.", - "fork": false, - "created_at": "2025-10-24T06:38:17Z", - "updated_at": "2025-10-26T13:05:53Z", - "pushed_at": "2025-10-24T09:32:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1101550200, - "name": "cve-2023-22515-lab", - "full_name": "CyberSentinel321\/cve-2023-22515-lab", - "owner": { - "login": "CyberSentinel321", - "id": 158842470, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158842470?v=4", - "html_url": "https:\/\/github.com\/CyberSentinel321", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberSentinel321\/cve-2023-22515-lab", - "description": "Hands-on security lab demonstrating CVE-2023-22515 — Atlassian Confluence Authentication Bypass using a simulated vulnerable environment.", - "fork": false, - "created_at": "2025-11-21T20:53:00Z", - "updated_at": "2025-11-21T20:59:08Z", - "pushed_at": "2025-11-21T20:59:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1135395748, - "name": "CVE-2023-22515", - "full_name": "dkq-k\/CVE-2023-22515", - "owner": { - "login": "dkq-k", - "id": 182783523, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182783523?v=4", - "html_url": "https:\/\/github.com\/dkq-k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkq-k\/CVE-2023-22515", - "description": null, - "fork": false, - "created_at": "2026-01-16T03:18:22Z", - "updated_at": "2026-01-16T03:19:32Z", - "pushed_at": "2026-01-16T03:19:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1135408216, - "name": "cve-2023-22515-1", - "full_name": "dkq-k\/cve-2023-22515-1", - "owner": { - "login": "dkq-k", - "id": 182783523, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182783523?v=4", - "html_url": "https:\/\/github.com\/dkq-k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dkq-k\/cve-2023-22515-1", - "description": null, - "fork": false, - "created_at": "2026-01-16T03:50:39Z", - "updated_at": "2026-01-16T03:51:16Z", - "pushed_at": "2026-01-16T03:51:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-22518.json b/2023/CVE-2023-22518.json index df79922510..63977d59f7 100644 --- a/2023/CVE-2023-22518.json +++ b/2023/CVE-2023-22518.json @@ -185,104 +185,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 747208015, - "name": "CVE-2023-22518", - "full_name": "bibo318\/CVE-2023-22518", - "owner": { - "login": "bibo318", - "id": 56821442, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56821442?v=4", - "html_url": "https:\/\/github.com\/bibo318", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bibo318\/CVE-2023-22518", - "description": "Lỗ hổng ủy quyền không phù hợp trong Trung tâm dữ liệu Confluence và Máy chủ + bugsBonus 🔥", - "fork": false, - "created_at": "2024-01-23T13:38:40Z", - "updated_at": "2024-01-24T10:15:44Z", - "pushed_at": "2024-01-24T02:04:40Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 775340661, - "name": "Exploit-CVE-2023-22518", - "full_name": "Lilly-dox\/Exploit-CVE-2023-22518", - "owner": { - "login": "Lilly-dox", - "id": 130746941, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130746941?v=4", - "html_url": "https:\/\/github.com\/Lilly-dox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Lilly-dox\/Exploit-CVE-2023-22518", - "description": null, - "fork": false, - "created_at": "2024-03-21T07:55:00Z", - "updated_at": "2024-03-22T15:49:52Z", - "pushed_at": "2024-03-24T01:33:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 977812226, - "name": "analyze-Exploit-CVE-2023-22518-Confluence", - "full_name": "ductink98lhp\/analyze-Exploit-CVE-2023-22518-Confluence", - "owner": { - "login": "ductink98lhp", - "id": 76523661, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76523661?v=4", - "html_url": "https:\/\/github.com\/ductink98lhp", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ductink98lhp\/analyze-Exploit-CVE-2023-22518-Confluence", - "description": null, - "fork": false, - "created_at": "2025-05-05T02:12:05Z", - "updated_at": "2025-05-05T11:00:15Z", - "pushed_at": "2025-05-05T02:35:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-22527.json b/2023/CVE-2023-22527.json index 9b009019f9..a59b35c1cb 100644 --- a/2023/CVE-2023-22527.json +++ b/2023/CVE-2023-22527.json @@ -1,700 +1,4 @@ [ - { - "id": 743909012, - "name": "CVE-2023-22527_Confluence_RCE", - "full_name": "Avento\/CVE-2023-22527_Confluence_RCE", - "owner": { - "login": "Avento", - "id": 13798539, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13798539?v=4", - "html_url": "https:\/\/github.com\/Avento", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Avento\/CVE-2023-22527_Confluence_RCE", - "description": "CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC", - "fork": false, - "created_at": "2024-01-16T08:46:21Z", - "updated_at": "2026-04-03T01:00:37Z", - "pushed_at": "2024-01-23T09:57:31Z", - "stargazers_count": 26, - "watchers_count": 26, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 26, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 746624870, - "name": "CVE-2023-22527", - "full_name": "Drun1baby\/CVE-2023-22527", - "owner": { - "login": "Drun1baby", - "id": 75228348, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75228348?v=4", - "html_url": "https:\/\/github.com\/Drun1baby", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Drun1baby\/CVE-2023-22527", - "description": null, - "fork": false, - "created_at": "2024-01-22T11:38:55Z", - "updated_at": "2025-12-12T06:29:59Z", - "pushed_at": "2024-01-22T12:07:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 746832699, - "name": "CVE-2023-22527", - "full_name": "thanhlam-attt\/CVE-2023-22527", - "owner": { - "login": "thanhlam-attt", - "id": 79523444, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79523444?v=4", - "html_url": "https:\/\/github.com\/thanhlam-attt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thanhlam-attt\/CVE-2023-22527", - "description": null, - "fork": false, - "created_at": "2024-01-22T19:02:59Z", - "updated_at": "2024-01-27T13:26:05Z", - "pushed_at": "2024-01-25T17:54:24Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 746974310, - "name": "CVE-2023-22527-POC", - "full_name": "Manh130902\/CVE-2023-22527-POC", - "owner": { - "login": "Manh130902", - "id": 93723285, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93723285?v=4", - "html_url": "https:\/\/github.com\/Manh130902", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Manh130902\/CVE-2023-22527-POC", - "description": "A critical severity Remote Code Execution (RCE) vulnerability (CVE-2023-22527) was discovered in Confluence Server and Data Center. ", - "fork": false, - "created_at": "2024-01-23T02:17:36Z", - "updated_at": "2026-05-31T09:53:26Z", - "pushed_at": "2024-01-23T12:03:00Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 22, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747056079, - "name": "CVE-2023-22527-confluence", - "full_name": "VNCERT-CC\/CVE-2023-22527-confluence", - "owner": { - "login": "VNCERT-CC", - "id": 94035613, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94035613?v=4", - "html_url": "https:\/\/github.com\/VNCERT-CC", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/VNCERT-CC\/CVE-2023-22527-confluence", - "description": "[Confluence] CVE-2023-22527 realworld poc", - "fork": false, - "created_at": "2024-01-23T07:10:55Z", - "updated_at": "2025-02-22T18:01:05Z", - "pushed_at": "2024-01-23T07:16:40Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 19, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747075547, - "name": "CVE-2023-22527", - "full_name": "Vozec\/CVE-2023-22527", - "owner": { - "login": "Vozec", - "id": 61807609, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61807609?v=4", - "html_url": "https:\/\/github.com\/Vozec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vozec\/CVE-2023-22527", - "description": "This repository presents a proof-of-concept of CVE-2023-22527", - "fork": false, - "created_at": "2024-01-23T08:06:15Z", - "updated_at": "2026-04-25T19:14:30Z", - "pushed_at": "2024-01-23T09:13:39Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 14, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747093582, - "name": "CVE-2023-22527", - "full_name": "C1ph3rX13\/CVE-2023-22527", - "owner": { - "login": "C1ph3rX13", - "id": 80873500, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80873500?v=4", - "html_url": "https:\/\/github.com\/C1ph3rX13", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/C1ph3rX13\/CVE-2023-22527", - "description": "Atlassian Confluence - Remote Code Execution (CVE-2023-22527)", - "fork": false, - "created_at": "2024-01-23T08:53:46Z", - "updated_at": "2024-02-12T18:35:12Z", - "pushed_at": "2024-01-23T09:04:15Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747107640, - "name": "CVE-2023-22527", - "full_name": "Niuwoo\/CVE-2023-22527", - "owner": { - "login": "Niuwoo", - "id": 57100441, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57100441?v=4", - "html_url": "https:\/\/github.com\/Niuwoo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Niuwoo\/CVE-2023-22527", - "description": "POC", - "fork": false, - "created_at": "2024-01-23T09:28:53Z", - "updated_at": "2024-01-23T09:58:22Z", - "pushed_at": "2024-01-24T01:28:57Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747142530, - "name": "CVE-2023-22527", - "full_name": "Chocapikk\/CVE-2023-22527", - "owner": { - "login": "Chocapikk", - "id": 88535377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4", - "html_url": "https:\/\/github.com\/Chocapikk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2023-22527", - "description": "Atlassian Confluence - Remote Code Execution", - "fork": false, - "created_at": "2024-01-23T10:55:28Z", - "updated_at": "2025-06-04T05:49:16Z", - "pushed_at": "2024-01-23T11:30:10Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747304649, - "name": "CVE-2023-22527", - "full_name": "RevoltSecurities\/CVE-2023-22527", - "owner": { - "login": "RevoltSecurities", - "id": 119435129, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119435129?v=4", - "html_url": "https:\/\/github.com\/RevoltSecurities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RevoltSecurities\/CVE-2023-22527", - "description": "An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE", - "fork": false, - "created_at": "2024-01-23T17:07:15Z", - "updated_at": "2026-04-29T23:16:35Z", - "pushed_at": "2024-01-23T17:18:36Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 10, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 747516154, - "name": "CVE-2023-22527", - "full_name": "yoryio\/CVE-2023-22527", - "owner": { - "login": "yoryio", - "id": 134471901, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134471901?v=4", - "html_url": "https:\/\/github.com\/yoryio", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yoryio\/CVE-2023-22527", - "description": "Exploit for CVE-2023-22527 - Atlassian Confluence Data Center and Server", - "fork": false, - "created_at": "2024-01-24T04:44:59Z", - "updated_at": "2024-08-12T20:33:10Z", - "pushed_at": "2024-03-15T05:15:05Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "atlassian-confluence", - "cve-2023-22527" - ], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747900455, - "name": "CVE-2023-22527", - "full_name": "Privia-Security\/CVE-2023-22527", - "owner": { - "login": "Privia-Security", - "id": 69091374, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69091374?v=4", - "html_url": "https:\/\/github.com\/Privia-Security", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Privia-Security\/CVE-2023-22527", - "description": "CVE-2023-22527", - "fork": false, - "created_at": "2024-01-24T21:29:59Z", - "updated_at": "2025-07-09T03:32:19Z", - "pushed_at": "2024-01-25T06:39:02Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 748024139, - "name": "CVE-2023-22527-POC", - "full_name": "MaanVader\/CVE-2023-22527-POC", - "owner": { - "login": "MaanVader", - "id": 103140982, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103140982?v=4", - "html_url": "https:\/\/github.com\/MaanVader", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MaanVader\/CVE-2023-22527-POC", - "description": "Atlassian Confluence Remote Code Execution(RCE) Proof Of Concept", - "fork": false, - "created_at": "2024-01-25T05:32:06Z", - "updated_at": "2024-01-28T09:48:06Z", - "pushed_at": "2024-01-25T10:42:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 748135321, - "name": "CVE-2023-22527", - "full_name": "adminlove520\/CVE-2023-22527", - "owner": { - "login": "adminlove520", - "id": 32920883, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32920883?v=4", - "html_url": "https:\/\/github.com\/adminlove520", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/adminlove520\/CVE-2023-22527", - "description": "CVE-2023-22527 - RCE (Remote Code Execution) Vulnerability In Confluence Data Center and Confluence Server PoC", - "fork": false, - "created_at": "2024-01-25T10:52:39Z", - "updated_at": "2024-04-02T17:41:19Z", - "pushed_at": "2024-01-25T10:54:57Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 751670668, - "name": "CVE-2023-22527", - "full_name": "YongYe-Security\/CVE-2023-22527", - "owner": { - "login": "YongYe-Security", - "id": 90460865, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90460865?v=4", - "html_url": "https:\/\/github.com\/YongYe-Security", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/YongYe-Security\/CVE-2023-22527", - "description": "CVE-2023-22527 Batch scanning", - "fork": false, - "created_at": "2024-02-02T04:20:14Z", - "updated_at": "2024-02-02T04:21:05Z", - "pushed_at": "2024-02-02T04:23:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 755982489, - "name": "CVE-2023-22527-Godzilla-MEMSHELL", - "full_name": "Boogipop\/CVE-2023-22527-Godzilla-MEMSHELL", - "owner": { - "login": "Boogipop", - "id": 114604850, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114604850?v=4", - "html_url": "https:\/\/github.com\/Boogipop", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Boogipop\/CVE-2023-22527-Godzilla-MEMSHELL", - "description": "CVE-2023-22527 内存马注入工具", - "fork": false, - "created_at": "2024-02-11T16:46:55Z", - "updated_at": "2026-02-02T02:51:39Z", - "pushed_at": "2024-02-21T05:49:59Z", - "stargazers_count": 76, - "watchers_count": 76, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 76, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 763294385, - "name": "CVE-2023-22527-MEMSHELL", - "full_name": "M0untainShley\/CVE-2023-22527-MEMSHELL", - "owner": { - "login": "M0untainShley", - "id": 72058581, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72058581?v=4", - "html_url": "https:\/\/github.com\/M0untainShley", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/M0untainShley\/CVE-2023-22527-MEMSHELL", - "description": "confluence CVE-2023-22527 漏洞利用工具，支持冰蝎\/哥斯拉内存马注入，支持设置 http 代理", - "fork": false, - "created_at": "2024-02-26T02:34:44Z", - "updated_at": "2026-06-22T11:04:20Z", - "pushed_at": "2024-04-24T02:34:16Z", - "stargazers_count": 40, - "watchers_count": 40, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 40, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 767136230, - "name": "cve-2023-22527", - "full_name": "vulncheck-oss\/cve-2023-22527", - "owner": { - "login": "vulncheck-oss", - "id": 134310220, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134310220?v=4", - "html_url": "https:\/\/github.com\/vulncheck-oss", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vulncheck-oss\/cve-2023-22527", - "description": "Three go-exploits exploiting CVE-2023-22527 to execute arbitrary code in memory", - "fork": false, - "created_at": "2024-03-04T19:09:57Z", - "updated_at": "2026-02-12T15:09:45Z", - "pushed_at": "2025-02-17T08:59:48Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 807402056, - "name": "Confluence-RCE", - "full_name": "BBD-YZZ\/Confluence-RCE", - "owner": { - "login": "BBD-YZZ", - "id": 132546612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132546612?v=4", - "html_url": "https:\/\/github.com\/BBD-YZZ", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BBD-YZZ\/Confluence-RCE", - "description": "confluence rce (CVE-2021-26084, CVE-2022-26134, CVE-2023-22527)", - "fork": false, - "created_at": "2024-05-29T03:20:22Z", - "updated_at": "2025-10-11T19:07:50Z", - "pushed_at": "2024-08-26T09:24:31Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 868511070, - "name": "CVE-2023-22527", - "full_name": "kh4sh3i\/CVE-2023-22527", - "owner": { - "login": "kh4sh3i", - "id": 64693844, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64693844?v=4", - "html_url": "https:\/\/github.com\/kh4sh3i", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kh4sh3i\/CVE-2023-22527", - "description": "CVE-2023-22527 | RCE using SSTI in Confluence", - "fork": false, - "created_at": "2024-10-06T15:16:04Z", - "updated_at": "2024-11-09T21:19:35Z", - "pushed_at": "2024-10-08T14:45:46Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 992520451, - "name": "CVE-2023-22527", - "full_name": "thompson005\/CVE-2023-22527", - "owner": { - "login": "thompson005", - "id": 114120925, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114120925?v=4", - "html_url": "https:\/\/github.com\/thompson005", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thompson005\/CVE-2023-22527", - "description": null, - "fork": false, - "created_at": "2025-05-29T09:37:04Z", - "updated_at": "2025-08-25T09:24:10Z", - "pushed_at": "2025-08-25T09:24:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1101228156, "name": "AtlassianPwn", diff --git a/2023/CVE-2023-2255.json b/2023/CVE-2023-2255.json index 174fdf781a..1c7bcd2935 100644 --- a/2023/CVE-2023-2255.json +++ b/2023/CVE-2023-2255.json @@ -31,71 +31,5 @@ "watchers": 65, "score": 0, "subscribers_count": 1 - }, - { - "id": 792716677, - "name": "CVE-2023-2255", - "full_name": "SaintMichae64\/CVE-2023-2255", - "owner": { - "login": "SaintMichae64", - "id": 71401539, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71401539?v=4", - "html_url": "https:\/\/github.com\/SaintMichae64", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SaintMichae64\/CVE-2023-2255", - "description": null, - "fork": false, - "created_at": "2024-04-27T11:21:11Z", - "updated_at": "2024-05-04T10:24:16Z", - "pushed_at": "2024-05-04T10:24:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 962746652, - "name": "CVE-2023-2255", - "full_name": "G4sp4rCS\/CVE-2023-2255", - "owner": { - "login": "G4sp4rCS", - "id": 52015401, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52015401?v=4", - "html_url": "https:\/\/github.com\/G4sp4rCS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G4sp4rCS\/CVE-2023-2255", - "description": "CVE-2023-2255 for LPE", - "fork": false, - "created_at": "2025-04-08T15:59:48Z", - "updated_at": "2025-04-08T16:00:04Z", - "pushed_at": "2025-04-08T16:00:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-22622.json b/2023/CVE-2023-22622.json deleted file mode 100644 index 4c680e7e43..0000000000 --- a/2023/CVE-2023-22622.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 774948865, - "name": "CVE-2023-22622", - "full_name": "michael-david-fry\/CVE-2023-22622", - "owner": { - "login": "michael-david-fry", - "id": 4213469, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4213469?v=4", - "html_url": "https:\/\/github.com\/michael-david-fry", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/michael-david-fry\/CVE-2023-22622", - "description": "Python Script that will DoS a WP server that is utilizing WP-CRON", - "fork": false, - "created_at": "2024-03-20T13:48:48Z", - "updated_at": "2026-02-14T07:21:45Z", - "pushed_at": "2024-08-02T13:26:53Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-22809.json b/2023/CVE-2023-22809.json index dd1dfa4d88..1fe9ff66a5 100644 --- a/2023/CVE-2023-22809.json +++ b/2023/CVE-2023-22809.json @@ -276,137 +276,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 847582059, - "name": "SUDO-privilege-escalation", - "full_name": "laxmiyamkolu\/SUDO-privilege-escalation", - "owner": { - "login": "laxmiyamkolu", - "id": 85497904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85497904?v=4", - "html_url": "https:\/\/github.com\/laxmiyamkolu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/laxmiyamkolu\/SUDO-privilege-escalation", - "description": "Sudo Privilege Escalation: CVE-2023-22809 Simulation This project simulates the Sudo privilege escalation vulnerability (CVE-2023-22809) to demonstrate how unauthorized root access can be gained. It involves identifying and exploiting this vulnerability in a controlled environment using Parrot OS, the Sudo command, and Bash scripting.", - "fork": false, - "created_at": "2024-08-26T06:27:59Z", - "updated_at": "2024-08-26T07:09:13Z", - "pushed_at": "2024-08-26T07:09:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 848853200, - "name": "CVE-2023-22809-Exploiter", - "full_name": "D0rDa4aN919\/CVE-2023-22809-Exploiter", - "owner": { - "login": "D0rDa4aN919", - "id": 108623675, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108623675?v=4", - "html_url": "https:\/\/github.com\/D0rDa4aN919", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/D0rDa4aN919\/CVE-2023-22809-Exploiter", - "description": null, - "fork": false, - "created_at": "2024-08-28T14:22:53Z", - "updated_at": "2025-10-16T13:20:22Z", - "pushed_at": "2024-09-06T08:25:03Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1028949060, - "name": "CVE-2023-22809-automated-python-exploits", - "full_name": "Spydomain\/CVE-2023-22809-automated-python-exploits", - "owner": { - "login": "Spydomain", - "id": 199271706, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199271706?v=4", - "html_url": "https:\/\/github.com\/Spydomain", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Spydomain\/CVE-2023-22809-automated-python-exploits", - "description": "Automates vulnerability check for sudo versions and privilege escalation via sudoedit if exploitable, helping users test and gain root access.", - "fork": false, - "created_at": "2025-07-30T09:48:25Z", - "updated_at": "2026-02-02T11:51:43Z", - "pushed_at": "2025-08-12T05:19:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1134540334, - "name": "CVE-2023-22809", - "full_name": "ValeuDoamne\/CVE-2023-22809", - "owner": { - "login": "ValeuDoamne", - "id": 39670624, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39670624?v=4", - "html_url": "https:\/\/github.com\/ValeuDoamne", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ValeuDoamne\/CVE-2023-22809", - "description": "Implementation of the CVE-2023-22809", - "fork": false, - "created_at": "2026-01-14T21:25:31Z", - "updated_at": "2026-01-20T12:28:08Z", - "pushed_at": "2026-01-20T12:28:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-22894.json b/2023/CVE-2023-22894.json index aced994a91..f679163b20 100644 --- a/2023/CVE-2023-22894.json +++ b/2023/CVE-2023-22894.json @@ -31,38 +31,5 @@ "watchers": 13, "score": 0, "subscribers_count": 1 - }, - { - "id": 1029820533, - "name": "CVE-2023-22894-PoC", - "full_name": "maxntv\/CVE-2023-22894-PoC", - "owner": { - "login": "maxntv", - "id": 82523299, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82523299?v=4", - "html_url": "https:\/\/github.com\/maxntv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/maxntv\/CVE-2023-22894-PoC", - "description": null, - "fork": false, - "created_at": "2025-07-31T16:16:00Z", - "updated_at": "2025-07-31T16:17:10Z", - "pushed_at": "2025-07-31T16:17:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-23388.json b/2023/CVE-2023-23388.json deleted file mode 100644 index 6d5d614071..0000000000 --- a/2023/CVE-2023-23388.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 819107258, - "name": "CVE-2023-23388", - "full_name": "ynwarcs\/CVE-2023-23388", - "owner": { - "login": "ynwarcs", - "id": 108408574, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108408574?v=4", - "html_url": "https:\/\/github.com\/ynwarcs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ynwarcs\/CVE-2023-23388", - "description": "poc for CVE-2023-23388 (LPE in Windows 10\/11 bthserv service)", - "fork": false, - "created_at": "2024-06-23T19:52:09Z", - "updated_at": "2025-03-23T08:32:54Z", - "pushed_at": "2024-07-17T12:25:17Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-23397.json b/2023/CVE-2023-23397.json index 4c961c4922..513beb29df 100644 --- a/2023/CVE-2023-23397.json +++ b/2023/CVE-2023-23397.json @@ -802,143 +802,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 774844975, - "name": "CVE-2023-23397-PoW", - "full_name": "TheUnknownSoul\/CVE-2023-23397-PoW", - "owner": { - "login": "TheUnknownSoul", - "id": 58050201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58050201?v=4", - "html_url": "https:\/\/github.com\/TheUnknownSoul", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TheUnknownSoul\/CVE-2023-23397-PoW", - "description": "Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.", - "fork": false, - "created_at": "2024-03-20T09:49:01Z", - "updated_at": "2025-06-01T10:18:29Z", - "pushed_at": "2024-03-20T10:39:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploitation", - "hacking", - "msoutlook", - "netntlm", - "smb" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 818675920, - "name": "CVE-2023-23397", - "full_name": "Symbolexe\/CVE-2023-23397", - "owner": { - "login": "Symbolexe", - "id": 140549630, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140549630?v=4", - "html_url": "https:\/\/github.com\/Symbolexe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Symbolexe\/CVE-2023-23397", - "description": "CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook", - "fork": false, - "created_at": "2024-06-22T14:25:39Z", - "updated_at": "2024-06-22T14:27:16Z", - "pushed_at": "2024-06-22T14:27:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 961693294, - "name": "CVE-2023-23397", - "full_name": "Gilospy\/CVE-2023-23397", - "owner": { - "login": "Gilospy", - "id": 67920312, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67920312?v=4", - "html_url": "https:\/\/github.com\/Gilospy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gilospy\/CVE-2023-23397", - "description": "Demonstration of CVE-2023-23397 Outlook Privellege Escalation vulnerability", - "fork": false, - "created_at": "2025-04-07T02:33:56Z", - "updated_at": "2025-05-25T05:43:45Z", - "pushed_at": "2025-05-25T05:43:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1130828308, - "name": "CVE-2023-23397-POC", - "full_name": "Phaedrik\/CVE-2023-23397-POC", - "owner": { - "login": "Phaedrik", - "id": 46567924, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46567924?v=4", - "html_url": "https:\/\/github.com\/Phaedrik", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Phaedrik\/CVE-2023-23397-POC", - "description": "Two POCs I created for the CVE-2023-23397 Outlook NTLM vulnerability, to be used internally.", - "fork": false, - "created_at": "2026-01-09T04:27:28Z", - "updated_at": "2026-01-09T08:09:22Z", - "pushed_at": "2026-01-09T04:30:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-23638.json b/2023/CVE-2023-23638.json index aa63c1316d..18914ea83b 100644 --- a/2023/CVE-2023-23638.json +++ b/2023/CVE-2023-23638.json @@ -97,38 +97,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 1017853570, - "name": "dubbo-CVE-2023-23638", - "full_name": "cuijiung\/dubbo-CVE-2023-23638", - "owner": { - "login": "cuijiung", - "id": 99892627, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99892627?v=4", - "html_url": "https:\/\/github.com\/cuijiung", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cuijiung\/dubbo-CVE-2023-23638", - "description": null, - "fork": false, - "created_at": "2025-07-11T07:47:18Z", - "updated_at": "2025-07-24T15:32:51Z", - "pushed_at": "2025-07-11T07:48:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-2375.json b/2023/CVE-2023-2375.json deleted file mode 100644 index f52fb6c83f..0000000000 --- a/2023/CVE-2023-2375.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 823381127, - "name": "HTB-Devvortex-CVE-2023-2375-PoC", - "full_name": "0x0jr\/HTB-Devvortex-CVE-2023-2375-PoC", - "owner": { - "login": "0x0jr", - "id": 166342298, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166342298?v=4", - "html_url": "https:\/\/github.com\/0x0jr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0x0jr\/HTB-Devvortex-CVE-2023-2375-PoC", - "description": "CVE-2023-23752 Unauthenticated Information Disclosure Showcase Using Devvortex From HTB.", - "fork": false, - "created_at": "2024-07-02T23:50:31Z", - "updated_at": "2024-07-03T00:46:26Z", - "pushed_at": "2024-07-03T00:46:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-23752.json b/2023/CVE-2023-23752.json index 096ff974d2..bc29e05ebc 100644 --- a/2023/CVE-2023-23752.json +++ b/2023/CVE-2023-23752.json @@ -1251,237 +1251,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 759783810, - "name": "CVE-2023-23752", - "full_name": "Rival420\/CVE-2023-23752", - "owner": { - "login": "Rival420", - "id": 51548322, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51548322?v=4", - "html_url": "https:\/\/github.com\/Rival420", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rival420\/CVE-2023-23752", - "description": "Joomla! < 4.2.8 - Unauthenticated information disclosure exploit", - "fork": false, - "created_at": "2024-02-19T10:27:01Z", - "updated_at": "2024-02-19T10:27:35Z", - "pushed_at": "2024-02-19T11:26:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 770897039, - "name": "CVE-2023-23752", - "full_name": "JohnDoeAnonITA\/CVE-2023-23752", - "owner": { - "login": "JohnDoeAnonITA", - "id": 162304433, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162304433?v=4", - "html_url": "https:\/\/github.com\/JohnDoeAnonITA", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JohnDoeAnonITA\/CVE-2023-23752", - "description": "CVE-2023-23752 Data Extractor", - "fork": false, - "created_at": "2024-03-12T10:59:10Z", - "updated_at": "2026-06-10T05:47:59Z", - "pushed_at": "2024-05-03T09:05:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 785240418, - "name": "CVE-2023-23752", - "full_name": "0xWhoami35\/CVE-2023-23752", - "owner": { - "login": "0xWhoami35", - "id": 107396843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107396843?v=4", - "html_url": "https:\/\/github.com\/0xWhoami35", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xWhoami35\/CVE-2023-23752", - "description": null, - "fork": false, - "created_at": "2024-04-11T13:39:44Z", - "updated_at": "2025-03-29T08:21:52Z", - "pushed_at": "2025-03-29T08:21:48Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 787014993, - "name": "CVE-2023-23752-Python", - "full_name": "mariovata\/CVE-2023-23752-Python", - "owner": { - "login": "mariovata", - "id": 33606897, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33606897?v=4", - "html_url": "https:\/\/github.com\/mariovata", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mariovata\/CVE-2023-23752-Python", - "description": "Joomla! < 4.2.8 - Unauthenticated information disclosure", - "fork": false, - "created_at": "2024-04-15T18:18:02Z", - "updated_at": "2024-04-15T19:36:05Z", - "pushed_at": "2024-04-15T19:34:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 793175121, - "name": "CVE-2023-23752", - "full_name": "0xx01\/CVE-2023-23752", - "owner": { - "login": "0xx01", - "id": 130947610, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130947610?v=4", - "html_url": "https:\/\/github.com\/0xx01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xx01\/CVE-2023-23752", - "description": "A simple bash script to exploit Joomla! < 4.2.8 - Unauthenticated information disclosure", - "fork": false, - "created_at": "2024-04-28T16:32:21Z", - "updated_at": "2024-04-28T16:50:44Z", - "pushed_at": "2024-04-28T16:50:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 796038372, - "name": "CVE-2023-23752", - "full_name": "h3x0v3rl0rd\/CVE-2023-23752", - "owner": { - "login": "h3x0v3rl0rd", - "id": 66146701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66146701?v=4", - "html_url": "https:\/\/github.com\/h3x0v3rl0rd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h3x0v3rl0rd\/CVE-2023-23752", - "description": "Joomla! v4.2.8 - Unauthenticated information disclosure", - "fork": false, - "created_at": "2024-05-04T18:44:12Z", - "updated_at": "2024-05-31T14:11:29Z", - "pushed_at": "2024-05-31T14:11:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 841070470, - "name": "CVE-2023-23752", - "full_name": "Aureum01\/CVE-2023-23752", - "owner": { - "login": "Aureum01", - "id": 71108402, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71108402?v=4", - "html_url": "https:\/\/github.com\/Aureum01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Aureum01\/CVE-2023-23752", - "description": "A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7", - "fork": false, - "created_at": "2024-08-11T14:55:50Z", - "updated_at": "2024-08-11T15:07:13Z", - "pushed_at": "2024-08-11T15:07:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1239173827, "name": "Joomla-CMS-Full-Lifecycle-Pentest", diff --git a/2023/CVE-2023-24044.json b/2023/CVE-2023-24044.json deleted file mode 100644 index 0b11fc47fc..0000000000 --- a/2023/CVE-2023-24044.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 806027931, - "name": "CVE-2023-24044", - "full_name": "Cappricio-Securities\/CVE-2023-24044", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2023-24044", - "description": "Plesk Obsidian <=18.0.49 - Open Redirect", - "fork": false, - "created_at": "2024-05-26T06:56:05Z", - "updated_at": "2025-08-12T14:13:16Z", - "pushed_at": "2024-06-24T09:03:56Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-24044", - "cve-2023-24044-scanner", - "openredirect", - "plesk-obsidian", - "plesk-obsidian-open-redirect", - "wapt" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24057.json b/2023/CVE-2023-24057.json deleted file mode 100644 index fb25189ea8..0000000000 --- a/2023/CVE-2023-24057.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1040893565, - "name": "hapifhir__org_hl7_fhir_core_CVE-2023-24057_5-6-911", - "full_name": "shoucheng3\/hapifhir__org_hl7_fhir_core_CVE-2023-24057_5-6-911", - "owner": { - "login": "shoucheng3", - "id": 71475027, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71475027?v=4", - "html_url": "https:\/\/github.com\/shoucheng3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shoucheng3\/hapifhir__org_hl7_fhir_core_CVE-2023-24057_5-6-911", - "description": null, - "fork": false, - "created_at": "2025-08-19T16:59:06Z", - "updated_at": "2025-10-05T12:08:13Z", - "pushed_at": "2025-08-19T16:59:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24203.json b/2023/CVE-2023-24203.json deleted file mode 100644 index e87507a48b..0000000000 --- a/2023/CVE-2023-24203.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 800288554, - "name": "CVE-2023-24203-and-CVE-2023-24204", - "full_name": "momo1239\/CVE-2023-24203-and-CVE-2023-24204", - "owner": { - "login": "momo1239", - "id": 34490185, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34490185?v=4", - "html_url": "https:\/\/github.com\/momo1239", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/momo1239\/CVE-2023-24203-and-CVE-2023-24204", - "description": null, - "fork": false, - "created_at": "2024-05-14T03:53:03Z", - "updated_at": "2024-05-14T04:13:00Z", - "pushed_at": "2024-05-14T04:12:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24249.json b/2023/CVE-2023-24249.json deleted file mode 100644 index 3535a65aff..0000000000 --- a/2023/CVE-2023-24249.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 839153746, - "name": "CVE-2023-24249-Exploit", - "full_name": "IDUZZEL\/CVE-2023-24249-Exploit", - "owner": { - "login": "IDUZZEL", - "id": 63135823, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63135823?v=4", - "html_url": "https:\/\/github.com\/IDUZZEL", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/IDUZZEL\/CVE-2023-24249-Exploit", - "description": "Exploit script for CVE-2023-24249 - a vulnerability allowing remote code execution via file upload and command injection.", - "fork": false, - "created_at": "2024-08-07T04:36:44Z", - "updated_at": "2026-05-09T02:22:35Z", - "pushed_at": "2024-08-07T04:41:25Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1006177112, - "name": "CVE-2023-24249-PoC", - "full_name": "ldb33\/CVE-2023-24249-PoC", - "owner": { - "login": "ldb33", - "id": 122522877, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122522877?v=4", - "html_url": "https:\/\/github.com\/ldb33", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ldb33\/CVE-2023-24249-PoC", - "description": "Proof of concept for HTB easy machine Usage", - "fork": false, - "created_at": "2025-06-21T17:02:39Z", - "updated_at": "2025-06-21T17:03:09Z", - "pushed_at": "2025-06-21T17:03:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24278.json b/2023/CVE-2023-24278.json deleted file mode 100644 index d4f3cfe47c..0000000000 --- a/2023/CVE-2023-24278.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 907385028, - "name": "CVE-2023-24278", - "full_name": "NeCr00\/CVE-2023-24278", - "owner": { - "login": "NeCr00", - "id": 36794189, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36794189?v=4", - "html_url": "https:\/\/github.com\/NeCr00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NeCr00\/CVE-2023-24278", - "description": "CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex", - "fork": false, - "created_at": "2024-12-23T13:10:47Z", - "updated_at": "2026-06-16T16:03:44Z", - "pushed_at": "2024-12-23T13:22:22Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "squidexcms", - "vulnerability" - ], - "visibility": "public", - "forks": 2, - "watchers": 7, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-2437.json b/2023/CVE-2023-2437.json deleted file mode 100644 index d8da28fde2..0000000000 --- a/2023/CVE-2023-2437.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 766289815, - "name": "CVE-2023-2437", - "full_name": "RxRCoder\/CVE-2023-2437", - "owner": { - "login": "RxRCoder", - "id": 161977912, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161977912?v=4", - "html_url": "https:\/\/github.com\/RxRCoder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RxRCoder\/CVE-2023-2437", - "description": null, - "fork": false, - "created_at": "2024-03-02T21:09:07Z", - "updated_at": "2024-03-02T21:18:30Z", - "pushed_at": "2024-03-02T21:19:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24871.json b/2023/CVE-2023-24871.json deleted file mode 100644 index d65fdcf831..0000000000 --- a/2023/CVE-2023-24871.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 818310581, - "name": "CVE-2023-24871", - "full_name": "ynwarcs\/CVE-2023-24871", - "owner": { - "login": "ynwarcs", - "id": 108408574, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108408574?v=4", - "html_url": "https:\/\/github.com\/ynwarcs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ynwarcs\/CVE-2023-24871", - "description": "pocs & exploit for CVE-2023-24871 (rce + lpe)", - "fork": false, - "created_at": "2024-06-21T15:01:15Z", - "updated_at": "2026-06-01T01:49:49Z", - "pushed_at": "2024-07-17T12:34:16Z", - "stargazers_count": 51, - "watchers_count": 51, - "has_discussions": false, - "forks_count": 17, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 17, - "watchers": 51, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-24932.json b/2023/CVE-2023-24932.json index fbe4a2f6c5..bc24d85b1e 100644 --- a/2023/CVE-2023-24932.json +++ b/2023/CVE-2023-24932.json @@ -31,71 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 981806799, - "name": "BlackLotus", - "full_name": "ajf8729\/BlackLotus", - "owner": { - "login": "ajf8729", - "id": 12014609, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12014609?v=4", - "html_url": "https:\/\/github.com\/ajf8729", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ajf8729\/BlackLotus", - "description": "BlackLotus aka CVE-2023-24932 Detection\/Remediation Scripts for Intune, ConfigMgr, and generic use", - "fork": false, - "created_at": "2025-05-11T23:10:53Z", - "updated_at": "2026-04-13T22:23:07Z", - "pushed_at": "2025-05-18T21:00:55Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 1122003331, - "name": "Orchestrated-Powershell-for-CVE-2023-24932-en", - "full_name": "v1ckxy\/Orchestrated-Powershell-for-CVE-2023-24932-en", - "owner": { - "login": "v1ckxy", - "id": 43522971, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43522971?v=4", - "html_url": "https:\/\/github.com\/v1ckxy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/v1ckxy\/Orchestrated-Powershell-for-CVE-2023-24932-en", - "description": "English translation", - "fork": false, - "created_at": "2025-12-23T23:57:36Z", - "updated_at": "2025-12-24T01:23:45Z", - "pushed_at": "2025-12-24T01:23:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-25136.json b/2023/CVE-2023-25136.json index 61a1f77ae2..debf6f4f13 100644 --- a/2023/CVE-2023-25136.json +++ b/2023/CVE-2023-25136.json @@ -301,79 +301,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 917513746, - "name": "CVE-2023-25136", - "full_name": "mrmtwoj\/CVE-2023-25136", - "owner": { - "login": "mrmtwoj", - "id": 22832463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22832463?v=4", - "html_url": "https:\/\/github.com\/mrmtwoj", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mrmtwoj\/CVE-2023-25136", - "description": "This vulnerability is of the \"double-free\" type, which occurs during the processing of key exchange (KEX) algorithms in OpenSSH. A \"double-free\" vulnerability happens when memory that has already been freed is freed again. This issue can indirectly lead to remote code execution (RCE) by an attacker.", - "fork": false, - "created_at": "2025-01-16T06:07:45Z", - "updated_at": "2025-10-09T13:36:56Z", - "pushed_at": "2025-01-16T06:25:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "acyber", - "cve", - "cve-2023-25136", - "poc", - "python", - "rce", - "rce-exploit" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1099071660, - "name": "CVE-2023-25136-PoC", - "full_name": "Lane0218\/CVE-2023-25136-PoC", - "owner": { - "login": "Lane0218", - "id": 133569516, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133569516?v=4", - "html_url": "https:\/\/github.com\/Lane0218", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Lane0218\/CVE-2023-25136-PoC", - "description": null, - "fork": false, - "created_at": "2025-11-18T14:24:13Z", - "updated_at": "2025-11-18T14:24:24Z", - "pushed_at": "2025-11-18T14:24:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-25157.json b/2023/CVE-2023-25157.json index 8315eb8665..bfa8e883e1 100644 --- a/2023/CVE-2023-25157.json +++ b/2023/CVE-2023-25157.json @@ -216,71 +216,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 970095271, - "name": "geoserver-CVE-2023-25157", - "full_name": "custiya\/geoserver-CVE-2023-25157", - "owner": { - "login": "custiya", - "id": 51903566, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51903566?v=4", - "html_url": "https:\/\/github.com\/custiya", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/custiya\/geoserver-CVE-2023-25157", - "description": null, - "fork": false, - "created_at": "2025-04-21T13:13:01Z", - "updated_at": "2025-04-21T14:59:35Z", - "pushed_at": "2025-04-21T14:59:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 971926750, - "name": "CVE-2023-25157", - "full_name": "charis3306\/CVE-2023-25157", - "owner": { - "login": "charis3306", - "id": 84823804, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84823804?v=4", - "html_url": "https:\/\/github.com\/charis3306", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/charis3306\/CVE-2023-25157", - "description": "CVE-2023-25157 exp", - "fork": false, - "created_at": "2025-04-24T09:12:18Z", - "updated_at": "2025-07-08T13:17:32Z", - "pushed_at": "2025-04-24T09:21:35Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-25194.json b/2023/CVE-2023-25194.json index e4a68c6f29..49c3ca49c6 100644 --- a/2023/CVE-2023-25194.json +++ b/2023/CVE-2023-25194.json @@ -64,41 +64,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 787945502, - "name": "cve-2023-25194", - "full_name": "vulncheck-oss\/cve-2023-25194", - "owner": { - "login": "vulncheck-oss", - "id": 134310220, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134310220?v=4", - "html_url": "https:\/\/github.com\/vulncheck-oss", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vulncheck-oss\/cve-2023-25194", - "description": "A go-exploit for Apache Druid CVE-2023-25194", - "fork": false, - "created_at": "2024-04-17T13:36:34Z", - "updated_at": "2025-08-20T14:08:16Z", - "pushed_at": "2025-01-24T23:08:17Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-25194", - "go-exploit" - ], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-25202.json b/2023/CVE-2023-25202.json deleted file mode 100644 index 91158998ea..0000000000 --- a/2023/CVE-2023-25202.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 758395533, - "name": "CVE-2023-25202", - "full_name": "Trackflaw\/CVE-2023-25202", - "owner": { - "login": "Trackflaw", - "id": 78696986, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78696986?v=4", - "html_url": "https:\/\/github.com\/Trackflaw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trackflaw\/CVE-2023-25202", - "description": "CVE-2023-25202: Insecure file upload mechanism", - "fork": false, - "created_at": "2024-02-16T08:22:48Z", - "updated_at": "2024-09-19T07:09:54Z", - "pushed_at": "2024-02-16T08:51:09Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-25203.json b/2023/CVE-2023-25203.json deleted file mode 100644 index d8f93010ac..0000000000 --- a/2023/CVE-2023-25203.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 758397806, - "name": "CVE-2023-25203", - "full_name": "Trackflaw\/CVE-2023-25203", - "owner": { - "login": "Trackflaw", - "id": 78696986, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78696986?v=4", - "html_url": "https:\/\/github.com\/Trackflaw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trackflaw\/CVE-2023-25203", - "description": "CVE-2023-25203: Application Vulnerable to SSRF (Server Side Request Forgery) Attacks", - "fork": false, - "created_at": "2024-02-16T08:29:25Z", - "updated_at": "2026-06-20T16:03:06Z", - "pushed_at": "2024-02-16T08:50:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-25355.json b/2023/CVE-2023-25355.json deleted file mode 100644 index 01c77001d3..0000000000 --- a/2023/CVE-2023-25355.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 852173619, - "name": "CVE-2023-25355-25356", - "full_name": "glefait\/CVE-2023-25355-25356", - "owner": { - "login": "glefait", - "id": 7490317, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7490317?v=4", - "html_url": "https:\/\/github.com\/glefait", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/glefait\/CVE-2023-25355-25356", - "description": "CVE-2023-25355 and CVE-2023-25356 with automated service reload", - "fork": false, - "created_at": "2024-09-04T11:00:23Z", - "updated_at": "2024-09-23T13:17:53Z", - "pushed_at": "2024-09-04T15:06:13Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-25581.json b/2023/CVE-2023-25581.json deleted file mode 100644 index 63794bf27b..0000000000 --- a/2023/CVE-2023-25581.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 873299415, - "name": "CVE-2023-25581", - "full_name": "p33d\/CVE-2023-25581", - "owner": { - "login": "p33d", - "id": 123099747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123099747?v=4", - "html_url": "https:\/\/github.com\/p33d", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/p33d\/CVE-2023-25581", - "description": null, - "fork": false, - "created_at": "2024-10-15T23:51:52Z", - "updated_at": "2024-10-16T00:03:25Z", - "pushed_at": "2024-10-16T00:03:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-25690.json b/2023/CVE-2023-25690.json index ec0b84294a..bead328bb4 100644 --- a/2023/CVE-2023-25690.json +++ b/2023/CVE-2023-25690.json @@ -110,39 +110,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 994234952, - "name": "CVE-2023-25690-POC", - "full_name": "oOCyginXOo\/CVE-2023-25690-POC", - "owner": { - "login": "oOCyginXOo", - "id": 103029240, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103029240?v=4", - "html_url": "https:\/\/github.com\/oOCyginXOo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oOCyginXOo\/CVE-2023-25690-POC", - "description": "CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.", - "fork": false, - "created_at": "2025-06-01T14:09:58Z", - "updated_at": "2026-03-08T13:00:52Z", - "pushed_at": "2025-06-01T14:10:44Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1201818420, "name": "CTF-Web-Exploitation", diff --git a/2023/CVE-2023-25813.json b/2023/CVE-2023-25813.json index 6e706fd814..7ea4141eca 100644 --- a/2023/CVE-2023-25813.json +++ b/2023/CVE-2023-25813.json @@ -1,169 +1,4 @@ [ - { - "id": 789840283, - "name": "Sequelize-1day-CVE-2023-25813", - "full_name": "bde574786\/Sequelize-1day-CVE-2023-25813", - "owner": { - "login": "bde574786", - "id": 102010541, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102010541?v=4", - "html_url": "https:\/\/github.com\/bde574786", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bde574786\/Sequelize-1day-CVE-2023-25813", - "description": null, - "fork": false, - "created_at": "2024-04-21T17:39:05Z", - "updated_at": "2025-05-11T19:37:31Z", - "pushed_at": "2025-05-11T19:37:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 835791874, - "name": "CVE-2023-25813", - "full_name": "White-BAO\/CVE-2023-25813", - "owner": { - "login": "White-BAO", - "id": 170318931, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170318931?v=4", - "html_url": "https:\/\/github.com\/White-BAO", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/White-BAO\/CVE-2023-25813", - "description": "12", - "fork": false, - "created_at": "2024-07-30T14:36:48Z", - "updated_at": "2024-08-04T07:05:51Z", - "pushed_at": "2024-08-04T05:26:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 884065369, - "name": "CVE-2023-25813", - "full_name": "pbj2647\/CVE-2023-25813", - "owner": { - "login": "pbj2647", - "id": 151702008, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151702008?v=4", - "html_url": "https:\/\/github.com\/pbj2647", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pbj2647\/CVE-2023-25813", - "description": null, - "fork": false, - "created_at": "2024-11-06T04:28:36Z", - "updated_at": "2024-11-07T15:21:16Z", - "pushed_at": "2024-11-07T15:20:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 884862453, - "name": "CVE-2023-25813", - "full_name": "numbbvi\/CVE-2023-25813", - "owner": { - "login": "numbbvi", - "id": 129142444, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129142444?v=4", - "html_url": "https:\/\/github.com\/numbbvi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/numbbvi\/CVE-2023-25813", - "description": "CVE-2023-25813 Vulnerability Reproduction - SQL Injection in Sequelize", - "fork": false, - "created_at": "2024-11-07T14:21:38Z", - "updated_at": "2024-11-10T06:14:15Z", - "pushed_at": "2024-11-10T06:14:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 885806935, - "name": "cve-2023-25813", - "full_name": "sea-middle\/cve-2023-25813", - "owner": { - "login": "sea-middle", - "id": 179393914, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179393914?v=4", - "html_url": "https:\/\/github.com\/sea-middle", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sea-middle\/cve-2023-25813", - "description": null, - "fork": false, - "created_at": "2024-11-09T12:57:46Z", - "updated_at": "2024-11-09T12:59:52Z", - "pushed_at": "2024-11-09T12:59:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1043474621, "name": "CVE-2023-25813-TEST", diff --git a/2023/CVE-2023-2598.json b/2023/CVE-2023-2598.json index ef4a6474f6..a06d284207 100644 --- a/2023/CVE-2023-2598.json +++ b/2023/CVE-2023-2598.json @@ -31,104 +31,5 @@ "watchers": 90, "score": 0, "subscribers_count": 6 - }, - { - "id": 850252202, - "name": "CVE-2023-2598", - "full_name": "cainiao159357\/CVE-2023-2598", - "owner": { - "login": "cainiao159357", - "id": 76136742, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76136742?v=4", - "html_url": "https:\/\/github.com\/cainiao159357", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cainiao159357\/CVE-2023-2598", - "description": null, - "fork": false, - "created_at": "2024-08-31T09:14:53Z", - "updated_at": "2024-08-31T09:51:37Z", - "pushed_at": "2024-08-31T09:51:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 884497009, - "name": "CVE-2023-2598", - "full_name": "LLfam\/CVE-2023-2598", - "owner": { - "login": "LLfam", - "id": 43279891, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43279891?v=4", - "html_url": "https:\/\/github.com\/LLfam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LLfam\/CVE-2023-2598", - "description": null, - "fork": false, - "created_at": "2024-11-06T21:24:43Z", - "updated_at": "2025-11-29T17:48:57Z", - "pushed_at": "2024-11-06T21:27:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1024786066, - "name": "CVE-2023-2598", - "full_name": "SpongeBob-369\/CVE-2023-2598", - "owner": { - "login": "SpongeBob-369", - "id": 176364273, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176364273?v=4", - "html_url": "https:\/\/github.com\/SpongeBob-369", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpongeBob-369\/CVE-2023-2598", - "description": "The exploitation of CVE-2023-2598 about io_uring", - "fork": false, - "created_at": "2025-07-23T08:43:41Z", - "updated_at": "2025-11-30T08:19:11Z", - "pushed_at": "2025-08-20T01:01:39Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-2603.json b/2023/CVE-2023-2603.json deleted file mode 100644 index 491d0e8670..0000000000 --- a/2023/CVE-2023-2603.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 887105666, - "name": "external_libcap-Android10_r33_CVE-2023-2603", - "full_name": "Pazhanivelmani\/external_libcap-Android10_r33_CVE-2023-2603", - "owner": { - "login": "Pazhanivelmani", - "id": 178174306, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178174306?v=4", - "html_url": "https:\/\/github.com\/Pazhanivelmani", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pazhanivelmani\/external_libcap-Android10_r33_CVE-2023-2603", - "description": null, - "fork": false, - "created_at": "2024-11-12T07:12:16Z", - "updated_at": "2024-11-12T07:16:43Z", - "pushed_at": "2024-11-12T07:16:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-26136.json b/2023/CVE-2023-26136.json index 853b39446a..5b751ef2ad 100644 --- a/2023/CVE-2023-26136.json +++ b/2023/CVE-2023-26136.json @@ -31,203 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 796819002, - "name": "Open-Source-Seal-Security", - "full_name": "ronmadar\/Open-Source-Seal-Security", - "owner": { - "login": "ronmadar", - "id": 86679386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86679386?v=4", - "html_url": "https:\/\/github.com\/ronmadar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ronmadar\/Open-Source-Seal-Security", - "description": "Fix open source package uses tough-cookie 2.5.0 - CVE-2023-26136,", - "fork": false, - "created_at": "2024-05-06T17:32:10Z", - "updated_at": "2024-05-07T12:18:59Z", - "pushed_at": "2024-05-07T12:18:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 851266445, - "name": "SealSecurity_Exam", - "full_name": "m-lito13\/SealSecurity_Exam", - "owner": { - "login": "m-lito13", - "id": 180002370, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180002370?v=4", - "html_url": "https:\/\/github.com\/m-lito13", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/m-lito13\/SealSecurity_Exam", - "description": "Fix prototype pollution vulnerability (CVE-2023-26136) for tough-cookie package", - "fork": false, - "created_at": "2024-09-02T18:50:53Z", - "updated_at": "2024-09-04T11:36:16Z", - "pushed_at": "2024-09-04T11:36:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 927069429, - "name": "Tough-Cookie-v2.5.0-Patched", - "full_name": "dani33339\/Tough-Cookie-v2.5.0-Patched", - "owner": { - "login": "dani33339", - "id": 93151766, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93151766?v=4", - "html_url": "https:\/\/github.com\/dani33339", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dani33339\/Tough-Cookie-v2.5.0-Patched", - "description": "CVE-2023-26136 vulnerability research", - "fork": false, - "created_at": "2025-02-04T10:58:02Z", - "updated_at": "2025-02-26T17:01:37Z", - "pushed_at": "2025-02-05T18:07:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 929099842, - "name": "CVE-2023-26136", - "full_name": "morrisel\/CVE-2023-26136", - "owner": { - "login": "morrisel", - "id": 21173137, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21173137?v=4", - "html_url": "https:\/\/github.com\/morrisel", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/morrisel\/CVE-2023-26136", - "description": "This repository contains a solution for the CVE-2023-26136 vulnerability.", - "fork": false, - "created_at": "2025-02-07T20:05:21Z", - "updated_at": "2025-02-10T13:06:11Z", - "pushed_at": "2025-02-10T13:06:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1004146878, - "name": "tough-cookie-2.5.0-cve-2023-26136-fix", - "full_name": "uriyahav\/tough-cookie-2.5.0-cve-2023-26136-fix", - "owner": { - "login": "uriyahav", - "id": 57350330, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57350330?v=4", - "html_url": "https:\/\/github.com\/uriyahav", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/uriyahav\/tough-cookie-2.5.0-cve-2023-26136-fix", - "description": "ecurity patch for CVE-2023-26136 in tough-cookie 2.5.0 - Prototype pollution vulnerability fix with backward compatibility", - "fork": false, - "created_at": "2025-06-18T07:27:26Z", - "updated_at": "2025-06-18T07:37:10Z", - "pushed_at": "2025-06-18T07:37:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1027907054, - "name": "tough-cookie-patch-cve-2023-26136", - "full_name": "guy2610\/tough-cookie-patch-cve-2023-26136", - "owner": { - "login": "guy2610", - "id": 80284136, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80284136?v=4", - "html_url": "https:\/\/github.com\/guy2610", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/guy2610\/tough-cookie-patch-cve-2023-26136", - "description": null, - "fork": false, - "created_at": "2025-07-28T18:01:14Z", - "updated_at": "2025-08-24T17:11:03Z", - "pushed_at": "2025-08-24T17:11:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-26208.json b/2023/CVE-2023-26208.json deleted file mode 100644 index 01ed7628ab..0000000000 --- a/2023/CVE-2023-26208.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 956288451, - "name": "CVE-2023-26208", - "full_name": "chessredoffsec\/CVE-2023-26208", - "owner": { - "login": "chessredoffsec", - "id": 86935257, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86935257?v=4", - "html_url": "https:\/\/github.com\/chessredoffsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chessredoffsec\/CVE-2023-26208", - "description": null, - "fork": false, - "created_at": "2025-03-28T02:16:52Z", - "updated_at": "2025-03-28T02:19:53Z", - "pushed_at": "2025-03-28T02:18:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-26209.json b/2023/CVE-2023-26209.json deleted file mode 100644 index 22b1a0b9b6..0000000000 --- a/2023/CVE-2023-26209.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 956289745, - "name": "CVE-2023-26209", - "full_name": "chessredoffsec\/CVE-2023-26209", - "owner": { - "login": "chessredoffsec", - "id": 86935257, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86935257?v=4", - "html_url": "https:\/\/github.com\/chessredoffsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chessredoffsec\/CVE-2023-26209", - "description": null, - "fork": false, - "created_at": "2025-03-28T02:21:12Z", - "updated_at": "2025-03-28T02:23:59Z", - "pushed_at": "2025-03-28T02:23:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-26326.json b/2023/CVE-2023-26326.json deleted file mode 100644 index 0e8a70155b..0000000000 --- a/2023/CVE-2023-26326.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 925889678, - "name": "exploit_cve-2023-26326_using_cve-2024-2961", - "full_name": "omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961", - "owner": { - "login": "omarelshopky", - "id": 69885253, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69885253?v=4", - "html_url": "https:\/\/github.com\/omarelshopky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961", - "description": "Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization limitations by chaining vulnerabilities with php:\/\/filter.", - "fork": false, - "created_at": "2025-02-02T01:35:43Z", - "updated_at": "2025-04-05T18:21:01Z", - "pushed_at": "2025-02-02T11:26:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 931621500, - "name": "CVE-2023-26326_Buddyform_exploit", - "full_name": "mesudmammad1\/CVE-2023-26326_Buddyform_exploit", - "owner": { - "login": "mesudmammad1", - "id": 93409405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93409405?v=4", - "html_url": "https:\/\/github.com\/mesudmammad1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mesudmammad1\/CVE-2023-26326_Buddyform_exploit", - "description": null, - "fork": false, - "created_at": "2025-02-12T15:31:21Z", - "updated_at": "2025-02-12T15:34:20Z", - "pushed_at": "2025-02-12T15:34:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-26360.json b/2023/CVE-2023-26360.json index 16c1e85c4e..b5ca642f68 100644 --- a/2023/CVE-2023-26360.json +++ b/2023/CVE-2023-26360.json @@ -32,138 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 800457140, - "name": "CVE-2023-26360-adobe-coldfusion-rce-exploit", - "full_name": "jakabakos\/CVE-2023-26360-adobe-coldfusion-rce-exploit", - "owner": { - "login": "jakabakos", - "id": 42498816, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42498816?v=4", - "html_url": "https:\/\/github.com\/jakabakos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jakabakos\/CVE-2023-26360-adobe-coldfusion-rce-exploit", - "description": null, - "fork": false, - "created_at": "2024-05-14T11:22:35Z", - "updated_at": "2025-10-07T13:47:57Z", - "pushed_at": "2024-05-14T13:37:00Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 851551513, - "name": "ColdFusion_EXp", - "full_name": "CuriousLearnerDev\/ColdFusion_EXp", - "owner": { - "login": "CuriousLearnerDev", - "id": 72000175, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72000175?v=4", - "html_url": "https:\/\/github.com\/CuriousLearnerDev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CuriousLearnerDev\/ColdFusion_EXp", - "description": " Adobe ColdFusion CVE-2023-26360\/CVE-2023-29298 自动化实现反弹", - "fork": false, - "created_at": "2024-09-03T09:53:57Z", - "updated_at": "2025-02-18T11:21:19Z", - "pushed_at": "2024-09-03T12:41:44Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1084716377, - "name": "CVE-2023-26360-RCE", - "full_name": "H3rm1tR3b0rn\/CVE-2023-26360-RCE", - "owner": { - "login": "H3rm1tR3b0rn", - "id": 17506633, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17506633?v=4", - "html_url": "https:\/\/github.com\/H3rm1tR3b0rn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/H3rm1tR3b0rn\/CVE-2023-26360-RCE", - "description": "Exploit for Remote Code Execution in ColdFusion 2021 (CVE-2023-26360)", - "fork": false, - "created_at": "2025-10-28T04:10:08Z", - "updated_at": "2025-10-28T13:47:17Z", - "pushed_at": "2025-10-28T04:45:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1106204002, - "name": "CVE-2023-26360", - "full_name": "RyanRodrigues880\/CVE-2023-26360", - "owner": { - "login": "RyanRodrigues880", - "id": 71109880, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71109880?v=4", - "html_url": "https:\/\/github.com\/RyanRodrigues880", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RyanRodrigues880\/CVE-2023-26360", - "description": "Exploit - CVE-2023-26360", - "fork": false, - "created_at": "2025-11-28T19:59:21Z", - "updated_at": "2025-11-28T20:01:04Z", - "pushed_at": "2025-11-28T20:01:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1240938687, "name": "Adobe_ColdFusion_RCE_Unauthenticated", diff --git a/2023/CVE-2023-2640.json b/2023/CVE-2023-2640.json index b3edc7fde9..9aeb868979 100644 --- a/2023/CVE-2023-2640.json +++ b/2023/CVE-2023-2640.json @@ -131,105 +131,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 765277718, - "name": "Ubuntu-GameOver-Lay", - "full_name": "SanjayRagavendar\/Ubuntu-GameOver-Lay", - "owner": { - "login": "SanjayRagavendar", - "id": 91368803, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91368803?v=4", - "html_url": "https:\/\/github.com\/SanjayRagavendar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SanjayRagavendar\/Ubuntu-GameOver-Lay", - "description": "Escalating Privilege using CVE-2023-2640 CVE-2023-3262 ", - "fork": false, - "created_at": "2024-02-29T16:04:58Z", - "updated_at": "2025-06-02T05:24:58Z", - "pushed_at": "2024-03-02T00:29:49Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 774642539, - "name": "CVE-2023-2640-CVE-2023-32629", - "full_name": "Nkipohcs\/CVE-2023-2640-CVE-2023-32629", - "owner": { - "login": "Nkipohcs", - "id": 117274957, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117274957?v=4", - "html_url": "https:\/\/github.com\/Nkipohcs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nkipohcs\/CVE-2023-2640-CVE-2023-32629", - "description": null, - "fork": false, - "created_at": "2024-03-19T22:56:24Z", - "updated_at": "2024-10-07T19:43:00Z", - "pushed_at": "2024-03-19T23:26:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 804086046, - "name": "CVE-2023-2640-32629", - "full_name": "K5LK\/CVE-2023-2640-32629", - "owner": { - "login": "K5LK", - "id": 97132966, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97132966?v=4", - "html_url": "https:\/\/github.com\/K5LK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/K5LK\/CVE-2023-2640-32629", - "description": null, - "fork": false, - "created_at": "2024-05-21T23:39:02Z", - "updated_at": "2024-10-07T19:44:01Z", - "pushed_at": "2024-05-22T18:38:20Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1201499097, "name": "CVE-2023-2640-3262-PoC", diff --git a/2023/CVE-2023-26469.json b/2023/CVE-2023-26469.json index 41ba4b9ea8..2e9be4275b 100644 --- a/2023/CVE-2023-26469.json +++ b/2023/CVE-2023-26469.json @@ -31,38 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 1109026977, - "name": "CVE-2023-26469-Jorani", - "full_name": "Kairo-one\/CVE-2023-26469-Jorani", - "owner": { - "login": "Kairo-one", - "id": 242098124, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242098124?v=4", - "html_url": "https:\/\/github.com\/Kairo-one", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kairo-one\/CVE-2023-26469-Jorani", - "description": null, - "fork": false, - "created_at": "2025-12-03T08:36:36Z", - "updated_at": "2026-06-01T14:46:35Z", - "pushed_at": "2025-12-03T08:45:13Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-26785.json b/2023/CVE-2023-26785.json deleted file mode 100644 index e8c5dc4519..0000000000 --- a/2023/CVE-2023-26785.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 851466770, - "name": "CVE-2023-26785", - "full_name": "Ant1sec-ops\/CVE-2023-26785", - "owner": { - "login": "Ant1sec-ops", - "id": 98224710, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98224710?v=4", - "html_url": "https:\/\/github.com\/Ant1sec-ops", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ant1sec-ops\/CVE-2023-26785", - "description": "Authenticated Code execution", - "fork": false, - "created_at": "2024-09-03T06:38:33Z", - "updated_at": "2025-06-23T02:48:13Z", - "pushed_at": "2024-10-18T05:20:07Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-27100.json b/2023/CVE-2023-27100.json index 977b544c6f..fc7aa88c8d 100644 --- a/2023/CVE-2023-27100.json +++ b/2023/CVE-2023-27100.json @@ -31,38 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 803311875, - "name": "CVE-2023-27100", - "full_name": "fabdotnet\/CVE-2023-27100", - "owner": { - "login": "fabdotnet", - "id": 169522306, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169522306?v=4", - "html_url": "https:\/\/github.com\/fabdotnet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fabdotnet\/CVE-2023-27100", - "description": null, - "fork": false, - "created_at": "2024-05-20T13:35:39Z", - "updated_at": "2024-05-20T13:37:25Z", - "pushed_at": "2024-05-20T13:37:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-27163.json b/2023/CVE-2023-27163.json index 1f706e995b..87b50b4375 100644 --- a/2023/CVE-2023-27163.json +++ b/2023/CVE-2023-27163.json @@ -443,204 +443,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 820848497, - "name": "CVE-2023-27163-ssrf-to-port-scanning", - "full_name": "Rishabh-Kumar-Cyber-Sec\/CVE-2023-27163-ssrf-to-port-scanning", - "owner": { - "login": "Rishabh-Kumar-Cyber-Sec", - "id": 58937379, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58937379?v=4", - "html_url": "https:\/\/github.com\/Rishabh-Kumar-Cyber-Sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rishabh-Kumar-Cyber-Sec\/CVE-2023-27163-ssrf-to-port-scanning", - "description": "It is a simple script to automate internal port scanning dueto SSRF in requests-baskets v 1.2.1. this script can also assisst in solving 'SAU' machine from hackthebox", - "fork": false, - "created_at": "2024-06-27T09:48:14Z", - "updated_at": "2024-06-27T09:53:26Z", - "pushed_at": "2024-06-27T09:53:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 861116698, - "name": "exploit_CVE-2023-27163", - "full_name": "btar1gan\/exploit_CVE-2023-27163", - "owner": { - "login": "btar1gan", - "id": 92728059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92728059?v=4", - "html_url": "https:\/\/github.com\/btar1gan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/btar1gan\/exploit_CVE-2023-27163", - "description": null, - "fork": false, - "created_at": "2024-09-22T03:33:18Z", - "updated_at": "2024-09-22T03:33:56Z", - "pushed_at": "2024-09-22T03:33:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 959207609, - "name": "htb-sau-automated", - "full_name": "G4sp4rCS\/htb-sau-automated", - "owner": { - "login": "G4sp4rCS", - "id": 52015401, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52015401?v=4", - "html_url": "https:\/\/github.com\/G4sp4rCS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G4sp4rCS\/htb-sau-automated", - "description": "SSRF CVE-2023-27163 + maltrail vuln RCE", - "fork": false, - "created_at": "2025-04-02T12:36:28Z", - "updated_at": "2025-04-02T12:37:00Z", - "pushed_at": "2025-04-02T12:36:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 968191779, - "name": "CVE-2023-27163-POC", - "full_name": "lukehebe\/CVE-2023-27163-POC", - "owner": { - "login": "lukehebe", - "id": 53823266, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53823266?v=4", - "html_url": "https:\/\/github.com\/lukehebe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lukehebe\/CVE-2023-27163-POC", - "description": "CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \/api\/baskets\/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the SSRF to perfrom RCE.", - "fork": false, - "created_at": "2025-04-17T16:54:34Z", - "updated_at": "2026-06-16T10:58:19Z", - "pushed_at": "2025-04-18T03:24:35Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 995428380, - "name": "Exploit_CVE-2023-27163", - "full_name": "J0ey17\/Exploit_CVE-2023-27163", - "owner": { - "login": "J0ey17", - "id": 72118225, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72118225?v=4", - "html_url": "https:\/\/github.com\/J0ey17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/J0ey17\/Exploit_CVE-2023-27163", - "description": "Proof of Concept exploit for Server Side Request Forgery vulnerability in Requests Basket v1.2.1 and before.", - "fork": false, - "created_at": "2025-06-03T13:17:06Z", - "updated_at": "2025-10-16T20:11:56Z", - "pushed_at": "2025-06-03T13:22:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 998160735, - "name": "CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer", - "full_name": "theopaid\/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer", - "owner": { - "login": "theopaid", - "id": 19599465, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19599465?v=4", - "html_url": "https:\/\/github.com\/theopaid", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/theopaid\/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer", - "description": "PoC and internal port brute-forcer for CVE-2023-27163", - "fork": false, - "created_at": "2025-06-08T01:55:57Z", - "updated_at": "2025-06-09T09:39:09Z", - "pushed_at": "2025-06-08T15:05:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1149103993, "name": "CVE-2023-27163---SSRF-Baskets-Requests", diff --git a/2023/CVE-2023-27216.json b/2023/CVE-2023-27216.json index e524b9d237..506c397a28 100644 --- a/2023/CVE-2023-27216.json +++ b/2023/CVE-2023-27216.json @@ -31,38 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 840260411, - "name": "CVE-2023-27216", - "full_name": "HoangREALER\/CVE-2023-27216", - "owner": { - "login": "HoangREALER", - "id": 90048856, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90048856?v=4", - "html_url": "https:\/\/github.com\/HoangREALER", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HoangREALER\/CVE-2023-27216", - "description": "Newbie's approach to firmware hacking", - "fork": false, - "created_at": "2024-08-09T10:05:34Z", - "updated_at": "2024-10-11T00:57:22Z", - "pushed_at": "2024-08-13T13:40:34Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-2728.json b/2023/CVE-2023-2728.json deleted file mode 100644 index 69834d1f35..0000000000 --- a/2023/CVE-2023-2728.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 852879948, - "name": "Metasploit-Module-TFM", - "full_name": "Cgv-Dev\/Metasploit-Module-TFM", - "owner": { - "login": "Cgv-Dev", - "id": 128702955, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128702955?v=4", - "html_url": "https:\/\/github.com\/Cgv-Dev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cgv-Dev\/Metasploit-Module-TFM", - "description": "Module written in Ruby with the objective of exploiting vulnerabilities CVE-2023-2728 and CVE-2024-3177, both related to the secret mount policy in a Kubernetes cluster using a custom Metasploit module. Part of a Cybersecurity Master's degree finalization project.", - "fork": false, - "created_at": "2024-09-05T15:30:51Z", - "updated_at": "2024-09-05T17:44:53Z", - "pushed_at": "2024-09-05T17:44:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-27350.json b/2023/CVE-2023-27350.json index 0a7a8feacf..14294e3879 100644 --- a/2023/CVE-2023-27350.json +++ b/2023/CVE-2023-27350.json @@ -201,204 +201,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 788787317, - "name": "CVE-2023-27350", - "full_name": "ASG-CASTLE\/CVE-2023-27350", - "owner": { - "login": "ASG-CASTLE", - "id": 160751832, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160751832?v=4", - "html_url": "https:\/\/github.com\/ASG-CASTLE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ASG-CASTLE\/CVE-2023-27350", - "description": null, - "fork": false, - "created_at": "2024-04-19T04:47:10Z", - "updated_at": "2024-04-19T04:47:11Z", - "pushed_at": "2024-04-19T04:51:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 798859972, - "name": "CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability", - "full_name": "rasan2001\/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability", - "owner": { - "login": "rasan2001", - "id": 156652838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156652838?v=4", - "html_url": "https:\/\/github.com\/rasan2001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rasan2001\/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability", - "description": null, - "fork": false, - "created_at": "2024-05-10T16:14:22Z", - "updated_at": "2024-08-01T14:12:13Z", - "pushed_at": "2024-05-10T16:15:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 945566118, - "name": "CVE-2023-27350", - "full_name": "monke443\/CVE-2023-27350", - "owner": { - "login": "monke443", - "id": 131496421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131496421?v=4", - "html_url": "https:\/\/github.com\/monke443", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/monke443\/CVE-2023-27350", - "description": "Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class.", - "fork": false, - "created_at": "2025-03-09T18:08:42Z", - "updated_at": "2025-04-28T06:58:21Z", - "pushed_at": "2025-03-09T18:47:45Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 965852185, - "name": "CVE-2023-27350-PoC", - "full_name": "0xB0y426\/CVE-2023-27350-PoC", - "owner": { - "login": "0xB0y426", - "id": 132174647, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132174647?v=4", - "html_url": "https:\/\/github.com\/0xB0y426", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xB0y426\/CVE-2023-27350-PoC", - "description": "PoC for CVE-2023-27350", - "fork": false, - "created_at": "2025-04-14T02:33:39Z", - "updated_at": "2025-04-14T02:36:19Z", - "pushed_at": "2025-04-14T02:36:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1014332531, - "name": "CVE-2023-27350", - "full_name": "Royall-Researchers\/CVE-2023-27350", - "owner": { - "login": "Royall-Researchers", - "id": 151623016, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151623016?v=4", - "html_url": "https:\/\/github.com\/Royall-Researchers", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Royall-Researchers\/CVE-2023-27350", - "description": "Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms. ", - "fork": false, - "created_at": "2025-07-05T14:07:02Z", - "updated_at": "2025-07-05T14:09:38Z", - "pushed_at": "2025-07-05T14:09:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1119521317, - "name": "CVE-2023-27350", - "full_name": "dezso-dfield\/CVE-2023-27350", - "owner": { - "login": "dezso-dfield", - "id": 220618819, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220618819?v=4", - "html_url": "https:\/\/github.com\/dezso-dfield", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dezso-dfield\/CVE-2023-27350", - "description": "PaperCut NG\/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated session elevation, and dynamic command injection via the print scripting engine. Designed for security auditing and authorized penetration testing.", - "fork": false, - "created_at": "2025-12-19T12:01:18Z", - "updated_at": "2025-12-19T12:43:09Z", - "pushed_at": "2025-12-19T12:43:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1254594187, "name": "PaperCut-Authentication_Bypass_and_RCE", diff --git a/2023/CVE-2023-27372.json b/2023/CVE-2023-27372.json index f22194e2ca..4e6801c6c9 100644 --- a/2023/CVE-2023-27372.json +++ b/2023/CVE-2023-27372.json @@ -249,112 +249,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 843121866, - "name": "CVE-2023-27372", - "full_name": "1amthebest1\/CVE-2023-27372", - "owner": { - "login": "1amthebest1", - "id": 165074489, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/165074489?v=4", - "html_url": "https:\/\/github.com\/1amthebest1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1amthebest1\/CVE-2023-27372", - "description": null, - "fork": false, - "created_at": "2024-08-15T20:36:59Z", - "updated_at": "2024-08-15T20:39:41Z", - "pushed_at": "2024-08-15T20:39:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 974256467, - "name": "spip-cve-2023-27372-rce", - "full_name": "1Ronkkeli\/spip-cve-2023-27372-rce", - "owner": { - "login": "1Ronkkeli", - "id": 106370005, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106370005?v=4", - "html_url": "https:\/\/github.com\/1Ronkkeli", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1Ronkkeli\/spip-cve-2023-27372-rce", - "description": "SPIP CVE-2023-27372 Unauthenticated RCE Exploit (Web Shell Upload)", - "fork": false, - "created_at": "2025-04-28T13:48:32Z", - "updated_at": "2025-10-09T13:37:01Z", - "pushed_at": "2025-04-28T13:51:39Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "poc", - "publisher", - "spip", - "tryhackme", - "tryhackme-publisher", - "tryhackme-writeups" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1026155036, - "name": "cve-2023-27372", - "full_name": "G01d3nW01f\/cve-2023-27372", - "owner": { - "login": "G01d3nW01f", - "id": 75846902, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75846902?v=4", - "html_url": "https:\/\/github.com\/G01d3nW01f", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/G01d3nW01f\/cve-2023-27372", - "description": null, - "fork": false, - "created_at": "2025-07-25T11:58:14Z", - "updated_at": "2025-07-25T12:01:02Z", - "pushed_at": "2025-07-25T12:00:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1123043692, "name": "CVE-2023-27372", diff --git a/2023/CVE-2023-2745.json b/2023/CVE-2023-2745.json deleted file mode 100644 index 0fdc823597..0000000000 --- a/2023/CVE-2023-2745.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1081496797, - "name": "cve-2023-2745", - "full_name": "fofovicfof-ai\/cve-2023-2745", - "owner": { - "login": "fofovicfof-ai", - "id": 239677188, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239677188?v=4", - "html_url": "https:\/\/github.com\/fofovicfof-ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fofovicfof-ai\/cve-2023-2745", - "description": "cve-2023-2745", - "fork": false, - "created_at": "2025-10-22T21:41:08Z", - "updated_at": "2025-10-22T21:42:39Z", - "pushed_at": "2025-10-22T21:42:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-27524.json b/2023/CVE-2023-27524.json index 52f1f2e22a..bfaea79ca3 100644 --- a/2023/CVE-2023-27524.json +++ b/2023/CVE-2023-27524.json @@ -333,81 +333,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 799192194, - "name": "CVE-2023-27524", - "full_name": "karthi-the-hacker\/CVE-2023-27524", - "owner": { - "login": "karthi-the-hacker", - "id": 33289300, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33289300?v=4", - "html_url": "https:\/\/github.com\/karthi-the-hacker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/karthi-the-hacker\/CVE-2023-27524", - "description": "Tool for finding CVE-2023-27524 (Apache Superset - Authentication Bypass)", - "fork": false, - "created_at": "2024-05-11T12:19:55Z", - "updated_at": "2024-06-25T13:42:04Z", - "pushed_at": "2024-05-11T12:23:36Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 799195135, - "name": "CVE-2023-27524", - "full_name": "Cappricio-Securities\/CVE-2023-27524", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2023-27524", - "description": "Apache Superset - Authentication Bypass", - "fork": false, - "created_at": "2024-05-11T12:29:08Z", - "updated_at": "2025-11-03T15:24:47Z", - "pushed_at": "2024-06-24T07:06:59Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apache-superset", - "apache-superset---authentication-bypass", - "authentication-bypass", - "bugbounty", - "cve-2023-2752", - "pentesting", - "vapt", - "wapt" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1182228440, "name": "CVE-2023-27524", diff --git a/2023/CVE-2023-27532.json b/2023/CVE-2023-27532.json index e309cd6f9e..c86685a6d9 100644 --- a/2023/CVE-2023-27532.json +++ b/2023/CVE-2023-27532.json @@ -64,71 +64,5 @@ "watchers": 114, "score": 0, "subscribers_count": 3 - }, - { - "id": 824610391, - "name": "CVE-2023-27532-RCE-Only", - "full_name": "puckiestyle\/CVE-2023-27532-RCE-Only", - "owner": { - "login": "puckiestyle", - "id": 57447087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57447087?v=4", - "html_url": "https:\/\/github.com\/puckiestyle", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/puckiestyle\/CVE-2023-27532-RCE-Only", - "description": null, - "fork": false, - "created_at": "2024-07-05T14:00:48Z", - "updated_at": "2024-07-10T11:34:46Z", - "pushed_at": "2024-07-10T11:34:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1104756183, - "name": "veeam-cve-2023-27532-mock", - "full_name": "yunus-a1i\/veeam-cve-2023-27532-mock", - "owner": { - "login": "yunus-a1i", - "id": 144136484, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144136484?v=4", - "html_url": "https:\/\/github.com\/yunus-a1i", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yunus-a1i\/veeam-cve-2023-27532-mock", - "description": null, - "fork": false, - "created_at": "2025-11-26T16:37:47Z", - "updated_at": "2025-11-26T17:22:46Z", - "pushed_at": "2025-11-26T17:22:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-27564.json b/2023/CVE-2023-27564.json deleted file mode 100644 index b2cc1f2c69..0000000000 --- a/2023/CVE-2023-27564.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 781230884, - "name": "exploit-CVE-2023-27564", - "full_name": "david-botelho-mariano\/exploit-CVE-2023-27564", - "owner": { - "login": "david-botelho-mariano", - "id": 48680041, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48680041?v=4", - "html_url": "https:\/\/github.com\/david-botelho-mariano", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/david-botelho-mariano\/exploit-CVE-2023-27564", - "description": null, - "fork": false, - "created_at": "2024-04-03T01:45:18Z", - "updated_at": "2024-04-03T01:45:18Z", - "pushed_at": "2024-04-03T01:56:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-27997.json b/2023/CVE-2023-27997.json index 7d8d512edc..512f6910f5 100644 --- a/2023/CVE-2023-27997.json +++ b/2023/CVE-2023-27997.json @@ -262,71 +262,5 @@ "watchers": 9, "score": 0, "subscribers_count": 2 - }, - { - "id": 888520597, - "name": "CVE-2023-27997-POC", - "full_name": "node011\/CVE-2023-27997-POC", - "owner": { - "login": "node011", - "id": 124257857, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124257857?v=4", - "html_url": "https:\/\/github.com\/node011", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/node011\/CVE-2023-27997-POC", - "description": "Fortigate SSL VPN buffer overflow exploit", - "fork": false, - "created_at": "2024-11-14T14:41:20Z", - "updated_at": "2024-11-14T15:08:40Z", - "pushed_at": "2024-11-14T15:08:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 968773162, - "name": "fgt-cve-2023-27997-exploit", - "full_name": "onurkerembozkurt\/fgt-cve-2023-27997-exploit", - "owner": { - "login": "onurkerembozkurt", - "id": 69954662, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69954662?v=4", - "html_url": "https:\/\/github.com\/onurkerembozkurt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/onurkerembozkurt\/fgt-cve-2023-27997-exploit", - "description": "FortiGate SSL-VPN CVE-2023-27997 Exploit PoC Script with ROP Chain", - "fork": false, - "created_at": "2025-04-18T17:49:50Z", - "updated_at": "2025-04-18T19:44:22Z", - "pushed_at": "2025-06-21T18:53:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-28121.json b/2023/CVE-2023-28121.json index 1ead157f77..c26517bceb 100644 --- a/2023/CVE-2023-28121.json +++ b/2023/CVE-2023-28121.json @@ -218,72 +218,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 965106959, - "name": "CVE-2023-28121", - "full_name": "sug4r-wr41th\/CVE-2023-28121", - "owner": { - "login": "sug4r-wr41th", - "id": 136193030, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136193030?v=4", - "html_url": "https:\/\/github.com\/sug4r-wr41th", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sug4r-wr41th\/CVE-2023-28121", - "description": "WooCommerce Payments (WordPress plugin) =< 5.6.1 CVE-2023-28121 PoC", - "fork": false, - "created_at": "2025-04-12T12:31:16Z", - "updated_at": "2025-04-12T12:33:47Z", - "pushed_at": "2025-04-12T12:31:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1079426898, - "name": "CVE-2023-28121", - "full_name": "0axz-tools\/CVE-2023-28121", - "owner": { - "login": "0axz-tools", - "id": 85687521, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85687521?v=4", - "html_url": "https:\/\/github.com\/0axz-tools", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0axz-tools\/CVE-2023-28121", - "description": null, - "fork": false, - "created_at": "2025-10-19T19:29:55Z", - "updated_at": "2025-10-19T19:32:15Z", - "pushed_at": "2025-10-19T19:32:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225323354, "name": "CVE-2023-28121-WordPress-Privilege-Escalation", diff --git a/2023/CVE-2023-28205.json b/2023/CVE-2023-28205.json deleted file mode 100644 index 3364557300..0000000000 --- a/2023/CVE-2023-28205.json +++ /dev/null @@ -1,77 +0,0 @@ -[ - { - "id": 896459919, - "name": "uaf-2023-28205", - "full_name": "ntfargo\/uaf-2023-28205", - "owner": { - "login": "ntfargo", - "id": 32229490, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32229490?v=4", - "html_url": "https:\/\/github.com\/ntfargo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ntfargo\/uaf-2023-28205", - "description": "PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability", - "fork": false, - "created_at": "2024-11-30T12:25:47Z", - "updated_at": "2026-06-29T11:12:09Z", - "pushed_at": "2024-12-01T16:08:19Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apple", - "playstation", - "poc", - "ps4", - "ps5", - "use-after-free", - "vulnerability", - "webkit" - ], - "visibility": "public", - "forks": 4, - "watchers": 17, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 1127674593, - "name": "uaf-2023-28205", - "full_name": "seregonwar\/uaf-2023-28205", - "owner": { - "login": "seregonwar", - "id": 109359355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109359355?v=4", - "html_url": "https:\/\/github.com\/seregonwar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/seregonwar\/uaf-2023-28205", - "description": "PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability", - "fork": false, - "created_at": "2026-01-04T11:27:01Z", - "updated_at": "2026-02-28T17:29:57Z", - "pushed_at": "2026-01-04T21:34:04Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28229.json b/2023/CVE-2023-28229.json index d94493a1a1..88988dd486 100644 --- a/2023/CVE-2023-28229.json +++ b/2023/CVE-2023-28229.json @@ -31,38 +31,5 @@ "watchers": 136, "score": 0, "subscribers_count": 1 - }, - { - "id": 778505062, - "name": "CrackKeyIso", - "full_name": "byt3n33dl3\/CrackKeyIso", - "owner": { - "login": "byt3n33dl3", - "id": 151133481, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151133481?v=4", - "html_url": "https:\/\/github.com\/byt3n33dl3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/byt3n33dl3\/CrackKeyIso", - "description": "it's a CVE-2023-28229 (Patched), but feel free to use it for check any outdated software or reseach", - "fork": false, - "created_at": "2024-03-27T20:57:46Z", - "updated_at": "2025-05-18T17:17:42Z", - "pushed_at": "2024-07-08T16:04:59Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-2825.json b/2023/CVE-2023-2825.json index d46f2c71f1..f9d7fa9f61 100644 --- a/2023/CVE-2023-2825.json +++ b/2023/CVE-2023-2825.json @@ -134,72 +134,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 817964661, - "name": "CVE-2023-2825", - "full_name": "cc3305\/CVE-2023-2825", - "owner": { - "login": "cc3305", - "id": 103961201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4", - "html_url": "https:\/\/github.com\/cc3305", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cc3305\/CVE-2023-2825", - "description": "CVE-2023-2825 exploit script", - "fork": false, - "created_at": "2024-06-20T20:22:01Z", - "updated_at": "2024-07-27T20:19:49Z", - "pushed_at": "2024-07-27T20:19:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 911267135, - "name": "MassCyberCenter-Mentorship-Project-", - "full_name": "alej6\/MassCyberCenter-Mentorship-Project-", - "owner": { - "login": "alej6", - "id": 157525975, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157525975?v=4", - "html_url": "https:\/\/github.com\/alej6", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alej6\/MassCyberCenter-Mentorship-Project-", - "description": "Exploiting CVE-2023-2825 on a VM", - "fork": false, - "created_at": "2025-01-02T16:10:01Z", - "updated_at": "2025-01-08T02:41:35Z", - "pushed_at": "2025-01-08T02:41:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1241686737, "name": "CVE-2023-2825-PoC", diff --git a/2023/CVE-2023-28252.json b/2023/CVE-2023-28252.json index 59bb007afe..a11fc54a9c 100644 --- a/2023/CVE-2023-28252.json +++ b/2023/CVE-2023-28252.json @@ -97,104 +97,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 746601760, - "name": "CVE-2023-28252-Compiled-exe", - "full_name": "duck-sec\/CVE-2023-28252-Compiled-exe", - "owner": { - "login": "duck-sec", - "id": 129839654, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129839654?v=4", - "html_url": "https:\/\/github.com\/duck-sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/duck-sec\/CVE-2023-28252-Compiled-exe", - "description": "A modification to fortra's CVE-2023-28252 exploit, compiled to exe", - "fork": false, - "created_at": "2024-01-22T10:38:02Z", - "updated_at": "2026-05-15T11:53:17Z", - "pushed_at": "2024-01-24T13:45:56Z", - "stargazers_count": 55, - "watchers_count": 55, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 55, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 775566247, - "name": "CLFS", - "full_name": "byt3n33dl3\/CLFS", - "owner": { - "login": "byt3n33dl3", - "id": 151133481, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151133481?v=4", - "html_url": "https:\/\/github.com\/byt3n33dl3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/byt3n33dl3\/CLFS", - "description": "it's a CVE-2023-28252 (Patched), but feel free to use it for check any outdated software or reseach", - "fork": false, - "created_at": "2024-03-21T16:16:52Z", - "updated_at": "2025-05-18T17:17:42Z", - "pushed_at": "2024-07-09T03:43:41Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 815887734, - "name": "CVE-2023-28252", - "full_name": "Vulmatch\/CVE-2023-28252", - "owner": { - "login": "Vulmatch", - "id": 70934566, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70934566?v=4", - "html_url": "https:\/\/github.com\/Vulmatch", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulmatch\/CVE-2023-28252", - "description": "The TL;DR for the learnings of Windows Vulnerability CVE-2023-28252", - "fork": false, - "created_at": "2024-06-16T12:35:57Z", - "updated_at": "2024-06-16T13:06:54Z", - "pushed_at": "2024-06-16T13:06:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-28303.json b/2023/CVE-2023-28303.json deleted file mode 100644 index 447ebf8c4e..0000000000 --- a/2023/CVE-2023-28303.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 968297981, - "name": "SnipRecover-CLI", - "full_name": "m31r0n\/SnipRecover-CLI", - "owner": { - "login": "m31r0n", - "id": 81398965, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81398965?v=4", - "html_url": "https:\/\/github.com\/m31r0n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/m31r0n\/SnipRecover-CLI", - "description": "Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303", - "fork": false, - "created_at": "2025-04-17T20:52:18Z", - "updated_at": "2025-04-17T21:08:19Z", - "pushed_at": "2025-04-17T21:08:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28324.json b/2023/CVE-2023-28324.json deleted file mode 100644 index 621b3e9f05..0000000000 --- a/2023/CVE-2023-28324.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 856944203, - "name": "CVE-2023-28324", - "full_name": "horizon3ai\/CVE-2023-28324", - "owner": { - "login": "horizon3ai", - "id": 79593994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4", - "html_url": "https:\/\/github.com\/horizon3ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2023-28324", - "description": "Ivanti EPM AgentPortal RCE Vulnerability", - "fork": false, - "created_at": "2024-09-13T14:02:04Z", - "updated_at": "2025-12-12T06:30:07Z", - "pushed_at": "2024-09-16T14:24:20Z", - "stargazers_count": 20, - "watchers_count": 20, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 20, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28354.json b/2023/CVE-2023-28354.json deleted file mode 100644 index c2e6d8cd79..0000000000 --- a/2023/CVE-2023-28354.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 891574745, - "name": "CVE-2023-28354", - "full_name": "stormfleet\/CVE-2023-28354", - "owner": { - "login": "stormfleet", - "id": 48259298, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48259298?v=4", - "html_url": "https:\/\/github.com\/stormfleet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/stormfleet\/CVE-2023-28354", - "description": "CVE-2023-28354", - "fork": false, - "created_at": "2024-11-20T15:19:32Z", - "updated_at": "2025-04-10T09:55:20Z", - "pushed_at": "2025-04-10T09:55:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28432.json b/2023/CVE-2023-28432.json index 466258d0c0..c0de763fe2 100644 --- a/2023/CVE-2023-28432.json +++ b/2023/CVE-2023-28432.json @@ -529,38 +529,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 786121269, - "name": "CVE-2023-28432", - "full_name": "BitWiz4rd\/CVE-2023-28432", - "owner": { - "login": "BitWiz4rd", - "id": 103935434, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103935434?v=4", - "html_url": "https:\/\/github.com\/BitWiz4rd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BitWiz4rd\/CVE-2023-28432", - "description": "PoC MinIO vulnerability exploit", - "fork": false, - "created_at": "2024-04-13T13:52:43Z", - "updated_at": "2026-04-03T04:04:07Z", - "pushed_at": "2025-03-03T13:06:52Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-28465.json b/2023/CVE-2023-28465.json deleted file mode 100644 index 519a48fcc9..0000000000 --- a/2023/CVE-2023-28465.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1039479814, - "name": "hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055", - "full_name": "shoucheng3\/hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055", - "owner": { - "login": "shoucheng3", - "id": 71475027, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71475027?v=4", - "html_url": "https:\/\/github.com\/shoucheng3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shoucheng3\/hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055", - "description": null, - "fork": false, - "created_at": "2025-08-17T10:27:15Z", - "updated_at": "2025-09-25T08:28:46Z", - "pushed_at": "2025-08-17T10:28:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28588.json b/2023/CVE-2023-28588.json deleted file mode 100644 index cb85b752c9..0000000000 --- a/2023/CVE-2023-28588.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 746664124, - "name": "CVE-2023-28588_G2.5_singlefile", - "full_name": "uthrasri\/CVE-2023-28588_G2.5_singlefile", - "owner": { - "login": "uthrasri", - "id": 145666390, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4", - "html_url": "https:\/\/github.com\/uthrasri", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/uthrasri\/CVE-2023-28588_G2.5_singlefile", - "description": null, - "fork": false, - "created_at": "2024-01-22T13:17:35Z", - "updated_at": "2024-01-22T13:18:30Z", - "pushed_at": "2024-01-22T13:19:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28753.json b/2023/CVE-2023-28753.json deleted file mode 100644 index 2693310f22..0000000000 --- a/2023/CVE-2023-28753.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 856641353, - "name": "CVE-2023-28753", - "full_name": "pingjuiliao\/CVE-2023-28753", - "owner": { - "login": "pingjuiliao", - "id": 40479475, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40479475?v=4", - "html_url": "https:\/\/github.com\/pingjuiliao", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pingjuiliao\/CVE-2023-28753", - "description": "pwning netconsd", - "fork": false, - "created_at": "2024-09-12T23:57:39Z", - "updated_at": "2024-09-14T05:41:16Z", - "pushed_at": "2024-09-14T05:41:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-28771.json b/2023/CVE-2023-28771.json index c71867bf21..83d8389045 100644 --- a/2023/CVE-2023-28771.json +++ b/2023/CVE-2023-28771.json @@ -33,38 +33,5 @@ "watchers": 30, "score": 0, "subscribers_count": 1 - }, - { - "id": 1024320762, - "name": "cve-2023-28771-demo", - "full_name": "JinParkmida\/cve-2023-28771-demo", - "owner": { - "login": "JinParkmida", - "id": 77583750, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77583750?v=4", - "html_url": "https:\/\/github.com\/JinParkmida", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JinParkmida\/cve-2023-28771-demo", - "description": null, - "fork": false, - "created_at": "2025-07-22T14:12:21Z", - "updated_at": "2026-06-14T23:28:44Z", - "pushed_at": "2025-07-22T14:28:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-29201.json b/2023/CVE-2023-29201.json deleted file mode 100644 index 3ca3a29750..0000000000 --- a/2023/CVE-2023-29201.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1041333312, - "name": "xwiki__xwiki-commons_CVE-2023-29201_14-5", - "full_name": "shoucheng3\/xwiki__xwiki-commons_CVE-2023-29201_14-5", - "owner": { - "login": "shoucheng3", - "id": 71475027, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71475027?v=4", - "html_url": "https:\/\/github.com\/shoucheng3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shoucheng3\/xwiki__xwiki-commons_CVE-2023-29201_14-5", - "description": null, - "fork": false, - "created_at": "2025-08-20T10:33:09Z", - "updated_at": "2025-08-20T10:34:53Z", - "pushed_at": "2025-10-27T09:43:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-29357.json b/2023/CVE-2023-29357.json index 43d6cbac5e..457eab02c1 100644 --- a/2023/CVE-2023-29357.json +++ b/2023/CVE-2023-29357.json @@ -138,72 +138,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 856513093, - "name": "Event-ID-189-Rule-Name-SOC227-CVE-2023-29357", - "full_name": "AhmedMansour93\/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357", - "owner": { - "login": "AhmedMansour93", - "id": 179945455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179945455?v=4", - "html_url": "https:\/\/github.com\/AhmedMansour93", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AhmedMansour93\/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357", - "description": "Event ID 189 Rule Name SOC227 Microsoft SharePoint Server Elevation of Privilege Possible CVE-2023-29357 .. Exploitation", - "fork": false, - "created_at": "2024-09-12T17:45:25Z", - "updated_at": "2024-09-12T17:45:57Z", - "pushed_at": "2024-09-12T17:45:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 958514804, - "name": "SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation", - "full_name": "DeividasTerechovas\/SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation", - "owner": { - "login": "DeividasTerechovas", - "id": 74025143, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74025143?v=4", - "html_url": "https:\/\/github.com\/DeividasTerechovas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DeividasTerechovas\/SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation", - "description": null, - "fork": false, - "created_at": "2025-04-01T10:19:34Z", - "updated_at": "2025-04-01T11:36:18Z", - "pushed_at": "2025-04-01T11:36:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1209880337, "name": "CVE-2023-29357", diff --git a/2023/CVE-2023-29360.json b/2023/CVE-2023-29360.json index 39b0a8dfe2..af5278dd3f 100644 --- a/2023/CVE-2023-29360.json +++ b/2023/CVE-2023-29360.json @@ -31,71 +31,5 @@ "watchers": 151, "score": 0, "subscribers_count": 2 - }, - { - "id": 850466517, - "name": "CVE-2023-29360", - "full_name": "0xDivyanshu-new\/CVE-2023-29360", - "owner": { - "login": "0xDivyanshu-new", - "id": 135882723, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135882723?v=4", - "html_url": "https:\/\/github.com\/0xDivyanshu-new", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xDivyanshu-new\/CVE-2023-29360", - "description": "POC for CVE-2023-29360", - "fork": false, - "created_at": "2024-08-31T21:08:39Z", - "updated_at": "2026-05-13T19:50:12Z", - "pushed_at": "2024-08-31T21:11:39Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1074592624, - "name": "CVE-2023-29360", - "full_name": "Scottman625\/CVE-2023-29360", - "owner": { - "login": "Scottman625", - "id": 93846808, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93846808?v=4", - "html_url": "https:\/\/github.com\/Scottman625", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Scottman625\/CVE-2023-29360", - "description": null, - "fork": false, - "created_at": "2025-10-12T05:01:15Z", - "updated_at": "2025-10-12T05:17:01Z", - "pushed_at": "2025-10-12T05:16:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-29384.json b/2023/CVE-2023-29384.json deleted file mode 100644 index 6a332db55f..0000000000 --- a/2023/CVE-2023-29384.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 845081346, - "name": "CVE-2023-29384", - "full_name": "nastar-id\/CVE-2023-29384", - "owner": { - "login": "nastar-id", - "id": 57721604, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57721604?v=4", - "html_url": "https:\/\/github.com\/nastar-id", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nastar-id\/CVE-2023-29384", - "description": "CVE-2023-29384 Auto Exploiter on WordPress Job Board and Recruitment Plugin", - "fork": false, - "created_at": "2024-08-20T14:43:33Z", - "updated_at": "2024-08-21T02:05:28Z", - "pushed_at": "2024-08-21T02:05:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-29386.json b/2023/CVE-2023-29386.json deleted file mode 100644 index f79b34e6da..0000000000 --- a/2023/CVE-2023-29386.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1073656790, - "name": "CVE-2023-29386", - "full_name": "vigilante-1337\/CVE-2023-29386", - "owner": { - "login": "vigilante-1337", - "id": 208334620, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208334620?v=4", - "html_url": "https:\/\/github.com\/vigilante-1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vigilante-1337\/CVE-2023-29386", - "description": "PoC CVE-2023-29386 — Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload", - "fork": false, - "created_at": "2025-10-10T12:33:22Z", - "updated_at": "2025-10-10T13:02:26Z", - "pushed_at": "2025-10-10T12:57:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-29489.json b/2023/CVE-2023-29489.json index f1b1a50966..7c6fa11f43 100644 --- a/2023/CVE-2023-29489.json +++ b/2023/CVE-2023-29489.json @@ -394,224 +394,5 @@ "watchers": 2, "score": 0, "subscribers_count": 1 - }, - { - "id": 746343792, - "name": "tool-29489", - "full_name": "prasad-1808\/tool-29489", - "owner": { - "login": "prasad-1808", - "id": 86564180, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86564180?v=4", - "html_url": "https:\/\/github.com\/prasad-1808", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/prasad-1808\/tool-29489", - "description": "This Tool is used to check for CVE-2023-29489 Vulnerability in the provided URL with the set of payloads available", - "fork": false, - "created_at": "2024-01-21T19:23:47Z", - "updated_at": "2024-01-21T19:38:23Z", - "pushed_at": "2024-01-21T20:10:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747385819, - "name": "cpanel_xss_2023", - "full_name": "mdaseem03\/cpanel_xss_2023", - "owner": { - "login": "mdaseem03", - "id": 98540960, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98540960?v=4", - "html_url": "https:\/\/github.com\/mdaseem03", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mdaseem03\/cpanel_xss_2023", - "description": "cpanel_xss_2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability in cpanel.", - "fork": false, - "created_at": "2024-01-23T20:29:57Z", - "updated_at": "2024-12-02T05:38:14Z", - "pushed_at": "2024-01-31T16:23:15Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 786366131, - "name": "CVE-2023-29489", - "full_name": "some-man1\/CVE-2023-29489", - "owner": { - "login": "some-man1", - "id": 142589483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142589483?v=4", - "html_url": "https:\/\/github.com\/some-man1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/some-man1\/CVE-2023-29489", - "description": "# CVE-2023-29489 exploit", - "fork": false, - "created_at": "2024-04-14T08:29:22Z", - "updated_at": "2024-04-14T08:32:44Z", - "pushed_at": "2024-04-14T08:45:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cpanel", - "cve", - "cve-2023-29489", - "exploit", - "priv8", - "python", - "python3", - "vulnerabilities", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 789738179, - "name": "CVE-2023-29489", - "full_name": "Cappricio-Securities\/CVE-2023-29489", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2023-29489", - "description": "An issue was discovered in cPanel before 11.109.9999.116. Cross-Site Scripting can occur on the cpsrvd error page via an invalid webcall ID.", - "fork": false, - "created_at": "2024-04-21T12:26:22Z", - "updated_at": "2024-06-21T07:23:23Z", - "pushed_at": "2024-06-21T07:23:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cpanel", - "cve", - "cve-2023-29489", - "reflected-xss", - "xss", - "xss-vulnerability" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 807997088, - "name": "CVE-2023-29489", - "full_name": "md-thalal\/CVE-2023-29489", - "owner": { - "login": "md-thalal", - "id": 171010055, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171010055?v=4", - "html_url": "https:\/\/github.com\/md-thalal", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/md-thalal\/CVE-2023-29489", - "description": "CVE-2023-29489 is a vulnerability to exploitable in cross-site scripting ( xss ) reflect the cpanel ", - "fork": false, - "created_at": "2024-05-30T07:20:09Z", - "updated_at": "2024-06-12T05:58:43Z", - "pushed_at": "2024-06-12T05:58:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cpanel", - "cross-site-scripting", - "xss-vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 996728925, - "name": "CVE-2023-29489", - "full_name": "Thuankobtcode\/CVE-2023-29489", - "owner": { - "login": "Thuankobtcode", - "id": 198901846, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/198901846?v=4", - "html_url": "https:\/\/github.com\/Thuankobtcode", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Thuankobtcode\/CVE-2023-29489", - "description": null, - "fork": false, - "created_at": "2025-06-05T11:26:31Z", - "updated_at": "2025-06-05T12:27:04Z", - "pushed_at": "2025-06-05T12:14:31Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-29528.json b/2023/CVE-2023-29528.json deleted file mode 100644 index 458aac69bf..0000000000 --- a/2023/CVE-2023-29528.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1041506773, - "name": "xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1", - "full_name": "shoucheng3\/xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1", - "owner": { - "login": "shoucheng3", - "id": 71475027, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71475027?v=4", - "html_url": "https:\/\/github.com\/shoucheng3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shoucheng3\/xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1", - "description": null, - "fork": false, - "created_at": "2025-08-20T15:30:01Z", - "updated_at": "2025-08-20T15:31:08Z", - "pushed_at": "2025-10-27T23:27:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-29689.json b/2023/CVE-2023-29689.json deleted file mode 100644 index 7c39aebc8c..0000000000 --- a/2023/CVE-2023-29689.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1131274401, - "name": "pyrocms-ssti-fix", - "full_name": "YSaxon\/pyrocms-ssti-fix", - "owner": { - "login": "YSaxon", - "id": 11711101, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11711101?v=4", - "html_url": "https:\/\/github.com\/YSaxon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/YSaxon\/pyrocms-ssti-fix", - "description": "A drop-in fix for CVE-2023-29689 - SSTI in PyroCMS, via a custom Twig Sandbox implementation", - "fork": false, - "created_at": "2026-01-09T18:32:49Z", - "updated_at": "2026-01-09T21:01:49Z", - "pushed_at": "2026-01-09T21:02:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-30212.json b/2023/CVE-2023-30212.json index 8b3b085a4c..36f812eb25 100644 --- a/2023/CVE-2023-30212.json +++ b/2023/CVE-2023-30212.json @@ -526,38 +526,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 964569436, - "name": "cve-2023-30212", - "full_name": "sungmin20\/cve-2023-30212", - "owner": { - "login": "sungmin20", - "id": 69639544, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69639544?v=4", - "html_url": "https:\/\/github.com\/sungmin20", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sungmin20\/cve-2023-30212", - "description": "PoC for CVE-2023-30212 using Docker", - "fork": false, - "created_at": "2025-04-11T12:27:55Z", - "updated_at": "2025-04-24T17:11:17Z", - "pushed_at": "2025-04-24T16:38:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-30253.json b/2023/CVE-2023-30253.json index 007449b448..171b1c5d6e 100644 --- a/2023/CVE-2023-30253.json +++ b/2023/CVE-2023-30253.json @@ -1,272 +1,4 @@ [ - { - "id": 806179763, - "name": "cve-2023-30253", - "full_name": "Rubikcuv5\/cve-2023-30253", - "owner": { - "login": "Rubikcuv5", - "id": 47946047, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47946047?v=4", - "html_url": "https:\/\/github.com\/Rubikcuv5", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rubikcuv5\/cve-2023-30253", - "description": "Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: \" substring.", - "fork": false, - "created_at": "2025-06-26T23:00:53Z", - "updated_at": "2026-06-08T16:00:31Z", - "pushed_at": "2025-06-26T23:05:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "security", - "webapp" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-51800.json b/2023/CVE-2023-51800.json deleted file mode 100644 index dddb72287e..0000000000 --- a/2023/CVE-2023-51800.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 742038737, - "name": "CVE-2023-51800", - "full_name": "geraldoalcantara\/CVE-2023-51800", - "owner": { - "login": "geraldoalcantara", - "id": 152064551, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152064551?v=4", - "html_url": "https:\/\/github.com\/geraldoalcantara", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geraldoalcantara\/CVE-2023-51800", - "description": "Multiple cross-site scripting (XSS) vulnerabilities in School Fees Management System v1.0.", - "fork": false, - "created_at": "2024-01-11T16:28:04Z", - "updated_at": "2024-02-16T12:23:21Z", - "pushed_at": "2024-03-01T11:58:51Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-51801.json b/2023/CVE-2023-51801.json deleted file mode 100644 index 9ac922f542..0000000000 --- a/2023/CVE-2023-51801.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 742057874, - "name": "CVE-2023-51801", - "full_name": "geraldoalcantara\/CVE-2023-51801", - "owner": { - "login": "geraldoalcantara", - "id": 152064551, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152064551?v=4", - "html_url": "https:\/\/github.com\/geraldoalcantara", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geraldoalcantara\/CVE-2023-51801", - "description": "Simple Student Attendance System v.1.0 - Multiple SQL injection vulnerabilities - student_form.php and class_form.php", - "fork": false, - "created_at": "2024-01-11T17:14:33Z", - "updated_at": "2024-03-01T12:02:08Z", - "pushed_at": "2024-03-01T11:59:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-51802.json b/2023/CVE-2023-51802.json deleted file mode 100644 index 226ea73d97..0000000000 --- a/2023/CVE-2023-51802.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 742063325, - "name": "CVE-2023-51802", - "full_name": "geraldoalcantara\/CVE-2023-51802", - "owner": { - "login": "geraldoalcantara", - "id": 152064551, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152064551?v=4", - "html_url": "https:\/\/github.com\/geraldoalcantara", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/geraldoalcantara\/CVE-2023-51802", - "description": "Simple Student Attendance System v.1.0 - Cross-site scripting (XSS) vulnerabilities in attendance_report", - "fork": false, - "created_at": "2024-01-11T17:28:16Z", - "updated_at": "2024-02-16T12:23:23Z", - "pushed_at": "2024-03-01T12:00:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5204.json b/2023/CVE-2023-5204.json deleted file mode 100644 index 24cad2ce4d..0000000000 --- a/2023/CVE-2023-5204.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 761333708, - "name": "CVE-2023-5204", - "full_name": "RandomRobbieBF\/CVE-2023-5204", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-5204", - "description": "AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response", - "fork": false, - "created_at": "2024-02-21T17:14:15Z", - "updated_at": "2026-05-18T02:43:59Z", - "pushed_at": "2024-02-21T17:15:25Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52160.json b/2023/CVE-2023-52160.json deleted file mode 100644 index 11505396b9..0000000000 --- a/2023/CVE-2023-52160.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 763514094, - "name": "eap_pwn", - "full_name": "Helica-core\/eap_pwn", - "owner": { - "login": "Helica-core", - "id": 8072457, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8072457?v=4", - "html_url": "https:\/\/github.com\/Helica-core", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Helica-core\/eap_pwn", - "description": "poc of CVE-2023-52160", - "fork": false, - "created_at": "2024-02-26T12:48:07Z", - "updated_at": "2024-09-02T08:32:31Z", - "pushed_at": "2024-02-26T12:51:54Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52251.json b/2023/CVE-2023-52251.json deleted file mode 100644 index 0d7d289625..0000000000 --- a/2023/CVE-2023-52251.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 739727093, - "name": "CVE-2023-52251-POC", - "full_name": "BobTheShoplifter\/CVE-2023-52251-POC", - "owner": { - "login": "BobTheShoplifter", - "id": 22559547, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22559547?v=4", - "html_url": "https:\/\/github.com\/BobTheShoplifter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BobTheShoplifter\/CVE-2023-52251-POC", - "description": "CVE-2023-52251 There is a Remote Code Execution vulnerability provectus\/kafka-ui.", - "fork": false, - "created_at": "2024-01-06T11:07:36Z", - "updated_at": "2026-04-03T01:11:52Z", - "pushed_at": "2024-01-23T19:06:14Z", - "stargazers_count": 21, - "watchers_count": 21, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2023-52251", - "kafka-ui", - "poc" - ], - "visibility": "public", - "forks": 3, - "watchers": 21, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52268.json b/2023/CVE-2023-52268.json deleted file mode 100644 index 5b6fe36e7f..0000000000 --- a/2023/CVE-2023-52268.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 871811221, - "name": "CVE-2023-52268", - "full_name": "squ1dw3rm\/CVE-2023-52268", - "owner": { - "login": "squ1dw3rm", - "id": 87349040, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87349040?v=4", - "html_url": "https:\/\/github.com\/squ1dw3rm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/squ1dw3rm\/CVE-2023-52268", - "description": "Authentication Bypass for FreeScout End-User Portal", - "fork": false, - "created_at": "2024-10-13T02:17:03Z", - "updated_at": "2024-10-13T02:50:46Z", - "pushed_at": "2024-10-13T02:50:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52440.json b/2023/CVE-2023-52440.json deleted file mode 100644 index 7227408757..0000000000 --- a/2023/CVE-2023-52440.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1055237429, - "name": "ksmbd-n-day", - "full_name": "BitsByWill\/ksmbd-n-day", - "owner": { - "login": "BitsByWill", - "id": 8272056, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8272056?v=4", - "html_url": "https:\/\/github.com\/BitsByWill", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BitsByWill\/ksmbd-n-day", - "description": "Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130", - "fork": false, - "created_at": "2025-09-12T01:25:54Z", - "updated_at": "2026-05-07T19:04:56Z", - "pushed_at": "2025-09-13T20:09:19Z", - "stargazers_count": 55, - "watchers_count": 55, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 55, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52654.json b/2023/CVE-2023-52654.json deleted file mode 100644 index 6c0015b283..0000000000 --- a/2023/CVE-2023-52654.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 798468145, - "name": "CVE-2023-52654", - "full_name": "FoxyProxys\/CVE-2023-52654", - "owner": { - "login": "FoxyProxys", - "id": 166161106, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166161106?v=4", - "html_url": "https:\/\/github.com\/FoxyProxys", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FoxyProxys\/CVE-2023-52654", - "description": null, - "fork": false, - "created_at": "2024-05-09T20:53:03Z", - "updated_at": "2024-05-09T21:25:58Z", - "pushed_at": "2024-05-09T21:25:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52709.json b/2023/CVE-2023-52709.json deleted file mode 100644 index 3e41cf6f4c..0000000000 --- a/2023/CVE-2023-52709.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 825866082, - "name": "CVE-2023-52709-PoC", - "full_name": "KevinMitchell-OSWP-CISSP\/CVE-2023-52709-PoC", - "owner": { - "login": "KevinMitchell-OSWP-CISSP", - "id": 15947372, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15947372?v=4", - "html_url": "https:\/\/github.com\/KevinMitchell-OSWP-CISSP", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KevinMitchell-OSWP-CISSP\/CVE-2023-52709-PoC", - "description": "PoC for 2023-52709 - TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices. ", - "fork": false, - "created_at": "2024-07-08T16:48:29Z", - "updated_at": "2025-12-05T04:50:49Z", - "pushed_at": "2024-09-26T15:27:09Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-52927.json b/2023/CVE-2023-52927.json deleted file mode 100644 index c44258312e..0000000000 --- a/2023/CVE-2023-52927.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 1014191891, - "name": "CVE-2023-52927", - "full_name": "seadragnol\/CVE-2023-52927", - "owner": { - "login": "seadragnol", - "id": 55611051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55611051?v=4", - "html_url": "https:\/\/github.com\/seadragnol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/seadragnol\/CVE-2023-52927", - "description": null, - "fork": false, - "created_at": "2025-07-05T08:21:05Z", - "updated_at": "2025-08-19T17:21:09Z", - "pushed_at": "2025-07-07T00:30:40Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1055420112, - "name": "Reproduce-CVE-2023-52927", - "full_name": "HoangNhoo\/Reproduce-CVE-2023-52927", - "owner": { - "login": "HoangNhoo", - "id": 150352716, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150352716?v=4", - "html_url": "https:\/\/github.com\/HoangNhoo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HoangNhoo\/Reproduce-CVE-2023-52927", - "description": null, - "fork": false, - "created_at": "2025-09-12T08:38:31Z", - "updated_at": "2025-10-21T12:21:18Z", - "pushed_at": "2025-09-29T11:07:17Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5359.json b/2023/CVE-2023-5359.json deleted file mode 100644 index 25c5d9dab1..0000000000 --- a/2023/CVE-2023-5359.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 946668878, - "name": "Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache", - "full_name": "spyata123\/Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache", - "owner": { - "login": "spyata123", - "id": 102546770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102546770?v=4", - "html_url": "https:\/\/github.com\/spyata123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/spyata123\/Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache", - "description": "Targets versions ≤2.7.5 vulnerable to CVE-2023-5359", - "fork": false, - "created_at": "2025-03-11T13:51:32Z", - "updated_at": "2025-03-11T16:18:16Z", - "pushed_at": "2025-03-11T16:18:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1091992292, - "name": "CVE-2023-5359", - "full_name": "enzocipher\/CVE-2023-5359", - "owner": { - "login": "enzocipher", - "id": 62620411, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62620411?v=4", - "html_url": "https:\/\/github.com\/enzocipher", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/enzocipher\/CVE-2023-5359", - "description": "CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Scanner. Detect exposed credentials in W3 Total Cache plugin versions ≤ 2.7.5.", - "fork": false, - "created_at": "2025-11-07T20:31:23Z", - "updated_at": "2025-11-07T20:37:02Z", - "pushed_at": "2025-11-07T20:36:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5360.json b/2023/CVE-2023-5360.json index 916e3cb8d1..844a214a68 100644 --- a/2023/CVE-2023-5360.json +++ b/2023/CVE-2023-5360.json @@ -215,71 +215,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 1019692624, - "name": "CVE-2023-5360", - "full_name": "X3RX3SSec\/CVE-2023-5360", - "owner": { - "login": "X3RX3SSec", - "id": 141476851, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141476851?v=4", - "html_url": "https:\/\/github.com\/X3RX3SSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/X3RX3SSec\/CVE-2023-5360", - "description": "Royal Elementor Addons - Unauthenticated Remote Code Execution", - "fork": false, - "created_at": "2025-07-14T18:09:35Z", - "updated_at": "2025-07-15T05:15:06Z", - "pushed_at": "2025-07-15T05:15:03Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1123719733, - "name": "CVE-2023-5360-exploit-with-native-libraries", - "full_name": "LaviruDilshan\/CVE-2023-5360-exploit-with-native-libraries", - "owner": { - "login": "LaviruDilshan", - "id": 93317127, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93317127?v=4", - "html_url": "https:\/\/github.com\/LaviruDilshan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LaviruDilshan\/CVE-2023-5360-exploit-with-native-libraries", - "description": "CVE-2023-5360 PoC: Unauthenticated arbitrary file upload leading to RCE in Royal Elementor Addons (≤ 1.3.78), written in pure Python.", - "fork": false, - "created_at": "2025-12-27T13:27:41Z", - "updated_at": "2025-12-27T13:28:39Z", - "pushed_at": "2025-12-27T13:28:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-5561.json b/2023/CVE-2023-5561.json index 8c321d4efa..2120669df7 100644 --- a/2023/CVE-2023-5561.json +++ b/2023/CVE-2023-5561.json @@ -31,71 +31,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 958426787, - "name": "CVE-2023-5561-POC-Updated", - "full_name": "rootxsushant\/CVE-2023-5561-POC-Updated", - "owner": { - "login": "rootxsushant", - "id": 83302457, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83302457?v=4", - "html_url": "https:\/\/github.com\/rootxsushant", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rootxsushant\/CVE-2023-5561-POC-Updated", - "description": "Updated POC for Unauth Post Author Email Disclosures WordPress CVE-2023-5561", - "fork": false, - "created_at": "2025-04-01T07:19:31Z", - "updated_at": "2026-04-12T21:42:51Z", - "pushed_at": "2025-04-01T07:24:40Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1011668100, - "name": "CVE-2023-5561-PoC", - "full_name": "dthkhang\/CVE-2023-5561-PoC", - "owner": { - "login": "dthkhang", - "id": 98313915, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98313915?v=4", - "html_url": "https:\/\/github.com\/dthkhang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dthkhang\/CVE-2023-5561-PoC", - "description": "CVE-2023-5561-PoC", - "fork": false, - "created_at": "2025-07-01T07:02:28Z", - "updated_at": "2026-04-12T23:22:32Z", - "pushed_at": "2025-07-01T07:03:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-5612.json b/2023/CVE-2023-5612.json deleted file mode 100644 index 2feee49f2f..0000000000 --- a/2023/CVE-2023-5612.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 996591373, - "name": "Review.CVE-2023-5612", - "full_name": "TopskiyPavelQwertyGang\/Review.CVE-2023-5612", - "owner": { - "login": "TopskiyPavelQwertyGang", - "id": 159809119, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159809119?v=4", - "html_url": "https:\/\/github.com\/TopskiyPavelQwertyGang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TopskiyPavelQwertyGang\/Review.CVE-2023-5612", - "description": "Analysis via script CVE-2023-5612", - "fork": false, - "created_at": "2025-06-05T07:04:30Z", - "updated_at": "2025-06-06T10:09:57Z", - "pushed_at": "2025-06-06T10:09:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1056653315, - "name": "CVE-2023-5612", - "full_name": "mad3E7cat\/CVE-2023-5612", - "owner": { - "login": "mad3E7cat", - "id": 11902786, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11902786?v=4", - "html_url": "https:\/\/github.com\/mad3E7cat", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mad3E7cat\/CVE-2023-5612", - "description": "Nmap NSE to check for CVE-2023-5612", - "fork": false, - "created_at": "2025-09-14T14:38:02Z", - "updated_at": "2025-09-16T14:28:02Z", - "pushed_at": "2025-09-14T14:42:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5717.json b/2023/CVE-2023-5717.json deleted file mode 100644 index c7704e07d2..0000000000 --- a/2023/CVE-2023-5717.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 747097463, - "name": "CVE-2023-5717", - "full_name": "uthrasri\/CVE-2023-5717", - "owner": { - "login": "uthrasri", - "id": 145666390, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4", - "html_url": "https:\/\/github.com\/uthrasri", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/uthrasri\/CVE-2023-5717", - "description": null, - "fork": false, - "created_at": "2024-01-23T09:04:00Z", - "updated_at": "2024-01-23T09:07:21Z", - "pushed_at": "2024-01-23T09:08:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5961.json b/2023/CVE-2023-5961.json deleted file mode 100644 index 753c4880bf..0000000000 --- a/2023/CVE-2023-5961.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 750906260, - "name": "CVE-2023-5961", - "full_name": "HadessCS\/CVE-2023-5961", - "owner": { - "login": "HadessCS", - "id": 102136070, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102136070?v=4", - "html_url": "https:\/\/github.com\/HadessCS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HadessCS\/CVE-2023-5961", - "description": "moxa ioLogik E1212", - "fork": false, - "created_at": "2024-01-31T15:00:16Z", - "updated_at": "2024-02-27T15:19:44Z", - "pushed_at": "2024-01-31T15:03:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-5965.json b/2023/CVE-2023-5965.json deleted file mode 100644 index 284501ea19..0000000000 --- a/2023/CVE-2023-5965.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 788787763, - "name": "CVE-2023-5965", - "full_name": "josemlwdf\/CVE-2023-5965", - "owner": { - "login": "josemlwdf", - "id": 60181010, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60181010?v=4", - "html_url": "https:\/\/github.com\/josemlwdf", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/josemlwdf\/CVE-2023-5965", - "description": "PoC for Espo CRM 7.2.4 CVE-2023-5965 & CVE-2023-5966", - "fork": false, - "created_at": "2024-04-19T04:48:43Z", - "updated_at": "2024-04-19T04:48:43Z", - "pushed_at": "2024-04-19T05:15:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6000.json b/2023/CVE-2023-6000.json deleted file mode 100644 index 7a1523256b..0000000000 --- a/2023/CVE-2023-6000.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 872483237, - "name": "CVE-2023-6000-POC", - "full_name": "RonF98\/CVE-2023-6000-POC", - "owner": { - "login": "RonF98", - "id": 181740430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181740430?v=4", - "html_url": "https:\/\/github.com\/RonF98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RonF98\/CVE-2023-6000-POC", - "description": "This vulnerability displays an XSS flaw in a WordPress popup plugin, allowing attackers to inject malicious JavaScript through a stored XSS", - "fork": false, - "created_at": "2024-10-14T14:11:02Z", - "updated_at": "2025-07-07T14:43:14Z", - "pushed_at": "2025-07-07T14:43:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6019.json b/2023/CVE-2023-6019.json index 71c13950b4..31912e86d2 100644 --- a/2023/CVE-2023-6019.json +++ b/2023/CVE-2023-6019.json @@ -1,103 +1,4 @@ [ - { - "id": 784652268, - "name": "CVE-2023-6019", - "full_name": "FireWolfWang\/CVE-2023-6019", - "owner": { - "login": "FireWolfWang", - "id": 33483801, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33483801?v=4", - "html_url": "https:\/\/github.com\/FireWolfWang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FireWolfWang\/CVE-2023-6019", - "description": "Ray OS Command Injection RCE(Unauthorized)", - "fork": false, - "created_at": "2024-04-10T09:24:06Z", - "updated_at": "2024-04-11T13:50:19Z", - "pushed_at": "2024-04-10T09:28:08Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 789777022, - "name": "CVE-2023-6019", - "full_name": "Clydeston\/CVE-2023-6019", - "owner": { - "login": "Clydeston", - "id": 47860813, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47860813?v=4", - "html_url": "https:\/\/github.com\/Clydeston", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Clydeston\/CVE-2023-6019", - "description": "Python POC for CVE-2023-6019 taken from https:\/\/huntr.com\/bounties\/d0290f3c-b302-4161-89f2-c13bb28b4cfe", - "fork": false, - "created_at": "2024-04-21T14:30:28Z", - "updated_at": "2026-06-02T08:26:31Z", - "pushed_at": "2024-04-21T14:32:45Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1085266986, - "name": "cve-2023-6019", - "full_name": "Zohaibkhan1472\/cve-2023-6019", - "owner": { - "login": "Zohaibkhan1472", - "id": 212526846, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212526846?v=4", - "html_url": "https:\/\/github.com\/Zohaibkhan1472", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Zohaibkhan1472\/cve-2023-6019", - "description": null, - "fork": false, - "created_at": "2025-10-28T20:04:02Z", - "updated_at": "2025-10-28T20:17:57Z", - "pushed_at": "2025-10-28T20:17:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1274673377, "name": "CVE-2023-6019", diff --git a/2023/CVE-2023-6036.json b/2023/CVE-2023-6036.json deleted file mode 100644 index d5e45e1300..0000000000 --- a/2023/CVE-2023-6036.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 750960186, - "name": "CVE-2023-6036", - "full_name": "pctripsesp\/CVE-2023-6036", - "owner": { - "login": "pctripsesp", - "id": 17095580, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17095580?v=4", - "html_url": "https:\/\/github.com\/pctripsesp", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pctripsesp\/CVE-2023-6036", - "description": "POC about Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass Wordpress plugin", - "fork": false, - "created_at": "2024-01-31T16:58:48Z", - "updated_at": "2024-02-01T14:21:59Z", - "pushed_at": "2024-01-31T17:42:42Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6063.json b/2023/CVE-2023-6063.json index aed4b0111e..7bf4a5150c 100644 --- a/2023/CVE-2023-6063.json +++ b/2023/CVE-2023-6063.json @@ -97,44 +97,5 @@ "watchers": 9, "score": 0, "subscribers_count": 1 - }, - { - "id": 964048289, - "name": "CVE-2023-6063-PoC", - "full_name": "incommatose\/CVE-2023-6063-PoC", - "owner": { - "login": "incommatose", - "id": 182379761, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182379761?v=4", - "html_url": "https:\/\/github.com\/incommatose", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/incommatose\/CVE-2023-6063-PoC", - "description": "A Proof on Concept for CVE-2023-6063, a time-based blind SQL injection vulnerability in WP Fastest Cache ≤1.2.2.", - "fork": false, - "created_at": "2025-04-10T15:56:46Z", - "updated_at": "2026-06-16T07:58:13Z", - "pushed_at": "2025-07-16T00:28:52Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2023-6063", - "cybersecurity", - "hacking", - "python-script" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2023/CVE-2023-6199.json b/2023/CVE-2023-6199.json deleted file mode 100644 index bef4df8b46..0000000000 --- a/2023/CVE-2023-6199.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 940810209, - "name": "php_filter_chains_oracle_exploit_for_CVE-2023-6199", - "full_name": "AbdrrahimDahmani\/php_filter_chains_oracle_exploit_for_CVE-2023-6199", - "owner": { - "login": "AbdrrahimDahmani", - "id": 80603216, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80603216?v=4", - "html_url": "https:\/\/github.com\/AbdrrahimDahmani", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AbdrrahimDahmani\/php_filter_chains_oracle_exploit_for_CVE-2023-6199", - "description": "A CLI to exploit parameters vulnerable to PHP filter chain error based oracle, modified to exploit CVE-2023-6199", - "fork": false, - "created_at": "2025-02-28T20:48:03Z", - "updated_at": "2025-02-28T21:04:06Z", - "pushed_at": "2025-02-28T21:04:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 942668440, - "name": "php_filter_chain_oracle_poc", - "full_name": "4xura\/php_filter_chain_oracle_poc", - "owner": { - "login": "4xura", - "id": 164868833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164868833?v=4", - "html_url": "https:\/\/github.com\/4xura", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/4xura\/php_filter_chain_oracle_poc", - "description": "PoC scripts to exploit LFR (Local File Read) via PHP filters chain oracle (php:\/\/filter), especially for CTF purposes or the exploit of CVE-2023-6199, etc. This's a one-script exploitation PoC modified from https:\/\/github.com\/synacktiv\/php_filter_chains_oracle_exploit", - "fork": false, - "created_at": "2025-03-04T13:32:00Z", - "updated_at": "2026-06-29T15:59:32Z", - "pushed_at": "2025-03-05T03:55:30Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6241.json b/2023/CVE-2023-6241.json deleted file mode 100644 index 0777d9e90f..0000000000 --- a/2023/CVE-2023-6241.json +++ /dev/null @@ -1,77 +0,0 @@ -[ - { - "id": 794812900, - "name": "CVE-2023-6241", - "full_name": "SmileTabLabo\/CVE-2023-6241", - "owner": { - "login": "SmileTabLabo", - "id": 112930114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112930114?v=4", - "html_url": "https:\/\/github.com\/SmileTabLabo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SmileTabLabo\/CVE-2023-6241", - "description": "CVE-2023-6241 for Pixel 8", - "fork": false, - "created_at": "2024-05-02T02:17:31Z", - "updated_at": "2026-05-25T07:59:53Z", - "pushed_at": "2024-10-17T19:39:45Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": true, - "web_commit_signoff_required": true, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "android", - "android-14", - "arm", - "google", - "mali", - "pixel", - "pixel8", - "poc" - ], - "visibility": "public", - "forks": 11, - "watchers": 17, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 858592719, - "name": "CVE-2023-6241-Pixel7_Adaptation", - "full_name": "ilGobbo00\/CVE-2023-6241-Pixel7_Adaptation", - "owner": { - "login": "ilGobbo00", - "id": 64530671, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64530671?v=4", - "html_url": "https:\/\/github.com\/ilGobbo00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ilGobbo00\/CVE-2023-6241-Pixel7_Adaptation", - "description": "Adaptation of CVE-2023-6241 for Google Pixel 7 from Google Pixel 8 taken from securitylab\/SecurityExploits\/Android\/Mali\/CVE_2023_6241", - "fork": false, - "created_at": "2024-09-17T07:19:54Z", - "updated_at": "2026-05-20T05:26:57Z", - "pushed_at": "2025-03-21T14:30:46Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6246.json b/2023/CVE-2023-6246.json index fe11cf5af6..9ae3fa0b1e 100644 --- a/2023/CVE-2023-6246.json +++ b/2023/CVE-2023-6246.json @@ -1,37 +1,4 @@ [ - { - "id": 766195734, - "name": "CVE-2023-6246", - "full_name": "elpe-pinillo\/CVE-2023-6246", - "owner": { - "login": "elpe-pinillo", - "id": 30589235, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30589235?v=4", - "html_url": "https:\/\/github.com\/elpe-pinillo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/elpe-pinillo\/CVE-2023-6246", - "description": null, - "fork": false, - "created_at": "2024-03-02T15:45:52Z", - "updated_at": "2026-05-15T10:36:58Z", - "pushed_at": "2024-03-06T20:12:50Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, { "id": 1203158104, "name": "CTT-Vsyslog-Vortex-CVE-2023-6246", diff --git a/2023/CVE-2023-6275.json b/2023/CVE-2023-6275.json deleted file mode 100644 index 8a1ec3a2ef..0000000000 --- a/2023/CVE-2023-6275.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 851979196, - "name": "CVE-2023-6275", - "full_name": "erickfernandox\/CVE-2023-6275", - "owner": { - "login": "erickfernandox", - "id": 2186082, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2186082?v=4", - "html_url": "https:\/\/github.com\/erickfernandox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/erickfernandox\/CVE-2023-6275", - "description": "Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1", - "fork": false, - "created_at": "2024-09-04T02:33:46Z", - "updated_at": "2024-10-01T14:04:30Z", - "pushed_at": "2024-09-17T15:08:34Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1044525704, - "name": "FLUIG-Vulnerabilidade-CVE-2023-6275", - "full_name": "LelioCosta\/FLUIG-Vulnerabilidade-CVE-2023-6275", - "owner": { - "login": "LelioCosta", - "id": 106552406, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106552406?v=4", - "html_url": "https:\/\/github.com\/LelioCosta", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LelioCosta\/FLUIG-Vulnerabilidade-CVE-2023-6275", - "description": "Nov 24, 2023 — A vulnerability was found in TOTVS Fluig Platform 1.6.x\/1.7.x\/1.8.0\/1.8.1. It has been rated as problematic. ", - "fork": false, - "created_at": "2025-08-25T20:21:46Z", - "updated_at": "2025-08-25T20:28:51Z", - "pushed_at": "2025-08-25T20:28:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6319.json b/2023/CVE-2023-6319.json deleted file mode 100644 index 58bfb83493..0000000000 --- a/2023/CVE-2023-6319.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 785372711, - "name": "root-my-webos-tv", - "full_name": "illixion\/root-my-webos-tv", - "owner": { - "login": "illixion", - "id": 14954655, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14954655?v=4", - "html_url": "https:\/\/github.com\/illixion", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/illixion\/root-my-webos-tv", - "description": "CVE-2023-6319 proof of concept", - "fork": false, - "created_at": "2024-04-11T18:58:17Z", - "updated_at": "2026-05-11T12:15:27Z", - "pushed_at": "2024-10-17T11:18:46Z", - "stargazers_count": 50, - "watchers_count": 50, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-6319", - "exploit", - "tv", - "webos" - ], - "visibility": "public", - "forks": 4, - "watchers": 50, - "score": 0, - "subscribers_count": 5 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6350.json b/2023/CVE-2023-6350.json deleted file mode 100644 index c037f3bf83..0000000000 --- a/2023/CVE-2023-6350.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 864923088, - "name": "CVE-2023-6350_Reproduction", - "full_name": "dywsy21\/CVE-2023-6350_Reproduction", - "owner": { - "login": "dywsy21", - "id": 150417245, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150417245?v=4", - "html_url": "https:\/\/github.com\/dywsy21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dywsy21\/CVE-2023-6350_Reproduction", - "description": null, - "fork": false, - "created_at": "2024-09-29T14:29:26Z", - "updated_at": "2024-10-17T12:09:18Z", - "pushed_at": "2024-10-17T12:09:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6360.json b/2023/CVE-2023-6360.json deleted file mode 100644 index e0d3e85d7a..0000000000 --- a/2023/CVE-2023-6360.json +++ /dev/null @@ -1,37 +0,0 @@ -[ - { - "id": 950326345, - "name": "CVE-2023-6360", - "full_name": "tpdlshdmlrkfmcla\/CVE-2023-6360", - "owner": { - "login": "tpdlshdmlrkfmcla", - "id": 58906858, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58906858?v=4", - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla\/CVE-2023-6360", - "description": "CVE-2023-6360", - "fork": false, - "created_at": "2025-03-18T01:42:29Z", - "updated_at": "2025-03-18T04:56:37Z", - "pushed_at": "2025-03-18T04:55:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-6360" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6387.json b/2023/CVE-2023-6387.json deleted file mode 100644 index 5c859170f2..0000000000 --- a/2023/CVE-2023-6387.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 835505781, - "name": "CVE_6387", - "full_name": "A3ST1CODE\/CVE_6387", - "owner": { - "login": "A3ST1CODE", - "id": 87237294, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87237294?v=4", - "html_url": "https:\/\/github.com\/A3ST1CODE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/A3ST1CODE\/CVE_6387", - "description": "Repository for testing exploiting CVE-2023-6387 using TypeScript and JavaScript.", - "fork": false, - "created_at": "2024-07-30T01:33:10Z", - "updated_at": "2025-04-03T11:20:05Z", - "pushed_at": "2024-07-30T01:45:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6401.json b/2023/CVE-2023-6401.json deleted file mode 100644 index 05af17f978..0000000000 --- a/2023/CVE-2023-6401.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1004549270, - "name": "CVE-2023-6401", - "full_name": "mekitoci\/CVE-2023-6401", - "owner": { - "login": "mekitoci", - "id": 47452491, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47452491?v=4", - "html_url": "https:\/\/github.com\/mekitoci", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mekitoci\/CVE-2023-6401", - "description": "CVE-2023-6401 is a DLL hijacking vulnerability that allows attackers to execute arbitrary code by placing a malicious `dbghelp.dll` file in the application directory. This project demonstrates the vulnerability and provides a reproducible PoC.", - "fork": false, - "created_at": "2025-06-18T19:59:31Z", - "updated_at": "2025-06-18T20:27:11Z", - "pushed_at": "2025-06-18T20:27:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6421.json b/2023/CVE-2023-6421.json deleted file mode 100644 index 3d210e9887..0000000000 --- a/2023/CVE-2023-6421.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 870113743, - "name": "CVE-2023-6421", - "full_name": "RandomRobbieBF\/CVE-2023-6421", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-6421", - "description": "Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak", - "fork": false, - "created_at": "2024-10-09T13:18:10Z", - "updated_at": "2024-10-18T17:57:25Z", - "pushed_at": "2024-10-09T13:20:29Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6444.json b/2023/CVE-2023-6444.json deleted file mode 100644 index 0aa9df1332..0000000000 --- a/2023/CVE-2023-6444.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 839110924, - "name": "CVE-2023-6444-POC", - "full_name": "Wayne-Ker\/CVE-2023-6444-POC", - "owner": { - "login": "Wayne-Ker", - "id": 94828747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94828747?v=4", - "html_url": "https:\/\/github.com\/Wayne-Ker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Wayne-Ker\/CVE-2023-6444-POC", - "description": "Proof of concept on Unauthenticated Administrator Email Disclosure CVE-2023-6444", - "fork": false, - "created_at": "2024-08-07T01:58:04Z", - "updated_at": "2024-08-07T02:23:47Z", - "pushed_at": "2024-08-07T02:23:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6546.json b/2023/CVE-2023-6546.json deleted file mode 100644 index 3f79e1ab6d..0000000000 --- a/2023/CVE-2023-6546.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 925609983, - "name": "CVE-2023-6546", - "full_name": "harithlab\/CVE-2023-6546", - "owner": { - "login": "harithlab", - "id": 16438928, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16438928?v=4", - "html_url": "https:\/\/github.com\/harithlab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/harithlab\/CVE-2023-6546", - "description": null, - "fork": false, - "created_at": "2025-02-01T09:40:54Z", - "updated_at": "2025-07-23T09:57:06Z", - "pushed_at": "2025-02-01T09:43:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6553.json b/2023/CVE-2023-6553.json index 398b2d7930..4b37b5d000 100644 --- a/2023/CVE-2023-6553.json +++ b/2023/CVE-2023-6553.json @@ -79,72 +79,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 821866509, - "name": "CVE-2023-6553", - "full_name": "cc3305\/CVE-2023-6553", - "owner": { - "login": "cc3305", - "id": 103961201, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103961201?v=4", - "html_url": "https:\/\/github.com\/cc3305", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cc3305\/CVE-2023-6553", - "description": "CVE-2023-6553 exploit script", - "fork": false, - "created_at": "2024-06-29T17:01:51Z", - "updated_at": "2024-07-27T20:20:42Z", - "pushed_at": "2024-07-27T20:20:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 884598540, - "name": "CVE-2023-6553", - "full_name": "Harshit-Mashru\/CVE-2023-6553", - "owner": { - "login": "Harshit-Mashru", - "id": 31271975, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31271975?v=4", - "html_url": "https:\/\/github.com\/Harshit-Mashru", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Harshit-Mashru\/CVE-2023-6553", - "description": "Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress", - "fork": false, - "created_at": "2024-11-07T03:28:02Z", - "updated_at": "2024-11-07T17:24:08Z", - "pushed_at": "2024-11-07T17:24:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1207021032, "name": "CVE-2023-6553-RCE-Exploit", diff --git a/2023/CVE-2023-6595.json b/2023/CVE-2023-6595.json deleted file mode 100644 index af6d579cea..0000000000 --- a/2023/CVE-2023-6595.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 766048857, - "name": "CVE-2023-6595", - "full_name": "sharmashreejaa\/CVE-2023-6595", - "owner": { - "login": "sharmashreejaa", - "id": 161574704, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161574704?v=4", - "html_url": "https:\/\/github.com\/sharmashreejaa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sharmashreejaa\/CVE-2023-6595", - "description": null, - "fork": false, - "created_at": "2024-03-02T07:35:29Z", - "updated_at": "2024-03-02T07:35:29Z", - "pushed_at": "2024-03-02T07:35:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6634.json b/2023/CVE-2023-6634.json deleted file mode 100644 index 85f2363dfb..0000000000 --- a/2023/CVE-2023-6634.json +++ /dev/null @@ -1,37 +0,0 @@ -[ - { - "id": 782645537, - "name": "CVE-2023-6634", - "full_name": "krn966\/CVE-2023-6634", - "owner": { - "login": "krn966", - "id": 124454175, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124454175?v=4", - "html_url": "https:\/\/github.com\/krn966", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/krn966\/CVE-2023-6634", - "description": "CVE-2023-6634", - "fork": false, - "created_at": "2024-04-05T18:07:08Z", - "updated_at": "2024-10-10T14:22:51Z", - "pushed_at": "2024-04-05T19:37:03Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit" - ], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6654.json b/2023/CVE-2023-6654.json deleted file mode 100644 index 1096a90627..0000000000 --- a/2023/CVE-2023-6654.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 763947006, - "name": "CVE-2023-6654", - "full_name": "qfmy1024\/CVE-2023-6654", - "owner": { - "login": "qfmy1024", - "id": 76994810, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76994810?v=4", - "html_url": "https:\/\/github.com\/qfmy1024", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/qfmy1024\/CVE-2023-6654", - "description": "CVE-2023-6654 EXP", - "fork": false, - "created_at": "2024-02-27T07:50:01Z", - "updated_at": "2025-08-27T02:22:51Z", - "pushed_at": "2024-08-29T16:58:29Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6700.json b/2023/CVE-2023-6700.json deleted file mode 100644 index 4d9716b353..0000000000 --- a/2023/CVE-2023-6700.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 750276548, - "name": "CVE-2023-6700", - "full_name": "RandomRobbieBF\/CVE-2023-6700", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-6700", - "description": "Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update", - "fork": false, - "created_at": "2024-01-30T10:32:54Z", - "updated_at": "2024-07-11T16:38:26Z", - "pushed_at": "2024-05-21T13:58:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6702.json b/2023/CVE-2023-6702.json deleted file mode 100644 index eee29e2ab8..0000000000 --- a/2023/CVE-2023-6702.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 809375652, - "name": "CVE-2023-6702", - "full_name": "kaist-hacking\/CVE-2023-6702", - "owner": { - "login": "kaist-hacking", - "id": 74822163, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74822163?v=4", - "html_url": "https:\/\/github.com\/kaist-hacking", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kaist-hacking\/CVE-2023-6702", - "description": "Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)", - "fork": false, - "created_at": "2024-06-02T14:15:27Z", - "updated_at": "2026-05-18T14:02:58Z", - "pushed_at": "2024-06-03T05:03:46Z", - "stargazers_count": 86, - "watchers_count": 86, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 86, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6875.json b/2023/CVE-2023-6875.json deleted file mode 100644 index 2c21ab32cc..0000000000 --- a/2023/CVE-2023-6875.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 749076546, - "name": "CVE-2023-6875", - "full_name": "gbrsh\/CVE-2023-6875", - "owner": { - "login": "gbrsh", - "id": 36970331, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36970331?v=4", - "html_url": "https:\/\/github.com\/gbrsh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gbrsh\/CVE-2023-6875", - "description": "Exploit for CVE-2023-6875 - Unauthorized Account Takeover. ", - "fork": false, - "created_at": "2024-01-27T14:20:51Z", - "updated_at": "2025-04-07T15:29:43Z", - "pushed_at": "2024-01-27T14:23:46Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 753010588, - "name": "CVE-2023-6875", - "full_name": "hatlesswizard\/CVE-2023-6875", - "owner": { - "login": "hatlesswizard", - "id": 123577653, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123577653?v=4", - "html_url": "https:\/\/github.com\/hatlesswizard", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hatlesswizard\/CVE-2023-6875", - "description": "CVE-2023-6875 exploit written for Xakep.Ru", - "fork": false, - "created_at": "2024-02-05T09:44:35Z", - "updated_at": "2025-09-15T18:49:48Z", - "pushed_at": "2024-02-05T10:14:44Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6895.json b/2023/CVE-2023-6895.json deleted file mode 100644 index c5a9aaad47..0000000000 --- a/2023/CVE-2023-6895.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 744508630, - "name": "CVE-2023-6895", - "full_name": "FuBoLuSec\/CVE-2023-6895", - "owner": { - "login": "FuBoLuSec", - "id": 156916644, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156916644?v=4", - "html_url": "https:\/\/github.com\/FuBoLuSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FuBoLuSec\/CVE-2023-6895", - "description": null, - "fork": false, - "created_at": "2024-01-17T12:53:47Z", - "updated_at": "2026-05-15T23:04:40Z", - "pushed_at": "2024-01-21T07:39:36Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 754039197, - "name": "CVE-2023-6895", - "full_name": "nles-crt\/CVE-2023-6895", - "owner": { - "login": "nles-crt", - "id": 61862786, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61862786?v=4", - "html_url": "https:\/\/github.com\/nles-crt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nles-crt\/CVE-2023-6895", - "description": null, - "fork": false, - "created_at": "2024-02-07T09:28:10Z", - "updated_at": "2024-02-17T05:16:07Z", - "pushed_at": "2024-02-07T09:32:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6931.json b/2023/CVE-2023-6931.json deleted file mode 100644 index 1660a94d41..0000000000 --- a/2023/CVE-2023-6931.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 912223220, - "name": "CVE-2023-6931", - "full_name": "K0n9-log\/CVE-2023-6931", - "owner": { - "login": "K0n9-log", - "id": 102219883, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102219883?v=4", - "html_url": "https:\/\/github.com\/K0n9-log", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/K0n9-log\/CVE-2023-6931", - "description": "CVE-2023-6931 kernel panic PoC", - "fork": false, - "created_at": "2025-01-05T00:28:28Z", - "updated_at": "2025-12-12T16:28:23Z", - "pushed_at": "2025-01-06T19:31:35Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6933.json b/2023/CVE-2023-6933.json deleted file mode 100644 index 2d984feeae..0000000000 --- a/2023/CVE-2023-6933.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 749563403, - "name": "CVE-2023-6933", - "full_name": "w2xim3\/CVE-2023-6933", - "owner": { - "login": "w2xim3", - "id": 91914344, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91914344?v=4", - "html_url": "https:\/\/github.com\/w2xim3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/w2xim3\/CVE-2023-6933", - "description": "Introduction to CVE-2023-6933 Vulnerability", - "fork": false, - "created_at": "2024-01-28T23:16:53Z", - "updated_at": "2024-01-29T02:26:33Z", - "pushed_at": "2024-01-29T02:34:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1061731334, - "name": "vulnerable-bsr-lab-CVE-2023-6933", - "full_name": "Trex96\/vulnerable-bsr-lab-CVE-2023-6933", - "owner": { - "login": "Trex96", - "id": 95542691, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95542691?v=4", - "html_url": "https:\/\/github.com\/Trex96", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trex96\/vulnerable-bsr-lab-CVE-2023-6933", - "description": null, - "fork": false, - "created_at": "2025-09-22T10:01:10Z", - "updated_at": "2025-09-23T09:33:47Z", - "pushed_at": "2025-09-23T09:29:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-6985.json b/2023/CVE-2023-6985.json deleted file mode 100644 index 5044bfd80d..0000000000 --- a/2023/CVE-2023-6985.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 749919472, - "name": "CVE-2023-6985", - "full_name": "RandomRobbieBF\/CVE-2023-6985", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-6985", - "description": "10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation\/Activation Description", - "fork": false, - "created_at": "2024-01-29T16:51:53Z", - "updated_at": "2024-07-11T16:39:17Z", - "pushed_at": "2024-01-29T16:54:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ai-assistant-by-10web", - "cve-2023-6985", - "wordpress" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-7016.json b/2023/CVE-2023-7016.json deleted file mode 100644 index 0699ae358a..0000000000 --- a/2023/CVE-2023-7016.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 764138202, - "name": "CVE-2023-7016-POC", - "full_name": "ewilded\/CVE-2023-7016-POC", - "owner": { - "login": "ewilded", - "id": 1158719, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1158719?v=4", - "html_url": "https:\/\/github.com\/ewilded", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ewilded\/CVE-2023-7016-POC", - "description": "POC for the flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows that allows an attacker to execute code at a SYSTEM level via local access.", - "fork": false, - "created_at": "2024-02-27T14:48:19Z", - "updated_at": "2025-08-05T08:08:10Z", - "pushed_at": "2024-02-27T14:50:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-7024.json b/2023/CVE-2023-7024.json deleted file mode 100644 index 7ce7a3ae7c..0000000000 --- a/2023/CVE-2023-7024.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 1091451305, - "name": "chrome-emergency-update", - "full_name": "aka76bm\/chrome-emergency-update", - "owner": { - "login": "aka76bm", - "id": 233129553, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233129553?v=4", - "html_url": "https:\/\/github.com\/aka76bm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aka76bm\/chrome-emergency-update", - "description": "Emergency Chrome update information and tools for CVE-2023-7024 and other critical vulnerabilities", - "fork": false, - "created_at": "2025-11-07T03:13:22Z", - "updated_at": "2025-11-07T03:21:35Z", - "pushed_at": "2025-11-07T03:13:23Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1091454683, - "name": "google-chrome-emergency-update", - "full_name": "aka76bm\/google-chrome-emergency-update", - "owner": { - "login": "aka76bm", - "id": 233129553, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233129553?v=4", - "html_url": "https:\/\/github.com\/aka76bm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aka76bm\/google-chrome-emergency-update", - "description": "Emergency Chrome update information and tools for CVE-2023-7024 and other critical vulnerabilities", - "fork": false, - "created_at": "2025-11-07T03:22:11Z", - "updated_at": "2025-11-07T03:26:23Z", - "pushed_at": "2025-11-07T03:22:14Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-7028.json b/2023/CVE-2023-7028.json deleted file mode 100644 index 842eb95998..0000000000 --- a/2023/CVE-2023-7028.json +++ /dev/null @@ -1,401 +0,0 @@ -[ - { - "id": 744835323, - "name": "CVE-2023-7028", - "full_name": "yoryio\/CVE-2023-7028", - "owner": { - "login": "yoryio", - "id": 134471901, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134471901?v=4", - "html_url": "https:\/\/github.com\/yoryio", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yoryio\/CVE-2023-7028", - "description": "Exploit for CVE-2023-7028 - GitLab CE\/EE", - "fork": false, - "created_at": "2024-01-18T05:17:00Z", - "updated_at": "2024-12-19T04:12:19Z", - "pushed_at": "2024-12-19T04:12:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2023-7028", - "gitlab" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747135442, - "name": "CVE-2023-7028-Account-Take-Over-Gitlab", - "full_name": "Shimon03\/CVE-2023-7028-Account-Take-Over-Gitlab", - "owner": { - "login": "Shimon03", - "id": 78235187, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78235187?v=4", - "html_url": "https:\/\/github.com\/Shimon03", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Shimon03\/CVE-2023-7028-Account-Take-Over-Gitlab", - "description": null, - "fork": false, - "created_at": "2024-01-23T10:37:07Z", - "updated_at": "2024-01-23T11:01:04Z", - "pushed_at": "2024-01-23T11:00:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 747356855, - "name": "CVE-2023-7028", - "full_name": "thanhlam-attt\/CVE-2023-7028", - "owner": { - "login": "thanhlam-attt", - "id": 79523444, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79523444?v=4", - "html_url": "https:\/\/github.com\/thanhlam-attt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thanhlam-attt\/CVE-2023-7028", - "description": null, - "fork": false, - "created_at": "2024-01-23T19:11:11Z", - "updated_at": "2024-05-05T02:05:02Z", - "pushed_at": "2024-01-23T19:22:58Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 748113457, - "name": "CVE-2023-7028-Docker", - "full_name": "Trackflaw\/CVE-2023-7028-Docker", - "owner": { - "login": "Trackflaw", - "id": 78696986, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78696986?v=4", - "html_url": "https:\/\/github.com\/Trackflaw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Trackflaw\/CVE-2023-7028-Docker", - "description": "Repository to install CVE-2023-7028 vulnerable Gitlab instance", - "fork": false, - "created_at": "2024-01-25T09:56:00Z", - "updated_at": "2026-05-26T09:28:53Z", - "pushed_at": "2024-01-25T10:18:25Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 748516354, - "name": "CVE-2023-7028", - "full_name": "mochammadrafi\/CVE-2023-7028", - "owner": { - "login": "mochammadrafi", - "id": 73122628, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73122628?v=4", - "html_url": "https:\/\/github.com\/mochammadrafi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mochammadrafi\/CVE-2023-7028", - "description": "Python Code for Exploit Automation CVE-2023-7028", - "fork": false, - "created_at": "2024-01-26T06:29:34Z", - "updated_at": "2024-01-26T06:32:54Z", - "pushed_at": "2024-01-26T06:32:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 749490677, - "name": "gitlab-exploit", - "full_name": "hackeremmen\/gitlab-exploit", - "owner": { - "login": "hackeremmen", - "id": 97889952, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97889952?v=4", - "html_url": "https:\/\/github.com\/hackeremmen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hackeremmen\/gitlab-exploit", - "description": "GitLab CVE-2023-7028", - "fork": false, - "created_at": "2024-01-28T18:23:31Z", - "updated_at": "2024-01-29T03:26:47Z", - "pushed_at": "2024-01-28T18:24:46Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 833605581, - "name": "CVE-2023-7028", - "full_name": "soltanali0\/CVE-2023-7028", - "owner": { - "login": "soltanali0", - "id": 87374678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4", - "html_url": "https:\/\/github.com\/soltanali0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/soltanali0\/CVE-2023-7028", - "description": "Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.", - "fork": false, - "created_at": "2024-07-25T11:39:01Z", - "updated_at": "2024-07-25T12:26:04Z", - "pushed_at": "2024-07-25T12:25:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 845342869, - "name": "CVE-2023-7028", - "full_name": "gh-ost00\/CVE-2023-7028", - "owner": { - "login": "gh-ost00", - "id": 153366162, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153366162?v=4", - "html_url": "https:\/\/github.com\/gh-ost00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gh-ost00\/CVE-2023-7028", - "description": "CVE-2023-7028 POC && Exploit", - "fork": false, - "created_at": "2024-08-21T04:14:55Z", - "updated_at": "2024-12-21T06:40:31Z", - "pushed_at": "2024-08-21T04:16:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 933940357, - "name": "CVE-2023-7028", - "full_name": "sariamubeen\/CVE-2023-7028", - "owner": { - "login": "sariamubeen", - "id": 84678833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84678833?v=4", - "html_url": "https:\/\/github.com\/sariamubeen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sariamubeen\/CVE-2023-7028", - "description": null, - "fork": false, - "created_at": "2025-02-17T02:15:26Z", - "updated_at": "2026-04-06T13:35:11Z", - "pushed_at": "2025-02-17T02:17:05Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 956834324, - "name": "CVE-2023-7028-GitLab", - "full_name": "Sornphut\/CVE-2023-7028-GitLab", - "owner": { - "login": "Sornphut", - "id": 115157342, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115157342?v=4", - "html_url": "https:\/\/github.com\/Sornphut", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sornphut\/CVE-2023-7028-GitLab", - "description": null, - "fork": false, - "created_at": "2025-03-29T00:11:29Z", - "updated_at": "2025-03-29T00:22:45Z", - "pushed_at": "2025-03-29T00:17:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1023616269, - "name": "CVE-2023-7028", - "full_name": "szybnev\/CVE-2023-7028", - "owner": { - "login": "szybnev", - "id": 32132485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32132485?v=4", - "html_url": "https:\/\/github.com\/szybnev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/szybnev\/CVE-2023-7028", - "description": "This FORK of repository presents a proof-of-concept of CVE-2023-7028. I am only improve exploit usage", - "fork": false, - "created_at": "2025-07-21T12:34:29Z", - "updated_at": "2026-03-30T10:20:13Z", - "pushed_at": "2025-07-21T12:38:05Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1032661315, - "name": "Exploiting-GitLab-CVE-2023-7028", - "full_name": "KameliaZaman\/Exploiting-GitLab-CVE-2023-7028", - "owner": { - "login": "KameliaZaman", - "id": 44264891, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44264891?v=4", - "html_url": "https:\/\/github.com\/KameliaZaman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KameliaZaman\/Exploiting-GitLab-CVE-2023-7028", - "description": "Penetration test targeting CVE-2023-7028", - "fork": false, - "created_at": "2025-08-05T16:21:31Z", - "updated_at": "2025-08-05T16:46:32Z", - "pushed_at": "2025-08-05T16:46:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-7231.json b/2023/CVE-2023-7231.json deleted file mode 100644 index 0988d5874b..0000000000 --- a/2023/CVE-2023-7231.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 979810990, - "name": "CVE-2023-7231", - "full_name": "BBO513\/CVE-2023-7231", - "owner": { - "login": "BBO513", - "id": 175456472, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175456472?v=4", - "html_url": "https:\/\/github.com\/BBO513", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BBO513\/CVE-2023-7231", - "description": "PoC and Disclosure for CVE-2023-7231 – Memcached Gopher RCE chain", - "fork": false, - "created_at": "2025-05-08T05:28:29Z", - "updated_at": "2025-05-27T10:24:17Z", - "pushed_at": "2025-05-27T10:24:14Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2023/CVE-2023-7261.json b/2023/CVE-2023-7261.json deleted file mode 100644 index d3787ead38..0000000000 --- a/2023/CVE-2023-7261.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 888744283, - "name": "CVE-2023-7261", - "full_name": "zerozenxlabs\/CVE-2023-7261", - "owner": { - "login": "zerozenxlabs", - "id": 18348468, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18348468?v=4", - "html_url": "https:\/\/github.com\/zerozenxlabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zerozenxlabs\/CVE-2023-7261", - "description": "Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability", - "fork": false, - "created_at": "2024-11-14T23:41:32Z", - "updated_at": "2026-03-10T10:26:58Z", - "pushed_at": "2024-11-14T23:55:57Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 7, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index b721e57232..46fb51c8a9 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-07-02T17:39:49Z", - "pushed_at": "2026-07-02T17:39:40Z", + "updated_at": "2026-07-02T23:23:47Z", + "pushed_at": "2026-07-02T23:23:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-27102.json b/2024/CVE-2024-27102.json index 68236449f1..8f2acbd28c 100644 --- a/2024/CVE-2024-27102.json +++ b/2024/CVE-2024-27102.json @@ -2,15 +2,15 @@ { "id": 1232308981, "name": "Magnohost-Vulnerabilities-pentest", - "full_name": "wyllowDev\/Magnohost-Vulnerabilities-pentest", + "full_name": "wyllowSec\/Magnohost-Vulnerabilities-pentest", "owner": { - "login": "wyllowDev", + "login": "wyllowSec", "id": 165512090, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/165512090?v=4", - "html_url": "https:\/\/github.com\/wyllowDev", + "html_url": "https:\/\/github.com\/wyllowSec", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/wyllowDev\/Magnohost-Vulnerabilities-pentest", + "html_url": "https:\/\/github.com\/wyllowSec\/Magnohost-Vulnerabilities-pentest", "description": "pentest on MagnoHost hosting provider & MeteorCloud infrastructure with 15+ servers mapped. Findings: MariaDB exposed on 6 servers, OmniDialer default creds → full access (103k CDR records), Wings CVE-2024-27102 (CVSS 9.9), Grafana 13.0.1 exposed, DMARC spoofing. Only curl_cffi + Python. Zero automated scanners.", "fork": false, "created_at": "2026-05-07T19:57:17Z", diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index 82d46e12aa..73790bcb59 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -47,10 +47,10 @@ "description": "A command-line utility to exploit Android Zygote injection (CVE-2024-31317)", "fork": false, "created_at": "2025-04-17T16:20:00Z", - "updated_at": "2026-04-28T20:35:45Z", + "updated_at": "2026-07-02T21:07:35Z", "pushed_at": "2025-12-17T19:16:05Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 21, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index df715c2c22..07fe0cdd28 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-07-02T17:42:57Z", - "pushed_at": "2026-07-02T17:42:52Z", + "updated_at": "2026-07-02T23:27:20Z", + "pushed_at": "2026-07-02T23:27:16Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-07-02T17:42:21Z", - "pushed_at": "2026-07-02T17:42:08Z", + "updated_at": "2026-07-02T23:26:28Z", + "pushed_at": "2026-07-02T23:26:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-15030.json b/2025/CVE-2025-15030.json index f7c10ea94e..eadfcaa6ec 100644 --- a/2025/CVE-2025-15030.json +++ b/2025/CVE-2025-15030.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-05-09T18:59:56Z", - "updated_at": "2026-05-28T12:39:35Z", - "pushed_at": "2026-05-20T01:19:12Z", + "updated_at": "2026-07-02T23:15:10Z", + "pushed_at": "2026-07-02T23:15:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 3e2afe5f7a..824d5fdff6 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -14,10 +14,10 @@ "description": "A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.", "fork": false, "created_at": "2025-05-09T07:18:55Z", - "updated_at": "2026-07-02T18:10:14Z", + "updated_at": "2026-07-02T21:01:37Z", "pushed_at": "2026-06-30T02:22:50Z", - "stargazers_count": 407, - "watchers_count": 407, + "stargazers_count": 408, + "watchers_count": 408, "has_discussions": false, "forks_count": 43, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 43, - "watchers": 407, + "watchers": 408, "score": 0, "subscribers_count": 12 }, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index b25a443e79..b6947e1808 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-07-02T18:28:06Z", - "pushed_at": "2026-07-02T18:28:01Z", + "updated_at": "2026-07-03T00:10:11Z", + "pushed_at": "2026-07-03T00:10:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index c1cab69060..e76bf9a889 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-07-02T16:56:32Z", - "pushed_at": "2026-07-02T16:56:28Z", + "updated_at": "2026-07-02T22:44:03Z", + "pushed_at": "2026-07-02T22:42:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 4ec031e27a..1a5cadc146 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -237,10 +237,10 @@ "description": "Local Privilege Escalation to Root via Sudo chroot in Linux", "fork": false, "created_at": "2025-07-02T07:20:20Z", - "updated_at": "2026-07-01T05:33:45Z", + "updated_at": "2026-07-02T22:24:40Z", "pushed_at": "2025-07-02T08:04:44Z", - "stargazers_count": 467, - "watchers_count": 467, + "stargazers_count": 466, + "watchers_count": 466, "has_discussions": false, "forks_count": 62, "allow_forking": true, @@ -263,7 +263,7 @@ ], "visibility": "public", "forks": 62, - "watchers": 467, + "watchers": 466, "score": 0, "subscribers_count": 3 }, @@ -1455,10 +1455,10 @@ "description": "This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.", "fork": false, "created_at": "2025-08-08T20:00:41Z", - "updated_at": "2026-07-02T18:05:32Z", + "updated_at": "2026-07-02T23:43:11Z", "pushed_at": "2026-07-02T15:30:05Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -1477,7 +1477,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 14, + "watchers": 16, "score": 0, "subscribers_count": 0 }, @@ -1595,8 +1595,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-07-02T16:57:24Z", - "pushed_at": "2026-07-02T16:57:17Z", + "updated_at": "2026-07-02T22:43:20Z", + "pushed_at": "2026-07-02T22:43:10Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json index 4294a2d81d..fd7b134a64 100644 --- a/2025/CVE-2025-48804.json +++ b/2025/CVE-2025-48804.json @@ -14,7 +14,7 @@ "description": "Downgrade attack for CVE-2025-48804", "fork": false, "created_at": "2026-04-30T13:05:30Z", - "updated_at": "2026-07-02T00:37:36Z", + "updated_at": "2026-07-02T19:30:57Z", "pushed_at": "2026-05-20T14:39:54Z", "stargazers_count": 215, "watchers_count": 215, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index d9ad0f0237..95fbe3415f 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-07-02T17:10:44Z", - "pushed_at": "2026-07-02T17:10:25Z", + "updated_at": "2026-07-02T22:55:39Z", + "pushed_at": "2026-07-02T22:55:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-07-02T17:11:05Z", - "pushed_at": "2026-07-02T17:11:01Z", + "updated_at": "2026-07-02T22:56:15Z", + "pushed_at": "2026-07-02T22:56:12Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index cfe0cb60c3..119daed71c 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-07-02T11:50:58Z", + "updated_at": "2026-07-02T23:24:19Z", "pushed_at": "2026-06-28T05:39:27Z", - "stargazers_count": 835, - "watchers_count": 835, + "stargazers_count": 836, + "watchers_count": 836, "has_discussions": false, "forks_count": 121, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 121, - "watchers": 835, + "watchers": 836, "score": 0, "subscribers_count": 19 } diff --git a/2025/CVE-2025-54322.json b/2025/CVE-2025-54322.json index 7f076a9c90..3163109c93 100644 --- a/2025/CVE-2025-54322.json +++ b/2025/CVE-2025-54322.json @@ -14,7 +14,7 @@ "description": "CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick", "fork": false, "created_at": "2025-12-26T20:54:08Z", - "updated_at": "2026-01-13T15:14:18Z", + "updated_at": "2026-07-02T21:30:25Z", "pushed_at": "2025-12-26T21:06:29Z", "stargazers_count": 8, "watchers_count": 8, diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 035a4fb7c8..6763f21814 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-07-02T16:52:24Z", - "pushed_at": "2026-07-02T16:52:20Z", + "updated_at": "2026-07-02T22:38:08Z", + "pushed_at": "2026-07-02T22:38:04Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index fc4b57dcdc..35fbbeb8c3 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-07-02T17:32:50Z", - "pushed_at": "2026-07-02T17:31:50Z", + "updated_at": "2026-07-02T23:16:29Z", + "pushed_at": "2026-07-02T23:16:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -99,8 +99,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-07-02T17:33:21Z", - "pushed_at": "2026-07-02T17:32:27Z", + "updated_at": "2026-07-02T23:17:01Z", + "pushed_at": "2026-07-02T23:16:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -148,8 +148,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-07-02T17:32:58Z", - "pushed_at": "2026-07-02T17:32:01Z", + "updated_at": "2026-07-02T23:16:44Z", + "pushed_at": "2026-07-02T23:16:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -11705,8 +11705,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-07-02T17:32:52Z", - "pushed_at": "2026-07-02T17:31:50Z", + "updated_at": "2026-07-02T23:16:54Z", + "pushed_at": "2026-07-02T23:16:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12223,8 +12223,8 @@ "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-07-02T17:36:18Z", - "pushed_at": "2026-07-02T17:35:53Z", + "updated_at": "2026-07-02T23:20:39Z", + "pushed_at": "2026-07-02T23:20:26Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-57819.json b/2025/CVE-2025-57819.json index abd1d12b1d..5aba1e2bf9 100644 --- a/2025/CVE-2025-57819.json +++ b/2025/CVE-2025-57819.json @@ -373,10 +373,10 @@ "description": null, "fork": false, "created_at": "2026-06-06T20:49:03Z", - "updated_at": "2026-06-26T09:02:13Z", + "updated_at": "2026-07-02T20:35:36Z", "pushed_at": "2026-06-06T21:39:52Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -387,7 +387,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 9, + "watchers": 11, "score": 0, "subscribers_count": 0 }, @@ -636,5 +636,52 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1287520733, + "name": "CVE-2025-57819", + "full_name": "K3ysTr0K3R\/CVE-2025-57819", + "owner": { + "login": "K3ysTr0K3R", + "id": 70909693, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", + "html_url": "https:\/\/github.com\/K3ysTr0K3R", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2025-57819", + "description": "CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE)", + "fork": false, + "created_at": "2026-07-02T19:07:36Z", + "updated_at": "2026-07-02T19:20:31Z", + "pushed_at": "2026-07-02T19:17:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2025-57819", + "ethical-hacking", + "exploit", + "exploit-poc", + "freepbx", + "freepbx-rce", + "hackthebox", + "htb", + "proof-of-concept", + "rce", + "rce-exploit", + "remote-code-execution", + "remote-code-execution-rce" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 79d8e930af..c32c4d0962 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-07-02T18:21:34Z", - "pushed_at": "2026-07-02T18:21:30Z", + "updated_at": "2026-07-03T00:04:22Z", + "pushed_at": "2026-07-03T00:04:18Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index daa1825727..7bba104e9c 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-07-02T17:33:45Z", - "pushed_at": "2026-07-02T17:32:56Z", + "updated_at": "2026-07-02T23:17:37Z", + "pushed_at": "2026-07-02T23:17:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-66680.json b/2025/CVE-2025-66680.json index 1a8b075d1b..ac6b0b6deb 100644 --- a/2025/CVE-2025-66680.json +++ b/2025/CVE-2025-66680.json @@ -47,8 +47,8 @@ "description": "Windows utility that uses the vulnerable WiseDelfile64.sys driver affected by CVE-2025-66680 to enable kernel-assisted file deletion.", "fork": false, "created_at": "2026-06-29T03:14:27Z", - "updated_at": "2026-07-02T17:08:56Z", - "pushed_at": "2026-07-02T17:08:36Z", + "updated_at": "2026-07-02T21:47:24Z", + "pushed_at": "2026-07-02T21:47:21Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-68613.json b/2025/CVE-2025-68613.json index 3a6aec3ddf..e6aa60d626 100644 --- a/2025/CVE-2025-68613.json +++ b/2025/CVE-2025-68613.json @@ -127,10 +127,10 @@ "description": "CVE-2025-68613: n8n RCE vulnerability exploit and documentation", "fork": false, "created_at": "2025-12-22T21:49:36Z", - "updated_at": "2026-06-29T06:10:26Z", + "updated_at": "2026-07-02T22:49:09Z", "pushed_at": "2025-12-23T08:54:59Z", - "stargazers_count": 100, - "watchers_count": 100, + "stargazers_count": 101, + "watchers_count": 101, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -148,7 +148,7 @@ ], "visibility": "public", "forks": 22, - "watchers": 100, + "watchers": 101, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index 3410a5827f..ff264e05d1 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-07-02T17:48:29Z", - "pushed_at": "2026-07-02T17:48:24Z", + "updated_at": "2026-07-02T23:32:43Z", + "pushed_at": "2026-07-02T23:32:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69212.json b/2025/CVE-2025-69212.json index c091806369..4ddde9cdf1 100644 --- a/2025/CVE-2025-69212.json +++ b/2025/CVE-2025-69212.json @@ -217,8 +217,8 @@ "description": "OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function.", "fork": false, "created_at": "2026-06-30T13:38:40Z", - "updated_at": "2026-07-02T10:26:33Z", - "pushed_at": "2026-07-02T10:26:29Z", + "updated_at": "2026-07-02T20:41:17Z", + "pushed_at": "2026-07-02T20:41:12Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-0740.json b/2026/CVE-2026-0740.json index df89ef0663..8f420a2f9b 100644 --- a/2026/CVE-2026-0740.json +++ b/2026/CVE-2026-0740.json @@ -76,5 +76,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1287683971, + "name": "CVE-2026-0740-mass", + "full_name": "BastianXploited\/CVE-2026-0740-mass", + "owner": { + "login": "BastianXploited", + "id": 249693409, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249693409?v=4", + "html_url": "https:\/\/github.com\/BastianXploited", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/BastianXploited\/CVE-2026-0740-mass", + "description": null, + "fork": false, + "created_at": "2026-07-02T23:18:38Z", + "updated_at": "2026-07-02T23:21:30Z", + "pushed_at": "2026-07-02T23:21:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-10520.json b/2026/CVE-2026-10520.json index 62a3b4796d..56ad4fe945 100644 --- a/2026/CVE-2026-10520.json +++ b/2026/CVE-2026-10520.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-09T21:55:07Z", - "updated_at": "2026-06-19T19:33:16Z", + "updated_at": "2026-07-02T19:36:06Z", "pushed_at": "2026-06-09T21:58:08Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-11450.json b/2026/CVE-2026-11450.json index 70c0be5f62..e52035a2cf 100644 --- a/2026/CVE-2026-11450.json +++ b/2026/CVE-2026-11450.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-13T09:11:02Z", - "updated_at": "2026-06-21T07:20:09Z", + "updated_at": "2026-07-03T00:21:35Z", "pushed_at": "2026-06-21T07:20:06Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-13768.json b/2026/CVE-2026-13768.json new file mode 100644 index 0000000000..bf51fe220c --- /dev/null +++ b/2026/CVE-2026-13768.json @@ -0,0 +1,45 @@ +[ + { + "id": 1287544643, + "name": "CVE-2026-13768", + "full_name": "MichaelAdamGroberman\/CVE-2026-13768", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-13768", + "description": "CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)", + "fork": false, + "created_at": "2026-07-02T19:38:56Z", + "updated_at": "2026-07-02T21:59:59Z", + "pushed_at": "2026-07-02T21:59:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "azure-iot-hub", + "cisa", + "cve", + "gardyn", + "hardcoded-credentials", + "iot-security", + "remote-code-execution", + "security-research", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 623fbe5583..bddcefdba7 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-07-02T18:04:39Z", - "pushed_at": "2026-07-02T18:04:28Z", + "updated_at": "2026-07-02T23:48:47Z", + "pushed_at": "2026-07-02T23:48:44Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-07-02T18:03:49Z", - "pushed_at": "2026-07-02T18:03:43Z", + "updated_at": "2026-07-02T23:47:58Z", + "pushed_at": "2026-07-02T23:47:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-20896.json b/2026/CVE-2026-20896.json index cb879d3425..71c8f3ac03 100644 --- a/2026/CVE-2026-20896.json +++ b/2026/CVE-2026-20896.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-07-02T00:22:55Z", - "updated_at": "2026-07-02T00:23:50Z", - "pushed_at": "2026-07-02T00:23:47Z", + "updated_at": "2026-07-03T00:57:58Z", + "pushed_at": "2026-07-03T00:57:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index 84c81d05bc..9629ac459e 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -59,8 +59,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-07-02T17:54:23Z", - "pushed_at": "2026-07-02T17:54:13Z", + "updated_at": "2026-07-02T23:38:31Z", + "pushed_at": "2026-07-02T23:38:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index d4d52a4c51..9e174e4a9d 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-07-02T18:23:37Z", - "pushed_at": "2026-07-02T18:23:33Z", + "updated_at": "2026-07-03T00:06:08Z", + "pushed_at": "2026-07-03T00:06:05Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index d1d2e551c9..04bfb4cd5d 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -14,8 +14,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-07-02T18:07:14Z", - "pushed_at": "2026-07-02T18:06:48Z", + "updated_at": "2026-07-02T23:51:07Z", + "pushed_at": "2026-07-02T23:51:04Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 1bfaafb837..8c82b61037 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-07-02T18:12:07Z", - "pushed_at": "2026-07-02T18:11:40Z", + "updated_at": "2026-07-02T23:55:46Z", + "pushed_at": "2026-07-02T23:55:43Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-25253.json b/2026/CVE-2026-25253.json index a670d9c60a..5fd05444a6 100644 --- a/2026/CVE-2026-25253.json +++ b/2026/CVE-2026-25253.json @@ -14,8 +14,8 @@ "description": "470 security tests for AI agent systems — MCP, A2A, x402\/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, CVE-2026-25253 reproduction. v4.4.2", "fork": false, "created_at": "2025-11-15T16:04:37Z", - "updated_at": "2026-07-02T07:53:23Z", - "pushed_at": "2026-07-02T18:39:55Z", + "updated_at": "2026-07-02T19:20:30Z", + "pushed_at": "2026-07-02T19:20:38Z", "stargazers_count": 20, "watchers_count": 20, "has_discussions": true, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index c7b66b040c..9357bbad06 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.", "fork": false, "created_at": "2026-04-29T23:29:14Z", - "updated_at": "2026-06-26T13:38:08Z", + "updated_at": "2026-07-02T19:37:22Z", "pushed_at": "2026-05-22T11:51:03Z", - "stargazers_count": 431, - "watchers_count": 431, + "stargazers_count": 432, + "watchers_count": 432, "has_discussions": true, "forks_count": 120, "allow_forking": true, @@ -74,7 +74,7 @@ ], "visibility": "public", "forks": 120, - "watchers": 431, + "watchers": 432, "score": 0, "subscribers_count": 2 }, @@ -651,8 +651,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-07-02T18:45:31Z", - "pushed_at": "2026-07-02T18:45:19Z", + "updated_at": "2026-07-03T00:25:47Z", + "pushed_at": "2026-07-03T00:25:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -700,8 +700,8 @@ "description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.", "fork": false, "created_at": "2026-05-06T09:49:14Z", - "updated_at": "2026-07-02T18:46:41Z", - "pushed_at": "2026-07-02T18:45:58Z", + "updated_at": "2026-07-03T00:26:40Z", + "pushed_at": "2026-07-03T00:26:37Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -2065,8 +2065,8 @@ "description": null, "fork": false, "created_at": "2026-06-01T18:53:44Z", - "updated_at": "2026-06-19T07:54:21Z", - "pushed_at": "2026-06-19T19:58:42Z", + "updated_at": "2026-07-02T20:51:53Z", + "pushed_at": "2026-07-02T20:51:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 59ef99c8c2..048d43157f 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -14,8 +14,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-07-02T18:24:58Z", - "pushed_at": "2026-07-02T18:24:53Z", + "updated_at": "2026-07-03T00:07:21Z", + "pushed_at": "2026-07-03T00:07:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-3227.json b/2026/CVE-2026-3227.json index 9bffd0ba65..bde98980db 100644 --- a/2026/CVE-2026-3227.json +++ b/2026/CVE-2026-3227.json @@ -19,7 +19,7 @@ "stargazers_count": 41, "watchers_count": 41, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, + "forks": 12, "watchers": 41, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-36027.json b/2026/CVE-2026-36027.json new file mode 100644 index 0000000000..3737d4418e --- /dev/null +++ b/2026/CVE-2026-36027.json @@ -0,0 +1,39 @@ +[ + { + "id": 1287540386, + "name": "Code-27-Companion-Hub-Exploits", + "full_name": "redr0nin\/Code-27-Companion-Hub-Exploits", + "owner": { + "login": "redr0nin", + "id": 39013067, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39013067?v=4", + "html_url": "https:\/\/github.com\/redr0nin", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/redr0nin\/Code-27-Companion-Hub-Exploits", + "description": "Proof of concept for CVE-2026-36027 and CVE-2026-36028", + "fork": false, + "created_at": "2026-07-02T19:32:51Z", + "updated_at": "2026-07-02T20:59:39Z", + "pushed_at": "2026-07-02T20:58:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-36027", + "cve-2026-36028", + "exploits" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index cfe0cb60c3..119daed71c 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-07-02T11:50:58Z", + "updated_at": "2026-07-02T23:24:19Z", "pushed_at": "2026-06-28T05:39:27Z", - "stargazers_count": 835, - "watchers_count": 835, + "stargazers_count": 836, + "watchers_count": 836, "has_discussions": false, "forks_count": 121, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 121, - "watchers": 835, + "watchers": 836, "score": 0, "subscribers_count": 19 } diff --git a/2026/CVE-2026-38751.json b/2026/CVE-2026-38751.json index 086a8a52e7..25222c77e3 100644 --- a/2026/CVE-2026-38751.json +++ b/2026/CVE-2026-38751.json @@ -14,10 +14,10 @@ "description": "OpenSTAManager-RCE-Exploit-CVE-2026-38751", "fork": false, "created_at": "2026-06-27T23:33:43Z", - "updated_at": "2026-07-02T17:16:09Z", + "updated_at": "2026-07-02T19:35:54Z", "pushed_at": "2026-06-30T17:33:18Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 0 }, @@ -97,5 +97,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1287537119, + "name": "CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC", + "full_name": "Mkps\/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC", + "owner": { + "login": "Mkps", + "id": 8045297, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8045297?v=4", + "html_url": "https:\/\/github.com\/Mkps", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Mkps\/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC", + "description": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the module update functionality, leading to arbitrary file upload and remote code execution (RCE).", + "fork": false, + "created_at": "2026-07-02T19:29:00Z", + "updated_at": "2026-07-02T20:08:51Z", + "pushed_at": "2026-07-02T20:08:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 2a4a8f1ea1..9bb691c401 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -258,8 +258,8 @@ "description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.", "fork": false, "created_at": "2026-05-06T18:08:48Z", - "updated_at": "2026-07-02T18:46:54Z", - "pushed_at": "2026-07-02T18:46:18Z", + "updated_at": "2026-07-03T00:26:49Z", + "pushed_at": "2026-07-03T00:26:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -576,10 +576,10 @@ "description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept", "fork": false, "created_at": "2026-06-28T07:13:52Z", - "updated_at": "2026-07-01T22:04:11Z", + "updated_at": "2026-07-02T20:36:41Z", "pushed_at": "2026-06-28T07:42:43Z", - "stargazers_count": 571, - "watchers_count": 571, + "stargazers_count": 572, + "watchers_count": 572, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -595,7 +595,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 571, + "watchers": 572, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 2ba35c96b7..c474199536 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -14,10 +14,10 @@ "description": "exploit for CVE-2026-42945", "fork": false, "created_at": "2026-05-12T23:05:32Z", - "updated_at": "2026-07-01T15:11:33Z", + "updated_at": "2026-07-02T23:55:37Z", "pushed_at": "2026-05-13T18:40:57Z", - "stargazers_count": 866, - "watchers_count": 866, + "stargazers_count": 867, + "watchers_count": 867, "has_discussions": false, "forks_count": 160, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 160, - "watchers": 866, + "watchers": 867, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index b01ecc7836..5f4e5fd130 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -83,44 +83,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1233896485, - "name": "dirty-frag-check", - "full_name": "haydenjames\/dirty-frag-check", - "owner": { - "login": "haydenjames", - "id": 6467408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6467408?v=4", - "html_url": "https:\/\/github.com\/haydenjames", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/haydenjames\/dirty-frag-check", - "description": "Read-only checker for CVE-2026-43284 \/ CVE-2026-43500 (Dirty Frag) Linux kernel local-root vulns", - "fork": false, - "created_at": "2026-05-09T13:46:16Z", - "updated_at": "2026-06-05T15:57:12Z", - "pushed_at": "2026-05-12T15:14:45Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-43284", - "cve-2026-43500", - "cve-scanning", - "dirty-frag" - ], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 0 - }, { "id": 1234352356, "name": "dirtyfrag-arm64", diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 85142d307a..4e29fd0a4a 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -19,7 +19,7 @@ "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 7, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-43503.json b/2026/CVE-2026-43503.json index 5009f7a070..75b07a60ba 100644 --- a/2026/CVE-2026-43503.json +++ b/2026/CVE-2026-43503.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2026-06-26T00:20:58Z", - "updated_at": "2026-06-30T06:51:19Z", + "updated_at": "2026-07-02T23:48:30Z", "pushed_at": "2026-06-26T00:22:35Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index 2ebac46269..a42f632c26 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -212,8 +212,8 @@ "description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.", "fork": false, "created_at": "2026-06-16T07:21:36Z", - "updated_at": "2026-07-02T15:17:01Z", - "pushed_at": "2026-07-02T15:14:25Z", + "updated_at": "2026-07-03T00:33:27Z", + "pushed_at": "2026-07-03T00:33:23Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-46331.json b/2026/CVE-2026-46331.json index 67f5dc55d6..d8268882be 100644 --- a/2026/CVE-2026-46331.json +++ b/2026/CVE-2026-46331.json @@ -14,12 +14,12 @@ "description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare", "fork": false, "created_at": "2026-06-17T04:09:56Z", - "updated_at": "2026-07-02T13:35:13Z", + "updated_at": "2026-07-03T00:52:08Z", "pushed_at": "2026-06-17T04:55:06Z", - "stargazers_count": 125, - "watchers_count": 125, + "stargazers_count": 126, + "watchers_count": 126, "has_discussions": false, - "forks_count": 40, + "forks_count": 41, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 40, - "watchers": 125, + "forks": 41, + "watchers": 126, "score": 0, "subscribers_count": 2 }, diff --git a/2026/CVE-2026-48558.json b/2026/CVE-2026-48558.json index e15f715f40..131761d9c4 100644 --- a/2026/CVE-2026-48558.json +++ b/2026/CVE-2026-48558.json @@ -14,10 +14,10 @@ "description": "SimpleHelp OIDC Authentication Bypass PoC", "fork": false, "created_at": "2026-07-02T16:11:50Z", - "updated_at": "2026-07-02T16:47:53Z", + "updated_at": "2026-07-03T00:11:27Z", "pushed_at": "2026-07-02T16:47:50Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-51947.json b/2026/CVE-2026-51947.json index e3f8b91508..9a88b948bd 100644 --- a/2026/CVE-2026-51947.json +++ b/2026/CVE-2026-51947.json @@ -14,8 +14,8 @@ "description": "Pivotal CRM's patch for an initial deserialization vulnerability was incomplete. The fix switched from BinaryFormatter to JSON.NET but left TypeNameHandling set to 4 without implementing SerializationBinder, allowing attackers to execute arbitrary code through malicious $type payloads. Fixed in 6.6.5.10 and Patch_CWE502_20260316.zip", "fork": false, "created_at": "2026-07-01T04:53:27Z", - "updated_at": "2026-07-01T05:13:30Z", - "pushed_at": "2026-07-01T05:13:26Z", + "updated_at": "2026-07-02T22:12:29Z", + "pushed_at": "2026-07-02T22:12:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-52217.json b/2026/CVE-2026-52217.json new file mode 100644 index 0000000000..2213837b72 --- /dev/null +++ b/2026/CVE-2026-52217.json @@ -0,0 +1,35 @@ +[ + { + "id": 1287565357, + "name": "CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR", + "full_name": "teteco\/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR", + "owner": { + "login": "teteco", + "id": 110571215, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110571215?v=4", + "html_url": "https:\/\/github.com\/teteco", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/teteco\/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR", + "description": "The VTEX Checkout Service exposes OrderForm data through the endpoints `\/api\/checkout\/pub\/orderForm\/{orderFormId}` and `\/attachments\/*`. These endpoints do not validate the tenant (store account) of the authenticated session against the ownership of the requested OrderForm.", + "fork": false, + "created_at": "2026-07-02T20:06:01Z", + "updated_at": "2026-07-02T20:23:12Z", + "pushed_at": "2026-07-02T20:23:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2022/CVE-2022-29380.json b/2026/CVE-2026-54424.json similarity index 53% rename from 2022/CVE-2022-29380.json rename to 2026/CVE-2026-54424.json index 00d2a57fc4..b8b591ea0d 100644 --- a/2022/CVE-2022-29380.json +++ b/2026/CVE-2026-54424.json @@ -1,21 +1,21 @@ [ { - "id": 880923099, - "name": "CVE-2022-29380", - "full_name": "OpenXP-Research\/CVE-2022-29380", + "id": 1233226886, + "name": "CVE-2026-54424", + "full_name": "tomadimitrie\/CVE-2026-54424", "owner": { - "login": "OpenXP-Research", - "id": 124332420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124332420?v=4", - "html_url": "https:\/\/github.com\/OpenXP-Research", + "login": "tomadimitrie", + "id": 34240434, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34240434?v=4", + "html_url": "https:\/\/github.com\/tomadimitrie", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/OpenXP-Research\/CVE-2022-29380", - "description": "2022-29380", + "html_url": "https:\/\/github.com\/tomadimitrie\/CVE-2026-54424", + "description": "Exploiting Parsec for Windows to gain SYSTEM privileges", "fork": false, - "created_at": "2024-10-30T15:50:46Z", - "updated_at": "2024-10-30T15:51:46Z", - "pushed_at": "2024-10-30T15:51:37Z", + "created_at": "2026-05-08T18:21:33Z", + "updated_at": "2026-07-02T22:17:37Z", + "pushed_at": "2026-07-02T22:17:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-54477.json b/2026/CVE-2026-54477.json new file mode 100644 index 0000000000..5a75f6cd14 --- /dev/null +++ b/2026/CVE-2026-54477.json @@ -0,0 +1,45 @@ +[ + { + "id": 1287575291, + "name": "CVE-2026-54477", + "full_name": "MichaelAdamGroberman\/CVE-2026-54477", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-54477", + "description": "CVE-2026-54477: Admin Panel Missing Security Headers (clickjacking\/XSS) - Gardyn (ICSA-26-183-03)", + "fork": false, + "created_at": "2026-07-02T20:18:29Z", + "updated_at": "2026-07-02T22:00:01Z", + "pushed_at": "2026-07-02T21:59:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cisa", + "clickjacking", + "coordinated-disclosure", + "cve", + "gardyn", + "iot-security", + "security-research", + "vulnerability-disclosure", + "xss" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-55200.json b/2026/CVE-2026-55200.json index a477f899f3..7d2dba1a8e 100644 --- a/2026/CVE-2026-55200.json +++ b/2026/CVE-2026-55200.json @@ -80,8 +80,8 @@ "description": null, "fork": false, "created_at": "2026-07-02T00:19:23Z", - "updated_at": "2026-07-02T00:22:00Z", - "pushed_at": "2026-07-02T00:21:57Z", + "updated_at": "2026-07-03T00:55:30Z", + "pushed_at": "2026-07-03T00:55:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-55726.json b/2026/CVE-2026-55726.json new file mode 100644 index 0000000000..5f334063f8 --- /dev/null +++ b/2026/CVE-2026-55726.json @@ -0,0 +1,44 @@ +[ + { + "id": 1287575250, + "name": "CVE-2026-55726", + "full_name": "MichaelAdamGroberman\/CVE-2026-55726", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-55726", + "description": "CVE-2026-55726: Publicly Listable Azure Blob Storage Container (device logs) - Gardyn (ICSA-26-183-03)", + "fork": false, + "created_at": "2026-07-02T20:18:26Z", + "updated_at": "2026-07-02T22:00:00Z", + "pushed_at": "2026-07-02T21:59:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "azure-blob-storage", + "cisa", + "coordinated-disclosure", + "cve", + "gardyn", + "iot-security", + "security-research", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-56782.json b/2026/CVE-2026-56782.json index 3f1a407dd6..1864ce4cf0 100644 --- a/2026/CVE-2026-56782.json +++ b/2026/CVE-2026-56782.json @@ -40,5 +40,45 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1287681293, + "name": "CVE-2026-56782", + "full_name": "thecodeb0ss\/CVE-2026-56782", + "owner": { + "login": "thecodeb0ss", + "id": 298498924, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/298498924?v=4", + "html_url": "https:\/\/github.com\/thecodeb0ss", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thecodeb0ss\/CVE-2026-56782", + "description": "Gorse < 0.5.10 contains an authentication bypass caused by empty admin_api_key in \/api\/dump and \/api\/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty admin_api_key configuration.", + "fork": false, + "created_at": "2026-07-02T23:12:44Z", + "updated_at": "2026-07-02T23:14:38Z", + "pushed_at": "2026-07-02T23:14:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "codeb0ss", + "cve-2026-56782", + "cve-2026-567820-poc", + "gorse", + "realcodeb0ss", + "thecodeb0ss" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-6307.json b/2026/CVE-2026-6307.json index 6f82eec6d6..561c20af08 100644 --- a/2026/CVE-2026-6307.json +++ b/2026/CVE-2026-6307.json @@ -14,10 +14,10 @@ "description": "Google Chrome CVE-2026-6307 PoC", "fork": false, "created_at": "2026-07-01T13:23:25Z", - "updated_at": "2026-07-02T15:06:24Z", + "updated_at": "2026-07-03T00:55:35Z", "pushed_at": "2026-07-01T13:32:36Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 18, + "watchers": 23, "score": 0, "subscribers_count": 0 }, @@ -47,12 +47,12 @@ "description": "CVE-2026-6307 PoC: Longinus - 2 Boundaries in One Bug https:\/\/nebusec.ai\/research\/v8-cve-2026-6307-writeup\/)", "fork": false, "created_at": "2026-07-01T17:00:30Z", - "updated_at": "2026-07-02T18:38:45Z", + "updated_at": "2026-07-02T23:37:09Z", "pushed_at": "2026-07-01T18:18:02Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 1, + "forks": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/README.md b/README.md index fb9eb84d2d..36b779ee2f 100644 --- a/README.md +++ b/README.md @@ -92,6 +92,7 @@ - [whattheslime/CVE-2026-0740](https://github.com/whattheslime/CVE-2026-0740) - [a24ac1/CVE-2026-0740](https://github.com/a24ac1/CVE-2026-0740) +- [BastianXploited/CVE-2026-0740-mass](https://github.com/BastianXploited/CVE-2026-0740-mass) ### CVE-2026-0745 (2026-02-14) @@ -1108,6 +1109,13 @@ - [0xBlackash/CVE-2026-12485](https://github.com/0xBlackash/CVE-2026-12485) +### CVE-2026-13768 (2026-07-02) + +Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user's network. + + +- [MichaelAdamGroberman/CVE-2026-13768](https://github.com/MichaelAdamGroberman/CVE-2026-13768) + ### CVE-2026-20127 (2026-02-25) A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&nbsp; @@ -2185,6 +2193,9 @@ - [PwnOnu/T3-Technology-CPE-Advisories](https://github.com/PwnOnu/T3-Technology-CPE-Advisories) +### CVE-2026-36027 +- [redr0nin/Code-27-Companion-Hub-Exploits](https://github.com/redr0nin/Code-27-Companion-Hub-Exploits) + ### CVE-2026-36213 (2026-06-15) An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component. @@ -2361,6 +2372,7 @@ - [b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751](https://github.com/b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751) - [Why-Shell/CVE-2026-38751](https://github.com/Why-Shell/CVE-2026-38751) - [hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751-](https://github.com/hackthem/OpenSTAManager_RCE_Exploit-CVE-2026-38751-) +- [Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC](https://github.com/Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC) ### CVE-2026-38763 - [D7EAD/CVE-2026-38763](https://github.com/D7EAD/CVE-2026-38763) @@ -2849,7 +2861,6 @@ - [mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4](https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4) - [suominen/CVE-2026-43284](https://github.com/suominen/CVE-2026-43284) -- [haydenjames/dirty-frag-check](https://github.com/haydenjames/dirty-frag-check) - [linnemanlabs/dirtyfrag-arm64](https://github.com/linnemanlabs/dirtyfrag-arm64) - [FrosterDL/CVE-2026-43284](https://github.com/FrosterDL/CVE-2026-43284) - [ChernStepanov/DirtyFrag-for-dummies](https://github.com/ChernStepanov/DirtyFrag-for-dummies) @@ -3772,6 +3783,9 @@ - [timtimxs/CVE-2026-51947-Advisory](https://github.com/timtimxs/CVE-2026-51947-Advisory) +### CVE-2026-52217 +- [teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR](https://github.com/teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR) + ### CVE-2026-52813 (2026-06-24) Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary locations on the filesystem. By creating nested structure of Git repositories, one can overwrite the other's hooks configuration to result in Remote Code Execution (RCE). This vulnerability is fixed in 0.14.3. @@ -3872,6 +3886,12 @@ - [mahfuzreham/litespeed-cpanel-cve-2026-54420-fix](https://github.com/mahfuzreham/litespeed-cpanel-cve-2026-54420-fix) - [fevar54/CVE-2026-54420-LiteSpeed-Symlink-Exploit](https://github.com/fevar54/CVE-2026-54420-LiteSpeed-Symlink-Exploit) +### CVE-2026-54424 +- [tomadimitrie/CVE-2026-54424](https://github.com/tomadimitrie/CVE-2026-54424) + +### CVE-2026-54477 +- [MichaelAdamGroberman/CVE-2026-54477](https://github.com/MichaelAdamGroberman/CVE-2026-54477) + ### CVE-2026-54596 - [iltosec/CVE-2026-54596](https://github.com/iltosec/CVE-2026-54596) @@ -3935,6 +3955,9 @@ ### CVE-2026-55584 - [mirackayikci/CVE-2026-55584](https://github.com/mirackayikci/CVE-2026-55584) +### CVE-2026-55726 +- [MichaelAdamGroberman/CVE-2026-55726](https://github.com/MichaelAdamGroberman/CVE-2026-55726) + ### CVE-2026-56011 (2026-06-26) Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. @@ -3962,6 +3985,7 @@ - [BiiTts/CVE-2026-56782-Gorse-Auth-Bypass](https://github.com/BiiTts/CVE-2026-56782-Gorse-Auth-Bypass) +- [thecodeb0ss/CVE-2026-56782](https://github.com/thecodeb0ss/CVE-2026-56782) ### CVE-2026-58116 (2026-06-30) @@ -13330,6 +13354,7 @@ - [ozcanpng/CVE-2025-57819-FreePBX-RCE2Root](https://github.com/ozcanpng/CVE-2025-57819-FreePBX-RCE2Root) - [JazzTheRabbit/FreePBX-SQLi-RCE](https://github.com/JazzTheRabbit/FreePBX-SQLi-RCE) - [Its1Zero/cve-2025-57819-exploit](https://github.com/Its1Zero/cve-2025-57819-exploit) +- [K3ysTr0K3R/CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) ### CVE-2025-57833 (2025-09-03) @@ -20966,7 +20991,7 @@ Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potentially be used to access files and directories on the host system. The full scope of impact is exactly unknown, but reading files outside of a server's base directory (sandbox root) is possible. In order to use this exploit, an attacker must have an existing "server" allocated and controlled by Wings. Details on the exploitation of this vulnerability are embargoed until March 27th, 2024 at 18:00 UTC. In order to mitigate this vulnerability, a full rewrite of the entire server filesystem was necessary. Because of this, the size of the patch is massive, however effort was made to reduce the amount of breaking changes. Users are advised to update to version 1.11.9. There are no known workarounds for this vulnerability. -- [wyllowDev/Magnohost-Vulnerabilities-pentest](https://github.com/wyllowDev/Magnohost-Vulnerabilities-pentest) +- [wyllowSec/Magnohost-Vulnerabilities-pentest](https://github.com/wyllowSec/Magnohost-Vulnerabilities-pentest) ### CVE-2024-27130 (2024-05-21) @@ -26832,13 +26857,6 @@ - [twwd/CVE-2023-0264](https://github.com/twwd/CVE-2023-0264) -### CVE-2023-0266 (2023-01-30) - -A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e - - -- [SeanHeelan/claude_opus_cve_2023_0266](https://github.com/SeanHeelan/claude_opus_cve_2023_0266) - ### CVE-2023-0297 (2023-01-14) Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. @@ -26848,8 +26866,6 @@ - [Small-ears/CVE-2023-0297](https://github.com/Small-ears/CVE-2023-0297) - [hazeyez/CVE-2023-0297](https://github.com/hazeyez/CVE-2023-0297) - [overgrowncarrot1/CVE-2023-0297](https://github.com/overgrowncarrot1/CVE-2023-0297) -- [btar1gan/exploit_CVE-2023-0297](https://github.com/btar1gan/exploit_CVE-2023-0297) -- [S4MY9/CVE-2023-0297](https://github.com/S4MY9/CVE-2023-0297) ### CVE-2023-0315 (2023-01-16) @@ -26871,30 +26887,11 @@ - [sxlmnwb/CVE-2023-0386](https://github.com/sxlmnwb/CVE-2023-0386) - [Fanxiaoyao66/CVE-2023-0386](https://github.com/Fanxiaoyao66/CVE-2023-0386) - [puckiestyle/CVE-2023-0386](https://github.com/puckiestyle/CVE-2023-0386) -- [letsr00t/CVE-2023-0386](https://github.com/letsr00t/CVE-2023-0386) -- [churamanib/CVE-2023-0386](https://github.com/churamanib/CVE-2023-0386) -- [EstamelGG/CVE-2023-0386-libs](https://github.com/EstamelGG/CVE-2023-0386-libs) -- [orilevy8/cve-2023-0386](https://github.com/orilevy8/cve-2023-0386) -- [dragosbanica/CVE-2023-0386_POC](https://github.com/dragosbanica/CVE-2023-0386_POC) - [karimelsheikh1/HTB-TwoMillion-Writeup](https://github.com/karimelsheikh1/HTB-TwoMillion-Writeup) - [julianertle/CVE-2023-0386-CTF](https://github.com/julianertle/CVE-2023-0386-CTF) - [anxs3c/TwoMillion-Machine](https://github.com/anxs3c/TwoMillion-Machine) - [pwncone/CVE-2023-0386-OverlayFS](https://github.com/pwncone/CVE-2023-0386-OverlayFS) -### CVE-2023-0400 (2023-02-01) - -\nThe protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data.\n\n - - -- [pinpinsec/CVE-2023-0400](https://github.com/pinpinsec/CVE-2023-0400) - -### CVE-2023-0461 (2023-02-28) - -There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.\n\nThere is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.\n\nWhen CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.\n\nThe setsockopt TCP_ULP operation does not require any privilege.\n\nWe recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c - - -- [b1nhack/CVE-2023-0461](https://github.com/b1nhack/CVE-2023-0461) - ### CVE-2023-0464 (2023-03-22) A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function. @@ -26919,7 +26916,6 @@ - [Griffin-01/CVE-2023-0669](https://github.com/Griffin-01/CVE-2023-0669) - [yosef0x01/CVE-2023-0669-Analysis](https://github.com/yosef0x01/CVE-2023-0669-Analysis) - [Avento/CVE-2023-0669](https://github.com/Avento/CVE-2023-0669) -- [zakaria-laouani/cve-2023-0669-simulation](https://github.com/zakaria-laouani/cve-2023-0669-simulation) ### CVE-2023-0748 (2023-02-08) @@ -26952,9 +26948,6 @@ - [seifallahhomrani1/CVE-2023-0861-POC](https://github.com/seifallahhomrani1/CVE-2023-0861-POC) -### CVE-2023-422 -- [HusenjanDev/CVE-2023-422-Chamilo-LMS-RCE](https://github.com/HusenjanDev/CVE-2023-422-Chamilo-LMS-RCE) - ### CVE-2023-1112 (2023-03-01) Es wurde eine kritische Schwachstelle in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 für WordPress ausgemacht. Es geht dabei um eine nicht klar definierte Funktion der Datei admin-ajax.php. Durch Manipulation des Arguments upload_name mit unbekannten Daten kann eine relative path traversal-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. @@ -26969,23 +26962,6 @@ - [hh-hunter/ml-CVE-2023-1177](https://github.com/hh-hunter/ml-CVE-2023-1177) - [SpycioKon/CVE-2023-1177-rebuild](https://github.com/SpycioKon/CVE-2023-1177-rebuild) -- [saimahmed/MLflow-Vuln](https://github.com/saimahmed/MLflow-Vuln) -- [charlesgargasson/CVE-2023-1177](https://github.com/charlesgargasson/CVE-2023-1177) -- [paultheal1en/CVE-2023-1177-PoC-reproduce](https://github.com/paultheal1en/CVE-2023-1177-PoC-reproduce) - -### CVE-2023-1189 (2023-03-06) - -In WiseCleaner Wise Folder Hider 4.4.3.202 wurde eine problematische Schwachstelle ausgemacht. Das betrifft die Funktion 0x222400/0x222404/0x222410 in der Bibliothek WiseFs64.sys der Komponente IoControlCode Handler. Durch das Manipulieren mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Der Exploit steht zur öffentlichen Verfügung. - - -- [le0s1mba/CVE-2023-1189](https://github.com/le0s1mba/CVE-2023-1189) - -### CVE-2023-1206 (2023-06-30) - -A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%. - - -- [SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882](https://github.com/SpiralBL0CK/CVE-2023-1206-CVE-2025-40040-CVE-2024-49882) ### CVE-2023-1326 (2023-04-13) @@ -26993,9 +26969,6 @@ - [diego-tella/CVE-2023-1326-PoC](https://github.com/diego-tella/CVE-2023-1326-PoC) -- [Pol-Ruiz/CVE-2023-1326](https://github.com/Pol-Ruiz/CVE-2023-1326) -- [h3x0v3rl0rd/CVE-2023-1326](https://github.com/h3x0v3rl0rd/CVE-2023-1326) -- [cve-2024/CVE-2023-1326-PoC](https://github.com/cve-2024/CVE-2023-1326-PoC) ### CVE-2023-1337 (2023-03-10) @@ -27012,13 +26985,6 @@ - [Voyag3r-Security/CVE-2023-1389](https://github.com/Voyag3r-Security/CVE-2023-1389) - [werwolfz/CVE-2023-1389](https://github.com/werwolfz/CVE-2023-1389) -### CVE-2023-1405 (2024-01-16) - -The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present. - - -- [RandomRobbieBF/CVE-2023-1405](https://github.com/RandomRobbieBF/CVE-2023-1405) - ### CVE-2023-1430 (2023-06-09) The FluentCRM - Marketing Automation For WordPress plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 2.8.01 due to the use of an MD5 hash without a salt to control subscriptions. This makes it possible for unauthenticated attackers to unsubscribe users from lists and manage subscriptions, granted they gain access to any targeted subscribers email address. @@ -27046,13 +27012,6 @@ - [Decemberus/BugHub](https://github.com/Decemberus/BugHub) -### CVE-2023-1514 (2023-12-19) - -A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface. - - -- [wsx-rootdeef/CVE-2023-1514-SQL-Injection-Teampass-](https://github.com/wsx-rootdeef/CVE-2023-1514-SQL-Injection-Teampass-) - ### CVE-2023-1521 (2024-11-26) On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD.\n\n\nIf the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges. @@ -27060,16 +27019,6 @@ - [rubbxalc/CVE-2023-1521](https://github.com/rubbxalc/CVE-2023-1521) -### CVE-2023-1545 (2023-03-21) - -SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. - - -- [HarshRajSinghania/CVE-2023-1545-Exploit](https://github.com/HarshRajSinghania/CVE-2023-1545-Exploit) -- [zer0-dave/CVE-2023-1545-POC](https://github.com/zer0-dave/CVE-2023-1545-POC) -- [sternstundes/CVE-2023-1545-POC-python](https://github.com/sternstundes/CVE-2023-1545-POC-python) -- [gunzf0x/CVE-2023-1545](https://github.com/gunzf0x/CVE-2023-1545) - ### CVE-2023-1665 (2023-03-27) Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0. @@ -27094,8 +27043,6 @@ - [Chocapikk/CVE-2023-1698](https://github.com/Chocapikk/CVE-2023-1698) - [deIndra/CVE-2023-1698](https://github.com/deIndra/CVE-2023-1698) - [thedarknessdied/WAGO-CVE-2023-1698](https://github.com/thedarknessdied/WAGO-CVE-2023-1698) -- [X3RX3SSec/CVE-2023-1698](https://github.com/X3RX3SSec/CVE-2023-1698) -- [ibrahmsql/CVE-2023-1698](https://github.com/ibrahmsql/CVE-2023-1698) ### CVE-2023-1718 (2023-11-01) @@ -27111,14 +27058,6 @@ - [weizman/CVE-2023-1767](https://github.com/weizman/CVE-2023-1767) -### CVE-2023-1773 (2023-03-31) - -In Rockoa 2.3.2 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei webmainConfig.php der Komponente Configuration File Handler. Durch Beeinflussen mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. - - -- [CRONUS-Security/xinhu-v2.3.2](https://github.com/CRONUS-Security/xinhu-v2.3.2) -- [C1oudfL0w0/CVE-2023-1773-Exploit](https://github.com/C1oudfL0w0/CVE-2023-1773-Exploit) - ### CVE-2023-1829 (2023-04-12) A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.\nWe recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. @@ -27126,20 +27065,6 @@ - [lanleft/CVE-2023-1829](https://github.com/lanleft/CVE-2023-1829) -### CVE-2023-1874 (2023-04-12) - -The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wpda_role[]' parameter during a profile update. This requires the 'Enable role management' setting to be enabled for the site. - - -- [thomas-osgood/cve-2023-1874](https://github.com/thomas-osgood/cve-2023-1874) - -### CVE-2023-1999 (2023-06-20) - -There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. - - -- [Pazhanivelmani/webp_Android10_r33_CVE-2023-1999](https://github.com/Pazhanivelmani/webp_Android10_r33_CVE-2023-1999) - ### CVE-2023-2002 (2023-05-26) A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication. @@ -27160,7 +27085,6 @@ - [thatformat/Hvv2023](https://github.com/thatformat/Hvv2023) -- [druxter-x/PHP-CVE-2023-2023-2640-POC-Escalation](https://github.com/druxter-x/PHP-CVE-2023-2023-2640-POC-Escalation) ### CVE-2023-2024 (2023-05-18) @@ -27194,13 +27118,6 @@ - [0xn4d/poc-cve-xss-encoded-wp-inventory-manager-plugin](https://github.com/0xn4d/poc-cve-xss-encoded-wp-inventory-manager-plugin) -### CVE-2023-2163 (2023-09-20) - -Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe\ncode paths being incorrectly marked as safe, resulting in arbitrary read/write in\nkernel memory, lateral privilege escalation, and container escape. - - -- [letsr00t/CVE-2023-2163](https://github.com/letsr00t/CVE-2023-2163) - ### CVE-2023-2215 (2023-04-21) Es wurde eine kritische Schwachstelle in Campcodes Coffee Shop POS System 1.0 entdeckt. Es betrifft eine unbekannte Funktion der Datei /admin/user/manage_user.php. Mittels Manipulieren des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. @@ -27208,35 +27125,12 @@ - [zwxxb/CVE-2023-2215](https://github.com/zwxxb/CVE-2023-2215) -### CVE-2023-2245 (2023-04-22) - -In hansunCMS 1.4.3 wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Es geht um eine nicht näher bekannte Funktion der Datei /ueditor/net/controller.ashx?action=catchimage. Durch die Manipulation mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. - - -- [tpdlshdmlrkfmcla/2023-2245](https://github.com/tpdlshdmlrkfmcla/2023-2245) - ### CVE-2023-2255 (2023-05-25) Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3. - [elweth-sec/CVE-2023-2255](https://github.com/elweth-sec/CVE-2023-2255) -- [SaintMichae64/CVE-2023-2255](https://github.com/SaintMichae64/CVE-2023-2255) -- [G4sp4rCS/CVE-2023-2255](https://github.com/G4sp4rCS/CVE-2023-2255) - -### CVE-2023-2375 (2023-04-28) - -Eine kritische Schwachstelle wurde in Ubiquiti EdgeRouter X bis 2.0.9-hotfix.6 gefunden. Es geht hierbei um eine nicht näher spezifizierte Funktion der Komponente Web Management Interface. Mittels Manipulieren des Arguments src mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. - - -- [0x0jr/HTB-Devvortex-CVE-2023-2375-PoC](https://github.com/0x0jr/HTB-Devvortex-CVE-2023-2375-PoC) - -### CVE-2023-2437 (2023-11-22) - -The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. An attacker can leverage CVE-2023-2448 and CVE-2023-2446 to get the user's email address to successfully exploit this vulnerability. - - -- [RxRCoder/CVE-2023-2437](https://github.com/RxRCoder/CVE-2023-2437) ### CVE-2023-2516 (2023-05-05) @@ -27280,16 +27174,6 @@ - [ysanatomic/io_uring_LPE-CVE-2023-2598](https://github.com/ysanatomic/io_uring_LPE-CVE-2023-2598) -- [cainiao159357/CVE-2023-2598](https://github.com/cainiao159357/CVE-2023-2598) -- [LLfam/CVE-2023-2598](https://github.com/LLfam/CVE-2023-2598) -- [SpongeBob-369/CVE-2023-2598](https://github.com/SpongeBob-369/CVE-2023-2598) - -### CVE-2023-2603 (2023-06-06) - -A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB. - - -- [Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603](https://github.com/Pazhanivelmani/external_libcap-Android10_r33_CVE-2023-2603) ### CVE-2023-2636 (2023-07-17) @@ -27307,19 +27191,9 @@ - [luanoliveira350/GameOverlayFS](https://github.com/luanoliveira350/GameOverlayFS) - [g1vi/CVE-2023-2640-CVE-2023-32629](https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629) - [musorblyat/CVE-2023-2640-CVE-2023-32629](https://github.com/musorblyat/CVE-2023-2640-CVE-2023-32629) -- [SanjayRagavendar/Ubuntu-GameOver-Lay](https://github.com/SanjayRagavendar/Ubuntu-GameOver-Lay) -- [Nkipohcs/CVE-2023-2640-CVE-2023-32629](https://github.com/Nkipohcs/CVE-2023-2640-CVE-2023-32629) -- [K5LK/CVE-2023-2640-32629](https://github.com/K5LK/CVE-2023-2640-32629) - [z3usx01/CVE-2023-2640-3262-PoC](https://github.com/z3usx01/CVE-2023-2640-3262-PoC) - [amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC](https://github.com/amar-imamovic/CVE-2023-2640-CVE-2023-32629-Interactive-PoC) -### CVE-2023-2728 (2023-07-03) - -Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers. - - -- [Cgv-Dev/Metasploit-Module-TFM](https://github.com/Cgv-Dev/Metasploit-Module-TFM) - ### CVE-2023-2732 (2023-05-25) The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. @@ -27336,13 +27210,6 @@ - [pashayogi/CVE-2023-2744](https://github.com/pashayogi/CVE-2023-2744) -### CVE-2023-2745 (2023-05-17) - -WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack. - - -- [fofovicfof-ai/cve-2023-2745](https://github.com/fofovicfof-ai/cve-2023-2745) - ### CVE-2023-2822 (2023-05-20) Es wurde eine problematische Schwachstelle in Ellucian Ethos Identity bis 5.10.5 ausgemacht. Hiervon betroffen ist ein unbekannter Codeblock der Datei /cas/logout. Durch Manipulation des Arguments url mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 5.10.6 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. @@ -27359,8 +27226,6 @@ - [Tornad0007/CVE-2023-2825-Gitlab](https://github.com/Tornad0007/CVE-2023-2825-Gitlab) - [Rubikcuv5/CVE-2023-2825](https://github.com/Rubikcuv5/CVE-2023-2825) - [caopengyan/CVE-2023-2825](https://github.com/caopengyan/CVE-2023-2825) -- [cc3305/CVE-2023-2825](https://github.com/cc3305/CVE-2023-2825) -- [alej6/MassCyberCenter-Mentorship-Project-](https://github.com/alej6/MassCyberCenter-Mentorship-Project-) - [Groppoxx/CVE-2023-2825-PoC](https://github.com/Groppoxx/CVE-2023-2825-PoC) ### CVE-2023-2833 (2023-06-06) @@ -27439,14 +27304,6 @@ - [mnqazi/CVE-2023-3009](https://github.com/mnqazi/CVE-2023-3009) -### CVE-2023-3047 (2023-06-13) - -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection.\n\nThis issue affects Lockcell: before 15. - - -- [Phamchie/CVE-2023-3047](https://github.com/Phamchie/CVE-2023-3047) -- [Kimsovannareth/Phamchie](https://github.com/Kimsovannareth/Phamchie) - ### CVE-2023-3076 (2023-07-10) The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features. @@ -27468,13 +27325,6 @@ - [AmirWhiteHat/CVE-2023-3124](https://github.com/AmirWhiteHat/CVE-2023-3124) -### CVE-2023-3128 (2023-06-22) - -Grafana is validating Azure AD accounts based on the email claim. \n\nOn Azure AD, the profile email field is not unique and can be easily modified. \n\nThis leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. - - -- [spyata123/CVE-2023-3128](https://github.com/spyata123/CVE-2023-3128) - ### CVE-2023-3163 (2023-06-08) Es wurde eine problematische Schwachstelle in y_project RuoYi bis 4.7.7 ausgemacht. Es betrifft die Funktion filterKeyword. Mit der Manipulation des Arguments value mit unbekannten Daten kann eine resource consumption-Schwachstelle ausgenutzt werden. @@ -27496,13 +27346,6 @@ - [lrh2000/StackRot](https://github.com/lrh2000/StackRot) -### CVE-2023-3280 (2023-09-13) - -A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.\n\n - - -- [ig-labs/EDR-ALPC-Block-POC](https://github.com/ig-labs/EDR-ALPC-Block-POC) - ### CVE-2023-3338 (2023-06-30) A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system. @@ -27510,13 +27353,6 @@ - [TurtleARM/CVE-2023-3338-DECPwn](https://github.com/TurtleARM/CVE-2023-3338-DECPwn) -### CVE-2023-3390 (2023-06-28) - -A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97. - - -- [flygonty/CVE-2023-3390_PoC](https://github.com/flygonty/CVE-2023-3390_PoC) - ### CVE-2023-3450 (2023-06-28) Eine kritische Schwachstelle wurde in Ruijie RG-BCR860 2.5.13 gefunden. Dies betrifft einen unbekannten Teil der Komponente Network Diagnostic Page. Durch das Manipulieren mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. @@ -27546,8 +27382,6 @@ - [diego-tella/CVE-2023-3460](https://github.com/diego-tella/CVE-2023-3460) - [Rajneeshkarya/CVE-2023-3460](https://github.com/Rajneeshkarya/CVE-2023-3460) - [DiMarcoSK/CVE-2023-3460_POC](https://github.com/DiMarcoSK/CVE-2023-3460_POC) -- [TranKuBao/CVE-2023-3460_FIX](https://github.com/TranKuBao/CVE-2023-3460_FIX) -- [GURJOTEXPERT/CVE-2023-3460](https://github.com/GURJOTEXPERT/CVE-2023-3460) ### CVE-2023-3519 (2023-07-19) @@ -27568,13 +27402,6 @@ - [JonaNeidhart/CVE-2023-3519-BackdoorCheck](https://github.com/JonaNeidhart/CVE-2023-3519-BackdoorCheck) - [dhammerg/CVE-2023-3519](https://github.com/dhammerg/CVE-2023-3519) -### CVE-2023-3609 (2023-07-21) - -A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. - - -- [Jturnxd/CVE-2023-3609](https://github.com/Jturnxd/CVE-2023-3609) - ### CVE-2023-3640 (2023-07-24) A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system. @@ -27582,22 +27409,6 @@ - [pray77/CVE-2023-3640](https://github.com/pray77/CVE-2023-3640) -### CVE-2023-3722 (2023-07-19) - -An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. - - -- [pizza-power/CVE-2023-3722](https://github.com/pizza-power/CVE-2023-3722) - -### CVE-2023-3824 (2023-08-11) - -In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE. - - -- [jhonnybonny/CVE-2023-3824](https://github.com/jhonnybonny/CVE-2023-3824) -- [bluefish3r/poc-cve](https://github.com/bluefish3r/poc-cve) -- [dadosneurais/cve-2023-3824](https://github.com/dadosneurais/cve-2023-3824) - ### CVE-2023-3836 (2023-07-22) In Dahua Smart Park Management bis 20230713 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Betroffen ist eine unbekannte Verarbeitung der Datei /emap/devicePoint_addImgIco?hasSubsystem=true. Durch Manipulation des Arguments upload mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. @@ -27605,20 +27416,6 @@ - [zh-byte/CVE-2023-3836](https://github.com/zh-byte/CVE-2023-3836) -### CVE-2023-3881 (2023-07-25) - -In Campcodes Beauty Salon Management System 1.0 wurde eine kritische Schwachstelle entdeckt. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /admin/forgot-password.php. Durch Manipulieren des Arguments contactno mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. - - -- [AnugiArrawwala/CVE-Research](https://github.com/AnugiArrawwala/CVE-Research) - -### CVE-2023-3897 (2023-07-25) - -Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.\n\nThis issue affects SureMDM On-premise: 6.31 and below version - - -- [jFriedli/CVE-2023-3897](https://github.com/jFriedli/CVE-2023-3897) - ### CVE-2023-3971 (2023-10-04) An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise. @@ -27664,54 +27461,16 @@ - [d0rb/CVE-2023-4174](https://github.com/d0rb/CVE-2023-4174) -### CVE-2023-4197 (2023-11-01) - -Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code. - - -- [alienkeric/CVE-2023-4197](https://github.com/alienkeric/CVE-2023-4197) - ### CVE-2023-4220 (2023-11-28) Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell. -- [N1ghtfallXxX/CVE-2023-4220](https://github.com/N1ghtfallXxX/CVE-2023-4220) -- [m3m0o/chamilo-lms-unauthenticated-big-upload-rce-poc](https://github.com/m3m0o/chamilo-lms-unauthenticated-big-upload-rce-poc) -- [dollarboysushil/Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220](https://github.com/dollarboysushil/Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220) -- [charlesgargasson/CVE-2023-4220](https://github.com/charlesgargasson/CVE-2023-4220) - [Rai2en/CVE-2023-4220-Chamilo-LMS](https://github.com/Rai2en/CVE-2023-4220-Chamilo-LMS) -- [Ziad-Sakr/Chamilo-CVE-2023-4220-Exploit](https://github.com/Ziad-Sakr/Chamilo-CVE-2023-4220-Exploit) -- [HO4XXX/cve-2023-4220-poc](https://github.com/HO4XXX/cve-2023-4220-poc) -- [nr4x4/CVE-2023-4220](https://github.com/nr4x4/CVE-2023-4220) -- [Al3xGD/CVE-2023-4220-Exploit](https://github.com/Al3xGD/CVE-2023-4220-Exploit) -- [gmh5225/CVE-2023-4220](https://github.com/gmh5225/CVE-2023-4220) -- [charchit-subedi/chamilo-lms-unauthenticated-rce-poc](https://github.com/charchit-subedi/chamilo-lms-unauthenticated-rce-poc) -- [LGenAgul/CVE-2023-4220-Proof-of-concept](https://github.com/LGenAgul/CVE-2023-4220-Proof-of-concept) -- [VanishedPeople/CVE-2023-4220](https://github.com/VanishedPeople/CVE-2023-4220) -- [thefizzyfish/CVE-2023-4220_Chamilo_RCE](https://github.com/thefizzyfish/CVE-2023-4220_Chamilo_RCE) -- [qrxnz/CVE-2023-4220](https://github.com/qrxnz/CVE-2023-4220) -- [0x00-null/Chamilo-CVE-2023-4220-RCE-Exploit](https://github.com/0x00-null/Chamilo-CVE-2023-4220-RCE-Exploit) -- [bueno-armando/CVE-2023-4220-RCE](https://github.com/bueno-armando/CVE-2023-4220-RCE) -- [0xDTC/Chamilo-LMS-CVE-2023-4220-Exploit](https://github.com/0xDTC/Chamilo-LMS-CVE-2023-4220-Exploit) -- [H4cking4All/CVE-2023-4220](https://github.com/H4cking4All/CVE-2023-4220) -- [oxapavan/CVE-2023-4220-HTB-PermX](https://github.com/oxapavan/CVE-2023-4220-HTB-PermX) -- [numaan911098/CVE-2023-4220](https://github.com/numaan911098/CVE-2023-4220) -- [Pr1or95/CVE-2023-4220-exploit](https://github.com/Pr1or95/CVE-2023-4220-exploit) -- [zora-beep/CVE-2023-4220](https://github.com/zora-beep/CVE-2023-4220) -- [Least-Significant-Bit/CVE-2023-4220](https://github.com/Least-Significant-Bit/CVE-2023-4220) - [Sn0wBaall/CVE-2023-4220-PoC](https://github.com/Sn0wBaall/CVE-2023-4220-PoC) - [RandyNin/CVE-2023-4220](https://github.com/RandyNin/CVE-2023-4220) - [SpeatX/ChamiloLMS-CVE-2023-4220](https://github.com/SpeatX/ChamiloLMS-CVE-2023-4220) -### CVE-2023-4226 (2023-11-28) - -Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files. - - -- [krishnan-tech/CVE-2023-4226-POC](https://github.com/krishnan-tech/CVE-2023-4226-POC) -- [SkyW4r33x/CVE-2023-4226](https://github.com/SkyW4r33x/CVE-2023-4226) - ### CVE-2023-4278 (2023-09-11) The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts. @@ -27740,13 +27499,6 @@ - [b0marek/CVE-2023-4294](https://github.com/b0marek/CVE-2023-4294) -### CVE-2023-4300 (2023-09-25) - -The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution. - - -- [bde574786/CVE-2023-4300](https://github.com/bde574786/CVE-2023-4300) - ### CVE-2023-4357 (2023-08-15) Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) @@ -27755,22 +27507,6 @@ - [xcanwin/CVE-2023-4357-Chrome-XXE](https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE) - [passwa11/CVE-2023-4357-APT-Style-exploitation](https://github.com/passwa11/CVE-2023-4357-APT-Style-exploitation) - [sunu11/chrome-CVE-2023-4357](https://github.com/sunu11/chrome-CVE-2023-4357) -- [lon5948/CVE-2023-4357-Exploitation](https://github.com/lon5948/CVE-2023-4357-Exploitation) -- [CamillaFranceschini/CVE-2023-4357](https://github.com/CamillaFranceschini/CVE-2023-4357) - -### CVE-2023-4427 (2023-08-22) - -Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) - - -- [tianstcht/CVE-2023-4427](https://github.com/tianstcht/CVE-2023-4427) - -### CVE-2023-4450 (2023-08-21) - -In jeecgboot JimuReport bis 1.6.0 wurde eine kritische Schwachstelle ausgemacht. Das betrifft eine unbekannte Funktionalität der Komponente Template Handler. Durch Manipulation mit unbekannten Daten kann eine injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 1.6.1 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. - - -- [ilikeoyt/CVE-2023-4450-Attack](https://github.com/ilikeoyt/CVE-2023-4450-Attack) ### CVE-2023-4460 (2023-12-04) @@ -27779,13 +27515,6 @@ - [0xn4d/poc-cve-xss-uploading-svg](https://github.com/0xn4d/poc-cve-xss-uploading-svg) -### CVE-2023-4504 (2023-09-21) - -Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023. - - -- [djjohnson565/CUPS-Exploit](https://github.com/djjohnson565/CUPS-Exploit) - ### CVE-2023-4542 (2023-08-25) Es wurde eine Schwachstelle in D-Link DAR-8000-10 bis 20230809 ausgemacht. Sie wurde als kritisch eingestuft. Es geht dabei um eine nicht klar definierte Funktion der Datei /app/sys1.php. Durch das Manipulieren des Arguments cmd mit der Eingabe id mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. @@ -27800,35 +27529,12 @@ - [b0marek/CVE-2023-4549](https://github.com/b0marek/CVE-2023-4549) -### CVE-2023-4568 (2023-09-13) - -PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. - - -- [Cappricio-Securities/CVE-2023-4568](https://github.com/Cappricio-Securities/CVE-2023-4568) - -### CVE-2023-4590 (2023-11-27) - -Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers. - - -- [dgndrn/CVE-2023-4590](https://github.com/dgndrn/CVE-2023-4590) - ### CVE-2023-4596 (2023-08-30) The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. - [E1A/CVE-2023-4596](https://github.com/E1A/CVE-2023-4596) -- [X-Projetion/CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version](https://github.com/X-Projetion/CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version) -- [X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker](https://github.com/X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker) - -### CVE-2023-4622 (2023-09-06) - -A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.\n\nThe unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.\n\nWe recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c. - - -- [0range1337/CVE-CVE-2023-4622](https://github.com/0range1337/CVE-CVE-2023-4622) ### CVE-2023-4631 (2023-09-25) @@ -27895,13 +27601,6 @@ - [buptsb/CVE-2023-4762](https://github.com/buptsb/CVE-2023-4762) - [sherlocksecurity/CVE-2023-4762-Code-Review](https://github.com/sherlocksecurity/CVE-2023-4762-Code-Review) -### CVE-2023-4771 (2023-11-16) - -A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information. - - -- [sahar042/CVE-2023-4771](https://github.com/sahar042/CVE-2023-4771) - ### CVE-2023-4800 (2023-10-16) The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. @@ -27909,13 +27608,6 @@ - [b0marek/CVE-2023-4800](https://github.com/b0marek/CVE-2023-4800) -### CVE-2023-4813 (2023-09-12) - -A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. - - -- [tnishiox/cve-2023-4813](https://github.com/tnishiox/cve-2023-4813) - ### CVE-2023-4842 (2023-11-07) The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. @@ -27937,7 +27629,6 @@ - [huiwen-yayaya/CVE-2023-4863](https://github.com/huiwen-yayaya/CVE-2023-4863) - [LiveOverflow/webp-CVE-2023-4863](https://github.com/LiveOverflow/webp-CVE-2023-4863) - [caoweiquan322/NotEnough](https://github.com/caoweiquan322/NotEnough) -- [CrackerCat/CVE-2023-4863-](https://github.com/CrackerCat/CVE-2023-4863-) - [jpselva/CVE-2023-4863](https://github.com/jpselva/CVE-2023-4863) - [577Industries/aegisgraph](https://github.com/577Industries/aegisgraph) - [pixelotes/lab-cve-2023-4863](https://github.com/pixelotes/lab-cve-2023-4863) @@ -27962,9 +27653,6 @@ - [teraGL/looneyCVE](https://github.com/teraGL/looneyCVE) - [snurkeburk/Looney-Tunables](https://github.com/snurkeburk/Looney-Tunables) - [puckiestyle/CVE-2023-4911](https://github.com/puckiestyle/CVE-2023-4911) -- [NishanthAnand21/CVE-2023-4911-PoC](https://github.com/NishanthAnand21/CVE-2023-4911-PoC) -- [Billar42/CVE-2023-4911](https://github.com/Billar42/CVE-2023-4911) -- [KillReal01/CVE-2023-4911](https://github.com/KillReal01/CVE-2023-4911) - [Aryan20057/CVE-2023-4911](https://github.com/Aryan20057/CVE-2023-4911) - [0xMOGA/CVE-2023-4911-Lab](https://github.com/0xMOGA/CVE-2023-4911-Lab) - [jarpex/cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) @@ -27985,8 +27673,6 @@ - [byte4RR4Y/CVE-2023-4966](https://github.com/byte4RR4Y/CVE-2023-4966) - [jmussmann/cve-2023-4966-iocs](https://github.com/jmussmann/cve-2023-4966-iocs) - [morganwdavis/overread](https://github.com/morganwdavis/overread) -- [LucasOneZ/CVE-2023-4966](https://github.com/LucasOneZ/CVE-2023-4966) -- [akshthejo/CVE-2023-4966-exploit](https://github.com/akshthejo/CVE-2023-4966-exploit) - [vignesh-hp/LockBit-Ransomware-Analysis](https://github.com/vignesh-hp/LockBit-Ransomware-Analysis) ### CVE-2023-5024 (2023-09-17) @@ -28002,8 +27688,6 @@ - [r0binak/CVE-2023-5044](https://github.com/r0binak/CVE-2023-5044) -- [4ARMED/cve-2023-5044](https://github.com/4ARMED/cve-2023-5044) -- [KubernetesBachelor/CVE-2023-5044](https://github.com/KubernetesBachelor/CVE-2023-5044) ### CVE-2023-5070 (2023-10-20) @@ -28012,13 +27696,6 @@ - [RandomRobbieBF/CVE-2023-5070](https://github.com/RandomRobbieBF/CVE-2023-5070) -### CVE-2023-5089 (2023-10-16) - -The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled. - - -- [Cappricio-Securities/CVE-2023-5089](https://github.com/Cappricio-Securities/CVE-2023-5089) - ### CVE-2023-5142 (2023-09-24) In H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 bis 20230908 wurde eine Schwachstelle entdeckt. Sie wurde als problematisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /userLogin.asp der Komponente Config File Handler. Durch das Beeinflussen mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Die Komplexität eines Angriffs ist eher hoch. Das Ausnutzen gilt als schwierig. Der Exploit steht zur öffentlichen Verfügung. @@ -28026,27 +27703,6 @@ - [kuangxiaotu/CVE-H3C-Report](https://github.com/kuangxiaotu/CVE-H3C-Report) -### CVE-2023-5178 (2023-11-01) - -A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation. - - -- [rockrid3r/CVE-2023-5178](https://github.com/rockrid3r/CVE-2023-5178) - -### CVE-2023-5180 (2023-12-26) - -An issue was discovered in Open Design Alliance\nDrawings SDK before 2024.12. A corrupted value of number\nof sectors used by the Fat structure in a crafted DGN file leads to an\nout-of-bounds write. An attacker can leverage this vulnerability to execute\ncode in the context of the current process. - - -- [superswan/HeimShell](https://github.com/superswan/HeimShell) - -### CVE-2023-5204 (2023-10-19) - -The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2023-5204](https://github.com/RandomRobbieBF/CVE-2023-5204) - ### CVE-2023-5217 (2023-09-28) Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) @@ -28063,14 +27719,6 @@ - [nomis/eero-zero-length-ipv6-options-header-dos](https://github.com/nomis/eero-zero-length-ipv6-options-header-dos) -### CVE-2023-5359 (2024-09-24) - -The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to impersonate W3 Total Cache and gain access to user account information in successful conditions. This would not impact the WordPress users site in any way. - - -- [spyata123/Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache](https://github.com/spyata123/Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache) -- [enzocipher/CVE-2023-5359](https://github.com/enzocipher/CVE-2023-5359) - ### CVE-2023-5360 (2023-10-31) The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. @@ -28082,8 +27730,6 @@ - [Chocapikk/CVE-2023-5360](https://github.com/Chocapikk/CVE-2023-5360) - [Jenderal92/WP-CVE-2023-5360](https://github.com/Jenderal92/WP-CVE-2023-5360) - [Pushkarup/CVE-2023-5360](https://github.com/Pushkarup/CVE-2023-5360) -- [X3RX3SSec/CVE-2023-5360](https://github.com/X3RX3SSec/CVE-2023-5360) -- [LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries](https://github.com/LaviruDilshan/CVE-2023-5360-exploit-with-native-libraries) ### CVE-2023-5412 (2023-10-31) @@ -28133,23 +27779,6 @@ - [pog007/CVE-2023-5561-PoC](https://github.com/pog007/CVE-2023-5561-PoC) -- [rootxsushant/CVE-2023-5561-POC-Updated](https://github.com/rootxsushant/CVE-2023-5561-POC-Updated) -- [dthkhang/CVE-2023-5561-PoC](https://github.com/dthkhang/CVE-2023-5561-PoC) - -### CVE-2023-5612 (2024-01-26) - -An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled. - - -- [TopskiyPavelQwertyGang/Review.CVE-2023-5612](https://github.com/TopskiyPavelQwertyGang/Review.CVE-2023-5612) -- [mad3E7cat/CVE-2023-5612](https://github.com/mad3E7cat/CVE-2023-5612) - -### CVE-2023-5717 (2023-10-25) - -A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.\n\nIf perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer.\n\nWe recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06. - - -- [uthrasri/CVE-2023-5717](https://github.com/uthrasri/CVE-2023-5717) ### CVE-2023-5808 (2023-12-04) @@ -28158,44 +27787,13 @@ - [Arszilla/CVE-2023-5808](https://github.com/Arszilla/CVE-2023-5808) -### CVE-2023-5961 (2023-12-23) - -A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.\n\n - - -- [HadessCS/CVE-2023-5961](https://github.com/HadessCS/CVE-2023-5961) - -### CVE-2023-5965 (2023-11-30) - -An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution. - - -- [josemlwdf/CVE-2023-5965](https://github.com/josemlwdf/CVE-2023-5965) - -### CVE-2023-6000 (2024-01-01) - -The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks. - - -- [RonF98/CVE-2023-6000-POC](https://github.com/RonF98/CVE-2023-6000-POC) - ### CVE-2023-6019 (2023-11-16) A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 -- [FireWolfWang/CVE-2023-6019](https://github.com/FireWolfWang/CVE-2023-6019) -- [Clydeston/CVE-2023-6019](https://github.com/Clydeston/CVE-2023-6019) -- [Zohaibkhan1472/cve-2023-6019](https://github.com/Zohaibkhan1472/cve-2023-6019) - [joaquinrrr/CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) -### CVE-2023-6036 (2024-02-12) - -The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username. - - -- [pctripsesp/CVE-2023-6036](https://github.com/pctripsesp/CVE-2023-6036) - ### CVE-2023-6063 (2023-12-04) The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. @@ -28204,40 +27802,14 @@ - [motikan2010/CVE-2023-6063-PoC](https://github.com/motikan2010/CVE-2023-6063-PoC) - [hackersroot/CVE-2023-6063-PoC](https://github.com/hackersroot/CVE-2023-6063-PoC) - [Eulex0x/CVE-2023-6063](https://github.com/Eulex0x/CVE-2023-6063) -- [incommatose/CVE-2023-6063-PoC](https://github.com/incommatose/CVE-2023-6063-PoC) - -### CVE-2023-6199 (2023-11-20) - -Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF. - - -- [AbdrrahimDahmani/php_filter_chains_oracle_exploit_for_CVE-2023-6199](https://github.com/AbdrrahimDahmani/php_filter_chains_oracle_exploit_for_CVE-2023-6199) -- [4xura/php_filter_chain_oracle_poc](https://github.com/4xura/php_filter_chain_oracle_poc) - -### CVE-2023-6241 (2024-03-04) - -Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.\n\n - - -- [SmileTabLabo/CVE-2023-6241](https://github.com/SmileTabLabo/CVE-2023-6241) -- [ilGobbo00/CVE-2023-6241-Pixel7_Adaptation](https://github.com/ilGobbo00/CVE-2023-6241-Pixel7_Adaptation) ### CVE-2023-6246 (2024-01-31) A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer. -- [elpe-pinillo/CVE-2023-6246](https://github.com/elpe-pinillo/CVE-2023-6246) - [SimoesCTT/CTT-Vsyslog-Vortex-CVE-2023-6246](https://github.com/SimoesCTT/CTT-Vsyslog-Vortex-CVE-2023-6246) -### CVE-2023-6275 (2023-11-24) - -Eine problematische Schwachstelle wurde in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1 ausgemacht. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /mobileredir/openApp.jsp der Komponente mobileredir. Dank Manipulation des Arguments redirectUrl/user mit der Eingabe "><script>alert(document.domain)</script> mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 1.7.1-231128, 1.8.0-231127 and 1.8.1-231127 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. - - -- [erickfernandox/CVE-2023-6275](https://github.com/erickfernandox/CVE-2023-6275) -- [LelioCosta/FLUIG-Vulnerabilidade-CVE-2023-6275](https://github.com/LelioCosta/FLUIG-Vulnerabilidade-CVE-2023-6275) - ### CVE-2023-6289 (2023-12-18) The Swift Performance Lite WordPress plugin before 2.3.6.15 does not prevent users from exporting the plugin's settings, which may include sensitive information such as Cloudflare API tokens. @@ -28245,13 +27817,6 @@ - [RandomRobbieBF/CVE-2023-6289](https://github.com/RandomRobbieBF/CVE-2023-6289) -### CVE-2023-6319 (2024-04-09) - -A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.\n\n * webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA \n\n * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA \n\n * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB \n\n * webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA\n\n - - -- [illixion/root-my-webos-tv](https://github.com/illixion/root-my-webos-tv) - ### CVE-2023-6329 (2023-11-27) An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user. @@ -28259,48 +27824,6 @@ - [itzvenom/CVE-2023-6329](https://github.com/itzvenom/CVE-2023-6329) -### CVE-2023-6350 (2023-11-29) - -Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) - - -- [dywsy21/CVE-2023-6350_Reproduction](https://github.com/dywsy21/CVE-2023-6350_Reproduction) - -### CVE-2023-6360 (2023-11-30) - -The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/my-calendar/v1/events' rest route. - - -- [tpdlshdmlrkfmcla/CVE-2023-6360](https://github.com/tpdlshdmlrkfmcla/CVE-2023-6360) - -### CVE-2023-6387 (2024-02-02) - -A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote code execution - - -- [A3ST1CODE/CVE_6387](https://github.com/A3ST1CODE/CVE_6387) - -### CVE-2023-6401 (2023-11-30) - -In NotePad++ bis 8.1 wurde eine problematische Schwachstelle entdeckt. Das betrifft eine unbekannte Funktionalität der Datei dbghelp.exe. Durch Beeinflussen mit unbekannten Daten kann eine uncontrolled search path-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. - - -- [mekitoci/CVE-2023-6401](https://github.com/mekitoci/CVE-2023-6401) - -### CVE-2023-6421 (2024-01-01) - -The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one. - - -- [RandomRobbieBF/CVE-2023-6421](https://github.com/RandomRobbieBF/CVE-2023-6421) - -### CVE-2023-6444 (2024-03-11) - -The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request. - - -- [Wayne-Ker/CVE-2023-6444-POC](https://github.com/Wayne-Ker/CVE-2023-6444-POC) - ### CVE-2023-6538 (2023-12-11) SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in Storage, Server or combined Server+Storage administrative roles are able to access SMU configuration backup, that would normally be barred to those specific administrative roles. @@ -28308,13 +27831,6 @@ - [Arszilla/CVE-2023-6538](https://github.com/Arszilla/CVE-2023-6538) -### CVE-2023-6546 (2023-12-21) - -A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsm_dlci while restarting the gsm mux. This could allow a local unprivileged user to escalate their privileges on the system. - - -- [harithlab/CVE-2023-6546](https://github.com/harithlab/CVE-2023-6546) - ### CVE-2023-6553 (2023-12-15) The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server. @@ -28322,52 +27838,15 @@ - [Chocapikk/CVE-2023-6553](https://github.com/Chocapikk/CVE-2023-6553) - [motikan2010/CVE-2023-6553-PoC](https://github.com/motikan2010/CVE-2023-6553-PoC) -- [cc3305/CVE-2023-6553](https://github.com/cc3305/CVE-2023-6553) -- [Harshit-Mashru/CVE-2023-6553](https://github.com/Harshit-Mashru/CVE-2023-6553) - [0x00phantom-hat/CVE-2023-6553-RCE-Exploit](https://github.com/0x00phantom-hat/CVE-2023-6553-RCE-Exploit) - [joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated](https://github.com/joaoaugustom/WordPress_Backup_Migration-RCE_Unauthenticated) -### CVE-2023-6595 (2023-12-14) - -In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold. - - -- [sharmashreejaa/CVE-2023-6595](https://github.com/sharmashreejaa/CVE-2023-6595) - -### CVE-2023-6634 (2024-01-11) - -The LearnPress plugin for WordPress is vulnerable to Command Injection in all versions up to, and including, 4.2.5.7 via the get_content function. This is due to the plugin making use of the call_user_func function with user input. This makes it possible for unauthenticated attackers to execute any public function with one parameter, which could result in remote code execution. - - -- [krn966/CVE-2023-6634](https://github.com/krn966/CVE-2023-6634) - -### CVE-2023-6654 (2023-12-10) - -In PHPEMS 6.x/7.x/8.x/9.0 wurde eine kritische Schwachstelle entdeckt. Betroffen ist eine unbekannte Verarbeitung in der Bibliothek lib/session.cls.php der Komponente Session Data Handler. Dank der Manipulation mit unbekannten Daten kann eine deserialization-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. - - -- [qfmy1024/CVE-2023-6654](https://github.com/qfmy1024/CVE-2023-6654) - ### CVE-2023-6661 - [cli-ish/CVE-2023-6661](https://github.com/cli-ish/CVE-2023-6661) ### CVE-2023-6663 - [cli-ish/CVE-2023-6663](https://github.com/cli-ish/CVE-2023-6663) -### CVE-2023-6700 (2024-02-05) - -The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level access or higher, to edit arbitrary site options which can be used to create administrator accounts. - - -- [RandomRobbieBF/CVE-2023-6700](https://github.com/RandomRobbieBF/CVE-2023-6700) - -### CVE-2023-6702 (2023-12-14) - -Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [kaist-hacking/CVE-2023-6702](https://github.com/kaist-hacking/CVE-2023-6702) - ### CVE-2023-6710 (2023-12-12) A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter on the URL, it adds a new virtual host and adds the script to the cluster-manager page. @@ -28376,37 +27855,6 @@ - [DedSec-47/Metasploit-Exploits-CVE-2023-6710](https://github.com/DedSec-47/Metasploit-Exploits-CVE-2023-6710) - [DedSec-47/CVE-2023-6710](https://github.com/DedSec-47/CVE-2023-6710) -### CVE-2023-6875 (2024-01-11) - -The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a type juggling issue on the connect-app REST endpoint in all versions up to, and including, 2.8.7. This makes it possible for unauthenticated attackers to reset the API key used to authenticate to the mailer and view logs, including password reset emails, allowing site takeover. CVE-2023-52233 appears to be a duplicate of this issue. - - -- [gbrsh/CVE-2023-6875](https://github.com/gbrsh/CVE-2023-6875) -- [hatlesswizard/CVE-2023-6875](https://github.com/hatlesswizard/CVE-2023-6875) - -### CVE-2023-6895 (2023-12-17) - -In Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei /php/ping.php. Mittels Manipulieren des Arguments jsondata[ip] mit der Eingabe netstat -ano mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.1.0 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. - - -- [FuBoLuSec/CVE-2023-6895](https://github.com/FuBoLuSec/CVE-2023-6895) -- [nles-crt/CVE-2023-6895](https://github.com/nles-crt/CVE-2023-6895) - -### CVE-2023-6931 (2023-12-19) - -A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation.\n\nA perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().\n\nWe recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b. - - -- [K0n9-log/CVE-2023-6931](https://github.com/K0n9-log/CVE-2023-6931) - -### CVE-2023-6933 (2024-02-05) - -The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. - - -- [w2xim3/CVE-2023-6933](https://github.com/w2xim3/CVE-2023-6933) -- [Trex96/vulnerable-bsr-lab-CVE-2023-6933](https://github.com/Trex96/vulnerable-bsr-lab-CVE-2023-6933) - ### CVE-2023-6972 (2023-12-23) The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-name', 'content-manifest', or 'content-bmitmp' and 'content-identy' HTTP headers. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible. @@ -28414,60 +27862,6 @@ - [0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion](https://github.com/0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion) -### CVE-2023-6985 (2024-02-05) - -The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin AJAX action in all versions up to, and including, 1.0.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins that can be used to gain further access to a compromised site. - - -- [RandomRobbieBF/CVE-2023-6985](https://github.com/RandomRobbieBF/CVE-2023-6985) - -### CVE-2023-7016 (2024-02-27) - -A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access. - - -- [ewilded/CVE-2023-7016-POC](https://github.com/ewilded/CVE-2023-7016-POC) - -### CVE-2023-7024 (2023-12-21) - -Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [aka76bm/chrome-emergency-update](https://github.com/aka76bm/chrome-emergency-update) -- [aka76bm/google-chrome-emergency-update](https://github.com/aka76bm/google-chrome-emergency-update) - -### CVE-2023-7028 (2024-01-12) - -An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address. - - -- [yoryio/CVE-2023-7028](https://github.com/yoryio/CVE-2023-7028) -- [Shimon03/CVE-2023-7028-Account-Take-Over-Gitlab](https://github.com/Shimon03/CVE-2023-7028-Account-Take-Over-Gitlab) -- [thanhlam-attt/CVE-2023-7028](https://github.com/thanhlam-attt/CVE-2023-7028) -- [Trackflaw/CVE-2023-7028-Docker](https://github.com/Trackflaw/CVE-2023-7028-Docker) -- [mochammadrafi/CVE-2023-7028](https://github.com/mochammadrafi/CVE-2023-7028) -- [hackeremmen/gitlab-exploit](https://github.com/hackeremmen/gitlab-exploit) -- [soltanali0/CVE-2023-7028](https://github.com/soltanali0/CVE-2023-7028) -- [gh-ost00/CVE-2023-7028](https://github.com/gh-ost00/CVE-2023-7028) -- [sariamubeen/CVE-2023-7028](https://github.com/sariamubeen/CVE-2023-7028) -- [Sornphut/CVE-2023-7028-GitLab](https://github.com/Sornphut/CVE-2023-7028-GitLab) -- [szybnev/CVE-2023-7028](https://github.com/szybnev/CVE-2023-7028) -- [KameliaZaman/Exploiting-GitLab-CVE-2023-7028](https://github.com/KameliaZaman/Exploiting-GitLab-CVE-2023-7028) - -### CVE-2023-7231 (2025-05-15) - -The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to delete links. - - -- [BBO513/CVE-2023-7231](https://github.com/BBO513/CVE-2023-7231) - -### CVE-2023-7261 (2024-06-07) - -Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High) - - -- [zerozenxlabs/CVE-2023-7261](https://github.com/zerozenxlabs/CVE-2023-7261) - ### CVE-2023-20025 (2023-01-19) A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system. @@ -28475,14 +27869,6 @@ - [lnversed/CVE-2023-20025](https://github.com/lnversed/CVE-2023-20025) -### CVE-2023-20048 (2023-11-01) - -A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. An attacker could exploit this vulnerability by authenticating to the FMC web services interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute certain configuration commands on the targeted FTD device. To successfully exploit this vulnerability, an attacker would need valid credentials on the FMC Software. - - -- [0zer0d4y/FuegoTest](https://github.com/0zer0d4y/FuegoTest) -- [oguzhanozuzun301/cisco-rv-rce-poc](https://github.com/oguzhanozuzun301/cisco-rv-rce-poc) - ### CVE-2023-20052 (2023-02-16) On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed:\r\n\r \r A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device.\r\n\r \r This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process. @@ -28548,14 +27934,6 @@ - [smokeintheshell/CVE-2023-20198](https://github.com/smokeintheshell/CVE-2023-20198) - [netbell/CVE-2023-20198-Fix](https://github.com/netbell/CVE-2023-20198-Fix) - [Vulnmachines/Cisco_CVE-2023-20198](https://github.com/Vulnmachines/Cisco_CVE-2023-20198) -- [W01fh4cker/CVE-2023-20198-RCE](https://github.com/W01fh4cker/CVE-2023-20198-RCE) -- [sanan2004/CVE-2023-20198](https://github.com/sanan2004/CVE-2023-20198) -- [AhmedMansour93/Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-](https://github.com/AhmedMansour93/Event-ID-193-Rule-Name-SOC231-Cisco-IOS-XE-Web-UI-ZeroDay-CVE-2023-20198-) -- [djayaGit/cve-2023-20198-poc-cisco](https://github.com/djayaGit/cve-2023-20198-poc-cisco) -- [G4sul1n/Cisco-IOS-XE-CVE-2023-20198](https://github.com/G4sul1n/Cisco-IOS-XE-CVE-2023-20198) -- [DOMINIC471/qub-network-security-cve-2023-20198](https://github.com/DOMINIC471/qub-network-security-cve-2023-20198) -- [Arshit01/CVE-2023-20198](https://github.com/Arshit01/CVE-2023-20198) -- [Religan/CVE-2023-20198](https://github.com/Religan/CVE-2023-20198) - [Gill-Singh-A/CVE-2023-20198-Exploit](https://github.com/Gill-Singh-A/CVE-2023-20198-Exploit) - [gustavorobertux/cisco-cve-2023-20198-checker](https://github.com/gustavorobertux/cisco-cve-2023-20198-checker) - [telly251/forwardnetworksdemo](https://github.com/telly251/forwardnetworksdemo) @@ -28575,9 +27953,6 @@ - [smokeintheshell/CVE-2023-20273](https://github.com/smokeintheshell/CVE-2023-20273) -### CVE-2023-20352 -- [mrk336/SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices](https://github.com/mrk336/SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices) - ### CVE-2023-20562 (2023-08-08) \n\n\nInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n @@ -28586,13 +27961,6 @@ - [zeze-zeze/HITCON-2023-Demo-CVE-2023-20562](https://github.com/zeze-zeze/HITCON-2023-Demo-CVE-2023-20562) - [passwa11/HITCON-2023-Demo-CVE-2023-20562](https://github.com/passwa11/HITCON-2023-Demo-CVE-2023-20562) -### CVE-2023-20564 (2023-08-15) - -\n\n\n\n\n\n\nInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution.\n\n\n\n\n\n\n\n\n\n\n\n - - -- [NtGabrielGomes/CVE-2023-20564](https://github.com/NtGabrielGomes/CVE-2023-20564) - ### CVE-2023-20573 (2024-01-11) A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.\n\n\n\n @@ -28607,13 +27975,6 @@ - [sbaresearch/stop-zenbleed-win](https://github.com/sbaresearch/stop-zenbleed-win) -### CVE-2023-20598 (2023-10-17) - -\n\n\nAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.\n\n\n\n - - -- [H4rk3nz0/CVE-2023-20598-PDFWKRNL](https://github.com/H4rk3nz0/CVE-2023-20598-PDFWKRNL) - ### CVE-2023-20696 (2023-05-15) In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only). @@ -28628,13 +27989,6 @@ - [limo520/CVE-2023-20860](https://github.com/limo520/CVE-2023-20860) -### CVE-2023-20872 (2023-04-25) - -VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation. - - -- [ze0r/vmware-escape-CVE-2023-20872-poc](https://github.com/ze0r/vmware-escape-CVE-2023-20872-poc) - ### CVE-2023-20887 (2023-06-07) Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution. @@ -28644,13 +27998,6 @@ - [miko550/CVE-2023-20887](https://github.com/miko550/CVE-2023-20887) - [Malwareman007/CVE-2023-20887](https://github.com/Malwareman007/CVE-2023-20887) -### CVE-2023-20904 (2023-01-24) - -In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-246300272 - - -- [FishMan132/CVE-2023-20904](https://github.com/FishMan132/CVE-2023-20904) - ### CVE-2023-20909 (2023-04-19) In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-243130512 @@ -28694,7 +28041,6 @@ - [jaf0rk/CVE-2023-20938](https://github.com/jaf0rk/CVE-2023-20938) -- [0xAtharv/CVE-2023-20938-Public](https://github.com/0xAtharv/CVE-2023-20938-Public) - [byt3quester/CVE-2023-20938-poc](https://github.com/byt3quester/CVE-2023-20938-poc) ### CVE-2023-20943 (2023-02-28) @@ -28774,21 +28120,6 @@ - [Trinadh465/frameworks_native_AOSP-10_r33_CVE-2023-21118](https://github.com/Trinadh465/frameworks_native_AOSP-10_r33_CVE-2023-21118) -- [Satheesh575555/frameworks_native_AOSP10_r33_CVE-2023-21118](https://github.com/Satheesh575555/frameworks_native_AOSP10_r33_CVE-2023-21118) - -### CVE-2023-21125 (2025-08-26) - -In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [761669642/Mahesh-970-CVE-2023-21125_bluedriod_repo](https://github.com/761669642/Mahesh-970-CVE-2023-21125_bluedriod_repo) - -### CVE-2023-21173 (2023-06-28) - -In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262741858 - - -- [vesu-nights/MultiExploit](https://github.com/vesu-nights/MultiExploit) ### CVE-2023-21238 (2023-07-12) @@ -28839,7 +28170,6 @@ - [Trinadh465/external_aac_AOSP10_r33_CVE-2023-21282](https://github.com/Trinadh465/external_aac_AOSP10_r33_CVE-2023-21282) -- [Trinadh465/external_aac_android-4.2.2_r1_CVE-2023-21282](https://github.com/Trinadh465/external_aac_android-4.2.2_r1_CVE-2023-21282) ### CVE-2023-21284 (2023-08-14) @@ -28869,13 +28199,6 @@ - [Trinadh465/platform_frameworks_base_CVE-2023-21288](https://github.com/Trinadh465/platform_frameworks_base_CVE-2023-21288) -### CVE-2023-21537 (2023-01-10) - -Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability - - -- [stevenjoezhang/CVE-2023-21537](https://github.com/stevenjoezhang/CVE-2023-21537) - ### CVE-2023-21554 (2023-04-11) Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability @@ -28883,16 +28206,7 @@ - [zoemurmure/CVE-2023-21554-PoC](https://github.com/zoemurmure/CVE-2023-21554-PoC) - [3tternp/CVE-2023-21554](https://github.com/3tternp/CVE-2023-21554) -- [Rahul-Thakur7/CVE-2023-21554](https://github.com/Rahul-Thakur7/CVE-2023-21554) - [leongxudong/MSMQ-Vulnerability](https://github.com/leongxudong/MSMQ-Vulnerability) -- [shootweb/CVE-2023-21554](https://github.com/shootweb/CVE-2023-21554) - -### CVE-2023-21560 (2023-01-10) - -Windows Boot Manager Security Feature Bypass Vulnerability - - -- [Wack0/dubiousdisk](https://github.com/Wack0/dubiousdisk) ### CVE-2023-21563 (2023-01-10) @@ -28910,13 +28224,6 @@ - [hacksysteam/CVE-2023-21608](https://github.com/hacksysteam/CVE-2023-21608) - [Malwareman007/CVE-2023-21608](https://github.com/Malwareman007/CVE-2023-21608) -### CVE-2023-21674 (2023-01-10) - -Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability - - -- [hd3s5aa/CVE-2023-21674](https://github.com/hd3s5aa/CVE-2023-21674) - ### CVE-2023-21688 (2023-02-14) NT OS Kernel Elevation of Privilege Vulnerability @@ -28945,7 +28252,6 @@ - [JMousqueton/CVE-2023-21716](https://github.com/JMousqueton/CVE-2023-21716) - [Lord-of-the-IoT/CVE-2023-21716](https://github.com/Lord-of-the-IoT/CVE-2023-21716) - [MojithaR/CVE-2023-21716-EXPLOIT.py](https://github.com/MojithaR/CVE-2023-21716-EXPLOIT.py) -- [RonF98/CVE-2023-21716-POC](https://github.com/RonF98/CVE-2023-21716-POC) - [muumthf/CVE-2023-21716](https://github.com/muumthf/CVE-2023-21716) - [Caliburn9/CVE-2023-21716-Analysis-ICT287](https://github.com/Caliburn9/CVE-2023-21716-Analysis-ICT287) - [REGGYRAIDER/CVE-2023-21716](https://github.com/REGGYRAIDER/CVE-2023-21716) @@ -29001,11 +28307,6 @@ - [ahiahai242/CVE-2023-21768](https://github.com/ahiahai242/CVE-2023-21768) - [zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit](https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit) - [Rosayxy/Recreate-cve-2023-21768](https://github.com/Rosayxy/Recreate-cve-2023-21768) -- [ldrx30/CVE-2023-21768](https://github.com/ldrx30/CVE-2023-21768) -- [xboxoneresearch/CVE-2023-21768-dotnet](https://github.com/xboxoneresearch/CVE-2023-21768-dotnet) -- [IlanDudnik/CVE-2023-21768](https://github.com/IlanDudnik/CVE-2023-21768) -- [radoi-teodor/CVE-2023-21768-DSE-Bypass](https://github.com/radoi-teodor/CVE-2023-21768-DSE-Bypass) -- [Feede33/Windows-11-Exploit](https://github.com/Feede33/Windows-11-Exploit) - [r4uzn/CVE-2023-21768](https://github.com/r4uzn/CVE-2023-21768) ### CVE-2023-21823 (2023-02-14) @@ -29033,7 +28334,6 @@ - [houqe/POC_CVE-2023-21839](https://github.com/houqe/POC_CVE-2023-21839) - [kw3h4/CVE-2023-21839-metasploit-scanner](https://github.com/kw3h4/CVE-2023-21839-metasploit-scanner) - [Romanc9/Gui-poc-test](https://github.com/Romanc9/Gui-poc-test) -- [dinosn/CVE-2024-20931](https://github.com/dinosn/CVE-2024-20931) - [dinosn/CVE-2024-21182](https://github.com/dinosn/CVE-2024-21182) ### CVE-2023-21931 (2023-04-18) @@ -29062,16 +28362,8 @@ Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H). -- [chunzhennn/cve-2023-21987-poc](https://github.com/chunzhennn/cve-2023-21987-poc) - [minq0x1412/CVE-2023-21987-and-CVE-2023-21991](https://github.com/minq0x1412/CVE-2023-21987-and-CVE-2023-21991) -### CVE-2023-22047 (2023-07-18) - -Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8.60. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). - - -- [tuo4n8/CVE-2023-22047](https://github.com/tuo4n8/CVE-2023-22047) - ### CVE-2023-22074 (2023-10-17) Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows high privileged attacker having Create Session, Select Any Dictionary privilege with network access via Oracle Net to compromise Oracle Database Sharding. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Database Sharding. CVSS 3.1 Base Score 2.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:L). @@ -29079,20 +28371,6 @@ - [emad-almousa/CVE-2023-22074](https://github.com/emad-almousa/CVE-2023-22074) -### CVE-2023-22077 (2023-10-17) - -Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows high privileged attacker having DBA account privilege with network access via Oracle Net to compromise Oracle Database Recovery Manager. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Database Recovery Manager. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). - - -- [emad-almousa/CVE-2023-22077](https://github.com/emad-almousa/CVE-2023-22077) - -### CVE-2023-22098 (2023-10-17) - -Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. Note: Only applicable to 7.0.x platform. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). - - -- [Diego-AltF4/CVE-2023-22098](https://github.com/Diego-AltF4/CVE-2023-22098) - ### CVE-2023-22432 (2023-03-05) Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack. @@ -29107,13 +28385,6 @@ - [smash8tap/CVE-2023-22490_PoC](https://github.com/smash8tap/CVE-2023-22490_PoC) -### CVE-2023-22493 (2023-01-13) - -RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker can exploit this vulnerability by sending a request to the affected routes with a malicious URL. An attacker could also use this vulnerability to send requests to internal or any other servers or resources on the network, potentially gain access to sensitive information that would not normally be accessible and amplifying the impact of the attack. The patch for this issue can be found in commit a66cbcf. - - -- [buitanhung144/SSRF-CVE-2023-22493](https://github.com/buitanhung144/SSRF-CVE-2023-22493) - ### CVE-2023-22515 (2023-10-04) Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. \r\n\r\nAtlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue. @@ -29136,18 +28407,6 @@ - [aaaademo/Confluence-EvilJar](https://github.com/aaaademo/Confluence-EvilJar) - [edsonjt81/CVE-2023-22515-Scan.](https://github.com/edsonjt81/CVE-2023-22515-Scan.) - [INTfinityConsulting/cve-2023-22515](https://github.com/INTfinityConsulting/cve-2023-22515) -- [rxerium/CVE-2023-22515](https://github.com/rxerium/CVE-2023-22515) -- [fyx1t/NSE--CVE-2023-22515](https://github.com/fyx1t/NSE--CVE-2023-22515) -- [s1d6point7bugcrowd/CVE-2023-22515-check](https://github.com/s1d6point7bugcrowd/CVE-2023-22515-check) -- [xorbbo/cve-2023-22515](https://github.com/xorbbo/cve-2023-22515) -- [spareack/CVE-2023-22515-NSE](https://github.com/spareack/CVE-2023-22515-NSE) -- [Onedy1703/CVE-2023-22515-Confluence](https://github.com/Onedy1703/CVE-2023-22515-Confluence) -- [vivigotnotime/CVE-2023-22515-Exploit-Script](https://github.com/vivigotnotime/CVE-2023-22515-Exploit-Script) -- [tranphuc2005/CVE-2023-22515](https://github.com/tranphuc2005/CVE-2023-22515) -- [Arkha-Corvus/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197](https://github.com/Arkha-Corvus/LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197) -- [CyberSentinel321/cve-2023-22515-lab](https://github.com/CyberSentinel321/cve-2023-22515-lab) -- [dkq-k/CVE-2023-22515](https://github.com/dkq-k/CVE-2023-22515) -- [dkq-k/cve-2023-22515-1](https://github.com/dkq-k/cve-2023-22515-1) ### CVE-2023-22518 (2023-10-31) @@ -29159,9 +28418,6 @@ - [RevoltSecurities/CVE-2023-22518](https://github.com/RevoltSecurities/CVE-2023-22518) - [0x0d3ad/CVE-2023-22518](https://github.com/0x0d3ad/CVE-2023-22518) - [C1ph3rX13/CVE-2023-22518](https://github.com/C1ph3rX13/CVE-2023-22518) -- [bibo318/CVE-2023-22518](https://github.com/bibo318/CVE-2023-22518) -- [Lilly-dox/Exploit-CVE-2023-22518](https://github.com/Lilly-dox/Exploit-CVE-2023-22518) -- [ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence](https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence) ### CVE-2023-22524 (2023-12-06) @@ -29176,27 +28432,6 @@ A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.\n\nMost recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin. -- [Avento/CVE-2023-22527_Confluence_RCE](https://github.com/Avento/CVE-2023-22527_Confluence_RCE) -- [Drun1baby/CVE-2023-22527](https://github.com/Drun1baby/CVE-2023-22527) -- [thanhlam-attt/CVE-2023-22527](https://github.com/thanhlam-attt/CVE-2023-22527) -- [Manh130902/CVE-2023-22527-POC](https://github.com/Manh130902/CVE-2023-22527-POC) -- [VNCERT-CC/CVE-2023-22527-confluence](https://github.com/VNCERT-CC/CVE-2023-22527-confluence) -- [Vozec/CVE-2023-22527](https://github.com/Vozec/CVE-2023-22527) -- [C1ph3rX13/CVE-2023-22527](https://github.com/C1ph3rX13/CVE-2023-22527) -- [Niuwoo/CVE-2023-22527](https://github.com/Niuwoo/CVE-2023-22527) -- [Chocapikk/CVE-2023-22527](https://github.com/Chocapikk/CVE-2023-22527) -- [RevoltSecurities/CVE-2023-22527](https://github.com/RevoltSecurities/CVE-2023-22527) -- [yoryio/CVE-2023-22527](https://github.com/yoryio/CVE-2023-22527) -- [Privia-Security/CVE-2023-22527](https://github.com/Privia-Security/CVE-2023-22527) -- [MaanVader/CVE-2023-22527-POC](https://github.com/MaanVader/CVE-2023-22527-POC) -- [adminlove520/CVE-2023-22527](https://github.com/adminlove520/CVE-2023-22527) -- [YongYe-Security/CVE-2023-22527](https://github.com/YongYe-Security/CVE-2023-22527) -- [Boogipop/CVE-2023-22527-Godzilla-MEMSHELL](https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL) -- [M0untainShley/CVE-2023-22527-MEMSHELL](https://github.com/M0untainShley/CVE-2023-22527-MEMSHELL) -- [vulncheck-oss/cve-2023-22527](https://github.com/vulncheck-oss/cve-2023-22527) -- [BBD-YZZ/Confluence-RCE](https://github.com/BBD-YZZ/Confluence-RCE) -- [kh4sh3i/CVE-2023-22527](https://github.com/kh4sh3i/CVE-2023-22527) -- [thompson005/CVE-2023-22527](https://github.com/thompson005/CVE-2023-22527) - [mylo-2001/AtlassianPwn](https://github.com/mylo-2001/AtlassianPwn) ### CVE-2023-22551 (2023-01-01) @@ -29213,13 +28448,6 @@ - [sofianeelhor/CVE-2023-22621-POC](https://github.com/sofianeelhor/CVE-2023-22621-POC) -### CVE-2023-22622 (2023-01-05) - -WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation guide nor the security guide mentions this default behavior, or alerts the user about security risks on installations with very few visits. - - -- [michael-david-fry/CVE-2023-22622](https://github.com/michael-david-fry/CVE-2023-22622) - ### CVE-2023-22809 (2023-01-18) In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value. @@ -29233,10 +28461,6 @@ - [pashayogi/CVE-2023-22809](https://github.com/pashayogi/CVE-2023-22809) - [asepsaepdin/CVE-2023-22809](https://github.com/asepsaepdin/CVE-2023-22809) - [Toothless5143/CVE-2023-22809](https://github.com/Toothless5143/CVE-2023-22809) -- [laxmiyamkolu/SUDO-privilege-escalation](https://github.com/laxmiyamkolu/SUDO-privilege-escalation) -- [D0rDa4aN919/CVE-2023-22809-Exploiter](https://github.com/D0rDa4aN919/CVE-2023-22809-Exploiter) -- [Spydomain/CVE-2023-22809-automated-python-exploits](https://github.com/Spydomain/CVE-2023-22809-automated-python-exploits) -- [ValeuDoamne/CVE-2023-22809](https://github.com/ValeuDoamne/CVE-2023-22809) ### CVE-2023-22855 (2023-02-15) @@ -29258,7 +28482,6 @@ - [Saboor-Hakimi/CVE-2023-22894](https://github.com/Saboor-Hakimi/CVE-2023-22894) -- [maxntv/CVE-2023-22894-PoC](https://github.com/maxntv/CVE-2023-22894-PoC) ### CVE-2023-22906 (2023-07-03) @@ -29322,13 +28545,6 @@ - [Mr-xn/CVE-2023-23333](https://github.com/Mr-xn/CVE-2023-23333) - [emanueldosreis/nmap-CVE-2023-23333-exploit](https://github.com/emanueldosreis/nmap-CVE-2023-23333-exploit) -### CVE-2023-23388 (2023-03-14) - -Windows Bluetooth Driver Elevation of Privilege Vulnerability - - -- [ynwarcs/CVE-2023-23388](https://github.com/ynwarcs/CVE-2023-23388) - ### CVE-2023-23396 (2023-03-14) Microsoft Excel Denial of Service Vulnerability @@ -29365,10 +28581,6 @@ - [Muhammad-Ali007/OutlookNTLM_CVE-2023-23397](https://github.com/Muhammad-Ali007/OutlookNTLM_CVE-2023-23397) - [Pushkarup/CVE-2023-23397](https://github.com/Pushkarup/CVE-2023-23397) - [ducnorth2712/CVE-2023-23397](https://github.com/ducnorth2712/CVE-2023-23397) -- [TheUnknownSoul/CVE-2023-23397-PoW](https://github.com/TheUnknownSoul/CVE-2023-23397-PoW) -- [Symbolexe/CVE-2023-23397](https://github.com/Symbolexe/CVE-2023-23397) -- [Gilospy/CVE-2023-23397](https://github.com/Gilospy/CVE-2023-23397) -- [Phaedrik/CVE-2023-23397-POC](https://github.com/Phaedrik/CVE-2023-23397-POC) ### CVE-2023-23488 (2023-01-20) @@ -29400,7 +28612,6 @@ - [X1r0z/dubbo-rce](https://github.com/X1r0z/dubbo-rce) - [YYHYlh/Apache-Dubbo-CVE-2023-23638-exp](https://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp) - [P4x1s/CVE-2023-23638-Tools](https://github.com/P4x1s/CVE-2023-23638-Tools) -- [cuijiung/dubbo-CVE-2023-23638](https://github.com/cuijiung/dubbo-CVE-2023-23638) ### CVE-2023-23752 (2023-02-16) @@ -29444,13 +28655,6 @@ - [JeneralMotors/CVE-2023-23752](https://github.com/JeneralMotors/CVE-2023-23752) - [gunzf0x/CVE-2023-23752](https://github.com/gunzf0x/CVE-2023-23752) - [shellvik/CVE-2023-23752](https://github.com/shellvik/CVE-2023-23752) -- [Rival420/CVE-2023-23752](https://github.com/Rival420/CVE-2023-23752) -- [JohnDoeAnonITA/CVE-2023-23752](https://github.com/JohnDoeAnonITA/CVE-2023-23752) -- [0xWhoami35/CVE-2023-23752](https://github.com/0xWhoami35/CVE-2023-23752) -- [mariovata/CVE-2023-23752-Python](https://github.com/mariovata/CVE-2023-23752-Python) -- [0xx01/CVE-2023-23752](https://github.com/0xx01/CVE-2023-23752) -- [h3x0v3rl0rd/CVE-2023-23752](https://github.com/h3x0v3rl0rd/CVE-2023-23752) -- [Aureum01/CVE-2023-23752](https://github.com/Aureum01/CVE-2023-23752) - [Marwan651/Joomla-CMS-Full-Lifecycle-Pentest](https://github.com/Marwan651/Joomla-CMS-Full-Lifecycle-Pentest) - [Sharma01672/traveller-htb](https://github.com/Sharma01672/traveller-htb) @@ -29483,13 +28687,6 @@ - [SafeLock-D2E/Quiksand-CVE-2023-24012](https://github.com/SafeLock-D2E/Quiksand-CVE-2023-24012) -### CVE-2023-24044 (2023-01-22) - -A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature." - - -- [Cappricio-Securities/CVE-2023-24044](https://github.com/Cappricio-Securities/CVE-2023-24044) - ### CVE-2023-24055 (2023-01-22) KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. NOTE: the vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC. @@ -29503,13 +28700,6 @@ - [zwlsix/KeePass-CVE-2023-24055](https://github.com/zwlsix/KeePass-CVE-2023-24055) - [yosef0x01/CVE-2023-24055](https://github.com/yosef0x01/CVE-2023-24055) -### CVE-2023-24057 (2023-01-24) - -HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a prepackaged terminology cache, NPM package, or comparison archive). - - -- [shoucheng3/hapifhir__org_hl7_fhir_core_CVE-2023-24057_5-6-911](https://github.com/shoucheng3/hapifhir__org_hl7_fhir_core_CVE-2023-24057_5-6-911) - ### CVE-2023-24059 (2023-01-22) Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. @@ -29529,28 +28719,6 @@ ### CVE-2023-24100 - [badboycxcc/CVE-2023-24100](https://github.com/badboycxcc/CVE-2023-24100) -### CVE-2023-24203 (2024-05-14) - -Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameter(s). - - -- [momo1239/CVE-2023-24203-and-CVE-2023-24204](https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204) - -### CVE-2023-24249 (2023-02-27) - -An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file. - - -- [IDUZZEL/CVE-2023-24249-Exploit](https://github.com/IDUZZEL/CVE-2023-24249-Exploit) -- [ldb33/CVE-2023-24249-PoC](https://github.com/ldb33/CVE-2023-24249-PoC) - -### CVE-2023-24278 (2023-03-18) - -Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. - - -- [NeCr00/CVE-2023-24278](https://github.com/NeCr00/CVE-2023-24278) - ### CVE-2023-24317 (2023-02-23) Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_organizer.php. @@ -29634,21 +28802,12 @@ - [csffs/CVE-2023-24775-and-CVE-2023-24780](https://github.com/csffs/CVE-2023-24775-and-CVE-2023-24780) -### CVE-2023-24871 (2023-03-14) - -Windows Bluetooth Service Remote Code Execution Vulnerability - - -- [ynwarcs/CVE-2023-24871](https://github.com/ynwarcs/CVE-2023-24871) - ### CVE-2023-24932 (2023-05-09) Secure Boot Security Feature Bypass Vulnerability - [helleflo1312/Orchestrated-Powershell-for-CVE-2023-24932](https://github.com/helleflo1312/Orchestrated-Powershell-for-CVE-2023-24932) -- [ajf8729/BlackLotus](https://github.com/ajf8729/BlackLotus) -- [v1ckxy/Orchestrated-Powershell-for-CVE-2023-24932-en](https://github.com/v1ckxy/Orchestrated-Powershell-for-CVE-2023-24932-en) ### CVE-2023-24955 (2023-05-09) @@ -29678,8 +28837,6 @@ - [H4K6/CVE-2023-25136](https://github.com/H4K6/CVE-2023-25136) - [Business1sg00d/CVE-2023-25136](https://github.com/Business1sg00d/CVE-2023-25136) - [malvika-thakur/CVE-2023-25136](https://github.com/malvika-thakur/CVE-2023-25136) -- [mrmtwoj/CVE-2023-25136](https://github.com/mrmtwoj/CVE-2023-25136) -- [Lane0218/CVE-2023-25136-PoC](https://github.com/Lane0218/CVE-2023-25136-PoC) ### CVE-2023-25157 (2023-02-21) @@ -29692,8 +28849,6 @@ - [7imbitz/CVE-2023-25157-checker](https://github.com/7imbitz/CVE-2023-25157-checker) - [Rubikcuv5/CVE-2023-25157](https://github.com/Rubikcuv5/CVE-2023-25157) - [dr-cable-tv/Geoserver-CVE-2023-25157](https://github.com/dr-cable-tv/Geoserver-CVE-2023-25157) -- [custiya/geoserver-CVE-2023-25157](https://github.com/custiya/geoserver-CVE-2023-25157) -- [charis3306/CVE-2023-25157](https://github.com/charis3306/CVE-2023-25157) ### CVE-2023-25194 (2023-02-07) @@ -29702,13 +28857,6 @@ - [ohnonoyesyes/CVE-2023-25194](https://github.com/ohnonoyesyes/CVE-2023-25194) - [YongYe-Security/CVE-2023-25194](https://github.com/YongYe-Security/CVE-2023-25194) -- [vulncheck-oss/cve-2023-25194](https://github.com/vulncheck-oss/cve-2023-25194) - -### CVE-2023-25202 -- [Trackflaw/CVE-2023-25202](https://github.com/Trackflaw/CVE-2023-25202) - -### CVE-2023-25203 -- [Trackflaw/CVE-2023-25203](https://github.com/Trackflaw/CVE-2023-25203) ### CVE-2023-25234 (2023-02-27) @@ -29752,20 +28900,6 @@ - [brainkok/CVE-2023-25292](https://github.com/brainkok/CVE-2023-25292) -### CVE-2023-25355 (2023-04-04) - -CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`. - - -- [glefait/CVE-2023-25355-25356](https://github.com/glefait/CVE-2023-25355-25356) - -### CVE-2023-25581 (2024-10-10) - -pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core. It can be exploited by providing an attribute that contains a serialized Java object with a special prefix `{#sb64}` and Base64 encoding. This issue may lead to Remote Code Execution (RCE) in the worst case. Although a `RestrictedObjectInputStream` is in place, that puts some restriction on what classes can be deserialized, it still allows a broad range of java packages and potentially exploitable with different gadget chains. pac4j versions 4.0.0 and greater are not affected by this issue. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [p33d/CVE-2023-25581](https://github.com/p33d/CVE-2023-25581) - ### CVE-2023-25610 (2025-03-24) A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. @@ -29781,7 +28915,6 @@ - [tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL](https://github.com/tbachvarova/linux-apache-fix-mod_rewrite-spaceInURL) - [dhmosfunk/CVE-2023-25690-POC](https://github.com/dhmosfunk/CVE-2023-25690-POC) - [thanhlam-attt/CVE-2023-25690](https://github.com/thanhlam-attt/CVE-2023-25690) -- [oOCyginXOo/CVE-2023-25690-POC](https://github.com/oOCyginXOo/CVE-2023-25690-POC) - [arnavps/CTF-Web-Exploitation](https://github.com/arnavps/CTF-Web-Exploitation) ### CVE-2023-25725 (2023-02-14) @@ -29796,11 +28929,6 @@ Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fixed in Sequelize 6.19.1. Users are advised to upgrade. Users unable to upgrade should not use the `replacements` and the `where` option in the same query. -- [bde574786/Sequelize-1day-CVE-2023-25813](https://github.com/bde574786/Sequelize-1day-CVE-2023-25813) -- [White-BAO/CVE-2023-25813](https://github.com/White-BAO/CVE-2023-25813) -- [pbj2647/CVE-2023-25813](https://github.com/pbj2647/CVE-2023-25813) -- [numbbvi/CVE-2023-25813](https://github.com/numbbvi/CVE-2023-25813) -- [sea-middle/cve-2023-25813](https://github.com/sea-middle/cve-2023-25813) - [h-gunp/CVE-2023-25813-TEST](https://github.com/h-gunp/CVE-2023-25813-TEST) ### CVE-2023-25950 (2023-04-11) @@ -29855,12 +28983,6 @@ - [CUCUMBERanOrSNCompany/SealSecurityAssignment](https://github.com/CUCUMBERanOrSNCompany/SealSecurityAssignment) -- [ronmadar/Open-Source-Seal-Security](https://github.com/ronmadar/Open-Source-Seal-Security) -- [m-lito13/SealSecurity_Exam](https://github.com/m-lito13/SealSecurity_Exam) -- [dani33339/Tough-Cookie-v2.5.0-Patched](https://github.com/dani33339/Tough-Cookie-v2.5.0-Patched) -- [morrisel/CVE-2023-26136](https://github.com/morrisel/CVE-2023-26136) -- [uriyahav/tough-cookie-2.5.0-cve-2023-26136-fix](https://github.com/uriyahav/tough-cookie-2.5.0-cve-2023-26136-fix) -- [guy2610/tough-cookie-patch-cve-2023-26136](https://github.com/guy2610/tough-cookie-patch-cve-2023-26136) ### CVE-2023-26144 (2023-09-20) @@ -29869,20 +28991,6 @@ - [tadhglewis/apollo-koa-minimal](https://github.com/tadhglewis/apollo-koa-minimal) -### CVE-2023-26208 (2023-03-09) - -A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form. - - -- [chessredoffsec/CVE-2023-26208](https://github.com/chessredoffsec/CVE-2023-26208) - -### CVE-2023-26209 (2023-03-09) - -A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated attacker to partially exhaust CPU and memory via sending numerous HTTP requests to the login form. - - -- [chessredoffsec/CVE-2023-26209](https://github.com/chessredoffsec/CVE-2023-26209) - ### CVE-2023-26255 (2023-02-28) An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system. @@ -29921,24 +29029,12 @@ - [mbadanoiu/CVE-2023-26269](https://github.com/mbadanoiu/CVE-2023-26269) -### CVE-2023-26326 (2023-02-23) - -The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. - - -- [omarelshopky/exploit_cve-2023-26326_using_cve-2024-2961](https://github.com/omarelshopky/exploit_cve-2023-26326_using_cve-2024-2961) -- [mesudmammad1/CVE-2023-26326_Buddyform_exploit](https://github.com/mesudmammad1/CVE-2023-26326_Buddyform_exploit) - ### CVE-2023-26360 (2023-03-23) Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. - [yosef0x01/CVE-2023-26360](https://github.com/yosef0x01/CVE-2023-26360) -- [jakabakos/CVE-2023-26360-adobe-coldfusion-rce-exploit](https://github.com/jakabakos/CVE-2023-26360-adobe-coldfusion-rce-exploit) -- [CuriousLearnerDev/ColdFusion_EXp](https://github.com/CuriousLearnerDev/ColdFusion_EXp) -- [H3rm1tR3b0rn/CVE-2023-26360-RCE](https://github.com/H3rm1tR3b0rn/CVE-2023-26360-RCE) -- [RyanRodrigues880/CVE-2023-26360](https://github.com/RyanRodrigues880/CVE-2023-26360) - [joaoaugustom/Adobe_ColdFusion_RCE_Unauthenticated](https://github.com/joaoaugustom/Adobe_ColdFusion_RCE_Unauthenticated) ### CVE-2023-26469 (2023-08-17) @@ -29947,7 +29043,6 @@ - [d0rb/CVE-2023-26469](https://github.com/d0rb/CVE-2023-26469) -- [Kairo-one/CVE-2023-26469-Jorani](https://github.com/Kairo-one/CVE-2023-26469-Jorani) ### CVE-2023-26482 (2023-03-30) @@ -29977,13 +29072,6 @@ - [bigzooooz/CVE-2023-26692](https://github.com/bigzooooz/CVE-2023-26692) -### CVE-2023-26785 (2024-10-17) - -MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed. - - -- [Ant1sec-ops/CVE-2023-26785](https://github.com/Ant1sec-ops/CVE-2023-26785) - ### CVE-2023-26818 (2023-05-19) Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag. @@ -30040,7 +29128,6 @@ - [DarokNET/CVE-2023-27100](https://github.com/DarokNET/CVE-2023-27100) -- [fabdotnet/CVE-2023-27100](https://github.com/fabdotnet/CVE-2023-27100) ### CVE-2023-27146 - [astrocombat1607/CVE-2023-27146-LocalPotato-Priviledge-Escalation](https://github.com/astrocombat1607/CVE-2023-27146-LocalPotato-Priviledge-Escalation) @@ -30063,12 +29150,6 @@ - [Hamibubu/CVE-2023-27163](https://github.com/Hamibubu/CVE-2023-27163) - [KharimMchatta/basketcraft](https://github.com/KharimMchatta/basketcraft) - [MasterCode112/CVE-2023-27163](https://github.com/MasterCode112/CVE-2023-27163) -- [Rishabh-Kumar-Cyber-Sec/CVE-2023-27163-ssrf-to-port-scanning](https://github.com/Rishabh-Kumar-Cyber-Sec/CVE-2023-27163-ssrf-to-port-scanning) -- [btar1gan/exploit_CVE-2023-27163](https://github.com/btar1gan/exploit_CVE-2023-27163) -- [G4sp4rCS/htb-sau-automated](https://github.com/G4sp4rCS/htb-sau-automated) -- [lukehebe/CVE-2023-27163-POC](https://github.com/lukehebe/CVE-2023-27163-POC) -- [J0ey17/Exploit_CVE-2023-27163](https://github.com/J0ey17/Exploit_CVE-2023-27163) -- [theopaid/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer](https://github.com/theopaid/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer) - [thealchimist86/CVE-2023-27163---SSRF-Baskets-Requests](https://github.com/thealchimist86/CVE-2023-27163---SSRF-Baskets-Requests) - [thealchimist86/CVE-2023-27163---Maltrail-0.53---RCE](https://github.com/thealchimist86/CVE-2023-27163---Maltrail-0.53---RCE) - [tombstoneghost/htb-sau-exploit-chain](https://github.com/tombstoneghost/htb-sau-exploit-chain) @@ -30080,7 +29161,6 @@ - [FzBacon/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection](https://github.com/FzBacon/CVE-2023-27216_D-Link_DSL-3782_Router_command_injection) -- [HoangREALER/CVE-2023-27216](https://github.com/HoangREALER/CVE-2023-27216) ### CVE-2023-27326 (2024-05-03) @@ -30108,12 +29188,6 @@ - [adhikara13/CVE-2023-27350](https://github.com/adhikara13/CVE-2023-27350) - [Ap0dexMe0/CVE-2023-27350](https://github.com/Ap0dexMe0/CVE-2023-27350) - [Jenderal92/CVE-2023-27350](https://github.com/Jenderal92/CVE-2023-27350) -- [ASG-CASTLE/CVE-2023-27350](https://github.com/ASG-CASTLE/CVE-2023-27350) -- [rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability](https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability) -- [monke443/CVE-2023-27350](https://github.com/monke443/CVE-2023-27350) -- [0xB0y426/CVE-2023-27350-PoC](https://github.com/0xB0y426/CVE-2023-27350-PoC) -- [Royall-Researchers/CVE-2023-27350](https://github.com/Royall-Researchers/CVE-2023-27350) -- [dezso-dfield/CVE-2023-27350](https://github.com/dezso-dfield/CVE-2023-27350) - [joaoaugustom/PaperCut-Authentication_Bypass_and_RCE](https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE) ### CVE-2023-27363 (2024-05-03) @@ -30137,9 +29211,6 @@ - [izzz0/CVE-2023-27372-POC](https://github.com/izzz0/CVE-2023-27372-POC) - [Ap0dexMe0/CVE-2023-27372](https://github.com/Ap0dexMe0/CVE-2023-27372) - [redboltsec/CVE-2023-27372-PoC](https://github.com/redboltsec/CVE-2023-27372-PoC) -- [1amthebest1/CVE-2023-27372](https://github.com/1amthebest1/CVE-2023-27372) -- [1Ronkkeli/spip-cve-2023-27372-rce](https://github.com/1Ronkkeli/spip-cve-2023-27372-rce) -- [G01d3nW01f/cve-2023-27372](https://github.com/G01d3nW01f/cve-2023-27372) - [KirolosKhairy/CVE-2023-27372](https://github.com/KirolosKhairy/CVE-2023-27372) - [estebanzarate/CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC](https://github.com/estebanzarate/CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC) - [scriniariii/CVE-2023-27372](https://github.com/scriniariii/CVE-2023-27372) @@ -30166,8 +29237,6 @@ - [jakabakos/CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE](https://github.com/jakabakos/CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE) - [CN016/Apache-Superset-SECRET_KEY-CVE-2023-27524-](https://github.com/CN016/Apache-Superset-SECRET_KEY-CVE-2023-27524-) - [h1n4mx0/Research-CVE-2023-27524](https://github.com/h1n4mx0/Research-CVE-2023-27524) -- [karthi-the-hacker/CVE-2023-27524](https://github.com/karthi-the-hacker/CVE-2023-27524) -- [Cappricio-Securities/CVE-2023-27524](https://github.com/Cappricio-Securities/CVE-2023-27524) - [sumaiyafathima-code/CVE-2023-27524](https://github.com/sumaiyafathima-code/CVE-2023-27524) - [rachidafaf/bola-CVE-2023-27524](https://github.com/rachidafaf/bola-CVE-2023-27524) @@ -30178,15 +29247,6 @@ - [horizon3ai/CVE-2023-27532](https://github.com/horizon3ai/CVE-2023-27532) - [sfewer-r7/CVE-2023-27532](https://github.com/sfewer-r7/CVE-2023-27532) -- [puckiestyle/CVE-2023-27532-RCE-Only](https://github.com/puckiestyle/CVE-2023-27532-RCE-Only) -- [yunus-a1i/veeam-cve-2023-27532-mock](https://github.com/yunus-a1i/veeam-cve-2023-27532-mock) - -### CVE-2023-27564 (2023-05-10) - -The n8n package 0.218.0 for Node.js allows Information Disclosure. - - -- [david-botelho-mariano/exploit-CVE-2023-27564](https://github.com/david-botelho-mariano/exploit-CVE-2023-27564) ### CVE-2023-27566 (2023-03-03) @@ -30250,8 +29310,6 @@ - [Cyb3rEnthusiast/CVE-2023-27997](https://github.com/Cyb3rEnthusiast/CVE-2023-27997) - [lexfo/xortigate-cve-2023-27997](https://github.com/lexfo/xortigate-cve-2023-27997) - [delsploit/CVE-2023-27997](https://github.com/delsploit/CVE-2023-27997) -- [node011/CVE-2023-27997-POC](https://github.com/node011/CVE-2023-27997-POC) -- [onurkerembozkurt/fgt-cve-2023-27997-exploit](https://github.com/onurkerembozkurt/fgt-cve-2023-27997-exploit) ### CVE-2023-28121 (2023-04-12) @@ -30264,8 +29322,6 @@ - [C04LA/CVE-2023-28121](https://github.com/C04LA/CVE-2023-28121) - [Jenderal92/WP-CVE-2023-28121](https://github.com/Jenderal92/WP-CVE-2023-28121) - [1337nemojj/CVE-2023-28121](https://github.com/1337nemojj/CVE-2023-28121) -- [sug4r-wr41th/CVE-2023-28121](https://github.com/sug4r-wr41th/CVE-2023-28121) -- [0axz-tools/CVE-2023-28121](https://github.com/0axz-tools/CVE-2023-28121) - [luisdevpentest/CVE-2023-28121-WordPress-Privilege-Escalation](https://github.com/luisdevpentest/CVE-2023-28121-WordPress-Privilege-Escalation) ### CVE-2023-28197 (2024-01-10) @@ -30275,14 +29331,6 @@ - [spotlightishere/inputcontrol](https://github.com/spotlightishere/inputcontrol) -### CVE-2023-28205 (2023-04-10) - -A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. - - -- [ntfargo/uaf-2023-28205](https://github.com/ntfargo/uaf-2023-28205) -- [seregonwar/uaf-2023-28205](https://github.com/seregonwar/uaf-2023-28205) - ### CVE-2023-28206 (2023-04-10) An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. @@ -30303,7 +29351,6 @@ - [Y3A/CVE-2023-28229](https://github.com/Y3A/CVE-2023-28229) -- [byt3n33dl3/CrackKeyIso](https://github.com/byt3n33dl3/CrackKeyIso) ### CVE-2023-28231 (2023-04-11) @@ -30327,23 +29374,6 @@ - [fortra/CVE-2023-28252](https://github.com/fortra/CVE-2023-28252) - [726232111/CVE-2023-28252](https://github.com/726232111/CVE-2023-28252) - [Danasuley/CVE-2023-28252-](https://github.com/Danasuley/CVE-2023-28252-) -- [duck-sec/CVE-2023-28252-Compiled-exe](https://github.com/duck-sec/CVE-2023-28252-Compiled-exe) -- [byt3n33dl3/CLFS](https://github.com/byt3n33dl3/CLFS) -- [Vulmatch/CVE-2023-28252](https://github.com/Vulmatch/CVE-2023-28252) - -### CVE-2023-28303 (2023-06-13) - -Windows Snipping Tool Information Disclosure Vulnerability - - -- [m31r0n/SnipRecover-CLI](https://github.com/m31r0n/SnipRecover-CLI) - -### CVE-2023-28324 (2023-06-30) - -A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution. - - -- [horizon3ai/CVE-2023-28324](https://github.com/horizon3ai/CVE-2023-28324) ### CVE-2023-28329 (2023-03-23) @@ -30367,13 +29397,6 @@ - [gobysec/CVE-2023-28343](https://github.com/gobysec/CVE-2023-28343) - [superzerosec/CVE-2023-28343](https://github.com/superzerosec/CVE-2023-28343) -### CVE-2023-28354 (2025-01-09) - -An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NRPE plugin execution. This allows the attacker to escape NRPE plugin execution and execute commands remotely on the target as NT_AUTHORITY\SYSTEM. - - -- [stormfleet/CVE-2023-28354](https://github.com/stormfleet/CVE-2023-28354) - ### CVE-2023-28432 (2023-03-22) Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY`\nand `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z. @@ -30395,7 +29418,6 @@ - [yTxZx/CVE-2023-28432](https://github.com/yTxZx/CVE-2023-28432) - [unam4/CVE-2023-28432-minio_update_rce](https://github.com/unam4/CVE-2023-28432-minio_update_rce) - [C1ph3rX13/CVE-2023-28432](https://github.com/C1ph3rX13/CVE-2023-28432) -- [BitWiz4rd/CVE-2023-28432](https://github.com/BitWiz4rd/CVE-2023-28432) ### CVE-2023-28434 (2023-03-22) @@ -30411,13 +29433,6 @@ - [drkbcn/lblfixer_cve_2023_28447](https://github.com/drkbcn/lblfixer_cve_2023_28447) -### CVE-2023-28465 (2023-12-12) - -The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the attacker. NOTE: this issue exists because of an incomplete fix for CVE-2023-24057. - - -- [shoucheng3/hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055](https://github.com/shoucheng3/hapifhir__org_hl7_fhir_core_CVE-2023-28465_5-6-1055) - ### CVE-2023-28467 (2023-05-22) In MyBB before 1.8.34, there is XSS in the User CP module via the user email field. @@ -30425,27 +29440,12 @@ - [ahmetaltuntas/CVE-2023-28467](https://github.com/ahmetaltuntas/CVE-2023-28467) -### CVE-2023-28588 (2023-12-05) - -Transient DOS in Bluetooth Host while rfc slot allocation. - - -- [uthrasri/CVE-2023-28588_G2.5_singlefile](https://github.com/uthrasri/CVE-2023-28588_G2.5_singlefile) - -### CVE-2023-28753 (2023-05-18) - -netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data. - - -- [pingjuiliao/CVE-2023-28753](https://github.com/pingjuiliao/CVE-2023-28753) - ### CVE-2023-28771 (2023-04-25) Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device. - [benjaminhays/CVE-2023-28771-PoC](https://github.com/benjaminhays/CVE-2023-28771-PoC) -- [JinParkmida/cve-2023-28771-demo](https://github.com/JinParkmida/cve-2023-28771-demo) ### CVE-2023-28772 (2023-03-23) @@ -30485,13 +29485,6 @@ - [ohnonoyesyes/CVE-2023-29084](https://github.com/ohnonoyesyes/CVE-2023-29084) -### CVE-2023-29201 (2023-04-15) - -XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1, only escaped `<script>` and `<style>`-tags but neither attributes that can be used to inject scripts nor other dangerous HTML tags like `<iframe>`. As a consequence, any code relying on this "restricted" mode for security is vulnerable to JavaScript injection ("cross-site scripting"/XSS). When a privileged user with programming rights visits such a comment in XWiki, the malicious JavaScript code is executed in the context of the user session. This allows server-side code execution with programming rights, impacting the confidentiality, integrity and availability of the XWiki instance. This problem has been patched in XWiki 14.6 RC1 with the introduction of a filter with allowed HTML elements and attributes that is enabled in restricted mode. There are no known workarounds apart from upgrading to a version including the fix. - - -- [shoucheng3/xwiki__xwiki-commons_CVE-2023-29201_14-5](https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2023-29201_14-5) - ### CVE-2023-29324 (2023-05-09) Windows MSHTML Platform Security Feature Bypass Vulnerability @@ -30522,8 +29515,6 @@ - [LuemmelSec/CVE-2023-29357](https://github.com/LuemmelSec/CVE-2023-29357) - [KeyStrOke95/CVE-2023-29357-ExE](https://github.com/KeyStrOke95/CVE-2023-29357-ExE) - [Guillaume-Risch/cve-2023-29357-Sharepoint](https://github.com/Guillaume-Risch/cve-2023-29357-Sharepoint) -- [AhmedMansour93/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357](https://github.com/AhmedMansour93/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357) -- [DeividasTerechovas/SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation](https://github.com/DeividasTerechovas/SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation) - [DonVorrin/CVE-2023-29357](https://github.com/DonVorrin/CVE-2023-29357) ### CVE-2023-29360 (2023-06-13) @@ -30532,22 +29523,6 @@ - [Nero22k/cve-2023-29360](https://github.com/Nero22k/cve-2023-29360) -- [0xDivyanshu-new/CVE-2023-29360](https://github.com/0xDivyanshu-new/CVE-2023-29360) -- [Scottman625/CVE-2023-29360](https://github.com/Scottman625/CVE-2023-29360) - -### CVE-2023-29384 (2023-12-20) - -Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0. - - -- [nastar-id/CVE-2023-29384](https://github.com/nastar-id/CVE-2023-29384) - -### CVE-2023-29386 (2024-03-26) - -Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0. - - -- [vigilante-1337/CVE-2023-29386](https://github.com/vigilante-1337/CVE-2023-29386) ### CVE-2023-29401 (2023-06-08) @@ -30601,26 +29576,6 @@ - [S4muraiMelayu1337/CVE-2023-29489](https://github.com/S4muraiMelayu1337/CVE-2023-29489) - [SynixCyberCrimeMy/CVE-2023-29489](https://github.com/SynixCyberCrimeMy/CVE-2023-29489) - [Makurorororororororo/Validate-CVE-2023-29489-scanner-](https://github.com/Makurorororororororo/Validate-CVE-2023-29489-scanner-) -- [prasad-1808/tool-29489](https://github.com/prasad-1808/tool-29489) -- [mdaseem03/cpanel_xss_2023](https://github.com/mdaseem03/cpanel_xss_2023) -- [some-man1/CVE-2023-29489](https://github.com/some-man1/CVE-2023-29489) -- [Cappricio-Securities/CVE-2023-29489](https://github.com/Cappricio-Securities/CVE-2023-29489) -- [md-thalal/CVE-2023-29489](https://github.com/md-thalal/CVE-2023-29489) -- [Thuankobtcode/CVE-2023-29489](https://github.com/Thuankobtcode/CVE-2023-29489) - -### CVE-2023-29528 (2023-04-20) - -XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in version 4.2-milestone-1 and massively improved in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid HTML comments. As a consequence, any code relying on this "restricted" mode for security is vulnerable to JavaScript injection ("cross-site scripting"/XSS). When a privileged user with programming rights visits such a comment in XWiki, the malicious JavaScript code is executed in the context of the user session. This allows server-side code execution with programming rights, impacting the confidentiality, integrity and availability of the XWiki instance. This problem has been patched in XWiki 14.10, HTML comments are now removed in restricted mode and a check has been introduced that ensures that comments don't start with `>`. There are no known workarounds apart from upgrading to a version including the fix.\n - - -- [shoucheng3/xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1](https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1) - -### CVE-2023-29689 (2023-08-04) - -PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system. - - -- [YSaxon/pyrocms-ssti-fix](https://github.com/YSaxon/pyrocms-ssti-fix) ### CVE-2023-29808 (2023-05-12) @@ -30742,7 +29697,6 @@ - [VisDev23/Vulnerable-Docker--CVE-2023-30212-](https://github.com/VisDev23/Vulnerable-Docker--CVE-2023-30212-) - [AAsh035/CVE-2023-30212](https://github.com/AAsh035/CVE-2023-30212) - [JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-](https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-) -- [sungmin20/cve-2023-30212](https://github.com/sungmin20/cve-2023-30212) ### CVE-2023-30226 (2023-07-12) @@ -30756,14 +29710,6 @@ Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data. -- [Rubikcuv5/cve-2023-30253](https://github.com/Rubikcuv5/cve-2023-30253) -- [04Shivam/CVE-2023-30253-Exploit](https://github.com/04Shivam/CVE-2023-30253-Exploit) -- [nikn0laty/Exploit-for-Dolibarr-17.0.0-CVE-2023-30253](https://github.com/nikn0laty/Exploit-for-Dolibarr-17.0.0-CVE-2023-30253) -- [g4nkd/CVE-2023-30253-PoC](https://github.com/g4nkd/CVE-2023-30253-PoC) -- [dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253](https://github.com/dollarboysushil/Dolibarr-17.0.0-Exploit-CVE-2023-30253) -- [andria-dev/DolibabyPhp](https://github.com/andria-dev/DolibabyPhp) -- [bluetoothStrawberry/CVE-2023-30253](https://github.com/bluetoothStrawberry/CVE-2023-30253) -- [1lkla/POC-exploit-for-Dolibarr](https://github.com/1lkla/POC-exploit-for-Dolibarr) - [Jeanback1/CVE-2023-30253-exploit](https://github.com/Jeanback1/CVE-2023-30253-exploit) ### CVE-2023-30256 (2023-05-11) @@ -30778,15 +29724,6 @@ Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request. -- [gy741/CVE-2023-30258-setup](https://github.com/gy741/CVE-2023-30258-setup) -- [sk00l/CVE-2023-30258](https://github.com/sk00l/CVE-2023-30258) -- [tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit](https://github.com/tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit) -- [Chocapikk/CVE-2023-30258](https://github.com/Chocapikk/CVE-2023-30258) -- [n00o00b/CVE-2023-30258-RCE-POC](https://github.com/n00o00b/CVE-2023-30258-RCE-POC) -- [AdityaBhatt3010/TryHackMe-Room-Walkthrough-Billing](https://github.com/AdityaBhatt3010/TryHackMe-Room-Walkthrough-Billing) -- [abdullohqurbon0v/CVE-2023-30258-Exploit-For-Magnus-Billing-System](https://github.com/abdullohqurbon0v/CVE-2023-30258-Exploit-For-Magnus-Billing-System) -- [CankunWang/Tryhackme_Billing](https://github.com/CankunWang/Tryhackme_Billing) -- [kayl22/magnus_billing_7.3.0_RCE_CVE-2023-30258](https://github.com/kayl22/magnus_billing_7.3.0_RCE_CVE-2023-30258) - [estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC](https://github.com/estebanzarate/CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC) - [cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit](https://github.com/cyb3rk0ala/THM-MagnusBilling-CVE-2023-30258-Exploit) @@ -30825,13 +29762,6 @@ - [Toxich4/CVE-2023-30459](https://github.com/Toxich4/CVE-2023-30459) -### CVE-2023-30486 (2024-12-09) - -Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0. - - -- [RandomRobbieBF/CVE-2023-30486](https://github.com/RandomRobbieBF/CVE-2023-30486) - ### CVE-2023-30533 (2023-04-24) SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected. @@ -30846,9 +29776,6 @@ - [rvzsec/CVE-2023-30547](https://github.com/rvzsec/CVE-2023-30547) -- [user0x1337/CVE-2023-30547](https://github.com/user0x1337/CVE-2023-30547) -- [Cur1iosity/CVE-2023-30547](https://github.com/Cur1iosity/CVE-2023-30547) -- [junnythemarksman/CVE-2023-30547](https://github.com/junnythemarksman/CVE-2023-30547) ### CVE-2023-30765 (2023-07-10) @@ -30864,22 +29791,6 @@ - [Alucard0x1/CVE-2023-30777](https://github.com/Alucard0x1/CVE-2023-30777) -### CVE-2023-30799 (2023-07-19) - -MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system. - - -- [alzeer711/MikroTik-RouterOS-6.49.18-Exploit-Kit](https://github.com/alzeer711/MikroTik-RouterOS-6.49.18-Exploit-Kit) - -### CVE-2023-30800 (2023-09-07) - -The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected. - - -- [griffinsectio/CVE-2023-30800_PoC](https://github.com/griffinsectio/CVE-2023-30800_PoC) -- [griffinsectio/CVE-2023-30800_PoC_go](https://github.com/griffinsectio/CVE-2023-30800_PoC_go) -- [diemaxxing/cve-2023-30800-multithread-doser](https://github.com/diemaxxing/cve-2023-30800-multithread-doser) - ### CVE-2023-30839 (2023-04-25) PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 contain a patch for this issue. There are no known workarounds. @@ -30901,13 +29812,6 @@ - [jmrcsnchz/CVE-2023-30854](https://github.com/jmrcsnchz/CVE-2023-30854) -### CVE-2023-30861 (2023-05-02) - -Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` headers, it may send one client's `session` cookie to other clients. The severity depends on the application's use of the session and the proxy's behavior regarding cookies. The risk depends on all these conditions being met.\n\n1. The application must be hosted behind a caching proxy that does not strip cookies or ignore responses with cookies.\n2. The application sets `session.permanent = True`\n3. The application does not access or modify the session at any point during a request.\n4. `SESSION_REFRESH_EACH_REQUEST` enabled (the default).\n5. The application does not set a `Cache-Control` header to indicate that a page is private or should not be cached.\n\nThis happens because vulnerable versions of Flask only set the `Vary: Cookie` header when the session is accessed or modified, not when it is refreshed (re-sent to update the expiration) without being accessed or modified. This issue has been fixed in versions 2.3.2 and 2.2.5. - - -- [fromitive/cve-2023-30861-poc](https://github.com/fromitive/cve-2023-30861-poc) - ### CVE-2023-30943 (2023-05-02) The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. @@ -30915,14 +29819,12 @@ - [d0rb/CVE-2023-30943](https://github.com/d0rb/CVE-2023-30943) - [Chocapikk/CVE-2023-30943](https://github.com/Chocapikk/CVE-2023-30943) -- [RubyCat1337/CVE-2023-30943](https://github.com/RubyCat1337/CVE-2023-30943) ### CVE-2023-30990 (2023-07-03) IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036. -- [silentsignal/CVE-2023-30990](https://github.com/silentsignal/CVE-2023-30990) - [cyn8/cve-2023-30990](https://github.com/cyn8/cve-2023-30990) ### CVE-2023-31059 (2023-04-24) @@ -30935,20 +29837,11 @@ ### CVE-2023-31070 - [bugprove/cve-2023-31070](https://github.com/bugprove/cve-2023-31070) -### CVE-2023-31126 (2023-05-09) - -`org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-rc-1, allows the injection of arbitrary HTML code and thus cross-site scripting via invalid data attributes. This vulnerability does not affect restricted cleaning in HTMLCleaner as there attributes are cleaned and thus characters like `/` and `>` are removed in all attribute names. This problem has been patched in XWiki 14.10.4 and 15.0 RC1 by making sure that data attributes only contain allowed characters. There are no known workarounds apart from upgrading to a version including the fix. - - -- [shoucheng3/xwiki__xwiki-commons_CVE-2023-31126_14-10-3](https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2023-31126_14-10-3) -- [shoucheng3/cov-int](https://github.com/shoucheng3/cov-int) - ### CVE-2023-31290 (2023-04-27) Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds because the entropy is 32 bits, as exploited in the wild in December 2022 and March 2023. This occurs because the mt19937 Mersenne Twister takes a single 32-bit value as an input seed, resulting in only four billion possible mnemonics. The affected versions of the browser extension are 0.0.172 through 0.0.182. To steal funds efficiently, an attacker can identify all Ethereum addresses created since the 0.0.172 release, and check whether they are Ethereum addresses that could have been created by this extension. To respond to the risk, affected users need to upgrade the product version and also move funds to a new wallet address. -- [ohexa/py_trustwallet_wasm](https://github.com/ohexa/py_trustwallet_wasm) - [ethicbrudhack/CVE-2023-31290-Scanner-](https://github.com/ethicbrudhack/CVE-2023-31290-Scanner-) ### CVE-2023-31320 (2023-11-14) @@ -31203,13 +30096,6 @@ - [Avento/CVE-2023-32031](https://github.com/Avento/CVE-2023-32031) -### CVE-2023-32070 (2023-05-10) - -XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version. - - -- [shoucheng3/xwiki__xwiki-rendering_CVE-2023-32070_14-5](https://github.com/shoucheng3/xwiki__xwiki-rendering_CVE-2023-32070_14-5) - ### CVE-2023-32073 (2023-05-12) WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3. @@ -31246,8 +30132,6 @@ - [PIDAN-HEIDASHUAI/CVE-2023-32233](https://github.com/PIDAN-HEIDASHUAI/CVE-2023-32233) - [Liuk3r/CVE-2023-32233](https://github.com/Liuk3r/CVE-2023-32233) - [oferchen/POC-CVE-2023-32233](https://github.com/oferchen/POC-CVE-2023-32233) -- [RogelioPumajulca/TEST-CVE-2023-32233](https://github.com/RogelioPumajulca/TEST-CVE-2023-32233) -- [void0red/CVE-2023-32233](https://github.com/void0red/CVE-2023-32233) - [Destawell/gemini-2.5-pro-nf-tables-red-teaming](https://github.com/Destawell/gemini-2.5-pro-nf-tables-red-teaming) - [Destawell/gemini-2.5-pro-nf-tables-red-teamin](https://github.com/Destawell/gemini-2.5-pro-nf-tables-red-teamin) @@ -31272,7 +30156,6 @@ - [thatonesecguy/Wordpress-Vulnerability-Identification-Scripts](https://github.com/thatonesecguy/Wordpress-Vulnerability-Identification-Scripts) - [manavvedawala/CVE-2023-32243-proof-of-concept](https://github.com/manavvedawala/CVE-2023-32243-proof-of-concept) - [Jenderal92/WP-CVE-2023-32243](https://github.com/Jenderal92/WP-CVE-2023-32243) -- [dev0558/CVE-2023-32243-Detection-and-Mitigation-in-WordPress](https://github.com/dev0558/CVE-2023-32243-Detection-and-Mitigation-in-WordPress) ### CVE-2023-32309 (2023-05-15) @@ -31281,13 +30164,6 @@ - [itlabbet/CVE-2023-32309](https://github.com/itlabbet/CVE-2023-32309) -### CVE-2023-32314 (2023-05-15) - -vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to and including 3.9.17. It abuses an unexpected creation of a host object based on the specification of `Proxy`. As a result a threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.18` of `vm2`. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [AdarkSt/Honeypot_Smart_Infrastructure](https://github.com/AdarkSt/Honeypot_Smart_Infrastructure) - ### CVE-2023-32315 (2023-05-26) Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environment in an already configured Openfire environment to access restricted pages in the Openfire Admin Console reserved for administrative users. This vulnerability affects all versions of Openfire that have been released since April 2015, starting with version 3.10.0. The problem has been patched in Openfire release 4.7.5 and 4.6.8, and further improvements will be included in the yet-to-be released first version on the 4.8 branch (which is expected to be version 4.8.0). Users are advised to upgrade. If an Openfire upgrade isn’t available for a specific release, or isn’t quickly actionable, users may see the linked github advisory (GHSA-gw42-f939-fhvm) for mitigation advice. @@ -31302,10 +30178,7 @@ - [gibran-abdillah/CVE-2023-32315](https://github.com/gibran-abdillah/CVE-2023-32315) - [CN016/Openfire-RCE-CVE-2023-32315-](https://github.com/CN016/Openfire-RCE-CVE-2023-32315-) - [K3ysTr0K3R/CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) -- [bryanqb07/CVE-2023-32315](https://github.com/bryanqb07/CVE-2023-32315) -- [asepsaepdin/CVE-2023-32315](https://github.com/asepsaepdin/CVE-2023-32315) - [pulentoski/Explotacion-CVE-2023-32315-Openfire](https://github.com/pulentoski/Explotacion-CVE-2023-32315-Openfire) -- [shiyingzhencai/CVE-2023-32315-java7-](https://github.com/shiyingzhencai/CVE-2023-32315-java7-) ### CVE-2023-32353 (2023-06-23) @@ -31328,13 +30201,6 @@ - [gergelykalman/CVE-2023-32407-a-macOS-TCC-bypass-in-Metal](https://github.com/gergelykalman/CVE-2023-32407-a-macOS-TCC-bypass-in-Metal) -### CVE-2023-32413 (2023-06-23) - -A race condition was addressed with improved state handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to gain root privileges. - - -- [synacktiv/CVE-2023-32413](https://github.com/synacktiv/CVE-2023-32413) - ### CVE-2023-32422 (2023-06-23) This issue was addressed by adding additional SQLite logging restrictions. This issue is fixed in iOS 16.5 and iPadOS 16.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences. @@ -31342,13 +30208,6 @@ - [gergelykalman/CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite](https://github.com/gergelykalman/CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite) -### CVE-2023-32428 (2023-09-06) - -This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges. - - -- [gergelykalman/CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging](https://github.com/gergelykalman/CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging) - ### CVE-2023-32434 (2023-06-23) An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7. @@ -31363,7 +30222,6 @@ - [x0rb3l/CVE-2023-32560](https://github.com/x0rb3l/CVE-2023-32560) -- [idkwastaken/CVE-2023-32560](https://github.com/idkwastaken/CVE-2023-32560) ### CVE-2023-32571 (2023-06-22) @@ -31372,14 +30230,6 @@ - [Tris0n/CVE-2023-32571-POC](https://github.com/Tris0n/CVE-2023-32571-POC) - [vert16x/CVE-2023-32571-POC](https://github.com/vert16x/CVE-2023-32571-POC) -- [SecTex/CVE-2023-32571](https://github.com/SecTex/CVE-2023-32571) - -### CVE-2023-32590 (2023-12-20) - -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4. - - -- [RandomRobbieBF/CVE-2023-32590](https://github.com/RandomRobbieBF/CVE-2023-32590) ### CVE-2023-32629 (2023-07-26) @@ -31406,13 +30256,6 @@ - [mogwailabs/CVE-2023-32692-CodeIgniter4](https://github.com/mogwailabs/CVE-2023-32692-CodeIgniter4) -### CVE-2023-32697 (2023-05-23) - -SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.\n - - -- [shoucheng3/xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1](https://github.com/shoucheng3/xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1) - ### CVE-2023-32707 (2023-06-01) In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admin user by providing specially crafted web requests. @@ -31425,7 +30268,6 @@ Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all cells and non-personal workspaces is granted. -- [xcr-19/CVE-2023-32749](https://github.com/xcr-19/CVE-2023-32749) - [alaeddine03/CVE-2023-32749-PoC](https://github.com/alaeddine03/CVE-2023-32749-PoC) ### CVE-2023-32784 (2023-05-15) @@ -31439,10 +30281,6 @@ - [z-jxy/keepass_dump](https://github.com/z-jxy/keepass_dump) - [hau-zy/KeePass-dump-py](https://github.com/hau-zy/KeePass-dump-py) - [dawnl3ss/CVE-2023-32784](https://github.com/dawnl3ss/CVE-2023-32784) -- [mister-turtle/cve-2023-32784](https://github.com/mister-turtle/cve-2023-32784) -- [Cmadhushanka/CVE-2023-32784-Exploitation](https://github.com/Cmadhushanka/CVE-2023-32784-Exploitation) -- [dev0558/CVE-2023-32784-EXPLOIT-REPORT](https://github.com/dev0558/CVE-2023-32784-EXPLOIT-REPORT) -- [G4sp4rCS/CVE-2023-32784-password-combinator-fixer](https://github.com/G4sp4rCS/CVE-2023-32784-password-combinator-fixer) - [super-oof/keepass2-password-finder](https://github.com/super-oof/keepass2-password-finder) - [areebashoaib42/KeePass-CVE-2023-32784-Exploitation-and-Defense](https://github.com/areebashoaib42/KeePass-CVE-2023-32784-Exploitation-and-Defense) @@ -31453,13 +30291,6 @@ - [LOURC0D3/CVE-2023-32961](https://github.com/LOURC0D3/CVE-2023-32961) -### CVE-2023-33105 (2024-03-04) - -Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. - - -- [D3adP3nguin/CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware](https://github.com/D3adP3nguin/CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware) - ### CVE-2023-33107 (2023-12-05) Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. @@ -31472,7 +30303,6 @@ Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the webserver user. This can be used to upload a PHP webshell inside the web root directory and achieve remote code execution as the webserver user. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. Customers who host their CMS with Xibo Signage have already received an upgrade or patch to resolve this issue regardless of the CMS version that they are running. -- [complexusprada/Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177](https://github.com/complexusprada/Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177) - [kaxm23/-CVE-2023-33177-](https://github.com/kaxm23/-CVE-2023-33177-) ### CVE-2023-33242 (2023-08-09) @@ -31504,9 +30334,6 @@ - [vulncheck-oss/fetch-broker-conf](https://github.com/vulncheck-oss/fetch-broker-conf) - [0xKayala/CVE-2023-33246](https://github.com/0xKayala/CVE-2023-33246) - [MkJos/CVE-2023-33246_RocketMQ_RCE_EXP](https://github.com/MkJos/CVE-2023-33246_RocketMQ_RCE_EXP) -- [Sumitpathania03/Apache-RocketMQ-CVE-2023-33246-](https://github.com/Sumitpathania03/Apache-RocketMQ-CVE-2023-33246-) -- [PavilionQ/CVE-2023-33246-mitigation](https://github.com/PavilionQ/CVE-2023-33246-mitigation) -- [shoucheng3/apache__rocketmq_CVE-2023-33246_5-1-0](https://github.com/shoucheng3/apache__rocketmq_CVE-2023-33246_5-1-0) ### CVE-2023-33253 (2023-06-12) @@ -31583,17 +30410,8 @@ TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . -- [explxx/CVE-2023-33538](https://github.com/explxx/CVE-2023-33538) -- [mrowkoob/CVE-2023-33538-msf](https://github.com/mrowkoob/CVE-2023-33538-msf) - [eev4n/tplink-osci](https://github.com/eev4n/tplink-osci) -### CVE-2023-33580 (2023-06-26) - -Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page. - - -- [sudovivek/Published-CVE](https://github.com/sudovivek/Published-CVE) - ### CVE-2023-33592 (2023-06-28) Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information. @@ -31621,7 +30439,6 @@ - [retr0reg/tenda-ac8v4-rop](https://github.com/retr0reg/tenda-ac8v4-rop) -- [dhammerg/CVE-2023-33669](https://github.com/dhammerg/CVE-2023-33669) ### CVE-2023-33730 (2023-05-31) @@ -31650,17 +30467,6 @@ - [c53elyas/CVE-2023-33733](https://github.com/c53elyas/CVE-2023-33733) -- [hoangbui24/CVE-2023-33733](https://github.com/hoangbui24/CVE-2023-33733) -- [onion2203/Lab_Reportlab](https://github.com/onion2203/Lab_Reportlab) -- [buiduchoang24/CVE-2023-33733](https://github.com/buiduchoang24/CVE-2023-33733) -- [L41KAA/CVE-2023-33733-Exploit-PoC](https://github.com/L41KAA/CVE-2023-33733-Exploit-PoC) - -### CVE-2023-33747 (2023-06-06) - -CloudPanel v2.2.2 allows attackers to execute a path traversal. - - -- [0xWhoami35/CloudPanel-CVE-2023-33747](https://github.com/0xWhoami35/CloudPanel-CVE-2023-33747) ### CVE-2023-33768 (2023-07-13) @@ -31712,7 +30518,6 @@ - [rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831](https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831) -- [btar1gan/exploit_CVE-2023-33831](https://github.com/btar1gan/exploit_CVE-2023-33831) ### CVE-2023-33869 (2023-06-20) @@ -31721,13 +30526,6 @@ - [NAP3XD/CVE-2023-33869-RCE-PoC](https://github.com/NAP3XD/CVE-2023-33869-RCE-PoC) -### CVE-2023-33962 (2023-05-30) - -JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users visiting pages that use this template engine. This can lead to various consequences, including session hijacking, defacement of web pages, theft of sensitive information, or even the propagation of malware.\n\nVersion 1.0.1 contains a patch for this issue. To mitigate this vulnerability, the template engine should properly escape special characters, including single quotes. Common practice is to escape `'` as `&#39`. As a workaround, users can avoid this issue by using only double quotes `"` for HTML attributes. - - -- [shoucheng3/jstachio__jstachio_CVE-2023-33962_1-0-0](https://github.com/shoucheng3/jstachio__jstachio_CVE-2023-33962_1-0-0) - ### CVE-2023-33977 (2023-06-06) Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded and Content-Security-Policy definition to prevent cross-site-scripting attacks. The upload validation checks were not 100% robust which left the possibility to circumvent them and upload a potentially dangerous file which allows execution of arbitrary JavaScript in the browser. Additionally we've discovered that Nginx's `proxy_pass` directive will strip some headers negating protections built into Kiwi TCMS when served behind a reverse proxy. This issue has been addressed in version 12.4. Users are advised to upgrade. Users unable to upgrade who are serving Kiwi TCMS behind a reverse proxy should make sure that additional header values are still passed to the client browser. If they aren't redefining them inside the proxy configuration. @@ -31768,8 +30566,6 @@ - [Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040](https://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040) - [pyn3rd/CVE-2023-34040](https://github.com/pyn3rd/CVE-2023-34040) -- [buiduchoang24/CVE-2023-34040](https://github.com/buiduchoang24/CVE-2023-34040) -- [huyennhat-dev/cve-2023-34040](https://github.com/huyennhat-dev/cve-2023-34040) ### CVE-2023-34050 (2023-10-19) @@ -31798,14 +30594,6 @@ - [overgrowncarrot1/ImageTragick_CVE-2023-34152](https://github.com/overgrowncarrot1/ImageTragick_CVE-2023-34152) -- [SudoIndividual/CVE-2023-34152](https://github.com/SudoIndividual/CVE-2023-34152) - -### CVE-2023-34194 (2023-12-13) - -StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace. - - -- [vm2mv/tinyxml](https://github.com/vm2mv/tinyxml) ### CVE-2023-34212 (2023-06-12) @@ -31814,13 +30602,6 @@ - [mbadanoiu/CVE-2023-34212](https://github.com/mbadanoiu/CVE-2023-34212) -### CVE-2023-34233 (2023-06-08) - -The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establishing a malicious resource and (2) redirecting users to utilize the resource. The attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. This attack scenario can be mitigated through URL whitelisting as well as common anti-phishing resources. Version 3.0.2 contains a patch for this issue. - - -- [nayankadamm/CVE-2023-34233_Proof_OF_Concept](https://github.com/nayankadamm/CVE-2023-34233_Proof_OF_Concept) - ### CVE-2023-34312 (2023-06-01) In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition. @@ -31841,9 +30622,6 @@ - [Malwareman007/CVE-2023-34362](https://github.com/Malwareman007/CVE-2023-34362) - [toorandom/moveit-payload-decrypt-CVE-2023-34362](https://github.com/toorandom/moveit-payload-decrypt-CVE-2023-34362) - [errorfiathck/MOVEit-Exploit](https://github.com/errorfiathck/MOVEit-Exploit) -- [glen-pearson/MoveIT-CVE-2023-34362-RCE](https://github.com/glen-pearson/MoveIT-CVE-2023-34362-RCE) -- [aditibv/MOVEit-CVE-2023-34362](https://github.com/aditibv/MOVEit-CVE-2023-34362) -- [Naveenbana5250/CVE-2023-34362-Defense-Package](https://github.com/Naveenbana5250/CVE-2023-34362-Defense-Package) - [khengar9274-web/moveit-transfer-2023-breach](https://github.com/khengar9274-web/moveit-transfer-2023-breach) - [tubaaiftikhar-ui/MOVEit-Transfer-Data-Breach-Analysis.](https://github.com/tubaaiftikhar-ui/MOVEit-Transfer-Data-Breach-Analysis.) - [KarmanyaT28/Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer](https://github.com/KarmanyaT28/Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer) @@ -31855,18 +30633,10 @@ - [mbadanoiu/CVE-2023-34468](https://github.com/mbadanoiu/CVE-2023-34468) -- [shoucheng3/asf__nifi_CVE-2023-34468_1-21-00](https://github.com/shoucheng3/asf__nifi_CVE-2023-34468_1-21-00) - [sbouabid-sec/CVE-2023-34468-POC](https://github.com/sbouabid-sec/CVE-2023-34468-POC) - [Jeanpt/CVE-2023-34468](https://github.com/Jeanpt/CVE-2023-34468) - [spikeyjr/CVE-2023-34468-PoC](https://github.com/spikeyjr/CVE-2023-34468-PoC) -### CVE-2023-34478 (2023-07-24) - -Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.\n\nMitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+ - - -- [shoucheng3/apache__shiro_CVE-2023-34478_1-11-0](https://github.com/shoucheng3/apache__shiro_CVE-2023-34478_1-11-0) - ### CVE-2023-34537 (2023-06-13) A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data. @@ -31884,7 +30654,6 @@ - [maddsec/CVE-2023-34598](https://github.com/maddsec/CVE-2023-34598) - [Lserein/CVE-2023-34598](https://github.com/Lserein/CVE-2023-34598) -- [Zer0F8th/CVE-2023-34598](https://github.com/Zer0F8th/CVE-2023-34598) ### CVE-2023-34599 (2023-06-29) @@ -31910,16 +30679,6 @@ - [radman404/CVE-2023-34634](https://github.com/radman404/CVE-2023-34634) -### CVE-2023-34732 (2025-05-12) - -An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords. - - -- [saykino/CVE-2023-34732](https://github.com/saykino/CVE-2023-34732) - -### CVE-2023-34804 -- [Shahibakes/Cve-2023-34804](https://github.com/Shahibakes/Cve-2023-34804) - ### CVE-2023-34830 (2023-06-27) i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page. @@ -31976,13 +30735,6 @@ - [rootd4ddy/CVE-2023-34843](https://github.com/rootd4ddy/CVE-2023-34843) -### CVE-2023-34845 (2023-06-16) - -Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration). - - -- [r4vanan/CVE-2023-34845](https://github.com/r4vanan/CVE-2023-34845) - ### CVE-2023-34852 (2023-06-15) PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions. @@ -32014,7 +30766,6 @@ - [YongYe-Security/CVE-2023-34960](https://github.com/YongYe-Security/CVE-2023-34960) - [Ap0dexMe0/CVE-2023-34960](https://github.com/Ap0dexMe0/CVE-2023-34960) - [Mantodkaz/CVE-2023-34960](https://github.com/Mantodkaz/CVE-2023-34960) -- [tpdlshdmlrkfmcla/cve-2023-34960](https://github.com/tpdlshdmlrkfmcla/cve-2023-34960) ### CVE-2023-34965 (2023-06-13) @@ -32023,14 +30774,6 @@ - [AgentY0/CVE-2023-34965](https://github.com/AgentY0/CVE-2023-34965) -### CVE-2023-34992 (2023-10-10) - -A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via crafted API requests. - - -- [horizon3ai/CVE-2023-34992](https://github.com/horizon3ai/CVE-2023-34992) -- [d0rb/CVE-2023-34992-Checker](https://github.com/d0rb/CVE-2023-34992-Checker) - ### CVE-2023-35001 (2023-07-05) Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace @@ -32050,7 +30793,6 @@ - [synfinner/CVE-2023-35078](https://github.com/synfinner/CVE-2023-35078) - [emanueldosreis/nmap-CVE-2023-35078-Exploit](https://github.com/emanueldosreis/nmap-CVE-2023-35078-Exploit) - [Blue-number/CVE-2023-35078](https://github.com/Blue-number/CVE-2023-35078) -- [0nsec/CVE-2023-35078](https://github.com/0nsec/CVE-2023-35078) ### CVE-2023-35080 (2023-11-14) @@ -32058,7 +30800,6 @@ - [tijme/ivanti-cve-2023-35080-privilege-escalation-bof](https://github.com/tijme/ivanti-cve-2023-35080-privilege-escalation-bof) -- [HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation](https://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation) ### CVE-2023-35082 (2023-08-15) @@ -32067,13 +30808,6 @@ - [Chocapikk/CVE-2023-35082](https://github.com/Chocapikk/CVE-2023-35082) -### CVE-2023-35085 (2023-08-10) - -An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE).\n\n \n\nAffected Products:\nAll UniFi Access Points (Version 6.5.50 and earlier)\nAll UniFi Switches (Version 6.5.32 and earlier) \n-USW Flex Mini excluded.\n \n\nMitigation:\nUpdate UniFi Access Points to Version 6.5.62 or later.\nUpdate the UniFi Switches to Version 6.5.59 or later. - - -- [maoruiQa/CVE-2023-35085-POC-EXP](https://github.com/maoruiQa/CVE-2023-35085-POC-EXP) - ### CVE-2023-35086 (2023-07-21) \nIt is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\nThis issue affects RT-AX56U V2: 3.0.0.4.386_50460; RT-AC86U: 3.0.0.4_386_51529.\n\n @@ -32081,20 +30815,6 @@ - [tin-z/CVE-2023-35086-POC](https://github.com/tin-z/CVE-2023-35086-POC) -### CVE-2023-35317 (2023-07-11) - -Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability - - -- [M507/CVE-2025-59287-PoC](https://github.com/M507/CVE-2025-59287-PoC) - -### CVE-2023-35636 (2023-12-12) - -Microsoft Outlook Information Disclosure Vulnerability - - -- [duy-31/CVE-2023-35636](https://github.com/duy-31/CVE-2023-35636) - ### CVE-2023-35671 (2023-09-11) In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. @@ -32108,7 +30828,6 @@ - [Thampakon/CVE-2023-35674](https://github.com/Thampakon/CVE-2023-35674) -- [SpiralBL0CK/Guide-and-theoretical-code-for-CVE-2023-35674](https://github.com/SpiralBL0CK/Guide-and-theoretical-code-for-CVE-2023-35674) ### CVE-2023-35687 (2023-09-11) @@ -32160,7 +30879,6 @@ - [aalexpereira/CVE-2023-35813](https://github.com/aalexpereira/CVE-2023-35813) - [BagheeraAltered/CVE-2023-35813-PoC](https://github.com/BagheeraAltered/CVE-2023-35813-PoC) - [her3ticAVI/CVE-2023-35813](https://github.com/her3ticAVI/CVE-2023-35813) -- [Rezy-Dev/CVE-2023-35813](https://github.com/Rezy-Dev/CVE-2023-35813) - [nmlz/CVE-2023-35813_PoC](https://github.com/nmlz/CVE-2023-35813_PoC) ### CVE-2023-35828 (2023-06-18) @@ -32192,13 +30910,6 @@ - [Lserein/CVE-2023-35844](https://github.com/Lserein/CVE-2023-35844) -### CVE-2023-35854 (2023-06-20) - -Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: the vendor's perspective is that they have "found no evidence or detail of a security vulnerability." - - -- [bluestarry33/exp](https://github.com/bluestarry33/exp) - ### CVE-2023-35885 (2023-06-20) CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication. @@ -32207,20 +30918,12 @@ - [datackmy/FallingSkies-CVE-2023-35885](https://github.com/datackmy/FallingSkies-CVE-2023-35885) - [Chocapikk/CVE-2023-35885](https://github.com/Chocapikk/CVE-2023-35885) -### CVE-2023-35887 (2023-07-10) - -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.\n\nIn SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.\n\nThis issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10\n - - -- [shoucheng3/apache__mina-sshd_CVE-2023-35887_2-9-2](https://github.com/shoucheng3/apache__mina-sshd_CVE-2023-35887_2-9-2) - ### CVE-2023-35985 (2023-11-27) An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted malicious site if the browser plugin extension is enabled. - [SpiralBL0CK/-CVE-2023-35985](https://github.com/SpiralBL0CK/-CVE-2023-35985) -- [N00BIER/CVE-2023-35985](https://github.com/N00BIER/CVE-2023-35985) ### CVE-2023-36025 (2023-11-14) @@ -32238,13 +30941,6 @@ - [deIndra/CVE-2023-36076](https://github.com/deIndra/CVE-2023-36076) -### CVE-2023-36085 (2023-10-24) - -The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources. - - -- [omershaik0/CVE-2023-36085_SISQUALWFM-Host-Header-Injection](https://github.com/omershaik0/CVE-2023-36085_SISQUALWFM-Host-Header-Injection) - ### CVE-2023-36109 (2023-09-20) Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c. @@ -32342,21 +31038,6 @@ - [Lowalu/CVE-2023-36319](https://github.com/Lowalu/CVE-2023-36319) -### CVE-2023-36407 (2023-11-14) - -Windows Hyper-V Elevation of Privilege Vulnerability - - -- [zha0/CVE-2023-36407](https://github.com/zha0/CVE-2023-36407) -- [pwndorei/CVE-2023-36407](https://github.com/pwndorei/CVE-2023-36407) - -### CVE-2023-36424 (2023-11-14) - -Windows Common Log File System Driver Elevation of Privilege Vulnerability - - -- [zerozenxlabs/CVE-2023-36424](https://github.com/zerozenxlabs/CVE-2023-36424) - ### CVE-2023-36427 (2023-11-14) Windows Hyper-V Elevation of Privilege Vulnerability @@ -32364,13 +31045,6 @@ - [tandasat/CVE-2023-36427](https://github.com/tandasat/CVE-2023-36427) -### CVE-2023-36471 (2023-06-29) - -Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either create forms that can be used for phishing attacks or also in the context of a sheet, the attacker could add an input like `{{html}}<input type="hidden" name="content" value="{{groovy}}println(&quot;Hello from Groovy!&quot;)" />{{/html}}` that would allow remote code execution when it is submitted by an admin (the sheet is rendered as part of the edit form). The attacker would need to ensure that the edit form looks plausible, though, which can be non-trivial as without script right the attacker cannot display the regular content of the document. This has been patched in XWiki 14.10.6 and 15.2RC1 by removing the central form-related tags from the list of allowed tags. Users are advised to upgrade. As a workaround an admin can manually disallow the tags by adding `form, input, select, textarea, button` to the configuration option `xml.htmlElementSanitizer.forbidTags` in the `xwiki.properties` configuration file. - - -- [shoucheng3/xwiki__xwiki-commons_CVE-2023-36471_14-10-5](https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2023-36471_14-10-5) - ### CVE-2023-36531 (2024-12-13) Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls for Creators and Brands: from n/a through 3.3.68. @@ -32378,34 +31052,6 @@ - [RandomRobbieBF/CVE-2023-36531](https://github.com/RandomRobbieBF/CVE-2023-36531) -### CVE-2023-36542 (2023-07-29) - -Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution introduces a new Required Permission for referencing remote resources, restricting configuration of these components to privileged users. The permission prevents unprivileged users from configuring Processors and Controller Services annotated with the new Reference Remote Resources restriction. Upgrading to Apache NiFi 1.23.0 is the recommended mitigation. - - -- [shoucheng3/asf__nifi_CVE-2023-36542_1-22-0](https://github.com/shoucheng3/asf__nifi_CVE-2023-36542_1-22-0) - -### CVE-2023-36643 (2024-04-04) - -Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function. - - -- [caffeinated-labs/CVE-2023-36643](https://github.com/caffeinated-labs/CVE-2023-36643) - -### CVE-2023-36644 (2024-04-04) - -Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin. - - -- [caffeinated-labs/CVE-2023-36644](https://github.com/caffeinated-labs/CVE-2023-36644) - -### CVE-2023-36645 (2024-04-04) - -SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function. - - -- [caffeinated-labs/CVE-2023-36645](https://github.com/caffeinated-labs/CVE-2023-36645) - ### CVE-2023-36664 (2023-06-25) Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). @@ -32414,7 +31060,6 @@ - [jakabakos/CVE-2023-36664-Ghostscript-command-injection](https://github.com/jakabakos/CVE-2023-36664-Ghostscript-command-injection) - [winkler-winsen/Scan_GhostScript](https://github.com/winkler-winsen/Scan_GhostScript) - [jeanchpt/CVE-2023-36664](https://github.com/jeanchpt/CVE-2023-36664) -- [churamanib/CVE-2023-36664-Ghostscript-command-injection](https://github.com/churamanib/CVE-2023-36664-Ghostscript-command-injection) ### CVE-2023-36723 (2023-10-10) @@ -32439,7 +31084,6 @@ - [4zur-0312/CVE-2023-36802](https://github.com/4zur-0312/CVE-2023-36802) - [x0rb3l/CVE-2023-36802-MSKSSRV-LPE](https://github.com/x0rb3l/CVE-2023-36802-MSKSSRV-LPE) - [Nero22k/cve-2023-36802](https://github.com/Nero22k/cve-2023-36802) -- [rahul0xkr/Reproducing-CVE-2023-36802](https://github.com/rahul0xkr/Reproducing-CVE-2023-36802) ### CVE-2023-36808 (2023-07-05) @@ -32476,17 +31120,6 @@ - [simrotion13/CVE-2023-36845](https://github.com/simrotion13/CVE-2023-36845) - [cyberh3als/CVE-2023-36845-POC](https://github.com/cyberh3als/CVE-2023-36845-POC) - [P4x1s/ansible-cve-2023-36845](https://github.com/P4x1s/ansible-cve-2023-36845) -- [Asbawy/Automation-for-Juniper-cve-2023-36845](https://github.com/Asbawy/Automation-for-Juniper-cve-2023-36845) -- [jahithoque/Juniper-CVE-2023-36845-Mass-Hunting](https://github.com/jahithoque/Juniper-CVE-2023-36845-Mass-Hunting) -- [cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845](https://github.com/cyb3rzest/Juniper-Bug-Automation-CVE-2023-36845) -- [CharonDefalt/Juniper-exploit-CVE-2023-36845](https://github.com/CharonDefalt/Juniper-exploit-CVE-2023-36845) -- [iveresk/CVE-2023-36845-6-](https://github.com/iveresk/CVE-2023-36845-6-) -- [ak1t4/CVE-2023-36845](https://github.com/ak1t4/CVE-2023-36845) -- [0xNehru/CVE-2023-36845-Juniper-Vulnerability](https://github.com/0xNehru/CVE-2023-36845-Juniper-Vulnerability) -- [ifconfig-me/CVE-2023-36845](https://github.com/ifconfig-me/CVE-2023-36845) -- [e11i0t4lders0n/CVE-2023-36845](https://github.com/e11i0t4lders0n/CVE-2023-36845) -- [Vignesh2712/Automation-for-Juniper-cve-2023-36845](https://github.com/Vignesh2712/Automation-for-Juniper-cve-2023-36845) -- [kopfjager007/CVE-2023-36845](https://github.com/kopfjager007/CVE-2023-36845) ### CVE-2023-36846 (2023-08-17) @@ -32580,34 +31213,6 @@ - [ewilded/CVE-2023-37250-POC](https://github.com/ewilded/CVE-2023-37250-POC) -### CVE-2023-37273 (2023-07-13) - -Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-compose.yml file from the one suggested in the official docker set up instructions. The docker-compose.yml file located in the repo root mounts itself into the docker container without write protection. This means that if malicious custom python code is executed via the `execute_python_file` and `execute_python_code` commands, it can overwrite the docker-compose.yml file and abuse it to gain control of the host system the next time Auto-GPT is started. The issue has been patched in version 0.4.3. - - -- [gdesantis01/instructions-summarizing](https://github.com/gdesantis01/instructions-summarizing) - -### CVE-2023-37456 (2023-07-12) - -The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. - - -- [SpiralBL0CK/cve-2023-37456](https://github.com/SpiralBL0CK/cve-2023-37456) - -### CVE-2023-37460 (2023-07-25) - -Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue. - - -- [shoucheng3/codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1](https://github.com/shoucheng3/codehaus-plexus__plexus-archiver_CVE-2023-37460_4-7-1) - -### CVE-2023-37467 (2023-07-28) - -Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce reuse vulnerability was discovered could allow cross-site scripting (XSS) attacks to bypass CSP protection for anonymous (i.e. unauthenticated) users. There are no known XSS vectors at the moment, but should one be discovered, this vulnerability would allow the XSS attack to bypass CSP and execute successfully. This vulnerability isn't applicable to logged-in users. Version 3.1.0.beta7 contains a patch. The stable branch doesn't have this vulnerability. A workaround to prevent the vulnerability is to disable Google Tag Manager, i.e., unset the `gtm container id` setting. - - -- [ibrahmsql/CVE-2023-37467](https://github.com/ibrahmsql/CVE-2023-37467) - ### CVE-2023-37474 (2023-07-14) Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. @@ -32629,8 +31234,6 @@ - [Malayke/CVE-2023-37582_EXPLOIT](https://github.com/Malayke/CVE-2023-37582_EXPLOIT) -- [laishouchao/Apache-RocketMQ-RCE-CVE-2023-37582-poc](https://github.com/laishouchao/Apache-RocketMQ-RCE-CVE-2023-37582-poc) -- [shoucheng3/apache__rocketmq_CVE-2023-37582_4-9-6](https://github.com/shoucheng3/apache__rocketmq_CVE-2023-37582_4-9-6) ### CVE-2023-37596 (2023-07-11) @@ -32670,13 +31273,6 @@ - [benjaminpsinclair/Netbox-CVE-2023-37625](https://github.com/benjaminpsinclair/Netbox-CVE-2023-37625) -### CVE-2023-37635 (2023-10-23) - -UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application. - - -- [oussama-binike/cve-2023-37635](https://github.com/oussama-binike/cve-2023-37635) - ### CVE-2023-37739 (2023-09-14) i-doit Pro v25 and below was discovered to be vulnerable to path traversal. @@ -32725,13 +31321,6 @@ - [Phamchie/CVE-2023-37786](https://github.com/Phamchie/CVE-2023-37786) -### CVE-2023-37790 (2023-11-08) - -Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. - - -- [kaizensecurity/CVE-2023-37790](https://github.com/kaizensecurity/CVE-2023-37790) - ### CVE-2023-37800 - [TraiLeR2/CVE-2023-37800](https://github.com/TraiLeR2/CVE-2023-37800) @@ -32742,13 +31331,6 @@ - [7h3h4ckv157/CVE-2023-37903](https://github.com/7h3h4ckv157/CVE-2023-37903) -### CVE-2023-37908 (2023-10-25) - -XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid attribute names. This can be exploited, e.g., via the link syntax in any content that supports XWiki syntax like comments in XWiki. When a user moves the mouse over a malicious link, the malicious JavaScript code is executed in the context of the user session. When this user is a privileged user who has programming rights, this allows server-side code execution with programming rights, impacting the confidentiality, integrity and availability of the XWiki instance. While this attribute was correctly recognized as not allowed, the attribute was still printed with a prefix `data-xwiki-translated-attribute-` without further cleaning or validation. This problem has been patched in XWiki 14.10.4 and 15.0 RC1 by removing characters not allowed in data attributes and then validating the cleaned attribute again. There are no known workarounds apart from upgrading to a version including the fix. - - -- [shoucheng3/xwiki__xwiki-rendering_CVE-2023-37908_14-10-3](https://github.com/shoucheng3/xwiki__xwiki-rendering_CVE-2023-37908_14-10-3) - ### CVE-2023-37941 (2023-09-06) If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend.\n\nThe Superset metadata db is an 'internal' component that is typically \nonly accessible directly by the system administrator and the superset \nprocess itself. Gaining access to that database should\n be difficult and require significant privileges.\n\nThis vulnerability impacts Apache Superset versions 1.5.0 up to and including 2.1.0. Users are recommended to upgrade to version 2.1.1 or later. @@ -32773,20 +31355,6 @@ - [LeakIX/sentryexploit](https://github.com/LeakIX/sentryexploit) - [mind2hex/CVE-2023-38035-MobileIron-RCE](https://github.com/mind2hex/CVE-2023-38035-MobileIron-RCE) -### CVE-2023-38039 (2023-09-15) - -When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory. - - -- [Smartkeyss/CVE-2023-38039](https://github.com/Smartkeyss/CVE-2023-38039) - -### CVE-2023-38041 (2023-10-25) - -A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system. - - -- [ewilded/CVE-2023-38041-POC](https://github.com/ewilded/CVE-2023-38041-POC) - ### CVE-2023-38120 (2024-05-03) Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adtran SR400ac routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.\n\nThe specific flaw exists within the ping command, which is available over JSON-RPC. A crafted host parameter can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root.\n. Was ZDI-CAN-20525. @@ -32810,11 +31378,6 @@ - [kali-mx/CVE-2023-38408](https://github.com/kali-mx/CVE-2023-38408) - [LucasPDiniz/CVE-2023-38408](https://github.com/LucasPDiniz/CVE-2023-38408) -- [wxrdnx/CVE-2023-38408](https://github.com/wxrdnx/CVE-2023-38408) -- [mrtacojr/CVE-2023-38408](https://github.com/mrtacojr/CVE-2023-38408) -- [fazilbaig1/cve_2023_38408_scanner](https://github.com/fazilbaig1/cve_2023_38408_scanner) -- [TX-One/CVE-2023-38408](https://github.com/TX-One/CVE-2023-38408) -- [Adel2411/cve-2023-38408](https://github.com/Adel2411/cve-2023-38408) - [xitexploiter96-dot/CVE-2023-38408](https://github.com/xitexploiter96-dot/CVE-2023-38408) - [nonosticisiguzo-command/nmap-scan-results](https://github.com/nonosticisiguzo-command/nmap-scan-results) @@ -32851,8 +31414,6 @@ - [dbrugman/CVE-2023-38545-POC](https://github.com/dbrugman/CVE-2023-38545-POC) - [bcdannyboy/CVE-2023-38545](https://github.com/bcdannyboy/CVE-2023-38545) - [d0rb/CVE-2023-38545](https://github.com/d0rb/CVE-2023-38545) -- [Yang-Shun-Yu/CVE-2023-38545](https://github.com/Yang-Shun-Yu/CVE-2023-38545) -- [nphuang/NS-Project-2024-Spring](https://github.com/nphuang/NS-Project-2024-Spring) ### CVE-2023-38571 (2023-07-28) @@ -32861,13 +31422,6 @@ - [gergelykalman/CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV](https://github.com/gergelykalman/CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV) -### CVE-2023-38600 (2023-07-27) - -The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. - - -- [afrojack1/cve202338600test.github.io](https://github.com/afrojack1/cve202338600test.github.io) - ### CVE-2023-38609 (2023-07-28) An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass certain Privacy preferences. @@ -32918,22 +31472,9 @@ - [j0yb0y0h/CVE-2023-38646](https://github.com/j0yb0y0h/CVE-2023-38646) - [Ego1stoo/CVE-2023-38646](https://github.com/Ego1stoo/CVE-2023-38646) - [0utl4nder/Another-Metabase-RCE-CVE-2023-38646](https://github.com/0utl4nder/Another-Metabase-RCE-CVE-2023-38646) -- [Shisones/MetabaseRCE_CVE-2023-38646](https://github.com/Shisones/MetabaseRCE_CVE-2023-38646) -- [acesoyeo/METABASE-RCE-CVE-2023-38646-](https://github.com/acesoyeo/METABASE-RCE-CVE-2023-38646-) -- [UserConnecting/Exploit-CVE-2023-38646-Metabase](https://github.com/UserConnecting/Exploit-CVE-2023-38646-Metabase) -- [JayRyz/CVE-2023-38646-PoC-Metabase](https://github.com/JayRyz/CVE-2023-38646-PoC-Metabase) -- [cleanmgr112/cve-2023-38646-poc](https://github.com/cleanmgr112/cve-2023-38646-poc) -- [BreezeGalaxy/CVE-2023-38646](https://github.com/BreezeGalaxy/CVE-2023-38646) - [NosrevytsNg/Metabase-Pre-Auth-RCE-POC](https://github.com/NosrevytsNg/Metabase-Pre-Auth-RCE-POC) - [nuclide-research/metabase-cve-2023-38646](https://github.com/nuclide-research/metabase-cve-2023-38646) -### CVE-2023-38709 (2024-04-04) - -Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58. - - -- [mrmtwoj/apache-vulnerability-testing](https://github.com/mrmtwoj/apache-vulnerability-testing) - ### CVE-2023-38743 (2023-09-11) Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. @@ -32964,7 +31505,6 @@ - [adhikara13/CVE-2023-38829-NETIS-WF2409E](https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E) -- [Victorique-123/CVE-2023-38829-NETIS-WF2409E_Report](https://github.com/Victorique-123/CVE-2023-38829-NETIS-WF2409E_Report) ### CVE-2023-38831 (2023-08-23) @@ -33007,24 +31547,6 @@ - [MyStuffYT/CVE-2023-38831-POC](https://github.com/MyStuffYT/CVE-2023-38831-POC) - [SpamixOfficial/CVE-2023-38831](https://github.com/SpamixOfficial/CVE-2023-38831) - [r1yaz/winDED](https://github.com/r1yaz/winDED) -- [youmulijiang/evil-winrar](https://github.com/youmulijiang/evil-winrar) -- [solomon12354/VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC](https://github.com/solomon12354/VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC) -- [RomainBayle08/CVE-2023-38831](https://github.com/RomainBayle08/CVE-2023-38831) -- [imbyter/imbyter-WinRAR_CVE-2023-38831](https://github.com/imbyter/imbyter-WinRAR_CVE-2023-38831) -- [UnHackerEnCapital/PDFernetRemotelo](https://github.com/UnHackerEnCapital/PDFernetRemotelo) -- [Hirusha-N/CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784](https://github.com/Hirusha-N/CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784) -- [khanhtranngoccva/cve-2023-38831-poc](https://github.com/khanhtranngoccva/cve-2023-38831-poc) -- [MaorBuskila/Windows-X64-RAT](https://github.com/MaorBuskila/Windows-X64-RAT) -- [yezzfusl/cve_2023_38831_scanner](https://github.com/yezzfusl/cve_2023_38831_scanner) -- [FirFirdaus/CVE-2023-38831](https://github.com/FirFirdaus/CVE-2023-38831) -- [ra3edAJ/LAB-DFIR-cve-2023-38831](https://github.com/ra3edAJ/LAB-DFIR-cve-2023-38831) -- [technicalcorp0/CVE-2023-38831-Exploit](https://github.com/technicalcorp0/CVE-2023-38831-Exploit) -- [idkwastaken/CVE-2023-38831](https://github.com/idkwastaken/CVE-2023-38831) -- [VictoriousKnight/CVE-2023-38831_Exploit](https://github.com/VictoriousKnight/CVE-2023-38831_Exploit) -- [kuyrathdaro/cve-2023-38831](https://github.com/kuyrathdaro/cve-2023-38831) -- [Tolu12wani/Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution](https://github.com/Tolu12wani/Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution) -- [yangdayyy/cve-2023-38831](https://github.com/yangdayyy/cve-2023-38831) -- [anelya0333/Exploiting-CVE-2023-38831](https://github.com/anelya0333/Exploiting-CVE-2023-38831) - [mishra0230/CVE-2023-38831](https://github.com/mishra0230/CVE-2023-38831) - [RonF98/CVE-2023-38831-POC](https://github.com/RonF98/CVE-2023-38831-POC) - [lightningspeed221/Winrar-Exploit-CVE-2023-38831](https://github.com/lightningspeed221/Winrar-Exploit-CVE-2023-38831) @@ -33044,20 +31566,12 @@ - [markuta/bw-dump](https://github.com/markuta/bw-dump) -### CVE-2023-38873 (2023-09-28) - -The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the top-level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both. - - -- [K9-Modz/CVE-2023-38873-G1](https://github.com/K9-Modz/CVE-2023-38873-G1) - ### CVE-2023-38890 (2023-08-18) Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks. - [akshadjoshi/CVE-2023-38890](https://github.com/akshadjoshi/CVE-2023-38890) -- [Tagoletta/CVE-2023-38890](https://github.com/Tagoletta/CVE-2023-38890) ### CVE-2023-38891 (2023-09-14) @@ -33066,9 +31580,6 @@ - [jselliott/CVE-2023-38891](https://github.com/jselliott/CVE-2023-38891) -### CVE-2023-39024 -- [BenTheCyberOne/CVE-2023-39024-5-POC](https://github.com/BenTheCyberOne/CVE-2023-39024-5-POC) - ### CVE-2023-39062 (2023-08-28) Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php. @@ -33090,20 +31601,6 @@ - [0xrajdip/CVE-2023-39115](https://github.com/0xrajdip/CVE-2023-39115) -### CVE-2023-39141 (2023-08-22) - -webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability. - - -- [MartiSabate/CVE-2023-39141-LFI-enumerator](https://github.com/MartiSabate/CVE-2023-39141-LFI-enumerator) - -### CVE-2023-39143 (2023-08-04) - -PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration). - - -- [foregenix/CVE-2023-39143](https://github.com/foregenix/CVE-2023-39143) - ### CVE-2023-39144 (2023-08-03) Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext. @@ -33111,13 +31608,6 @@ - [cduram/CVE-2023-39144](https://github.com/cduram/CVE-2023-39144) -### CVE-2023-39320 (2023-09-08) - -The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" command was executed within the module. This applies to modules downloaded using the "go" command from the module proxy, as well as modules downloaded directly using VCS software. - - -- [ayrustogaru/cve-2023-39320](https://github.com/ayrustogaru/cve-2023-39320) - ### CVE-2023-39325 (2023-10-11) A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function. @@ -33125,21 +31615,12 @@ - [eilam-cell/cve-test-coredns-fork](https://github.com/eilam-cell/cve-test-coredns-fork) -### CVE-2023-39361 (2023-09-05) - -Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are being utilized in an enabled state, there could be the potential for significant damage. Attackers may exploit this vulnerability, and there may be possibilities for actions such as the usurpation of administrative privileges or remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [HPT-Intern-Task-Submission/CVE-2023-39361](https://github.com/HPT-Intern-Task-Submission/CVE-2023-39361) -- [ChoDeokCheol/CVE-2023-39361](https://github.com/ChoDeokCheol/CVE-2023-39361) - ### CVE-2023-39362 (2023-09-05) Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlying server. The `lib/snmp.php` file has a set of functions, with similar behavior, that accept in input some variables and place them into an `exec` call without a proper escape or validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. - [m3ssap0/cacti-rce-snmp-options-vulnerable-application](https://github.com/m3ssap0/cacti-rce-snmp-options-vulnerable-application) -- [jakabakos/CVE-2023-39362-cacti-snmp-command-injection-poc](https://github.com/jakabakos/CVE-2023-39362-cacti-snmp-command-injection-poc) ### CVE-2023-39526 (2023-08-07) @@ -33219,41 +31700,15 @@ The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet private keys generated from "bx seed" entropy output and steal funds. (Affected users need to move funds to a secure new cryptocurrency wallet.) NOTE: the vendor's position is that there was sufficient documentation advising against "bx seed" but others disagree. NOTE: this was exploited in the wild in June and July 2023. -- [z1ph1us/MilkSad-Mnemonic-Generator](https://github.com/z1ph1us/MilkSad-Mnemonic-Generator) - [demining/RAMnesia-Attack](https://github.com/demining/RAMnesia-Attack) -### CVE-2023-40000 (2024-04-16) - -Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7. - - -- [rxerium/CVE-2023-40000](https://github.com/rxerium/CVE-2023-40000) -- [quantiom/litespeed-cache-xss-poc](https://github.com/quantiom/litespeed-cache-xss-poc) -- [iveresk/cve-2023-40000](https://github.com/iveresk/cve-2023-40000) - ### CVE-2023-40028 (2023-08-15) Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host operating system. Site administrators can check for exploitation of this issue by looking for unknown symlinks within Ghost's `content/` folder. Version 5.59.1 contains a fix for this issue. All users are advised to upgrade. There are no known workarounds for this vulnerability. -- [0xyassine/CVE-2023-40028](https://github.com/0xyassine/CVE-2023-40028) -- [0xDTC/Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028](https://github.com/0xDTC/Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028) -- [sudlit/CVE-2023-40028](https://github.com/sudlit/CVE-2023-40028) -- [monke443/CVE-2023-40028](https://github.com/monke443/CVE-2023-40028) -- [rvzsec/CVE-2023-40028](https://github.com/rvzsec/CVE-2023-40028) -- [godylockz/CVE-2023-40028](https://github.com/godylockz/CVE-2023-40028) -- [rehan6658/CVE-2023-40028](https://github.com/rehan6658/CVE-2023-40028) -- [syogod/CVE-2023-40028](https://github.com/syogod/CVE-2023-40028) -- [buutt3rf1y/CVE-2023-40028](https://github.com/buutt3rf1y/CVE-2023-40028) - [Stp1t/CVE-2023-40028](https://github.com/Stp1t/CVE-2023-40028) -### CVE-2023-40029 (2023-09-07) - -Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. As a result, the full secret body is stored in`kubectl.kubernetes.io/last-applied-configuration` annotation. pull request #7139 introduced the ability to manage cluster labels and annotations. Since clusters are stored as secrets it also exposes the `kubectl.kubernetes.io/last-applied-configuration` annotation which includes full secret body. In order to view the cluster annotations via the Argo CD API, the user must have `clusters, get` RBAC access. **Note:** In many cases, cluster secrets do not contain any actually-secret information. But sometimes, as in bearer-token auth, the contents might be very sensitive. The bug has been patched in versions 2.8.3, 2.7.14, and 2.6.15. Users are advised to upgrade. Users unable to upgrade should update/deploy cluster secret with `server-side-apply` flag which does not use or rely on `kubectl.kubernetes.io/last-applied-configuration` annotation. Note: annotation for existing secrets will require manual removal.\n\n - - -- [guobei233/CVE-2023-40029](https://github.com/guobei233/CVE-2023-40029) - ### CVE-2023-40031 (2023-08-25) Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++. @@ -33275,52 +31730,6 @@ - [kenbuckler/WS_FTP-CVE-2023-40044](https://github.com/kenbuckler/WS_FTP-CVE-2023-40044) -### CVE-2023-40109 (2024-02-15) - -In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. - - -- [uthrasri/CVE-2023-40109](https://github.com/uthrasri/CVE-2023-40109) - -### CVE-2023-40127 (2023-10-27) - -In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [Trinadh465/platform_packages_providers_MediaProvider_CVE-2023-40127](https://github.com/Trinadh465/platform_packages_providers_MediaProvider_CVE-2023-40127) -- [Trinadh465/CVE-2023-40127](https://github.com/Trinadh465/CVE-2023-40127) -- [saurabh2088/platform_packages_providers_MediaProvider_CVE-2023-40127](https://github.com/saurabh2088/platform_packages_providers_MediaProvider_CVE-2023-40127) -- [RenukaSelvar/platform_packages_providers_MediaProvider_CVE-2023-40127](https://github.com/RenukaSelvar/platform_packages_providers_MediaProvider_CVE-2023-40127) -- [RenukaSelvar/packages_providers_MediaProvider_CVE-2023-40127](https://github.com/RenukaSelvar/packages_providers_MediaProvider_CVE-2023-40127) - -### CVE-2023-40130 (2023-10-27) - -In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [wrlu/CVE-2023-40130](https://github.com/wrlu/CVE-2023-40130) - -### CVE-2023-40133 (2023-10-27) - -In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [uthrasri/frame_CVE-2023-40133_136_137](https://github.com/uthrasri/frame_CVE-2023-40133_136_137) - -### CVE-2023-40167 (2023-09-15) - -Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. - - -- [uthrasri/Jetty-v9.4.31_CVE-2023-40167](https://github.com/uthrasri/Jetty-v9.4.31_CVE-2023-40167) - -### CVE-2023-40289 (2024-03-27) - -A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges. - - -- [s-hamann/CVE-2023-40289](https://github.com/s-hamann/CVE-2023-40289) - ### CVE-2023-40294 (2023-08-14) libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c. @@ -33342,13 +31751,6 @@ - [sahar042/CVE-2023-40297](https://github.com/sahar042/CVE-2023-40297) -### CVE-2023-40355 (2024-02-07) - -Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions. - - -- [ace-83/CVE-2023-40355](https://github.com/ace-83/CVE-2023-40355) - ### CVE-2023-40361 (2023-10-20) SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user. @@ -33363,13 +31765,6 @@ - [ally-petitt/CVE-2023-40362](https://github.com/ally-petitt/CVE-2023-40362) -### CVE-2023-40404 (2023-10-25) - -A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges. - - -- [geniuszly/GenEtherExploit](https://github.com/geniuszly/GenEtherExploit) - ### CVE-2023-40429 (2023-09-26) A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data. @@ -33377,19 +31772,11 @@ - [biscuitehh/cve-2023-40429-ez-device-name](https://github.com/biscuitehh/cve-2023-40429-ez-device-name) -### CVE-2023-40448 (2023-09-26) - -The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. A remote attacker may be able to break out of Web Content sandbox. - - -- [w0wbox/CVE-2023-40448](https://github.com/w0wbox/CVE-2023-40448) - ### CVE-2023-40459 (2023-12-04) \n\n\n\n\n\n\n\n\nThe\nACEManager component of ALEOS 4.16 and earlier does not adequately perform\ninput sanitization during authentication, which could potentially result in a\nDenial of Service (DoS) condition for ACEManager without impairing other router\nfunctions. ACEManager recovers from the DoS condition by restarting within ten\nseconds of becoming unavailable.\n\n\n\n\n\n\n -- [majidmc2/CVE-2023-40459](https://github.com/majidmc2/CVE-2023-40459) - [7h3w4lk3r/CVE-2023-40459](https://github.com/7h3w4lk3r/CVE-2023-40459) ### CVE-2023-40477 (2024-05-03) @@ -33442,22 +31829,6 @@ - [NSnidie/CVE-2023-40930](https://github.com/NSnidie/CVE-2023-40930) -### CVE-2023-40931 (2023-09-19) - -A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php - - -- [sealldeveloper/CVE-2023-40931-PoC](https://github.com/sealldeveloper/CVE-2023-40931-PoC) -- [datboi6942/Nagios-XI-s-CVE-2023-40931-Exploit](https://github.com/datboi6942/Nagios-XI-s-CVE-2023-40931-Exploit) -- [G4sp4rCS/CVE-2023-40931-POC](https://github.com/G4sp4rCS/CVE-2023-40931-POC) - -### CVE-2023-40933 (2023-09-19) - -A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the update_banner_message() function. - - -- [sealldeveloper/CVE-2023-40933-PoC](https://github.com/sealldeveloper/CVE-2023-40933-PoC) - ### CVE-2023-40989 (2023-09-22) SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component. @@ -33465,13 +31836,6 @@ - [Zone1-Z/CVE-2023-40989](https://github.com/Zone1-Z/CVE-2023-40989) -### CVE-2023-41044 (2023-08-31) - -Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature allows an attacker with valid Admin role credentials to download or delete files in sibling directories of the support bundle directory. The default `data_dir` in operating system packages (DEB, RPM) is set to `/var/lib/graylog-server`. The data directory for the Support Bundle feature is always `<data_dir>/support-bundle`. Due to the partial path traversal vulnerability, an attacker with valid Admin role credentials can read or delete files in directories that start with a `/var/lib/graylog-server/support-bundle` directory name. The vulnerability would allow the download or deletion of files in the following example directories: `/var/lib/graylog-server/support-bundle-test` and `/var/lib/graylog-server/support-bundlesdirectory`. For the Graylog Docker images, the `data_dir` is set to `/usr/share/graylog/data` by default. This vulnerability is fixed in Graylog version 5.1.3 and later. Users are advised to upgrade. Users unable to upgrade should block all HTTP requests to the following HTTP API endpoints by using a reverse proxy server in front of Graylog. `GET /api/system/debug/support/bundle/download/{filename}` and `DELETE /api/system/debug/support/bundle/{filename}`.\n - - -- [shoucheng3/Graylog2__graylog2-server_CVE-2023-41044_5-1-2](https://github.com/shoucheng3/Graylog2__graylog2-server_CVE-2023-41044_5-1-2) - ### CVE-2023-41064 (2023-09-07) A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. @@ -33479,7 +31843,6 @@ - [MrR0b0t19/vulnerabilidad-LibWebP-CVE-2023-41064](https://github.com/MrR0b0t19/vulnerabilidad-LibWebP-CVE-2023-41064) - [MrR0b0t19/CVE-2023-41064](https://github.com/MrR0b0t19/CVE-2023-41064) -- [K4Der11000/k4_cve-2023-41064](https://github.com/K4Der11000/k4_cve-2023-41064) ### CVE-2023-41080 (2023-08-25) @@ -33508,20 +31871,6 @@ - [prodigiousMind/CVE-2023-41425](https://github.com/prodigiousMind/CVE-2023-41425) -- [charlesgargasson/CVE-2023-41425](https://github.com/charlesgargasson/CVE-2023-41425) -- [SpycioKon/CVE-2023-41425](https://github.com/SpycioKon/CVE-2023-41425) -- [thefizzyfish/CVE-2023-41425-wonderCMS_RCE](https://github.com/thefizzyfish/CVE-2023-41425-wonderCMS_RCE) -- [Raffli-Dev/CVE-2023-41425](https://github.com/Raffli-Dev/CVE-2023-41425) -- [Twappz/CVE-2023-41425](https://github.com/Twappz/CVE-2023-41425) -- [duck-sec/CVE-2023-41425](https://github.com/duck-sec/CVE-2023-41425) -- [0xDTC/WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425](https://github.com/0xDTC/WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425) -- [h3athen/CVE-2023-41425](https://github.com/h3athen/CVE-2023-41425) -- [Diegomjx/CVE-2023-41425-WonderCMS-Authenticated-RCE](https://github.com/Diegomjx/CVE-2023-41425-WonderCMS-Authenticated-RCE) -- [0x0d3ad/CVE-2023-41425](https://github.com/0x0d3ad/CVE-2023-41425) -- [xpltive/CVE-2023-41425](https://github.com/xpltive/CVE-2023-41425) -- [KGorbakon/CVE-2023-41425](https://github.com/KGorbakon/CVE-2023-41425) -- [becrevex/CVE-2023-41425](https://github.com/becrevex/CVE-2023-41425) -- [Tea-On/CVE-2023-41425-RCE-WonderCMS-4.3.2](https://github.com/Tea-On/CVE-2023-41425-RCE-WonderCMS-4.3.2) ### CVE-2023-41436 (2023-09-15) @@ -33553,13 +31902,6 @@ ### CVE-2023-41535 - [Sh33talUmath/CVE-2023-41535](https://github.com/Sh33talUmath/CVE-2023-41535) -### CVE-2023-41564 (2023-09-08) - -An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file. - - -- [sota70/cve-2023-41564-research](https://github.com/sota70/cve-2023-41564-research) - ### CVE-2023-41575 (2023-09-08) Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters. @@ -33581,13 +31923,6 @@ - [GhostBalladw/wuhaozhe-s-CVE](https://github.com/GhostBalladw/wuhaozhe-s-CVE) -### CVE-2023-41652 (2023-11-03) - -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6. - - -- [RandomRobbieBF/CVE-2023-41652](https://github.com/RandomRobbieBF/CVE-2023-41652) - ### CVE-2023-41717 (2023-08-31) Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. @@ -33609,10 +31944,6 @@ - [zaenhaxor/CVE-2023-41892](https://github.com/zaenhaxor/CVE-2023-41892) - [0xfalafel/CraftCMS_CVE-2023-41892](https://github.com/0xfalafel/CraftCMS_CVE-2023-41892) -- [diegaccio/Craft-CMS-Exploit](https://github.com/diegaccio/Craft-CMS-Exploit) -- [acesoyeo/CVE-2023-41892](https://github.com/acesoyeo/CVE-2023-41892) -- [CERTologists/HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892](https://github.com/CERTologists/HTTP-Request-for-PHP-object-injection-attack-on-CVE-2023-41892) -- [user01-1/CVE-2023-41892_poc](https://github.com/user01-1/CVE-2023-41892_poc) ### CVE-2023-41991 (2023-09-21) @@ -33620,14 +31951,6 @@ - [itsgiddd/CVE-2023-41991](https://github.com/itsgiddd/CVE-2023-41991) -- [dmytrozykov/appsign](https://github.com/dmytrozykov/appsign) - -### CVE-2023-41992 (2023-09-21) - -The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. - - -- [WHW0x455/CVE-2023-41992](https://github.com/WHW0x455/CVE-2023-41992) ### CVE-2023-41993 (2023-09-21) @@ -33638,14 +31961,12 @@ - [hrtowii/cve-2023-41993-test](https://github.com/hrtowii/cve-2023-41993-test) - [0x06060606/CVE-2023-41993](https://github.com/0x06060606/CVE-2023-41993) - [Mangaia/cve-test](https://github.com/Mangaia/cve-test) -- [J3Ss0u/CVE-2023-41993](https://github.com/J3Ss0u/CVE-2023-41993) ### CVE-2023-42115 (2024-05-03) Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. \n\nThe specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account.\n. Was ZDI-CAN-17434. -- [kirinse/cve-2023-42115](https://github.com/kirinse/cve-2023-42115) - [doaso/CVE-2023-42115](https://github.com/doaso/CVE-2023-42115) ### CVE-2023-42222 (2023-09-28) @@ -33669,13 +31990,6 @@ - [andreysanyuk/CVE-2023-42284](https://github.com/andreysanyuk/CVE-2023-42284) -### CVE-2023-42326 (2023-11-14) - -An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components. - - -- [bl4ckarch/CVE-2023-42326](https://github.com/bl4ckarch/CVE-2023-42326) - ### CVE-2023-42362 (2023-09-14) An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive information via uploading a crafted file. @@ -33730,20 +32044,6 @@ - [actuator/wave.ai.browser](https://github.com/actuator/wave.ai.browser) -### CVE-2023-42789 (2024-03-12) - -A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests. - - -- [jhonnybonny/CVE-2023-42789](https://github.com/jhonnybonny/CVE-2023-42789) - -### CVE-2023-42791 (2024-02-20) - -A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests. - - -- [synacktiv/CVE-2023-42791_CVE-2024-23666](https://github.com/synacktiv/CVE-2023-42791_CVE-2024-23666) - ### CVE-2023-42793 (2023-09-19) In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible @@ -33752,18 +32052,6 @@ - [H454NSec/CVE-2023-42793](https://github.com/H454NSec/CVE-2023-42793) - [whoamins/CVE-2023-42793](https://github.com/whoamins/CVE-2023-42793) - [Zenmovie/CVE-2023-42793](https://github.com/Zenmovie/CVE-2023-42793) -- [hotplugin0x01/CVE-2023-42793](https://github.com/hotplugin0x01/CVE-2023-42793) -- [B4l3rI0n/CVE-2023-42793](https://github.com/B4l3rI0n/CVE-2023-42793) -- [junnythemarksman/CVE-2023-42793](https://github.com/junnythemarksman/CVE-2023-42793) -- [HusenjanDev/CVE-2023-42793](https://github.com/HusenjanDev/CVE-2023-42793) -- [FlojBoj/CVE-2023-42793](https://github.com/FlojBoj/CVE-2023-42793) -- [SwiftSecur/teamcity-exploit-cve-2023-42793](https://github.com/SwiftSecur/teamcity-exploit-cve-2023-42793) -- [becrevex/CVE-2023-42793](https://github.com/becrevex/CVE-2023-42793) -- [jakehomb/cve-2023-42793](https://github.com/jakehomb/cve-2023-42793) -- [syaifulandy/Nuclei-Template-CVE-2023-42793.yaml](https://github.com/syaifulandy/Nuclei-Template-CVE-2023-42793.yaml) -- [syorik/CVE-2023-42793](https://github.com/syorik/CVE-2023-42793) -- [cxdxnt/CVE-2023-42793](https://github.com/cxdxnt/CVE-2023-42793) -- [DDestinys/CVE-2023-42793](https://github.com/DDestinys/CVE-2023-42793) ### CVE-2023-42819 (2023-09-26) @@ -33787,35 +32075,6 @@ - [619555798/cve-2023-42824](https://github.com/619555798/cve-2023-42824) -### CVE-2023-42829 (2024-01-10) - -The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to access SSH passphrases. - - -- [JamesD4/CVE-2023-42829](https://github.com/JamesD4/CVE-2023-42829) - -### CVE-2023-42860 (2024-02-21) - -A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system. - - -- [Trigii/CVE-2023-42860](https://github.com/Trigii/CVE-2023-42860) - -### CVE-2023-42931 (2024-03-28) - -The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication. - - -- [d0rb/CVE-2023-42931](https://github.com/d0rb/CVE-2023-42931) -- [tageniu/CVE-2023-42931](https://github.com/tageniu/CVE-2023-42931) - -### CVE-2023-43040 (2024-05-13) - -IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807. - - -- [riza/CVE-2023-43040](https://github.com/riza/CVE-2023-43040) - ### CVE-2023-43115 (2023-09-18) In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server). @@ -33871,9 +32130,6 @@ - [K3ysTr0K3R/CVE-2023-43208-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT) -- [jakabakos/CVE-2023-43208-mirth-connect-rce-poc](https://github.com/jakabakos/CVE-2023-43208-mirth-connect-rce-poc) -- [J4F9S5D2Q7/CVE-2023-43208-MIRTHCONNECT](https://github.com/J4F9S5D2Q7/CVE-2023-43208-MIRTHCONNECT) -- [Avento/CVE-2023-43208_Detection_PoC](https://github.com/Avento/CVE-2023-43208_Detection_PoC) - [kyakei/CVE-2023-43208](https://github.com/kyakei/CVE-2023-43208) - [Pegasus0xx/CVE-2023-43208](https://github.com/Pegasus0xx/CVE-2023-43208) - [MKIRAHMET/PoC-2023-43208](https://github.com/MKIRAHMET/PoC-2023-43208) @@ -33906,20 +32162,6 @@ - [MateusTesser/CVE-2023-43284](https://github.com/MateusTesser/CVE-2023-43284) -### CVE-2023-43317 (2024-01-24) - -An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parameter in Session Storage component. - - -- [amjadali-110/CVE-2023-43317](https://github.com/amjadali-110/CVE-2023-43317) - -### CVE-2023-43318 (2024-03-05) - -TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201 allows attackers to escalate privileges via modification of the 'tid' and 'usrlvl' values in GET requests. - - -- [str2ver/CVE-2023-43318](https://github.com/str2ver/CVE-2023-43318) - ### CVE-2023-43323 (2023-09-28) mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink]. @@ -34065,7 +32307,6 @@ main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution. -- [libertycityhacker/CVE-2023-43364-Exploit-CVE](https://github.com/libertycityhacker/CVE-2023-43364-Exploit-CVE) - [Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit](https://github.com/Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit) ### CVE-2023-43481 (2023-12-27) @@ -34075,48 +32316,12 @@ - [actuator/com.tcl.browser](https://github.com/actuator/com.tcl.browser) -### CVE-2023-43482 (2024-02-06) - -A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. - - -- [Mr-xn/CVE-2023-43482](https://github.com/Mr-xn/CVE-2023-43482) - -### CVE-2023-43494 (2023-09-20) - -Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered. - - -- [mqxmm/CVE-2023-43494](https://github.com/mqxmm/CVE-2023-43494) - -### CVE-2023-43622 (2023-10-23) - -An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern.\nThis has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout.\n\nThis issue affects Apache HTTP Server: from 2.4.55 through 2.4.57.\n\nUsers are recommended to upgrade to version 2.4.58, which fixes the issue. - - -- [visudade/CVE-2023-43622](https://github.com/visudade/CVE-2023-43622) - -### CVE-2023-43646 (2023-09-26) - -get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when parsing malicious input. This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently increases the CPU load and processing time significantly. This vulnerability can be triggered using the following input: '\t'.repeat(54773) + '\t/function/i'. This issue has been addressed in commit `f934b228b` which has been included in releases from 2.0.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [200101WhoAmI/CVE-2023-43646](https://github.com/200101WhoAmI/CVE-2023-43646) - ### CVE-2023-43654 (2023-09-28) TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A user is able to load the model of their choice from any URL that they would like to use. The user of TorchServe is responsible for configuring both the allowed_urls and specifying the model URL to be used. A pull request to warn the user when the default value for allowed_urls is used has been merged in PR #2534. TorchServe release 0.8.2 includes this change. Users are advised to upgrade. There are no known workarounds for this issue. - [OligoCyberSecurity/ShellTorchChecker](https://github.com/OligoCyberSecurity/ShellTorchChecker) -- [OligoCyberSecurity/CVE-2023-43654](https://github.com/OligoCyberSecurity/CVE-2023-43654) - -### CVE-2023-43757 (2023-11-16) - -Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected products/versions, see the information provided by the vendor under [References] section. - - -- [sharmashreejaa/CVE-2023-43757](https://github.com/sharmashreejaa/CVE-2023-43757) ### CVE-2023-43770 (2023-09-22) @@ -34125,7 +32330,6 @@ - [s3cb0y/CVE-2023-43770-POC](https://github.com/s3cb0y/CVE-2023-43770-POC) - [knight0x07/CVE-2023-43770-PoC](https://github.com/knight0x07/CVE-2023-43770-PoC) -- [skyllpro/CVE-2021-44026-PoC](https://github.com/skyllpro/CVE-2021-44026-PoC) ### CVE-2023-43838 (2023-10-04) @@ -34226,17 +32430,7 @@ - [ndrscodes/http2-rst-stream-attacker](https://github.com/ndrscodes/http2-rst-stream-attacker) - [nxenon/cve-2023-44487](https://github.com/nxenon/cve-2023-44487) - [sigridou/CVE-2023-44487-](https://github.com/sigridou/CVE-2023-44487-) -- [TYuan0816/cve-2023-44487](https://github.com/TYuan0816/cve-2023-44487) -- [sn130hk/CVE-2023-44487](https://github.com/sn130hk/CVE-2023-44487) -- [threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC](https://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC) -- [aulauniversal/CVE-2023-44487](https://github.com/aulauniversal/CVE-2023-44487) -- [BMG-Black-Magic/CVE-2023-44487](https://github.com/BMG-Black-Magic/CVE-2023-44487) -- [moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack](https://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attack) -- [zanks08/cve-2023-44487-demo](https://github.com/zanks08/cve-2023-44487-demo) - [madhusudhan-in/CVE_2023_44487-Rapid_Reset](https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset) -- [tpirate/cve-2023-44487-POC](https://github.com/tpirate/cve-2023-44487-POC) -- [ReGeLePuMa/HTTP-2-Rapid-Reset-DDos](https://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDos) -- [sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-](https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-) - [TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab](https://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlab) - [Hirokiii/CVE-2023-44487](https://github.com/Hirokiii/CVE-2023-44487) - [madhantr0/http2-security-lab](https://github.com/madhantr0/http2-security-lab) @@ -34360,13 +32554,6 @@ - [keowu/BadRentdrv2](https://github.com/keowu/BadRentdrv2) -### CVE-2023-45131 (2023-10-16) - -Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [ibrahmsql/CVE-2023-45131](https://github.com/ibrahmsql/CVE-2023-45131) - ### CVE-2023-45158 (2023-10-16) An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product. @@ -34374,13 +32561,6 @@ - [yifanzhg/CVE-2023-45158](https://github.com/yifanzhg/CVE-2023-45158) -### CVE-2023-45182 (2023-12-14) - -\nIBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain the password to other systems. IBM X-Force ID: 268265.\n\n - - -- [afine-com/CVE-2023-45182](https://github.com/afine-com/CVE-2023-45182) - ### CVE-2023-45184 (2023-12-14) IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270. @@ -34388,55 +32568,6 @@ - [afine-com/CVE-2023-45184](https://github.com/afine-com/CVE-2023-45184) -### CVE-2023-45185 (2023-12-14) - -IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273. - - -- [afine-com/CVE-2023-45185](https://github.com/afine-com/CVE-2023-45185) - -### CVE-2023-45239 (2023-10-06) - -A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server. - - -- [takeshixx/tac_plus-pre-auth-rce](https://github.com/takeshixx/tac_plus-pre-auth-rce) - -### CVE-2023-45277 (2023-10-19) - -Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files. - - -- [shoucheng3/yamcs__yamcs_CVE-2023-45277_5-8-6](https://github.com/shoucheng3/yamcs__yamcs_CVE-2023-45277_5-8-6) - -### CVE-2023-45278 (2023-10-19) - -Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request. - - -- [shoucheng3/yamcs__yamcs_CVE-2023-45278_5-8-6](https://github.com/shoucheng3/yamcs__yamcs_CVE-2023-45278_5-8-6) - -### CVE-2023-45288 (2024-04-04) - -An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection. - - -- [hex0punk/cont-flood-poc](https://github.com/hex0punk/cont-flood-poc) - -### CVE-2023-45503 (2024-04-15) - -SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole, deleteComment, deleteUser, allowComment, saveRole, forgotPasswordProcess, resetPassword, saveUser, addComment, saveRole, and saveUser endpoints. - - -- [ally-petitt/CVE-2023-45503](https://github.com/ally-petitt/CVE-2023-45503) - -### CVE-2023-45539 (2023-11-28) - -HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server. - - -- [slicingmelon/HAProxy-CVE-2023-45539-PoC](https://github.com/slicingmelon/HAProxy-CVE-2023-45539-PoC) - ### CVE-2023-45540 (2023-10-16) An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page. @@ -34451,19 +32582,6 @@ - [ahrixia/CVE-2023-45542](https://github.com/ahrixia/CVE-2023-45542) -### CVE-2023-45612 (2023-10-09) - -In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE - - -- [infernosalex/CVE-2023-45612-PoC](https://github.com/infernosalex/CVE-2023-45612-PoC) -- [aecelen/ktor-xxe-poc](https://github.com/aecelen/ktor-xxe-poc) -- [clemfavre/cve-2023-45612_exploit](https://github.com/clemfavre/cve-2023-45612_exploit) -- [razvanclaudiu/ktor-xxe-poc](https://github.com/razvanclaudiu/ktor-xxe-poc) -- [seraphimi/ktor-xxe](https://github.com/seraphimi/ktor-xxe) -- [stefan-500/ktor-cve-2023-45612-poc](https://github.com/stefan-500/ktor-cve-2023-45612-poc) -- [ksaweryr/CVE-2023-45612-PoC](https://github.com/ksaweryr/CVE-2023-45612-PoC) - ### CVE-2023-45657 (2023-11-06) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3. @@ -34471,21 +32589,6 @@ - [RandomRobbieBF/CVE-2023-45657](https://github.com/RandomRobbieBF/CVE-2023-45657) -### CVE-2023-45777 (2023-12-04) - -In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [michalbednarski/TheLastBundleMismatch](https://github.com/michalbednarski/TheLastBundleMismatch) -- [B-D-APL/silver-succotash](https://github.com/B-D-APL/silver-succotash) - -### CVE-2023-45779 (2023-12-04) - -In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. More details on this can be found in the referenced links.\n - - -- [metaredteam/rtx-cve-2023-45779](https://github.com/metaredteam/rtx-cve-2023-45779) - ### CVE-2023-45802 (2023-10-23) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that.\n\nThis was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out.\n\nUsers are recommended to upgrade to version 2.4.58, which fixes the issue. @@ -34493,20 +32596,6 @@ - [MehranTurk/CVE-2023-45802](https://github.com/MehranTurk/CVE-2023-45802) -### CVE-2023-45806 (2023-11-10) - -Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, if a user has been quoted and uses a `|` in their full name, they might be able to trigger a bug that generates a lot of duplicate content in all the posts they've been quoted by updating their full name again. Version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches contain a patch for this issue. No known workaround exists, although one can stop the "bleeding" by ensuring users only use alphanumeric characters in their full name field. - - -- [yksivaihde/discourse-CVE-2023-45806](https://github.com/yksivaihde/discourse-CVE-2023-45806) - -### CVE-2023-45827 (2023-11-06) - -Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability.\n - - -- [200101WhoAmI/CVE-2023-45827](https://github.com/200101WhoAmI/CVE-2023-45827) - ### CVE-2023-45828 (2025-01-02) Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a through <= 6.2.5. @@ -34529,30 +32618,8 @@ - [pentestfunctions/BlueDucky](https://github.com/pentestfunctions/BlueDucky) -- [jjjjjjjj987/cve-2023-45866-py](https://github.com/jjjjjjjj987/cve-2023-45866-py) -- [cisnarfu/Bluepop](https://github.com/cisnarfu/Bluepop) -- [AvishekDhakal/CVE-2023-45866_EXPLOITS](https://github.com/AvishekDhakal/CVE-2023-45866_EXPLOITS) -- [Chedrian07/CVE-2023-45866-POC](https://github.com/Chedrian07/CVE-2023-45866-POC) -- [Danyw24/blueXploit](https://github.com/Danyw24/blueXploit) -- [xG3nesis/RustyInjector](https://github.com/xG3nesis/RustyInjector) -- [ladyg00se/CVE-2023-45866_WIP](https://github.com/ladyg00se/CVE-2023-45866_WIP) -- [Sergeb250/BlueDucky](https://github.com/Sergeb250/BlueDucky) - [hegaz0y/-BuL](https://github.com/hegaz0y/-BuL) -### CVE-2023-45878 (2023-11-14) - -GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated). - - -- [dgoorden/CVE-2023-45878](https://github.com/dgoorden/CVE-2023-45878) -- [nrazv/CVE-2023-45878](https://github.com/nrazv/CVE-2023-45878) -- [PaulDHaes/CVE-2023-45878-POC](https://github.com/PaulDHaes/CVE-2023-45878-POC) -- [killercd/CVE-2023-45878](https://github.com/killercd/CVE-2023-45878) -- [byt3loss/CVE-2023-45878_to_RCE](https://github.com/byt3loss/CVE-2023-45878_to_RCE) -- [davidzzo23/CVE-2023-45878](https://github.com/davidzzo23/CVE-2023-45878) -- [Can0I0Ever0Enter/CVE-2023-45878](https://github.com/Can0I0Ever0Enter/CVE-2023-45878) -- [ulricvbs/gibbonlms-filewrite_rce](https://github.com/ulricvbs/gibbonlms-filewrite_rce) - ### CVE-2023-45966 (2023-10-23) umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability. @@ -34574,13 +32641,6 @@ - [leekenghwa/CVE-2023-46003](https://github.com/leekenghwa/CVE-2023-46003) -### CVE-2023-46012 (2024-05-07) - -Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP. - - -- [dest-3/CVE-2023-46012](https://github.com/dest-3/CVE-2023-46012) - ### CVE-2023-46014 (2023-11-13) SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters. @@ -34644,13 +32704,6 @@ - [ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability](https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability) -### CVE-2023-46136 (2023-10-24) - -Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8. - - -- [JawadPy/WerkGhost](https://github.com/JawadPy/WerkGhost) - ### CVE-2023-46197 (2024-05-17) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through 1.10.19. @@ -34665,13 +32718,6 @@ - [JarvisDing-sdu/Yasa-CVE-2023-46229](https://github.com/JarvisDing-sdu/Yasa-CVE-2023-46229) -### CVE-2023-46304 (2024-04-30) - -modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code because an unprotected endpoint allows them to write this code to the config.inc.php file (executed on every page load). - - -- [jselliott/CVE-2023-46304](https://github.com/jselliott/CVE-2023-46304) - ### CVE-2023-46344 (2024-02-02) A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an attacker to escalate their privileges by exploiting a stored cross-site scripting (XSS) vulnerability in the switch group function under /#ilang=DE&b=c_smartenergy_swgroups in the web portal. The vulnerability can be exploited to gain the rights of an installer or PM, which can then be used to gain administrative access to the web portal and execute further attacks. NOTE: The vendor states that this vulnerability has been fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base. @@ -34679,13 +32725,6 @@ - [vinnie1717/CVE-2023-46344](https://github.com/vinnie1717/CVE-2023-46344) -### CVE-2023-46371 (2023-10-24) - -TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin. - - -- [Jianchun-Ding/CVE-poc-update](https://github.com/Jianchun-Ding/CVE-poc-update) - ### CVE-2023-46404 (2023-11-03) PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing. @@ -34693,13 +32732,6 @@ - [windecks/CVE-2023-46404](https://github.com/windecks/CVE-2023-46404) -### CVE-2023-46442 (2024-05-24) - -An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS). - - -- [JAckLosingHeart/CVE-2023-46442_POC](https://github.com/JAckLosingHeart/CVE-2023-46442_POC) - ### CVE-2023-46447 (2024-01-20) The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE. @@ -34771,18 +32803,6 @@ - [dcm2406/CVE-2023-46604](https://github.com/dcm2406/CVE-2023-46604) - [Mudoleto/Broker_ApacheMQ](https://github.com/Mudoleto/Broker_ApacheMQ) - [tomasmussi/activemq-cve-2023-46604](https://github.com/tomasmussi/activemq-cve-2023-46604) -- [stegano5/ExploitScript-CVE-2023-46604](https://github.com/stegano5/ExploitScript-CVE-2023-46604) -- [Arlenhiack/ActiveMQ-RCE-Exploit](https://github.com/Arlenhiack/ActiveMQ-RCE-Exploit) -- [vulncheck-oss/cve-2023-46604](https://github.com/vulncheck-oss/cve-2023-46604) -- [thinkycx/activemq-rce-cve-2023-46604](https://github.com/thinkycx/activemq-rce-cve-2023-46604) -- [mranv/honeypot.rs](https://github.com/mranv/honeypot.rs) -- [pulentoski/CVE-2023-46604](https://github.com/pulentoski/CVE-2023-46604) -- [cuanh2333/CVE-2023-46604](https://github.com/cuanh2333/CVE-2023-46604) -- [skrkcb2/CVE-2023-46604](https://github.com/skrkcb2/CVE-2023-46604) -- [CCIEVoice2009/CVE-2023-46604](https://github.com/CCIEVoice2009/CVE-2023-46604) -- [vaishnavucv/Project-Vuln-Detection-N-Mitigation_101](https://github.com/vaishnavucv/Project-Vuln-Detection-N-Mitigation_101) -- [pavanaa4k/CVE-2023-46604-LAB](https://github.com/pavanaa4k/CVE-2023-46604-LAB) -- [RockyDesigne/SSP-Assignment-3-RCEYouLater](https://github.com/RockyDesigne/SSP-Assignment-3-RCEYouLater) - [sangrok-jeon/CVE-2023-46604-Analysis](https://github.com/sangrok-jeon/CVE-2023-46604-Analysis) - [mkdemir/activemq-lockbit-analysis](https://github.com/mkdemir/activemq-lockbit-analysis) - [Catherines77/ActiveMQ-EXPtools](https://github.com/Catherines77/ActiveMQ-EXPtools) @@ -34799,13 +32819,6 @@ - [RandomRobbieBF/CVE-2023-46615](https://github.com/RandomRobbieBF/CVE-2023-46615) -### CVE-2023-46694 (2024-05-28) - -Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality. - - -- [invisiblebyte/CVE-2023-46694](https://github.com/invisiblebyte/CVE-2023-46694) - ### CVE-2023-46747 (2023-10-26) Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated @@ -34816,29 +32829,6 @@ - [maniak-academy/Mitigate-CVE-2023-46747](https://github.com/maniak-academy/Mitigate-CVE-2023-46747) - [nvansluis/test_cve-2023-46747](https://github.com/nvansluis/test_cve-2023-46747) - [RevoltSecurities/CVE-2023-46747](https://github.com/RevoltSecurities/CVE-2023-46747) -- [vidura2/cve-2023-46747](https://github.com/vidura2/cve-2023-46747) -- [rainbowhatrkn/CVE-2023-46747-RCE](https://github.com/rainbowhatrkn/CVE-2023-46747-RCE) -- [cediegreyhat/BigFinger](https://github.com/cediegreyhat/BigFinger) -- [Razzlemouse/F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit](https://github.com/Razzlemouse/F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit) - -### CVE-2023-46749 (2024-01-15) - -Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting \n\nMitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure `blockSemicolon` is enabled (this is the default).\n\n - - -- [shoucheng3/apache__shiro_CVE-2023-46749_1-12-0](https://github.com/shoucheng3/apache__shiro_CVE-2023-46749_1-12-0) - -### CVE-2023-46805 (2024-01-12) - -An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. - - -- [yoryio/CVE-2023-46805](https://github.com/yoryio/CVE-2023-46805) -- [raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887](https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887) -- [seajaysec/Ivanti-Connect-Around-Scan](https://github.com/seajaysec/Ivanti-Connect-Around-Scan) -- [w2xim3/CVE-2023-46805](https://github.com/w2xim3/CVE-2023-46805) -- [rxwx/pulse-meter](https://github.com/rxwx/pulse-meter) -- [Hexastrike/Ivanti-Connect-Secure-Logs-Parser](https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser) ### CVE-2023-46813 (2023-10-27) @@ -34847,22 +32837,6 @@ - [Freax13/cve-2023-46813-poc](https://github.com/Freax13/cve-2023-46813-poc) -### CVE-2023-46818 (2023-10-27) - -An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled. - - -- [bipbopbup/CVE-2023-46818-python-exploit](https://github.com/bipbopbup/CVE-2023-46818-python-exploit) -- [blindma1den/CVE-2023-46818-Exploit](https://github.com/blindma1den/CVE-2023-46818-Exploit) -- [ajdumanhug/CVE-2023-46818](https://github.com/ajdumanhug/CVE-2023-46818) -- [ajdumanhug/CVE-2022-42092](https://github.com/ajdumanhug/CVE-2022-42092) -- [rvzsec/CVE-2023-46818](https://github.com/rvzsec/CVE-2023-46818) -- [engranaabubakar/CVE-2023-46818](https://github.com/engranaabubakar/CVE-2023-46818) -- [hunntr/CVE-2023-46818](https://github.com/hunntr/CVE-2023-46818) -- [SyFi/CVE-2023-46818](https://github.com/SyFi/CVE-2023-46818) -- [vulnerk0/CVE-2023-46818](https://github.com/vulnerk0/CVE-2023-46818) -- [zs1n/CVE-2023-46818](https://github.com/zs1n/CVE-2023-46818) - ### CVE-2023-46865 (2023-10-30) /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image. @@ -34870,13 +32844,6 @@ - [asylumdx/Crater-CVE-2023-46865-RCE](https://github.com/asylumdx/Crater-CVE-2023-46865-RCE) -### CVE-2023-46870 (2024-05-13) - -extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1.0, 4.0.0, 4.1.0, and 4.1.1 have set incorrect file permission, which allows attackers to do code execution via modified bash and python scripts. - - -- [Chapoly1305/CVE-2023-46870](https://github.com/Chapoly1305/CVE-2023-46870) - ### CVE-2023-46948 (2024-09-23) A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.jsp and genrequest.jsp components. @@ -34905,13 +32872,6 @@ - [sajaljat/CVE-2023-46980](https://github.com/sajaljat/CVE-2023-46980) -### CVE-2023-46988 (2025-04-01) - -Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter in the /example/editor endpoint, leading to unauthorized access to sensitive files and potential Denial of Service (DoS). - - -- [mihat2/OnlyOffice-path-traversal](https://github.com/mihat2/OnlyOffice-path-traversal) - ### CVE-2023-46998 (2023-11-07) Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions. @@ -34933,13 +32893,6 @@ - [quantiano/cve-2023-47102](https://github.com/quantiano/cve-2023-47102) -### CVE-2023-47108 (2023-11-10) - -OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. An attacker can easily flood the peer address and port for requests. Version 0.46.0 contains a fix for this issue. As a workaround to stop being affected, a view removing the attributes can be used. The other possibility is to disable grpc metrics instrumentation by passing `otelgrpc.WithMeterProvider` option with `noop.NewMeterProvider`. - - -- [bahe-msft/govuln-CVE-2023-47108](https://github.com/bahe-msft/govuln-CVE-2023-47108) - ### CVE-2023-47119 (2023-11-10) Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, some links can inject arbitrary HTML tags when rendered through our Onebox engine. The issue is patched in version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds. @@ -34969,13 +32922,6 @@ - [RandomRobbieBF/CVE-2023-47179](https://github.com/RandomRobbieBF/CVE-2023-47179) -### CVE-2023-47218 (2024-02-13) - -An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.5.2645 build 20240116 and later\nQuTS hero h5.1.5.2647 build 20240118 and later\nQuTScloud c5.1.5.2651 and later - - -- [passwa11/CVE-2023-47218](https://github.com/passwa11/CVE-2023-47218) - ### CVE-2023-47246 (2023-11-10) In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023. @@ -34984,29 +32930,6 @@ - [W01fh4cker/CVE-2023-47246-EXP](https://github.com/W01fh4cker/CVE-2023-47246-EXP) - [rainbowhatrkn/CVE-2023-47246](https://github.com/rainbowhatrkn/CVE-2023-47246) -### CVE-2023-47248 (2023-11-09) - -Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).\n\nThis vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings.\n\nIt is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon.\n\nIf it is not possible to upgrade, we provide a separate package `pyarrow-hotfix` that disables the vulnerability on older PyArrow versions. See https://pypi.org/project/pyarrow-hotfix/ for instructions. - - -- [Prodigysec/pyarrow-CVE-2023-47248](https://github.com/Prodigysec/pyarrow-CVE-2023-47248) - -### CVE-2023-47253 (2023-11-06) - -Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. - - -- [OpenXP-Research/CVE-2023-47253](https://github.com/OpenXP-Research/CVE-2023-47253) -- [gmh5225/CVE-2023-47253](https://github.com/gmh5225/CVE-2023-47253) - -### CVE-2023-47268 (2026-05-08) - -In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported. - - -- [suce0155/CVE-2023-47268](https://github.com/suce0155/CVE-2023-47268) -- [Pallangyo98/Trickster-HTB](https://github.com/Pallangyo98/Trickster-HTB) - ### CVE-2023-47355 (2024-02-05) The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation. @@ -35014,9 +32937,6 @@ - [actuator/com.eypcnnapps.quickreboot](https://github.com/actuator/com.eypcnnapps.quickreboot) -### CVE-2023-47400 -- [LucasVanHaaren/CVE-2023-47400](https://github.com/LucasVanHaaren/CVE-2023-47400) - ### CVE-2023-47437 (2023-11-27) A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script. @@ -35038,20 +32958,6 @@ - [aleksey-vi/CVE-2023-47460](https://github.com/aleksey-vi/CVE-2023-47460) -### CVE-2023-47464 (2023-11-30) - -Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function. - - -- [HadessCS/CVE-2023-47464](https://github.com/HadessCS/CVE-2023-47464) - -### CVE-2023-47504 (2024-04-24) - -Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4. - - -- [davidxbors/CVE-2023-47504-POC](https://github.com/davidxbors/CVE-2023-47504-POC) - ### CVE-2023-47529 (2023-11-23) Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2. @@ -35059,20 +32965,12 @@ - [RandomRobbieBF/CVE-2023-47529](https://github.com/RandomRobbieBF/CVE-2023-47529) -### CVE-2023-47564 (2024-02-02) - -An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQsync Central 4.4.0.15 ( 2024/01/04 ) and later\nQsync Central 4.3.0.11 ( 2024/01/11 ) and later\n - - -- [C411e/CVE-2023-47564](https://github.com/C411e/CVE-2023-47564) - ### CVE-2023-47668 (2023-11-23) Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions. - [RandomRobbieBF/CVE-2023-47668](https://github.com/RandomRobbieBF/CVE-2023-47668) -- [Nxploited/CVE-2023-47668](https://github.com/Nxploited/CVE-2023-47668) ### CVE-2023-47840 (2023-12-29) @@ -35102,13 +33000,6 @@ - [actuator/com.bdrm.superreboot](https://github.com/actuator/com.bdrm.superreboot) -### CVE-2023-48022 (2023-11-28) - -Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.) - - -- [jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022](https://github.com/jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022) - ### CVE-2023-48034 (2023-11-27) An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption. @@ -35116,14 +33007,6 @@ - [aprkr/CVE-2023-48034](https://github.com/aprkr/CVE-2023-48034) -### CVE-2023-48084 (2023-12-14) - -Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. - - -- [Hamibubu/CVE-2023-48084](https://github.com/Hamibubu/CVE-2023-48084) -- [bucketcat/CVE-2023-48084](https://github.com/bucketcat/CVE-2023-48084) - ### CVE-2023-48123 (2023-12-06) An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file. @@ -35131,13 +33014,6 @@ - [NHPT/CVE-2023-48123](https://github.com/NHPT/CVE-2023-48123) -### CVE-2023-48194 (2024-07-09) - -Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained. - - -- [zt20xx/CVE-2023-48194](https://github.com/zt20xx/CVE-2023-48194) - ### CVE-2023-48223 (2023-11-20) fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. To exploit this vulnerability, an attacker needs to craft a malicious JWT token containing the HS256 algorithm, signed with the public RSA key of the victim application. This attack will only work if the victim application utilizes a public key containing the `BEGIN RSA PUBLIC KEY` header. Applications using the RS256 algorithm, a public key with a `BEGIN RSA PUBLIC KEY` header, and calling the verify function without explicitly providing an algorithm, are vulnerable to this algorithm confusion attack which allows attackers to sign arbitrary payloads which will be accepted by the verifier. Version 3.3.2 contains a patch for this issue. As a workaround, change line 29 of `blob/master/src/crypto.js` to include a regular expression. @@ -35145,28 +33021,12 @@ - [lucastran05/CVE-2023-48223](https://github.com/lucastran05/CVE-2023-48223) -### CVE-2023-48777 (2024-03-26) - -Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1. - - -- [AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777](https://github.com/AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777) - -### CVE-2023-48788 (2024-03-12) - -A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets. - - -- [horizon3ai/CVE-2023-48788](https://github.com/horizon3ai/CVE-2023-48788) - ### CVE-2023-48795 (2023-12-18) The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust. - [kabiri-labs/sshfinder](https://github.com/kabiri-labs/sshfinder) -- [TrixSec/CVE-2023-48795](https://github.com/TrixSec/CVE-2023-48795) -- [Dr0xharakiri/CVE-2023-48795](https://github.com/Dr0xharakiri/CVE-2023-48795) - [fumioryoto/Terrapin-attack](https://github.com/fumioryoto/Terrapin-attack) - [oseasfr/Scanner_CVE_OpenSSH](https://github.com/oseasfr/Scanner_CVE_OpenSSH) - [Mr-Whiskerss/SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker](https://github.com/Mr-Whiskerss/SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker) @@ -35206,13 +33066,6 @@ - [actuator/com.simplemobiletools.dialer](https://github.com/actuator/com.simplemobiletools.dialer) -### CVE-2023-49031 (2025-03-03) - -Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint. - - -- [Yoshik0xF6/CVE-2023-49031](https://github.com/Yoshik0xF6/CVE-2023-49031) - ### CVE-2023-49052 (2023-11-30) File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component. @@ -35227,9 +33080,6 @@ - [abdoghazy2015/ofbiz-CVE-2023-49070-RCE-POC](https://github.com/abdoghazy2015/ofbiz-CVE-2023-49070-RCE-POC) - [0xrobiul/CVE-2023-49070](https://github.com/0xrobiul/CVE-2023-49070) -- [D0g3-8Bit/OFBiz-Attack](https://github.com/D0g3-8Bit/OFBiz-Attack) -- [UserConnecting/Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz](https://github.com/UserConnecting/Exploit-CVE-2023-49070-and-CVE-2023-51467-Apache-OFBiz) -- [Praison001/Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467](https://github.com/Praison001/Apache-OFBiz-Auth-Bypass-and-RCE-Exploit-CVE-2023-49070-CVE-2023-51467) ### CVE-2023-49103 (2023-11-21) @@ -35238,7 +33088,6 @@ - [creacitysec/CVE-2023-49103](https://github.com/creacitysec/CVE-2023-49103) - [merlin-ke/OwnCloud-CVE-2023-49103](https://github.com/merlin-ke/OwnCloud-CVE-2023-49103) -- [d0rb/CVE-2023-49103](https://github.com/d0rb/CVE-2023-49103) ### CVE-2023-49105 (2023-11-21) @@ -35247,14 +33096,6 @@ - [ambionics/owncloud-exploits](https://github.com/ambionics/owncloud-exploits) -### CVE-2023-49109 (2024-02-20) - -Exposure of Remote Code Execution in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue. - - -- [shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-0](https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-0) -- [shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3_2_1_fixed](https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3_2_1_fixed) - ### CVE-2023-49313 (2023-11-28) A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data. @@ -35269,13 +33110,6 @@ - [louiselalanne/CVE-2023-49314](https://github.com/louiselalanne/CVE-2023-49314) -### CVE-2023-49367 (2025-09-18) - -An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user. - - -- [barisbaydur/CVE-2023-49367](https://github.com/barisbaydur/CVE-2023-49367) - ### CVE-2023-49438 (2023-12-26) An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes. @@ -35297,9 +33131,6 @@ - [zunak/CVE-2023-49471](https://github.com/zunak/CVE-2023-49471) -### CVE-2023-49496 -- [HuangYanQwQ/CVE-2023-49496_PoC](https://github.com/HuangYanQwQ/CVE-2023-49496_PoC) - ### CVE-2023-49539 (2024-03-01) Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter. @@ -35356,27 +33187,6 @@ - [geraldoalcantara/CVE-2023-49548](https://github.com/geraldoalcantara/CVE-2023-49548) -### CVE-2023-49606 (2024-05-01) - -A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A specially crafted HTTP header can trigger reuse of previously freed memory, which leads to memory corruption and could lead to remote code execution. An attacker needs to make an unauthenticated HTTP request to trigger this vulnerability. - - -- [d0rb/CVE-2023-49606](https://github.com/d0rb/CVE-2023-49606) - -### CVE-2023-49785 (2024-03-11) - -NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using HTTP POST, PUT, and other methods. Attackers can also use this vulnerability to mask their source IP by forwarding malicious traffic intended for other Internet targets through these open proxies. As of time of publication, no patch is available, but other mitigation strategies are available. Users may avoid exposing the application to the public internet or, if exposing the application to the internet, ensure it is an isolated network with no access to any other internal resources.\n - - -- [hyunnna/NextChat_SSRF_CVE-2023-49785](https://github.com/hyunnna/NextChat_SSRF_CVE-2023-49785) - -### CVE-2023-49950 (2024-02-03) - -The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can craft a cross-site scripting (XSS) payload and send it to any system or device that sends logs to the SIEM. If an alert is created, the payload will execute upon the alert data being viewed with that template, which can lead to sensitive data disclosure. - - -- [shrikeinfosec/cve-2023-49950](https://github.com/shrikeinfosec/cve-2023-49950) - ### CVE-2023-49954 (2023-12-25) The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address. @@ -35391,13 +33201,6 @@ - [mbadanoiu/CVE-2023-49964](https://github.com/mbadanoiu/CVE-2023-49964) -### CVE-2023-49965 (2024-04-05) - -SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page. - - -- [yoshida-git-ai/SpaceX-Starlink-Router-Gen-2-XSS](https://github.com/yoshida-git-ai/SpaceX-Starlink-Router-Gen-2-XSS) - ### CVE-2023-49968 (2024-03-04) Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php. @@ -35538,13 +33341,6 @@ - [geraldoalcantara/CVE-2023-49989](https://github.com/geraldoalcantara/CVE-2023-49989) -### CVE-2023-50029 (2024-06-24) - -PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the M4PDF::saveTemplate() method. - - -- [absholi7ly/PHP-Injection-in-M4-PDF-Extensions](https://github.com/absholi7ly/PHP-Injection-in-M4-PDF-Extensions) - ### CVE-2023-50070 (2023-12-29) Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject. @@ -35566,13 +33362,6 @@ - [ahrixia/CVE-2023-50072](https://github.com/ahrixia/CVE-2023-50072) -### CVE-2023-50094 (2024-01-01) - -reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?url= string. The commands are executed as root via subprocess.check_output. - - -- [Zierax/CVE-2023-50094_POC](https://github.com/Zierax/CVE-2023-50094_POC) - ### CVE-2023-50131 - [sajaljat/CVE-2023-50131](https://github.com/sajaljat/CVE-2023-50131) @@ -35593,12 +33382,6 @@ - [miles3719/cve-2023-50164](https://github.com/miles3719/cve-2023-50164) - [aaronm-sysdig/cve-2023-50164](https://github.com/aaronm-sysdig/cve-2023-50164) - [snyk-labs/CVE-2023-50164-POC](https://github.com/snyk-labs/CVE-2023-50164-POC) -- [AsfandAliMemon25/CVE-2023-50164Analysis-](https://github.com/AsfandAliMemon25/CVE-2023-50164Analysis-) -- [NikitaPark/CVE-2023-50164-PoC](https://github.com/NikitaPark/CVE-2023-50164-PoC) -- [Trackflaw/CVE-2024-10924-Wordpress-Docker](https://github.com/Trackflaw/CVE-2024-10924-Wordpress-Docker) -- [Pixel-DefaultBR/CVE-2023-50164](https://github.com/Pixel-DefaultBR/CVE-2023-50164) -- [MKIRAHMET/CVE-2023-50164-HTB-strutted](https://github.com/MKIRAHMET/CVE-2023-50164-HTB-strutted) -- [hybinn/CVE-2023-50164](https://github.com/hybinn/CVE-2023-50164) ### CVE-2023-50226 (2024-05-03) @@ -35607,13 +33390,6 @@ - [kn32/parallels-file-move-privesc](https://github.com/kn32/parallels-file-move-privesc) -### CVE-2023-50245 (2023-12-11) - -OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1. - - -- [200101WhoAmI/CVE-2023-50245](https://github.com/200101WhoAmI/CVE-2023-50245) - ### CVE-2023-50254 (2023-12-22) Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution (RCE) can be achieved by overwriting files like .bash_rc, .bash_login, etc. RCE will be triggered when the user opens the terminal. Version 6.0.7 contains a patch for the issue. @@ -35621,36 +33397,6 @@ - [febinrev/deepin-linux_reader_RCE-exploit](https://github.com/febinrev/deepin-linux_reader_RCE-exploit) -### CVE-2023-50257 (2024-02-19) - -eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data (`p[UD]`) and `guid` values used to disconnect between nodes are not encrypted, a vulnerability has been discovered where a malicious attacker can forcibly disconnect a Subscriber and can deny a Subscriber attempting to connect. Afterwards, if the attacker sends the packet for disconnecting, which is data (`p[UD]`), to the Global Data Space (`239.255.0.1:7400`) using the said Publisher ID, all the Subscribers (Listeners) connected to the Publisher (Talker) will not receive any data and their connection will be disconnected. Moreover, if this disconnection packet is sent continuously, the Subscribers (Listeners) trying to connect will not be able to do so. Since the initial commit of the `SecurityManager.cpp` code (`init`, `on_process_handshake`) on Nov 8, 2016, the Disconnect Vulnerability in RTPS Packets Used by SROS2 has been present prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7. - - -- [Jminis/CVE-2023-50257](https://github.com/Jminis/CVE-2023-50257) - -### CVE-2023-50290 (2024-01-15) - -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.\nThe Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess.\n\nThe Solr Metrics API is protected by the "metrics-read" permission.\nTherefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission.\nThis issue affects Apache Solr: from 9.0.0 before 9.3.0.\n\nUsers are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.\n\n - - -- [desaivinayak449/bug-bounty-reports-desai-vinayak](https://github.com/desaivinayak449/bug-bounty-reports-desai-vinayak) - -### CVE-2023-50386 (2024-02-09) - -Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1.\n\nIn the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API.\nWhen backing up Solr Collections, these configSet files would be saved to disk when using the LocalFileSystemRepository (the default for backups).\nIf the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files would be available to use with any ConfigSet, trusted or untrusted.\n\nWhen Solr is run in a secure way (Authorization enabled), as is strongly suggested, this vulnerability is limited to extending the Backup permissions with the ability to add libraries.\nUsers are recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue.\nIn these versions, the following protections have been added:\n\n * Users are no longer able to upload files to a configSet that could be executed via a Java ClassLoader.\n * The Backup API restricts saving backups to directories that are used in the ClassLoader. - - -- [vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC](https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC) - -### CVE-2023-50387 (2024-02-14) - -Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. - - -- [knqyf263/CVE-2023-50387](https://github.com/knqyf263/CVE-2023-50387) -- [Meirelez/SSR-DNSSEC](https://github.com/Meirelez/SSR-DNSSEC) -- [Pablodiz/CVE-2023-50387](https://github.com/Pablodiz/CVE-2023-50387) - ### CVE-2023-50465 (2023-12-11) A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user. @@ -35664,13 +33410,6 @@ - [Rai2en/CVE-2023-50564_Pluck-v4.7.18_PoC](https://github.com/Rai2en/CVE-2023-50564_Pluck-v4.7.18_PoC) -- [ipuig/CVE-2023-50564](https://github.com/ipuig/CVE-2023-50564) -- [rwexecute/CVE-2023-50564](https://github.com/rwexecute/CVE-2023-50564) -- [thefizzyfish/CVE-2023-50564-pluck](https://github.com/thefizzyfish/CVE-2023-50564-pluck) -- [Mrterrestrial/CVE-2023-50564](https://github.com/Mrterrestrial/CVE-2023-50564) -- [0xDTC/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564](https://github.com/0xDTC/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564) -- [xpltive/CVE-2023-50564](https://github.com/xpltive/CVE-2023-50564) -- [glynzr/CVE-2023-50564](https://github.com/glynzr/CVE-2023-50564) - [kikechans/-Pluck-CMS-RCE-CVE-2023-50564](https://github.com/kikechans/-Pluck-CMS-RCE-CVE-2023-50564) ### CVE-2023-50596 @@ -35690,13 +33429,6 @@ - [MaximilianJungblut/Hipcam-RTSP-Format-Validation-Vulnerability](https://github.com/MaximilianJungblut/Hipcam-RTSP-Format-Validation-Vulnerability) -### CVE-2023-50780 (2024-10-14) - -Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE.\n\n\nUsers are recommended to upgrade to version 2.29.0 or later, which fixes the issue. - - -- [mbadanoiu/CVE-2023-50780](https://github.com/mbadanoiu/CVE-2023-50780) - ### CVE-2023-50839 (2023-12-28) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1. @@ -35704,13 +33436,6 @@ - [Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.](https://github.com/Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.) -### CVE-2023-50868 (2024-02-14) - -The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations. - - -- [Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack](https://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack) - ### CVE-2023-50917 (2023-12-15) MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. @@ -35725,9 +33450,6 @@ - [DaviGSantana/CVE-2023-50965](https://github.com/DaviGSantana/CVE-2023-50965) -### CVE-2023-51119 -- [OscarAkaElvis/CVE-2023-51119](https://github.com/OscarAkaElvis/CVE-2023-51119) - ### CVE-2023-51214 - [chandraprarikraj/CVE-2023-51214](https://github.com/chandraprarikraj/CVE-2023-51214) @@ -35750,41 +33472,14 @@ - [LtmThink/CVE-2023-51385_test](https://github.com/LtmThink/CVE-2023-51385_test) - [WLaoDuo/CVE-2023-51385_poc-test](https://github.com/WLaoDuo/CVE-2023-51385_poc-test) - [power1314520/CVE-2023-51385_test](https://github.com/power1314520/CVE-2023-51385_test) -- [farliy-hacker/CVE-2023-51385](https://github.com/farliy-hacker/CVE-2023-51385) -- [farliy-hacker/CVE-2023-51385-save](https://github.com/farliy-hacker/CVE-2023-51385-save) -- [2048JiaLi/CVE-2023-51385](https://github.com/2048JiaLi/CVE-2023-51385) -- [thinkliving2020/CVE-2023-51385-](https://github.com/thinkliving2020/CVE-2023-51385-) -- [c0deur/CVE-2023-51385](https://github.com/c0deur/CVE-2023-51385) -- [endasugrue/CVE-2023-51385_poc](https://github.com/endasugrue/CVE-2023-51385_poc) -- [MiningBot-eth/CVE-2023-51385-exploit](https://github.com/MiningBot-eth/CVE-2023-51385-exploit) -- [Featherw1t/CVE-2023-51385_test](https://github.com/Featherw1t/CVE-2023-51385_test) -- [GroundCTL2MajorTom/CVE-2023-51385POC](https://github.com/GroundCTL2MajorTom/CVE-2023-51385POC) -- [GroundCTL2MajorTom/CVE-2023-51385P-POC](https://github.com/GroundCTL2MajorTom/CVE-2023-51385P-POC) -- [saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC](https://github.com/saarcastified/CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC) ### CVE-2023-51409 (2024-04-12) Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98. -- [RandomRobbieBF/CVE-2023-51409](https://github.com/RandomRobbieBF/CVE-2023-51409) -- [Nxploited/CVE-2023-51409](https://github.com/Nxploited/CVE-2023-51409) - [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409) -### CVE-2023-51444 (2024-03-20) - -GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with permissions to modify coverage stores through the REST Coverage Store API to upload arbitrary file contents to arbitrary file locations which can lead to remote code execution. Coverage stores that are configured using relative paths use a GeoServer Resource implementation that has validation to prevent path traversal but coverage stores that are configured using absolute paths use a different Resource implementation that does not prevent path traversal. This vulnerability can lead to executing arbitrary code. An administrator with limited privileges could also potentially exploit this to overwrite GeoServer security files and obtain full administrator privileges. Versions 2.23.4 and 2.24.1 contain a fix for this issue. - - -- [iPlayForSG/CVE-2023-51444](https://github.com/iPlayForSG/CVE-2023-51444) - -### CVE-2023-51448 (2023-12-22) - -Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi) vulnerability within the SNMP Notification Receivers feature in the file `‘managers.php’`. An authenticated attacker with the “Settings/Utilities” permission can send a crafted HTTP GET request to the endpoint `‘/cacti/managers.php’` with an SQLi payload in the `‘selected_graphs_array’` HTTP GET parameter. As of time of publication, no patched versions exist. - - -- [jakabakos/CVE-2023-51448-cacti-sqli-poc](https://github.com/jakabakos/CVE-2023-51448-cacti-sqli-poc) - ### CVE-2023-51467 (2023-12-26) The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code\n\n @@ -35793,9 +33488,6 @@ - [ImuSpirit/CVE-2023-51467](https://github.com/ImuSpirit/CVE-2023-51467) - [Chocapikk/CVE-2023-51467](https://github.com/Chocapikk/CVE-2023-51467) - [K3ysTr0K3R/CVE-2023-51467-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-51467-EXPLOIT) -- [jakabakos/Apache-OFBiz-Authentication-Bypass](https://github.com/jakabakos/Apache-OFBiz-Authentication-Bypass) -- [vulncheck-oss/cve-2023-51467](https://github.com/vulncheck-oss/cve-2023-51467) -- [AhmedMansour93/Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-](https://github.com/AhmedMansour93/Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-) ### CVE-2023-51504 (2024-02-05) @@ -35804,13 +33496,6 @@ - [Sybelle03/CVE-2023-51504](https://github.com/Sybelle03/CVE-2023-51504) -### CVE-2023-51518 (2024-02-27) - -Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted data.\nGiven a deserialisation gadjet, this could be leveraged as part of an exploit chain that could result in privilege escalation.\nNote that by default JMX endpoint is only bound locally.\n\nWe recommend users to:\n - Upgrade to a non-vulnerable Apache James version\n\n - Run Apache James isolated from other processes (docker - dedicated virtual machine)\n - If possible turn off JMX\n\n - - -- [mbadanoiu/CVE-2023-51518](https://github.com/mbadanoiu/CVE-2023-51518) - ### CVE-2023-51764 (2023-12-24) Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>), a different solution is required, such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23, 3.6.13, 3.7.9, 3.8.4, or 3.9. @@ -35820,42 +33505,6 @@ - [eeenvik1/CVE-2023-51764](https://github.com/eeenvik1/CVE-2023-51764) - [d4op/CVE-2023-51764-POC](https://github.com/d4op/CVE-2023-51764-POC) -### CVE-2023-51770 (2024-02-20) - -Arbitrary File Read Vulnerability in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.1. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue. - - -- [shoucheng3/apache__dolphinscheduler_CVE-2023-51770_3-2-00](https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-51770_3-2-00) -- [shoucheng3/apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed](https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed) - -### CVE-2023-51800 (2024-02-29) - -Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the main_settings component in the phone, address, bank, acc_name, acc_number parameters, new_class and cname parameter, add_new_parent function in the name email parameters, new_term function in the tname parameter, and the edit_student function in the name parameter. - - -- [geraldoalcantara/CVE-2023-51800](https://github.com/geraldoalcantara/CVE-2023-51800) - -### CVE-2023-51801 (2024-02-29) - -SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the student_form.php and the class_form.php pages. - - -- [geraldoalcantara/CVE-2023-51801](https://github.com/geraldoalcantara/CVE-2023-51801) - -### CVE-2023-51802 (2024-02-29) - -Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or class_month parameter in the /php-attendance/attendance_report component. - - -- [geraldoalcantara/CVE-2023-51802](https://github.com/geraldoalcantara/CVE-2023-51802) - -### CVE-2023-52160 (2024-02-22) - -The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks. - - -- [Helica-core/eap_pwn](https://github.com/Helica-core/eap_pwn) - ### CVE-2023-52235 (2024-04-05) SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a reboot) via a DNS Rebinding attack. @@ -35863,20 +33512,6 @@ - [hackintoanetwork/CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding](https://github.com/hackintoanetwork/CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding) -### CVE-2023-52251 (2024-01-25) - -An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. - - -- [BobTheShoplifter/CVE-2023-52251-POC](https://github.com/BobTheShoplifter/CVE-2023-52251-POC) - -### CVE-2023-52268 (2024-11-12) - -The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub. - - -- [squ1dw3rm/CVE-2023-52268](https://github.com/squ1dw3rm/CVE-2023-52268) - ### CVE-2023-52271 (2024-01-08) The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via an IOCTL (which will be named at a later time). @@ -35884,31 +33519,6 @@ - [victoni/BYOVD-CVE-2023-52271-POC](https://github.com/victoni/BYOVD-CVE-2023-52271-POC) -### CVE-2023-52440 (2024-02-21) - -In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()\n\nIf authblob->SessionKey.Length is bigger than session key\nsize(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.\ncifs_arc4_crypt copy to session key array from SessionKey from client. - - -- [BitsByWill/ksmbd-n-day](https://github.com/BitsByWill/ksmbd-n-day) - -### CVE-2023-52654 (2024-05-09) - -In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/af_unix: disable sending io_uring over sockets\n\nFile reference cycles have caused lots of problems for io_uring\nin the past, and it still doesn't work exactly right and races with\nunix_stream_read_generic(). The safest fix would be to completely\ndisallow sending io_uring files via sockets via SCM_RIGHT, so there\nare no possible cycles invloving registered files and thus rendering\nSCM accounting on the io_uring side unnecessary. - - -- [FoxyProxys/CVE-2023-52654](https://github.com/FoxyProxys/CVE-2023-52654) - -### CVE-2023-52709 -- [KevinMitchell-OSWP-CISSP/CVE-2023-52709-PoC](https://github.com/KevinMitchell-OSWP-CISSP/CVE-2023-52709-PoC) - -### CVE-2023-52927 (2025-03-14) - -In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: allow exp not to be removed in nf_ct_find_expectation\n\nCurrently nf_conntrack_in() calling nf_ct_find_expectation() will\nremove the exp from the hash table. However, in some scenario, we\nexpect the exp not to be removed when the created ct will not be\nconfirmed, like in OVS and TC conntrack in the following patches.\n\nThis patch allows exp not to be removed by setting IPS_CONFIRMED\nin the status of the tmpl. - - -- [seadragnol/CVE-2023-52927](https://github.com/seadragnol/CVE-2023-52927) -- [HoangNhoo/Reproduce-CVE-2023-52927](https://github.com/HoangNhoo/Reproduce-CVE-2023-52927) - ## 2022 ### CVE-2022-0001 (2022-03-11) @@ -35918,21 +33528,6 @@ - [Sabecomoeh/CVE-2022-0001](https://github.com/Sabecomoeh/CVE-2022-0001) -### CVE-2022-0155 (2022-01-10) - -follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor - - -- [coana-tech/CVE-2022-0155-PoC](https://github.com/coana-tech/CVE-2022-0155-PoC) - -### CVE-2022-0165 (2022-03-14) - -The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users - - -- [K3ysTr0K3R/CVE-2022-0165-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2022-0165-EXPLOIT) -- [Cappricio-Securities/CVE-2022-0165](https://github.com/Cappricio-Securities/CVE-2022-0165) - ### CVE-2022-0169 (2022-03-14) The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection @@ -35951,7 +33546,6 @@ - [chenaotian/CVE-2022-0185](https://github.com/chenaotian/CVE-2022-0185) - [veritas501/CVE-2022-0185-PipeVersion](https://github.com/veritas501/CVE-2022-0185-PipeVersion) - [featherL/CVE-2022-0185-exploit](https://github.com/featherL/CVE-2022-0185-exploit) -- [dcheng69/CVE-2022-0185-Case-Study](https://github.com/dcheng69/CVE-2022-0185-Case-Study) - [sandesh9978/CVE-2022-0185-Analysis-and-Exploit](https://github.com/sandesh9978/CVE-2022-0185-Analysis-and-Exploit) - [prabeershakya/CVE-2022-0185-POC](https://github.com/prabeershakya/CVE-2022-0185-POC) - [shakyanayann/CVE-2022-0185](https://github.com/shakyanayann/CVE-2022-0185) @@ -35977,13 +33571,6 @@ - [achuna33/CVE-2022-0265](https://github.com/achuna33/CVE-2022-0265) -### CVE-2022-0316 (2023-01-23) - -The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server. - - -- [KTN1990/CVE-2022-0316_wordpress_multiple_themes_exploit](https://github.com/KTN1990/CVE-2022-0316_wordpress_multiple_themes_exploit) - ### CVE-2022-0324 (2022-11-14) There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.\n\nDiscovered by Eugene Lim of GovTech Singapore.\n @@ -36004,25 +33591,15 @@ - [Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera](https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera) -- [maldev866/ChExp-CVE-2022-0337-](https://github.com/maldev866/ChExp-CVE-2022-0337-) -- [zer0ne1/CVE-2022-0337-RePoC](https://github.com/zer0ne1/CVE-2022-0337-RePoC) ### CVE-2022-0435 (2022-03-25) A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. -- [wlswotmd/CVE-2022-0435](https://github.com/wlswotmd/CVE-2022-0435) - [Spydomain/CVE-2022-0435-Poc](https://github.com/Spydomain/CVE-2022-0435-Poc) - [sandesh9978/CVE-2022-0435](https://github.com/sandesh9978/CVE-2022-0435) -### CVE-2022-0439 (2022-03-07) - -The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` parameters to the `ajax_fetch_report_list` action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protection in place for the action, allowing an attacker to trick any logged in user to perform the action by clicking a link. - - -- [RandomRobbieBF/CVE-2022-0439](https://github.com/RandomRobbieBF/CVE-2022-0439) - ### CVE-2022-0441 (2022-03-07) The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin @@ -36030,8 +33607,6 @@ - [biulove0x/CVE-2022-0441](https://github.com/biulove0x/CVE-2022-0441) - [SDragon1205/cve-2022-0441](https://github.com/SDragon1205/cve-2022-0441) -- [tegal1337/CVE-2022-0441](https://github.com/tegal1337/CVE-2022-0441) -- [kyukazamiqq/CVE-2022-0441](https://github.com/kyukazamiqq/CVE-2022-0441) ### CVE-2022-0482 (2022-03-09) @@ -36039,7 +33614,6 @@ - [Acceis/exploit-CVE-2022-0482](https://github.com/Acceis/exploit-CVE-2022-0482) -- [mija-pilkaite/CVE-2022-0482_exploit](https://github.com/mija-pilkaite/CVE-2022-0482_exploit) ### CVE-2022-0486 (2022-05-17) @@ -36058,7 +33632,6 @@ - [chenaotian/CVE-2022-0492](https://github.com/chenaotian/CVE-2022-0492) - [Trinadh465/device_renesas_kernel_AOSP10_r33_CVE-2022-0492](https://github.com/Trinadh465/device_renesas_kernel_AOSP10_r33_CVE-2022-0492) - [KianaBin/CVE-2022-0492-Container-Escape](https://github.com/KianaBin/CVE-2022-0492-Container-Escape) -- [T1erno/CVE-2022-0492-Docker-Breakout-Checker-and-PoC](https://github.com/T1erno/CVE-2022-0492-Docker-Breakout-Checker-and-PoC) - [Perimora/cve_2022_0492](https://github.com/Perimora/cve_2022_0492) - [smallcat9612/CVE-2022-0492-Docker-Breakout-Checker-and-PoC](https://github.com/smallcat9612/CVE-2022-0492-Docker-Breakout-Checker-and-PoC) @@ -36085,17 +33658,9 @@ - [0x7eTeam/CVE-2022-0543](https://github.com/0x7eTeam/CVE-2022-0543) - [z92g/CVE-2022-0543](https://github.com/z92g/CVE-2022-0543) - [OpsCipher/CVE-2022-0543](https://github.com/OpsCipher/CVE-2022-0543) -- [SiennaSkies/redisHack](https://github.com/SiennaSkies/redisHack) - [netw0rk7/CVE-2022-0543-Home-Lab](https://github.com/netw0rk7/CVE-2022-0543-Home-Lab) - [K3ysTr0K3R/CVE-2022-0543](https://github.com/K3ysTr0K3R/CVE-2022-0543) -### CVE-2022-0591 (2022-03-21) - -The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users - - -- [im-hanzou/FC3er](https://github.com/im-hanzou/FC3er) - ### CVE-2022-0666 (2022-02-18) CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. @@ -36120,9 +33685,6 @@ - [BKreisel/CVE-2022-0739](https://github.com/BKreisel/CVE-2022-0739) - [hadrian3689/wp_bookingpress_1.0.11](https://github.com/hadrian3689/wp_bookingpress_1.0.11) - [G01d3nW01f/CVE-2022-0739](https://github.com/G01d3nW01f/CVE-2022-0739) -- [viardant/CVE-2022-0739](https://github.com/viardant/CVE-2022-0739) -- [ElGanz0/CVE-2022-0739](https://github.com/ElGanz0/CVE-2022-0739) -- [lhamouche/Bash-exploit-for-CVE-2022-0739](https://github.com/lhamouche/Bash-exploit-for-CVE-2022-0739) - [Manjen1218/CVE-2022-0739-Exploitation](https://github.com/Manjen1218/CVE-2022-0739-Exploitation) ### CVE-2022-0778 (2022-03-15) @@ -36134,8 +33696,6 @@ - [yywing/cve-2022-0778](https://github.com/yywing/cve-2022-0778) - [jkakavas/CVE-2022-0778-POC](https://github.com/jkakavas/CVE-2022-0778-POC) - [0xUhaw/CVE-2022-0778](https://github.com/0xUhaw/CVE-2022-0778) -- [Trinadh465/openssl-1.1.1g_CVE-2022-0778](https://github.com/Trinadh465/openssl-1.1.1g_CVE-2022-0778) -- [jeongjunsoo/CVE-2022-0778](https://github.com/jeongjunsoo/CVE-2022-0778) ### CVE-2022-0811 (2022-03-16) @@ -36234,27 +33794,7 @@ - [qwert419/linux-](https://github.com/qwert419/linux-) - [DataFox/CVE-2022-0847](https://github.com/DataFox/CVE-2022-0847) - [pmihsan/Dirty-Pipe-CVE-2022-0847](https://github.com/pmihsan/Dirty-Pipe-CVE-2022-0847) -- [ajith737/Dirty-Pipe-CVE-2022-0847-POCs](https://github.com/ajith737/Dirty-Pipe-CVE-2022-0847-POCs) -- [mutur4/CVE-2022-0847](https://github.com/mutur4/CVE-2022-0847) -- [orsuprasad/CVE-2022-0847-DirtyPipe-Exploits](https://github.com/orsuprasad/CVE-2022-0847-DirtyPipe-Exploits) -- [JlSakuya/CVE-2022-0847-container-escape](https://github.com/JlSakuya/CVE-2022-0847-container-escape) -- [jonathanbest7/cve-2022-0847](https://github.com/jonathanbest7/cve-2022-0847) -- [0xeremus/dirty-pipe-poc](https://github.com/0xeremus/dirty-pipe-poc) -- [h4ckm310n/CVE-2022-0847-eBPF](https://github.com/h4ckm310n/CVE-2022-0847-eBPF) -- [joeymeech/CVE-2022-0847-Exploit-Implementation](https://github.com/joeymeech/CVE-2022-0847-Exploit-Implementation) -- [pashayogi/DirtyPipe](https://github.com/pashayogi/DirtyPipe) -- [ayushx007/CVE-2022-0847-dirty-pipe-checker](https://github.com/ayushx007/CVE-2022-0847-dirty-pipe-checker) -- [ayushx007/CVE-2022-0847-DirtyPipe-Exploits](https://github.com/ayushx007/CVE-2022-0847-DirtyPipe-Exploits) -- [solomon12354/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus](https://github.com/solomon12354/LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus) -- [letsr00t/CVE-2022-0847](https://github.com/letsr00t/CVE-2022-0847) - [karanlvm/DirtyPipe-Exploit](https://github.com/karanlvm/DirtyPipe-Exploit) -- [xsxtw/CVE-2022-0847](https://github.com/xsxtw/CVE-2022-0847) -- [muhammad1596/CVE-2022-0847-dirty-pipe-checker](https://github.com/muhammad1596/CVE-2022-0847-dirty-pipe-checker) -- [muhammad1596/CVE-2022-0847-DirtyPipe-Exploits](https://github.com/muhammad1596/CVE-2022-0847-DirtyPipe-Exploits) -- [aswanepo/DirtyPipe](https://github.com/aswanepo/DirtyPipe) -- [JustinYe377/CTF-CVE-2022-0847](https://github.com/JustinYe377/CTF-CVE-2022-0847) -- [mithunmadhukuttan/Dirty-Pipe-Exploit](https://github.com/mithunmadhukuttan/Dirty-Pipe-Exploit) -- [Mephierr/DirtyPipe_exploit](https://github.com/Mephierr/DirtyPipe_exploit) - [RogelioPumajulca/CVE-2022-0847](https://github.com/RogelioPumajulca/CVE-2022-0847) - [cypherlobo/DirtyPipe-BSI](https://github.com/cypherlobo/DirtyPipe-BSI) - [byteReaper77/Dirty-Pipe](https://github.com/byteReaper77/Dirty-Pipe) @@ -36299,32 +33839,16 @@ Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1. -- [shhrew/CVE-2022-0944](https://github.com/shhrew/CVE-2022-0944) -- [Philip-Otter/CVE-2022-0944_RCE_Automation](https://github.com/Philip-Otter/CVE-2022-0944_RCE_Automation) -- [FlojBoj/CVE-2022-0944](https://github.com/FlojBoj/CVE-2022-0944) -- [0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944](https://github.com/0xRoqeeb/sqlpad-rce-exploit-CVE-2022-0944) - [Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944](https://github.com/Artemisxxx37/OverlayFS-PrivEsc-CVE-2022-0944) -- [Robocopsita/CVE-2022-0944_RCE_POC](https://github.com/Robocopsita/CVE-2022-0944_RCE_POC) -- [toneillcodes/CVE-2022-0944](https://github.com/toneillcodes/CVE-2022-0944) - [LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944](https://github.com/LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944) -- [0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-0944](https://github.com/0xDTC/SQLPad-6.10.0-Exploit-CVE-2022-0944) - [NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944](https://github.com/NeoArtemis37/OverlayFS-PrivEsc-CVE-2022-0944) -### CVE-2022-0952 (2022-05-02) - -The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as the users_can_register and default_role, allowing them to create a new admin account and take over the blog. - - -- [RandomRobbieBF/CVE-2022-0952](https://github.com/RandomRobbieBF/CVE-2022-0952) - ### CVE-2022-0995 (2022-03-25) An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system. - [Bonfee/CVE-2022-0995](https://github.com/Bonfee/CVE-2022-0995) -- [AndreevSemen/CVE-2022-0995](https://github.com/AndreevSemen/CVE-2022-0995) -- [1nzag/CVE-2022-0995](https://github.com/1nzag/CVE-2022-0995) - [A1b2rt/cve-2022-0995](https://github.com/A1b2rt/cve-2022-0995) ### CVE-2022-0997 (2022-05-17) @@ -36337,13 +33861,6 @@ ### CVE-2022-26 - [kullai-secasure/CVE-2022-26xx9](https://github.com/kullai-secasure/CVE-2022-26xx9) -### CVE-2022-1011 (2022-03-18) - -A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation. - - -- [xkaneiki/CVE-2022-1011](https://github.com/xkaneiki/CVE-2022-1011) - ### CVE-2022-1012 (2022-08-05) A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem. @@ -36359,21 +33876,12 @@ - [pqlx/CVE-2022-1015](https://github.com/pqlx/CVE-2022-1015) - [zanezhub/CVE-2022-1015-1016](https://github.com/zanezhub/CVE-2022-1015-1016) - [ysanatomic/CVE-2022-1015](https://github.com/ysanatomic/CVE-2022-1015) -- [wlswotmd/CVE-2022-1015](https://github.com/wlswotmd/CVE-2022-1015) -- [delsploit/CVE-2022-1015](https://github.com/delsploit/CVE-2022-1015) -- [pivik271/CVE-2022-1015](https://github.com/pivik271/CVE-2022-1015) -- [more-kohii/CVE-2022-1015](https://github.com/more-kohii/CVE-2022-1015) -- [0range1337/CVE-2022-1015](https://github.com/0range1337/CVE-2022-1015) -- [seadragnol/CVE-2022-1015](https://github.com/seadragnol/CVE-2022-1015) ### CVE-2022-1026 (2022-04-04) Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function. -- [ac3lives/kyocera-cve-2022-1026](https://github.com/ac3lives/kyocera-cve-2022-1026) -- [flamebarke/nmap-printer-nse-scripts](https://github.com/flamebarke/nmap-printer-nse-scripts) -- [r0lh/kygocera](https://github.com/r0lh/kygocera) - [h4po0n/kyocera-cve-2022-1026_SOAP1.1](https://github.com/h4po0n/kyocera-cve-2022-1026_SOAP1.1) - [D4RKMATT3R/KyoceraCredsDump](https://github.com/D4RKMATT3R/KyoceraCredsDump) @@ -36386,9 +33894,6 @@ - [jam620/Sophos-Vulnerability](https://github.com/jam620/Sophos-Vulnerability) - [Keith-amateur/cve-2022-1040](https://github.com/Keith-amateur/cve-2022-1040) - [jackson5sec/CVE-2022-1040](https://github.com/jackson5sec/CVE-2022-1040) -- [michealadams30/CVE-2022-1040](https://github.com/michealadams30/CVE-2022-1040) -- [Cyb3rEnthusiast/CVE-2022-1040](https://github.com/Cyb3rEnthusiast/CVE-2022-1040) -- [xMr110/CVE-2022-1040](https://github.com/xMr110/CVE-2022-1040) ### CVE-2022-1051 (2022-05-16) @@ -36397,13 +33902,6 @@ - [V35HR4J/CVE-2022-1051](https://github.com/V35HR4J/CVE-2022-1051) -### CVE-2022-1068 (2022-04-01) - -Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used. - - -- [webraybtl/CVE-2022-1068](https://github.com/webraybtl/CVE-2022-1068) - ### CVE-2022-1077 (2022-03-29) A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication. @@ -36440,20 +33938,6 @@ - [Greenwolf/CVE-2022-1175](https://github.com/Greenwolf/CVE-2022-1175) -### CVE-2022-1203 (2022-05-30) - -The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options - - -- [RandomRobbieBF/CVE-2022-1203](https://github.com/RandomRobbieBF/CVE-2022-1203) - -### CVE-2022-1227 (2022-04-29) - -A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service. - - -- [LouisLiuNova/CVE-2022-1227_Exploit](https://github.com/LouisLiuNova/CVE-2022-1227_Exploit) - ### CVE-2022-1257 (2022-04-14) Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files. @@ -36494,16 +33978,12 @@ - [AkuCyberSec/CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit](https://github.com/AkuCyberSec/CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit) - [mcdulltii/CVE-2022-1329](https://github.com/mcdulltii/CVE-2022-1329) - [Grazee/CVE-2022-1329-WordPress-Elementor-RCE](https://github.com/Grazee/CVE-2022-1329-WordPress-Elementor-RCE) -- [dexit/CVE-2022-1329](https://github.com/dexit/CVE-2022-1329) -- [phanthibichtram12/CVE-2022-1329](https://github.com/phanthibichtram12/CVE-2022-1329) -- [AgustinESI/CVE-2022-1329](https://github.com/AgustinESI/CVE-2022-1329) ### CVE-2022-1364 (2022-07-26) Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. -- [A1Lin/cve-2022-1364](https://github.com/A1Lin/cve-2022-1364) - [interruptlabs/uc_browser_poc_CVE-2022-1364](https://github.com/interruptlabs/uc_browser_poc_CVE-2022-1364) ### CVE-2022-1386 (2022-05-16) @@ -36511,11 +33991,6 @@ The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures. -- [ardzz/CVE-2022-1386](https://github.com/ardzz/CVE-2022-1386) -- [im-hanzou/fubucker](https://github.com/im-hanzou/fubucker) -- [zycoder0day/CVE-2022-1386-Mass_Vulnerability](https://github.com/zycoder0day/CVE-2022-1386-Mass_Vulnerability) -- [satyasai1460/CVE-2022-1386](https://github.com/satyasai1460/CVE-2022-1386) -- [kreeksec/CVE-2022-1386](https://github.com/kreeksec/CVE-2022-1386) - [fayassgit/CVE-2022-1386-FusionBuilder-SSRF](https://github.com/fayassgit/CVE-2022-1386-FusionBuilder-SSRF) ### CVE-2022-1388 (2022-05-05) @@ -36580,13 +34055,6 @@ - [M4fiaB0y/CVE-2022-1388](https://github.com/M4fiaB0y/CVE-2022-1388) - [devengpk/CVE-2022-1388](https://github.com/devengpk/CVE-2022-1388) - [vaelwolf/CVE-2022-1388](https://github.com/vaelwolf/CVE-2022-1388) -- [j-baines/tippa-my-tongue](https://github.com/j-baines/tippa-my-tongue) -- [SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study](https://github.com/SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study) -- [battleofthebots/refresh](https://github.com/battleofthebots/refresh) -- [nvk0x/CVE-2022-1388-exploit](https://github.com/nvk0x/CVE-2022-1388-exploit) -- [nico989/CVE-2022-1388](https://github.com/nico989/CVE-2022-1388) -- [gotr00t0day/CVE-2022-1388](https://github.com/gotr00t0day/CVE-2022-1388) -- [impost0r/CVE-2022-1388](https://github.com/impost0r/CVE-2022-1388) - [r0otk3r/CVE-2022-1388](https://github.com/r0otk3r/CVE-2022-1388) ### CVE-2022-1421 (2022-06-06) @@ -36596,31 +34064,15 @@ - [nb1b3k/CVE-2022-1421](https://github.com/nb1b3k/CVE-2022-1421) -### CVE-2022-1442 (2022-05-10) - -The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3. - - -- [RandomRobbieBF/CVE-2022-1442](https://github.com/RandomRobbieBF/CVE-2022-1442) - ### CVE-2022-1471 (2022-12-01) SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond. -- [1fabunicorn/SnakeYAML-CVE-2022-1471-POC](https://github.com/1fabunicorn/SnakeYAML-CVE-2022-1471-POC) -- [falconkei/snakeyaml_cve_poc](https://github.com/falconkei/snakeyaml_cve_poc) - [seal-sec-demo-2/yaml-payload](https://github.com/seal-sec-demo-2/yaml-payload) - [jelee2555/CVE-2022-1471-attacker](https://github.com/jelee2555/CVE-2022-1471-attacker) - [anupamojha-eng/sentinel-transitive-cve-demo](https://github.com/anupamojha-eng/sentinel-transitive-cve-demo) -### CVE-2022-1565 (2022-07-18) - -The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with administrator level permissions and above, to upload arbitrary files on the affected sites server which may make remote code execution possible. - - -- [phanthibichtram12/CVE-2022-1565](https://github.com/phanthibichtram12/CVE-2022-1565) - ### CVE-2022-1592 (2022-05-05) Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss... @@ -36650,7 +34102,6 @@ - [savior-only/CVE-2022-1609](https://github.com/savior-only/CVE-2022-1609) - [0xSojalSec/CVE-2022-1609](https://github.com/0xSojalSec/CVE-2022-1609) - [0xSojalSec/-CVE-2022-1609](https://github.com/0xSojalSec/-CVE-2022-1609) -- [itworksig/cve-2022-1609-exploit](https://github.com/itworksig/cve-2022-1609-exploit) ### CVE-2022-1679 (2022-05-16) @@ -36658,7 +34109,6 @@ - [EkamSinghWalia/-Detection-and-Mitigation-for-CVE-2022-1679](https://github.com/EkamSinghWalia/-Detection-and-Mitigation-for-CVE-2022-1679) -- [ov3rwatch/Detection-and-Mitigation-for-CVE-2022-1679](https://github.com/ov3rwatch/Detection-and-Mitigation-for-CVE-2022-1679) ### CVE-2022-1802 (2022-12-22) @@ -36680,13 +34130,6 @@ ### CVE-2022-1972 - [randorisec/CVE-2022-1972-infoleak-PoC](https://github.com/randorisec/CVE-2022-1972-infoleak-PoC) -### CVE-2022-2078 (2022-06-30) - -A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code. - - -- [delsploit/CVE-2022-2078](https://github.com/delsploit/CVE-2022-2078) - ### CVE-2022-2097 (2022-07-05) AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of "in place" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p). @@ -36712,7 +34155,6 @@ - [Malwareman007/CVE-2022-2274](https://github.com/Malwareman007/CVE-2022-2274) - [EkamSinghWalia/OpenSSL-Vulnerability-Detection-Script](https://github.com/EkamSinghWalia/OpenSSL-Vulnerability-Detection-Script) -- [DesmondSanctity/CVE-2022-2274](https://github.com/DesmondSanctity/CVE-2022-2274) ### CVE-2022-2333 (2022-09-16) @@ -36728,8 +34170,6 @@ - [superhac/CVE-2022-2414-POC](https://github.com/superhac/CVE-2022-2414-POC) - [amitlttwo/CVE-2022-2414-Proof-Of-Concept](https://github.com/amitlttwo/CVE-2022-2414-Proof-Of-Concept) -- [satyasai1460/CVE-2022-2414](https://github.com/satyasai1460/CVE-2022-2414) -- [geniuszly/CVE-2022-2414](https://github.com/geniuszly/CVE-2022-2414) ### CVE-2022-2466 (2022-08-31) @@ -36738,13 +34178,6 @@ - [yuxblank/CVE-2022-2466---Request-Context-not-terminated-with-GraphQL](https://github.com/yuxblank/CVE-2022-2466---Request-Context-not-terminated-with-GraphQL) -### CVE-2022-2546 (2023-02-02) - -The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary html or javascript into the response that will be executed in the victims session. Note: This requires knowledge of a static secret key - - -- [OpenXP-Research/CVE-2022-2546](https://github.com/OpenXP-Research/CVE-2022-2546) - ### CVE-2022-2586 (2024-01-08) It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted. @@ -36763,17 +34196,8 @@ - [pirenga/2022-LPE-UAF](https://github.com/pirenga/2022-LPE-UAF) - [konoha279/2022-LPE-UAF](https://github.com/konoha279/2022-LPE-UAF) - [BassamGraini/CVE-2022-2588](https://github.com/BassamGraini/CVE-2022-2588) -- [veritas501/CVE-2022-2588](https://github.com/veritas501/CVE-2022-2588) -- [dom4570/CVE-2022-2588](https://github.com/dom4570/CVE-2022-2588) - [Igr1s-red/CVE-2022-2588](https://github.com/Igr1s-red/CVE-2022-2588) -### CVE-2022-2590 (2022-08-31) - -A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shared memory mappings. This flaw allows an unprivileged, local user to gain write access to read-only memory mappings, increasing their privileges on the system. - - -- [hyeonjun17/CVE-2022-2590-analysis](https://github.com/hyeonjun17/CVE-2022-2590-analysis) - ### CVE-2022-2602 (2024-01-08) io_uring UAF, Unix SCM garbage collection @@ -36781,7 +34205,6 @@ - [LukeGix/CVE-2022-2602](https://github.com/LukeGix/CVE-2022-2602) - [kiks7/CVE-2022-2602-Kernel-Exploit](https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit) -- [th3-5had0w/CVE-2022-2602-Study](https://github.com/th3-5had0w/CVE-2022-2602-Study) ### CVE-2022-2639 (2022-09-01) @@ -36789,8 +34212,6 @@ - [EkamSinghWalia/Detection-and-Mitigation-for-CVE-2022-2639](https://github.com/EkamSinghWalia/Detection-and-Mitigation-for-CVE-2022-2639) -- [letsr00t/-2022-LOCALROOT-CVE-2022-2639](https://github.com/letsr00t/-2022-LOCALROOT-CVE-2022-2639) -- [devetop/CVE-2022-2639-PipeVersion](https://github.com/devetop/CVE-2022-2639-PipeVersion) ### CVE-2022-2650 (2022-11-24) @@ -36831,13 +34252,6 @@ ### CVE-2022-3168 - [irsl/CVE-2022-3168-adb-unexpected-reverse-forwards](https://github.com/irsl/CVE-2022-3168-adb-unexpected-reverse-forwards) -### CVE-2022-3172 (2023-11-03) - -A security issue was discovered in kube-apiserver that allows an \naggregated API server to redirect client traffic to any URL. This could\n lead to the client performing unexpected actions as well as forwarding \nthe client's API server credentials to third parties. - - -- [UgOrange/CVE-2022-3172](https://github.com/UgOrange/CVE-2022-3172) - ### CVE-2022-3218 (2022-09-19) Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution. @@ -36852,13 +34266,6 @@ - [arbaaz29/CVE-2022-3294](https://github.com/arbaaz29/CVE-2022-3294) -### CVE-2022-3317 (2022-11-01) - -Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) - - -- [hfh86/CVE-2022-3317](https://github.com/hfh86/CVE-2022-3317) - ### CVE-2022-3328 (2024-01-08) Race condition in snap-confine's must_mkdir_and_open_with_perms() @@ -36866,20 +34273,12 @@ - [Mr-xn/CVE-2022-3328](https://github.com/Mr-xn/CVE-2022-3328) -### CVE-2022-3357 (2022-10-31) - -The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site. - - -- [iamz24/CVE-2021-3493_CVE-2022-3357](https://github.com/iamz24/CVE-2021-3493_CVE-2022-3357) - ### CVE-2022-3368 (2022-10-17) A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556. - [Wh04m1001/CVE-2022-3368](https://github.com/Wh04m1001/CVE-2022-3368) -- [byt3n33dl3/CrackAVFee](https://github.com/byt3n33dl3/CrackAVFee) ### CVE-2022-3464 (2022-10-12) @@ -36907,23 +34306,13 @@ Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1. -- [0xk4b1r/CVE-2022-3552](https://github.com/0xk4b1r/CVE-2022-3552) - [BakalMode/CVE-2022-3552](https://github.com/BakalMode/CVE-2022-3552) -### CVE-2022-3564 (2022-10-17) - -A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211087. - - -- [Trinadh465/linux-4.1.15_CVE-2022-3564](https://github.com/Trinadh465/linux-4.1.15_CVE-2022-3564) - ### CVE-2022-3590 (2022-12-14) WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden. -- [hxlxmj/CVE-2022-3590-WordPress-Vulnerability-Scanner](https://github.com/hxlxmj/CVE-2022-3590-WordPress-Vulnerability-Scanner) -- [huynhvanphuc/CVE-2022-3590-WordPress-Vulnerability-Scanner](https://github.com/huynhvanphuc/CVE-2022-3590-WordPress-Vulnerability-Scanner) - [TJouleL/WordPress-6.9.1-Blind-SSRF](https://github.com/TJouleL/WordPress-6.9.1-Blind-SSRF) ### CVE-2022-3602 (2022-11-01) @@ -36947,13 +34336,6 @@ - [SpiralBL0CK/CVE-2022-3653](https://github.com/SpiralBL0CK/CVE-2022-3653) -### CVE-2022-3656 (2022-11-01) - -Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) - - -- [momika233/CVE-2022-3656](https://github.com/momika233/CVE-2022-3656) - ### CVE-2022-3689 (2022-11-28) The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users @@ -36968,7 +34350,6 @@ - [alfarom256/CVE-2022-3699](https://github.com/alfarom256/CVE-2022-3699) - [estimated1337/lenovo_exec](https://github.com/estimated1337/lenovo_exec) -- [Eap2468/CVE-2022-3699](https://github.com/Eap2468/CVE-2022-3699) ### CVE-2022-3782 (2023-01-11) @@ -36977,26 +34358,11 @@ - [shoucheng3/keycloak__keycloak_CVE-2022-3782_20-0-1](https://github.com/shoucheng3/keycloak__keycloak_CVE-2022-3782_20-0-1) -### CVE-2022-3786 (2022-11-01) - -A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the `.' character (decimal 46) on the stack. This buffer overflow could result in a crash (causing a denial of service). In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects.\n\n - - -- [WhatTheFuzz/openssl-fuzz](https://github.com/WhatTheFuzz/openssl-fuzz) - -### CVE-2022-3904 (2023-01-16) - -The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing requests to google analytics. - - -- [RandomRobbieBF/CVE-2022-3904](https://github.com/RandomRobbieBF/CVE-2022-3904) - ### CVE-2022-3910 (2022-11-22) Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation.\nWhen io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately.\n\nWe recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 \n -- [veritas501/CVE-2022-3910](https://github.com/veritas501/CVE-2022-3910) - [TLD1027/CVE-2022-3910](https://github.com/TLD1027/CVE-2022-3910) ### CVE-2022-3942 (2022-11-11) @@ -37020,35 +34386,6 @@ - [Urban4/CVE-2022-3992](https://github.com/Urban4/CVE-2022-3992) -### CVE-2022-4047 (2022-12-26) - -The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE - - -- [im-hanzou/WooRefer](https://github.com/im-hanzou/WooRefer) -- [entroychang/CVE-2022-4047](https://github.com/entroychang/CVE-2022-4047) - -### CVE-2022-4060 (2023-01-16) - -The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it. - - -- [im-hanzou/UPGer](https://github.com/im-hanzou/UPGer) - -### CVE-2022-4061 (2022-12-19) - -The JobBoardWP WordPress plugin before 1.2.2 does not properly validate file names and types in its file upload functionalities, allowing unauthenticated users to upload arbitrary files such as PHP. - - -- [im-hanzou/JBWPer](https://github.com/im-hanzou/JBWPer) - -### CVE-2022-4063 (2022-12-19) - -The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers. - - -- [im-hanzou/INPGer](https://github.com/im-hanzou/INPGer) - ### CVE-2022-4065 (2022-11-19) In cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0 wurde eine kritische Schwachstelle ausgemacht. Betroffen ist die Funktion testngXmlExistsInJar der Datei testng-core/src/main/java/org/testng/JarFileUtils.java der Komponente XML File Parser. Dank der Manipulation mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Ein Aktualisieren auf die Version 7.5.1 and 7.7.1 vermag dieses Problem zu lösen. Der Patch wird als 9150736cd2c123a6a3b60e6193630859f9f0422b bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. @@ -37056,13 +34393,6 @@ - [shoucheng3/testng-team__testng_CVE-2022-4065_7-5](https://github.com/shoucheng3/testng-team__testng_CVE-2022-4065_7-5) -### CVE-2022-4096 (2022-11-21) - -Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2. - - -- [aminetitrofine/CVE-2022-4096](https://github.com/aminetitrofine/CVE-2022-4096) - ### CVE-2022-4137 (2023-09-25) A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrator to interact with a link in order to be vulnerable. This may compromise user details, allowing it to be changed or collected by an attacker. @@ -37090,15 +34420,6 @@ - [bjrjk/CVE-2022-4262](https://github.com/bjrjk/CVE-2022-4262) -- [mistymntncop/CVE-2022-4262](https://github.com/mistymntncop/CVE-2022-4262) -- [quangnh89/CVE-2022-4262](https://github.com/quangnh89/CVE-2022-4262) - -### CVE-2022-4304 (2023-02-08) - -A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection. - - -- [Trinadh465/Openssl-1.1.1g_CVE-2022-4304](https://github.com/Trinadh465/Openssl-1.1.1g_CVE-2022-4304) ### CVE-2022-4361 (2023-07-07) @@ -37108,35 +34429,11 @@ - [shoucheng3/keycloak__keycloak_CVE-2022-4361_21-1-1](https://github.com/shoucheng3/keycloak__keycloak_CVE-2022-4361_21-1-1) - [faccimatteo/CVE-2022-4361](https://github.com/faccimatteo/CVE-2022-4361) -### CVE-2022-4395 (2023-01-30) - -The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE. - - -- [MrG3P5/CVE-2022-4395](https://github.com/MrG3P5/CVE-2022-4395) - -### CVE-2022-4510 (2023-01-25) - -A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins.\n This vulnerability is associated with program files src/binwalk/plugins/unpfs.py.\n\nThis issue affects binwalk from 2.1.2b through 2.3.3 included. - - -- [electr0sm0g/CVE-2022-4510](https://github.com/electr0sm0g/CVE-2022-4510) -- [adhikara13/CVE-2022-4510-WalkingPath](https://github.com/adhikara13/CVE-2022-4510-WalkingPath) -- [Kalagious/BadPfs-CVE-2022-4510](https://github.com/Kalagious/BadPfs-CVE-2022-4510) - -### CVE-2022-4539 (2024-08-31) - -The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the X-Forwarded-For header with with a different IP Address that will be logged and can be used to bypass settings that may have blocked out an IP address or country from logging in. - - -- [Abdurahmon3236/CVE-2022-4539](https://github.com/Abdurahmon3236/CVE-2022-4539) - ### CVE-2022-4543 (2023-01-11) A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. -- [sunichi/cve-2022-4543-wrapper](https://github.com/sunichi/cve-2022-4543-wrapper) - [ngtuonghung/CVE-2022-4543-EntryBleed](https://github.com/ngtuonghung/CVE-2022-4543-EntryBleed) ### CVE-2022-4556 (2022-12-16) @@ -37146,21 +34443,6 @@ - [AshkanRafiee/CVE-2022-4556](https://github.com/AshkanRafiee/CVE-2022-4556) -### CVE-2022-4611 (2022-12-19) - -Es wurde eine problematische Schwachstelle in Click Studios Passwordstate and Passwordstate Browser Extension Chrome gefunden. Dabei betrifft es einen unbekannter Codeteil. Mit der Manipulation mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. - - -- [Phamchie/CVE-2022-4611](https://github.com/Phamchie/CVE-2022-4611) -- [fgsoftware1/CVE-2022-4611](https://github.com/fgsoftware1/CVE-2022-4611) - -### CVE-2022-4616 (2023-01-12) - -The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to \ncommand injection through the network diagnosis page. This vulnerability\n could allow a remote unauthenticated user to add files, delete files, \nand change file permissions.\n\n - - -- [ahanel13/CVE-2022-4616-POC](https://github.com/ahanel13/CVE-2022-4616-POC) - ### CVE-2022-4782 (2023-08-16) The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. @@ -37168,36 +34450,12 @@ - [Sudo-WP/sudowp-clickfunnels-zurich](https://github.com/Sudo-WP/sudowp-clickfunnels-zurich) -### CVE-2022-4896 (2023-09-12) - -Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core. - - -- [sapellaniz/CVE-2022-4896](https://github.com/sapellaniz/CVE-2022-4896) - -### CVE-2022-4939 (2023-04-05) - -THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can then register as an administrator. - - -- [BaconCriCRi/PoC-CVE-2022-4939-](https://github.com/BaconCriCRi/PoC-CVE-2022-4939-) - -### CVE-2022-4944 (2023-04-22) - -Eine problematische Schwachstelle wurde in kalcaddle KodExplorer bis 4.49 entdeckt. Davon betroffen ist unbekannter Code. Durch Manipulation mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.50 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen. - - -- [brosck/CVE-2022-4944](https://github.com/brosck/CVE-2022-4944) - ### CVE-2022-5561 - [Kvi74/CVE-2022-5561](https://github.com/Kvi74/CVE-2022-5561) ### CVE-2022-8475 - [Kvi74/CVE-2022-8475](https://github.com/Kvi74/CVE-2022-8475) -### CVE-2022-10270 -- [baimaobg/sunflower_exp](https://github.com/baimaobg/sunflower_exp) - ### CVE-2022-14733 - [hkzck/CVE-2022-14733](https://github.com/hkzck/CVE-2022-14733) @@ -37223,20 +34481,6 @@ - [Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20007](https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20007) - [pazhanivel07/frameworks_base_AOSP10_r33_CVE-2022-20007](https://github.com/pazhanivel07/frameworks_base_AOSP10_r33_CVE-2022-20007) -### CVE-2022-20009 (2022-05-10) - -In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213172319References: Upstream kernel - - -- [szymonh/android-gadget](https://github.com/szymonh/android-gadget) - -### CVE-2022-20120 (2022-05-10) - -Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A - - -- [boredpentester/ABL_ROP](https://github.com/boredpentester/ABL_ROP) - ### CVE-2022-20126 (2022-06-15) In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-203431023 @@ -37262,13 +34506,6 @@ - [ShaikUsaf/ShaikUsaf-frameworks_base_AOSP10_r33_CVE-2022-20138](https://github.com/ShaikUsaf/ShaikUsaf-frameworks_base_AOSP10_r33_CVE-2022-20138) - [Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20138](https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20138) -### CVE-2022-20140 (2022-06-15) - -In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-227618988 - - -- [RenukaSelvar/system_bt_aosp10_cve-2022-20140](https://github.com/RenukaSelvar/system_bt_aosp10_cve-2022-20140) - ### CVE-2022-20142 (2022-06-15) In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-216631962 @@ -37283,7 +34520,6 @@ - [Bariskizilkaya/CVE-2022-20186_CTXZ](https://github.com/Bariskizilkaya/CVE-2022-20186_CTXZ) -- [SmileTabLabo/CVE-2022-20186](https://github.com/SmileTabLabo/CVE-2022-20186) - [flora6907/CVE-2022-20186](https://github.com/flora6907/CVE-2022-20186) ### CVE-2022-20223 (2022-07-13) @@ -37307,15 +34543,6 @@ - [ShaikUsaf/system_bt_AOSP10_r33_CVE-2022-20229](https://github.com/ShaikUsaf/system_bt_AOSP10_r33_CVE-2022-20229) -### CVE-2022-20338 (2022-08-11) - -In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to a local escalation of privilege, preventing processes from validating URIs correctly, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-171966843 - - -- [Satheesh575555/frameworks_base_AOSP_06_r22_CVE-2022-20338](https://github.com/Satheesh575555/frameworks_base_AOSP_06_r22_CVE-2022-20338) -- [Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20338](https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20338) -- [Trinadh465/frameworks_base_AOSP_10_r33_CVE-2022-20338](https://github.com/Trinadh465/frameworks_base_AOSP_10_r33_CVE-2022-20338) - ### CVE-2022-20347 (2022-08-09) In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228450811 @@ -37324,13 +34551,6 @@ - [ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2022-20347](https://github.com/ShaikUsaf/packages_apps_settings_AOSP10_r33_CVE-2022-20347) - [Trinadh465/packages_apps_Settings_AOSP10_r33_CVE-2022-20347](https://github.com/Trinadh465/packages_apps_Settings_AOSP10_r33_CVE-2022-20347) -### CVE-2022-20360 (2022-08-09) - -In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228314987 - - -- [726232111/packages_apps_Settings_AOSP_10_r33_CVE-2022-20360](https://github.com/726232111/packages_apps_Settings_AOSP_10_r33_CVE-2022-20360) - ### CVE-2022-20361 (2022-08-09) In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth Standard. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-231161832 @@ -37345,43 +34565,13 @@ - [Markakd/bad_io_uring](https://github.com/Markakd/bad_io_uring) -### CVE-2022-20413 (2022-10-11) - -In start of Threads.cpp, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-235850634 - - -- [pazhanivel07/frameworks_av-r33_CVE-2022-20413](https://github.com/pazhanivel07/frameworks_av-r33_CVE-2022-20413) - ### CVE-2022-20421 (2022-10-11) In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel -- [0xkol/badspin](https://github.com/0xkol/badspin) - [sandiyochristan/oo](https://github.com/sandiyochristan/oo) -### CVE-2022-20452 (2022-11-08) - -In initializeFromParcelLocked of BaseBundle.java, there is a possible method arbitrary code execution due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240138318 - - -- [michalbednarski/LeakValue](https://github.com/michalbednarski/LeakValue) - -### CVE-2022-20470 (2022-12-13) - -In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-234013191 - - -- [Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20470](https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2022-20470) - -### CVE-2022-20473 (2022-12-13) - -In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239267173 - - -- [Trinadh465/frameworks_minikin_AOSP10_r33_CVE-2022-20473](https://github.com/Trinadh465/frameworks_minikin_AOSP10_r33_CVE-2022-20473) -- [Trinadh465/frameworks_minikin_AOSP10_r33-CVE-2022-20473](https://github.com/Trinadh465/frameworks_minikin_AOSP10_r33-CVE-2022-20473) - ### CVE-2022-20474 (2022-12-13) In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-240138294 @@ -37389,27 +34579,6 @@ - [cxxsheng/CVE-2022-20474](https://github.com/cxxsheng/CVE-2022-20474) -### CVE-2022-20493 (2023-01-24) - -In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242846316 - - -- [Trinadh465/frameworks_base_CVE-2022-20493](https://github.com/Trinadh465/frameworks_base_CVE-2022-20493) - -### CVE-2022-20494 (2023-01-24) - -In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-243794204 - - -- [Supersonic/CVE-2022-20494](https://github.com/Supersonic/CVE-2022-20494) - -### CVE-2022-20607 (2022-12-16) - -In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References: N/A - - -- [sumeetIT/CVE-2022-20607](https://github.com/sumeetIT/CVE-2022-20607) - ### CVE-2022-20617 (2022-01-12) Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository. @@ -37425,13 +34594,6 @@ - [Audiobahn/CVE-2022-20699](https://github.com/Audiobahn/CVE-2022-20699) - [puckiestyle/CVE-2022-20699](https://github.com/puckiestyle/CVE-2022-20699) -### CVE-2022-20818 (2022-09-30) - -Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. - - -- [mbadanoiu/CVE-2022-20818](https://github.com/mbadanoiu/CVE-2022-20818) - ### CVE-2022-20829 (2022-06-24) A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious code to a device that is running Cisco ASA Software. This vulnerability is due to insufficient validation of the authenticity of an ASDM image during its installation on a device that is running Cisco ASA Software. An attacker could exploit this vulnerability by installing a crafted ASDM image on the device that is running Cisco ASA Software and then waiting for a targeted user to access that device using ASDM. A successful exploit could allow the attacker to execute arbitrary code on the machine of the targeted user with the privileges of that user on that machine. Notes: To successfully exploit this vulnerability, the attacker must have administrative privileges on the device that is running Cisco ASA Software. Potential targets are limited to users who manage the same device that is running Cisco ASA Software using ASDM. Cisco has released and will release software updates that address this vulnerability. @@ -37453,20 +34615,6 @@ - [nanaao/csv-plus_vulnerability](https://github.com/nanaao/csv-plus_vulnerability) -### CVE-2022-21306 (2022-01-19) - -Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). - - -- [hktalent/CVE-2022-21306](https://github.com/hktalent/CVE-2022-21306) - -### CVE-2022-21340 (2022-01-19) - -Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). - - -- [Alexandre-Bartel/CVE-2022-21340](https://github.com/Alexandre-Bartel/CVE-2022-21340) - ### CVE-2022-21350 (2022-01-19) Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L). @@ -37481,21 +34629,12 @@ - [Mr-xn/CVE-2022-21371](https://github.com/Mr-xn/CVE-2022-21371) - [Vulnmachines/Oracle-WebLogic-CVE-2022-21371](https://github.com/Vulnmachines/Oracle-WebLogic-CVE-2022-21371) -- [Cappricio-Securities/CVE-2022-21371](https://github.com/Cappricio-Securities/CVE-2022-21371) - -### CVE-2022-21392 (2022-01-19) - -Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 8.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). - - -- [mbadanoiu/CVE-2022-21392](https://github.com/mbadanoiu/CVE-2022-21392) ### CVE-2022-21445 (2022-04-19) Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Development Framework (ADF). Successful attacks of this vulnerability can result in takeover of Oracle Application Development Framework (ADF). Note: Oracle Application Development Framework (ADF) is downloaded via Oracle JDeveloper Product. Please refer to Fusion Middleware Patch Advisor for more details. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). -- [hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic](https://github.com/hienkiet/CVE-2022-21445-for-12.2.1.3.0-Weblogic) - [NeCr00/CVE-2022-21445](https://github.com/NeCr00/CVE-2022-21445) ### CVE-2022-21449 (2022-04-19) @@ -37517,22 +34656,6 @@ - [volodymyr-hladkyi-symphony/demo-cve-2022-21449](https://github.com/volodymyr-hladkyi-symphony/demo-cve-2022-21449) - [fevra-dev/ClaimJumper](https://github.com/fevra-dev/ClaimJumper) -### CVE-2022-21500 (2022-05-19) - -Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. Note: Authentication is required for successful attack, however the user may be self-registered. <br> <br>Oracle E-Business Suite 12.1 is not impacted by this vulnerability. Customers should refer to the Patch Availability Document for details. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). - - -- [Cappricio-Securities/CVE-2022-21500](https://github.com/Cappricio-Securities/CVE-2022-21500) - -### CVE-2022-21587 (2022-10-18) - -Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). - - -- [hieuminhnv/CVE-2022-21587-POC](https://github.com/hieuminhnv/CVE-2022-21587-POC) -- [rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit](https://github.com/rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit) -- [sahabrifki/CVE-2022-21587-Oracle-EBS-](https://github.com/sahabrifki/CVE-2022-21587-Oracle-EBS-) - ### CVE-2022-21658 (2022-01-20) Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling symlink following (CWE-363). An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn't otherwise access or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this vulnerability with 1.58.1 containing a patch. Note that the following build targets don't have usable APIs to properly mitigate the attack, and are thus still vulnerable even with a patched toolchain: macOS before version 10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1 as soon as possible, especially people developing programs expected to run in privileged contexts (including system daemons and setuid binaries), as those have the highest risk of being affected by this. Note that adding checks in your codebase before calling remove_dir_all will not mitigate the vulnerability, as they would also be vulnerable to race conditions like remove_dir_all itself. The existing mitigation is working as intended outside of race conditions. @@ -37558,12 +34681,6 @@ - [z92g/CVE-2022-21661](https://github.com/z92g/CVE-2022-21661) - [guestzz/CVE-2022-21661](https://github.com/guestzz/CVE-2022-21661) - [safe3s/CVE-2022-21661](https://github.com/safe3s/CVE-2022-21661) -- [WellingtonEspindula/SSI-CVE-2022-21661](https://github.com/WellingtonEspindula/SSI-CVE-2022-21661) -- [daniel616/CVE-2022-21661-Demo](https://github.com/daniel616/CVE-2022-21661-Demo) -- [sealldeveloper/CVE-2022-21661-PoC](https://github.com/sealldeveloper/CVE-2022-21661-PoC) -- [p4ncontomat3/CVE-2022-21661](https://github.com/p4ncontomat3/CVE-2022-21661) -- [CharonDefalt/WordPress--CVE-2022-21661](https://github.com/CharonDefalt/WordPress--CVE-2022-21661) -- [w0r1i0g1ht/CVE-2022-21661](https://github.com/w0r1i0g1ht/CVE-2022-21661) - [Fauzan-Aldi/CVE-2022-21661](https://github.com/Fauzan-Aldi/CVE-2022-21661) - [7rootsec/CVE-2022-21661-Technical-Analysis](https://github.com/7rootsec/CVE-2022-21661-Technical-Analysis) @@ -37595,13 +34712,6 @@ - [usutani/study-turbolinks-link](https://github.com/usutani/study-turbolinks-link) -### CVE-2022-21839 (2022-01-11) - -Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability - - -- [lolin19/CVE-2022-21839-](https://github.com/lolin19/CVE-2022-21839-) - ### CVE-2022-21877 (2022-01-11) Storage Spaces Controller Information Disclosure Vulnerability @@ -37634,10 +34744,6 @@ - [Wack0/CVE-2022-21894](https://github.com/Wack0/CVE-2022-21894) - [ASkyeye/CVE-2022-21894-Payload](https://github.com/ASkyeye/CVE-2022-21894-Payload) -- [Wack0/batondrop_armv7](https://github.com/Wack0/batondrop_armv7) -- [bakedmuffinman/BlackLotusDetection](https://github.com/bakedmuffinman/BlackLotusDetection) -- [qjawls2003/BlackLotus-Detection](https://github.com/qjawls2003/BlackLotus-Detection) -- [nova-master/CVE-2022-21894-Payload-New](https://github.com/nova-master/CVE-2022-21894-Payload-New) ### CVE-2022-21907 (2022-01-11) @@ -37655,10 +34761,6 @@ - [iveresk/cve-2022-21907](https://github.com/iveresk/cve-2022-21907) - [Malwareman007/CVE-2022-21907](https://github.com/Malwareman007/CVE-2022-21907) - [0xmaximus/Home-Demolisher](https://github.com/0xmaximus/Home-Demolisher) -- [cassie0206/CVE-2022-21907](https://github.com/cassie0206/CVE-2022-21907) -- [EzoomE/CVE-2022-21907-RCE](https://github.com/EzoomE/CVE-2022-21907-RCE) -- [asepsaepdin/CVE-2022-21907](https://github.com/asepsaepdin/CVE-2022-21907) -- [kamal-marouane/CVE-2022-21907](https://github.com/kamal-marouane/CVE-2022-21907) ### CVE-2022-21970 (2022-01-11) @@ -37704,13 +34806,6 @@ - [mchoudhary15/CVE-2022-22029-NFS-Server-](https://github.com/mchoudhary15/CVE-2022-22029-NFS-Server-) -### CVE-2022-22057 (2022-06-14) - -Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables - - -- [diabl0w/CVE-2022-22057_SM-F926U](https://github.com/diabl0w/CVE-2022-22057_SM-F926U) - ### CVE-2022-22063 (2022-12-14) Memory corruption in Core due to improper configuration in boot remapper. @@ -37725,15 +34820,6 @@ - [grisuno/CVE-2022-22077](https://github.com/grisuno/CVE-2022-22077) -### CVE-2022-22274 (2022-03-25) - -A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall. - - -- [4lucardSec/Sonic_CVE-2022-22274_poc](https://github.com/4lucardSec/Sonic_CVE-2022-22274_poc) -- [forthisvideo/CVE-2022-22274_poc](https://github.com/forthisvideo/CVE-2022-22274_poc) -- [BishopFox/CVE-2022-22274_CVE-2023-0656](https://github.com/BishopFox/CVE-2022-22274_CVE-2023-0656) - ### CVE-2022-22296 (2022-01-24) Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manage_user endpoint. Simply change the value and data of other users can be displayed. @@ -37751,13 +34837,6 @@ - [BecodoExploit-mrCAT/SAPGateBreaker-Exploit](https://github.com/BecodoExploit-mrCAT/SAPGateBreaker-Exploit) - [abrewer251/CVE-2022-22536_SAP_Request_Smuggling_Scanner](https://github.com/abrewer251/CVE-2022-22536_SAP_Request_Smuggling_Scanner) -### CVE-2022-22555 (2022-07-20) - -Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege. - - -- [colaoo123/cve-2022-22555](https://github.com/colaoo123/cve-2022-22555) - ### CVE-2022-22582 (2023-02-27) A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files. @@ -37801,20 +34880,6 @@ - [ahmetfurkans/CVE-2022-22718](https://github.com/ahmetfurkans/CVE-2022-22718) -### CVE-2022-22720 (2022-03-14) - -Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling - - -- [Benasin/CVE-2022-22720](https://github.com/Benasin/CVE-2022-22720) - -### CVE-2022-22733 (2022-01-20) - -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions. - - -- [Zeyad-Azima/CVE-2022-22733](https://github.com/Zeyad-Azima/CVE-2022-22733) - ### CVE-2022-22814 (2022-03-10) The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation. @@ -37956,11 +35021,6 @@ - [LY613313/CVE-2022-22947](https://github.com/LY613313/CVE-2022-22947) - [SiJiDo/CVE-2022-22947](https://github.com/SiJiDo/CVE-2022-22947) - [qq87234770/CVE-2022-22947](https://github.com/qq87234770/CVE-2022-22947) -- [Zh0um1/CVE-2022-22947](https://github.com/Zh0um1/CVE-2022-22947) -- [Le1a/CVE-2022-22947](https://github.com/Le1a/CVE-2022-22947) -- [Sumitpathania03/CVE-2022-22947](https://github.com/Sumitpathania03/CVE-2022-22947) -- [superneilcn/SpringExploitGUI](https://github.com/superneilcn/SpringExploitGUI) -- [cc3305/CVE-2022-22947](https://github.com/cc3305/CVE-2022-22947) - [skysliently/CVE-2022-22947-pb-ai](https://github.com/skysliently/CVE-2022-22947-pb-ai) - [shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6](https://github.com/shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6) - [SanderSchepers1993/CyberSec2026](https://github.com/SanderSchepers1993/CyberSec2026) @@ -38025,19 +35085,7 @@ - [G01d3nW01f/CVE-2022-22963](https://github.com/G01d3nW01f/CVE-2022-22963) - [k3rwin/spring-cloud-function-rce](https://github.com/k3rwin/spring-cloud-function-rce) - [75ACOL/CVE-2022-22963](https://github.com/75ACOL/CVE-2022-22963) -- [iliass-dahman/CVE-2022-22963-POC](https://github.com/iliass-dahman/CVE-2022-22963-POC) -- [charis3306/CVE-2022-22963](https://github.com/charis3306/CVE-2022-22963) -- [lemmyz4n3771/CVE-2022-22963-PoC](https://github.com/lemmyz4n3771/CVE-2022-22963-PoC) -- [J0ey17/CVE-2022-22963_Reverse-Shell-Exploit](https://github.com/J0ey17/CVE-2022-22963_Reverse-Shell-Exploit) -- [Mustafa1986/CVE-2022-22963](https://github.com/Mustafa1986/CVE-2022-22963) -- [SourM1lk/CVE-2022-22963-Exploit](https://github.com/SourM1lk/CVE-2022-22963-Exploit) -- [randallbanner/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE](https://github.com/randallbanner/Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE) -- [gunzf0x/CVE-2022-22963](https://github.com/gunzf0x/CVE-2022-22963) -- [nikn0laty/RCE-in-Spring-Cloud-CVE-2022-22963](https://github.com/nikn0laty/RCE-in-Spring-Cloud-CVE-2022-22963) -- [BearClaw96/CVE-2022-22963-Poc-Bearcules](https://github.com/BearClaw96/CVE-2022-22963-Poc-Bearcules) - [xmqaq/CVE-2022-22963](https://github.com/xmqaq/CVE-2022-22963) -- [jrbH4CK/CVE-2022-22963](https://github.com/jrbH4CK/CVE-2022-22963) -- [Shayz614/CVE-2022-22963](https://github.com/Shayz614/CVE-2022-22963) - [cyberager/CVE-2022-22963](https://github.com/cyberager/CVE-2022-22963) ### CVE-2022-22965 (2022-04-01) @@ -38112,19 +35160,6 @@ - [clemoregan/SSE4-CVE-2022-22965](https://github.com/clemoregan/SSE4-CVE-2022-22965) - [devengpk/CVE-2022-22965](https://github.com/devengpk/CVE-2022-22965) - [zangcc/CVE-2022-22965-rexbb](https://github.com/zangcc/CVE-2022-22965-rexbb) -- [ajith737/Spring4Shell-CVE-2022-22965-POC](https://github.com/ajith737/Spring4Shell-CVE-2022-22965-POC) -- [c33dd/CVE-2022-22965](https://github.com/c33dd/CVE-2022-22965) -- [gokul-ramesh/Spring4Shell-PoC-exploit](https://github.com/gokul-ramesh/Spring4Shell-PoC-exploit) -- [bL34cHig0/Telstra-Cybersecurity-Virtual-Experience-](https://github.com/bL34cHig0/Telstra-Cybersecurity-Virtual-Experience-) -- [BKLockly/CVE-2022-22965](https://github.com/BKLockly/CVE-2022-22965) -- [dbgee/Spring4Shell](https://github.com/dbgee/Spring4Shell) -- [jakabakos/CVE-2022-22965-Spring4Shell](https://github.com/jakabakos/CVE-2022-22965-Spring4Shell) -- [sohamsharma966/Spring4Shell-CVE-2022-22965](https://github.com/sohamsharma966/Spring4Shell-CVE-2022-22965) -- [LucasPDiniz/CVE-2022-22965](https://github.com/LucasPDiniz/CVE-2022-22965) -- [ESSAFAR/Firewall-Rules](https://github.com/ESSAFAR/Firewall-Rules) -- [xsxtw/SpringFramework_CVE-2022-22965_RCE](https://github.com/xsxtw/SpringFramework_CVE-2022-22965_RCE) -- [Aur3ns/Block-Spring4Shell](https://github.com/Aur3ns/Block-Spring4Shell) -- [guigui237/Expoitation-de-la-vuln-rabilit-CVE-2022-22965](https://github.com/guigui237/Expoitation-de-la-vuln-rabilit-CVE-2022-22965) - [jashan-lefty/Spring4Shell](https://github.com/jashan-lefty/Spring4Shell) - [brunoh6/web-threat-mitigation](https://github.com/brunoh6/web-threat-mitigation) - [osungjinwoo/CVE-2022-22965](https://github.com/osungjinwoo/CVE-2022-22965) @@ -38152,13 +35187,6 @@ - [MarcinGadz/spring-rce-poc](https://github.com/MarcinGadz/spring-rce-poc) -### CVE-2022-22970 (2022-05-12) - -In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object. - - -- [Performant-Labs/CVE-2022-22970](https://github.com/Performant-Labs/CVE-2022-22970) - ### CVE-2022-22971 (2022-05-12) In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user. @@ -38190,10 +35218,6 @@ - [DeEpinGh0st/CVE-2022-22978](https://github.com/DeEpinGh0st/CVE-2022-22978) - [ducluongtran9121/CVE-2022-22978-PoC](https://github.com/ducluongtran9121/CVE-2022-22978-PoC) - [aeifkz/CVE-2022-22978](https://github.com/aeifkz/CVE-2022-22978) -- [umakant76705/CVE-2022-22978](https://github.com/umakant76705/CVE-2022-22978) -- [Raghvendra1207/CVE-2022-22978](https://github.com/Raghvendra1207/CVE-2022-22978) -- [wan9xx/CVE-2022-22978-demo](https://github.com/wan9xx/CVE-2022-22978-demo) -- [BoB13-Opensource-Contribution-Team9/CVE-2022-22978](https://github.com/BoB13-Opensource-Contribution-Team9/CVE-2022-22978) - [he-ewo/CVE-2022-22978](https://github.com/he-ewo/CVE-2022-22978) ### CVE-2022-22980 (2022-06-22) @@ -38232,7 +35256,6 @@ - [SystemVll/CVE-2022-23093](https://github.com/SystemVll/CVE-2022-23093) -- [Symbolexe/DrayTek-Exploit](https://github.com/Symbolexe/DrayTek-Exploit) ### CVE-2022-23131 (2022-01-13) @@ -38253,13 +35276,6 @@ - [Kazaf6s/CVE-2022-23131](https://github.com/Kazaf6s/CVE-2022-23131) - [SCAMagic/CVE-2022-23131poc-exp-zabbix-](https://github.com/SCAMagic/CVE-2022-23131poc-exp-zabbix-) - [Vulnmachines/Zabbix-CVE-2022-23131](https://github.com/Vulnmachines/Zabbix-CVE-2022-23131) -- [wr0x00/cve-2022-23131](https://github.com/wr0x00/cve-2022-23131) -- [Arrnitage/CVE-2022-23131_exp](https://github.com/Arrnitage/CVE-2022-23131_exp) -- [clearcdq/Zabbix-SAML-SSO-_CVE-2022-23131](https://github.com/clearcdq/Zabbix-SAML-SSO-_CVE-2022-23131) -- [r10lab/CVE-2022-23131](https://github.com/r10lab/CVE-2022-23131) -- [fork-bombed/CVE-2022-23131](https://github.com/fork-bombed/CVE-2022-23131) -- [davidzzo23/CVE-2022-23131](https://github.com/davidzzo23/CVE-2022-23131) -- [dagowda/Zabbix-cve-2022-23131-SSO-bypass](https://github.com/dagowda/Zabbix-cve-2022-23131-SSO-bypass) - [Chaelsoo/CVE-2022-23131-Wrappers](https://github.com/Chaelsoo/CVE-2022-23131-Wrappers) ### CVE-2022-23134 (2022-01-13) @@ -38300,13 +35316,6 @@ - [7BitsTeam/CVE-2022-23277](https://github.com/7BitsTeam/CVE-2022-23277) -### CVE-2022-23303 (2022-01-17) - -The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494. - - -- [web-logs2/hostapd_mirror](https://github.com/web-logs2/hostapd_mirror) - ### CVE-2022-23305 (2022-01-18) By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions. @@ -38314,7 +35323,6 @@ - [HynekPetrak/log4shell-finder](https://github.com/HynekPetrak/log4shell-finder) - [AlphabugX/CVE-2022-RCE](https://github.com/AlphabugX/CVE-2022-RCE) -- [tkomlodi/CVE-2022-23305_POC](https://github.com/tkomlodi/CVE-2022-23305_POC) ### CVE-2022-23342 (2022-06-21) @@ -38340,16 +35348,12 @@ - [shoucheng3/ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1](https://github.com/shoucheng3/ESAPI__esapi-java-legacy_CVE-2022-23457_2-2-3-1) -### CVE-2022-23529 -- [daniel-marchi/CVE-2022-23529-Exploration](https://github.com/daniel-marchi/CVE-2022-23529-Exploration) - ### CVE-2022-23614 (2022-02-04) Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced and could lead to code injection of arbitrary PHP code. Patched versions now disallow calling non Closure in the `sort` filter as is the case for some other filters. Users are advised to upgrade. - [davwwwx/CVE-2022-23614](https://github.com/davwwwx/CVE-2022-23614) -- [4rtamis/CVE-2022-23614](https://github.com/4rtamis/CVE-2022-23614) ### CVE-2022-23636 (2022-02-16) @@ -38386,7 +35390,6 @@ - [danbudris/CVE-2022-23773-repro](https://github.com/danbudris/CVE-2022-23773-repro) - [danbudris/CVE-2022-23773-repro-target](https://github.com/danbudris/CVE-2022-23773-repro-target) -- [YouShengLiu/CVE-2022-23773-Reproduce](https://github.com/YouShengLiu/CVE-2022-23773-Reproduce) ### CVE-2022-23779 (2022-03-02) @@ -38418,20 +35421,6 @@ - [Satheesh575555/external_expat_AOSP10_r33_CVE-2022-23852](https://github.com/Satheesh575555/external_expat_AOSP10_r33_CVE-2022-23852) -### CVE-2022-23861 (2024-10-22) - -Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be leveraged to perform XSS attacks on legitimate users accessing the SafeQ web interface. - - -- [mbadanoiu/CVE-2022-23861](https://github.com/mbadanoiu/CVE-2022-23861) - -### CVE-2022-23862 (2024-10-22) - -A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the vulnerability to execute arbitrary code and elevate to the system user. - - -- [mbadanoiu/CVE-2022-23862](https://github.com/mbadanoiu/CVE-2022-23862) - ### CVE-2022-23884 (2022-03-28) Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer). @@ -38446,16 +35435,6 @@ - [netsectuna/CVE-2022-23909](https://github.com/netsectuna/CVE-2022-23909) -### CVE-2022-23935 (2022-01-25) - -lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check, leading to command injection. - - -- [dpbe32/CVE-2022-23935-PoC-Exploit](https://github.com/dpbe32/CVE-2022-23935-PoC-Exploit) -- [cowsecurity/CVE-2022-23935](https://github.com/cowsecurity/CVE-2022-23935) -- [BKreisel/CVE-2022-23935](https://github.com/BKreisel/CVE-2022-23935) -- [antisecc/CVE-2022-23935](https://github.com/antisecc/CVE-2022-23935) - ### CVE-2022-23940 (2022-03-07) SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Scheduled Reports module can achieve this by leveraging PHP deserialization in the email_recipients property. By using a crafted request, they can create a malicious report, containing a PHP-deserialization payload in the email_recipients field. Once someone accesses this report, the backend will deserialize the content of the email_recipients field and the payload gets executed. Project dependencies include a number of interesting PHP deserialization gadgets (e.g., Monolog/RCE1 from phpggc) that can be used for Code Execution. @@ -38466,13 +35445,6 @@ ### CVE-2022-23967 - [MaherAzzouzi/CVE-2022-23967](https://github.com/MaherAzzouzi/CVE-2022-23967) -### CVE-2022-23988 (2022-02-28) - -The WS Form LITE and Pro WordPress plugins before 1.8.176 do not sanitise and escape submitted form data, allowing unauthenticated attacker to submit XSS payloads which will get executed when a privileged user will view the related submission - - -- [simonepetruzzi/WebSecurityProject](https://github.com/simonepetruzzi/WebSecurityProject) - ### CVE-2022-23990 (2022-01-26) Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. @@ -38492,7 +35464,6 @@ - [seymanurmutlu/CVE-2022-24086-CVE-2022-24087](https://github.com/seymanurmutlu/CVE-2022-24086-CVE-2022-24087) - [akr3ch/CVE-2022-24086](https://github.com/akr3ch/CVE-2022-24086) - [pescepilota/CVE-2022-24086](https://github.com/pescepilota/CVE-2022-24086) -- [BurpRoot/CVE-2022-24086](https://github.com/BurpRoot/CVE-2022-24086) - [wubinworks/magento2-template-filter-patch](https://github.com/wubinworks/magento2-template-filter-patch) ### CVE-2022-24087 @@ -38511,7 +35482,6 @@ - [kavishkagihan/CVE-2022-24112-POC](https://github.com/kavishkagihan/CVE-2022-24112-POC) - [twseptian/cve-2022-24112](https://github.com/twseptian/cve-2022-24112) - [Acczdy/CVE-2022-24112_POC](https://github.com/Acczdy/CVE-2022-24112_POC) -- [btar1gan/exploit_CVE-2022-24112](https://github.com/btar1gan/exploit_CVE-2022-24112) - [fatkz/CVE-2022-24112](https://github.com/fatkz/CVE-2022-24112) ### CVE-2022-24122 (2022-01-29) @@ -38544,13 +35514,6 @@ - [cyberhawk000/CVE-2022-24181](https://github.com/cyberhawk000/CVE-2022-24181) -### CVE-2022-24227 (2022-02-15) - -A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters. - - -- [Cyber-Wo0dy/CVE-2022-24227-updated](https://github.com/Cyber-Wo0dy/CVE-2022-24227-updated) - ### CVE-2022-24342 (2022-02-25) In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible. @@ -38577,16 +35540,8 @@ All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments. -- [muhammadhendro/CVE-2022-24439](https://github.com/muhammadhendro/CVE-2022-24439) - [Makkkiiii/GitPython-Exploit-CVE-2022-24439](https://github.com/Makkkiiii/GitPython-Exploit-CVE-2022-24439) -### CVE-2022-24442 (2022-02-25) - -JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates. - - -- [mbadanoiu/CVE-2022-24442](https://github.com/mbadanoiu/CVE-2022-24442) - ### CVE-2022-24449 (2022-04-28) Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document. @@ -38599,7 +35554,6 @@ Windows Common Log File System Driver Elevation of Privilege Vulnerability -- [fr4nkxixi/CVE-2022-24481-POC](https://github.com/fr4nkxixi/CVE-2022-24481-POC) - [uname1able/CVE-2022-24481](https://github.com/uname1able/CVE-2022-24481) ### CVE-2022-24483 (2022-04-15) @@ -38630,13 +35584,6 @@ - [corelight/CVE-2022-24497](https://github.com/corelight/CVE-2022-24497) -### CVE-2022-24500 (2022-04-15) - -Windows SMB Remote Code Execution Vulnerability - - -- [0x7n6/CVE-2022-24500](https://github.com/0x7n6/CVE-2022-24500) - ### CVE-2022-24521 (2022-04-15) Windows Common Log File System Driver Elevation of Privilege Vulnerability @@ -38659,12 +35606,6 @@ - [Lay0us/CVE-2022-24637](https://github.com/Lay0us/CVE-2022-24637) - [hupe1980/CVE-2022-24637](https://github.com/hupe1980/CVE-2022-24637) - [icebreack/CVE-2022-24637](https://github.com/icebreack/CVE-2022-24637) -- [Pflegusch/CVE-2022-24637](https://github.com/Pflegusch/CVE-2022-24637) -- [0xM4hm0ud/CVE-2022-24637](https://github.com/0xM4hm0ud/CVE-2022-24637) -- [0xRyuk/CVE-2022-24637](https://github.com/0xRyuk/CVE-2022-24637) - -### CVE-2022-24638 -- [726232111/CVE-2022-24638](https://github.com/726232111/CVE-2022-24638) ### CVE-2022-24644 (2022-03-07) @@ -38727,26 +35668,6 @@ - [JPeisach/CVE-2022-24713-POC](https://github.com/JPeisach/CVE-2022-24713-POC) -### CVE-2022-24715 (2022-03-08) - -Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration. - - -- [nimphtix/CVE-2022-24715](https://github.com/nimphtix/CVE-2022-24715) -- [cxdxnt/CVE-2022-24715](https://github.com/cxdxnt/CVE-2022-24715) -- [d4rkb0n3/CVE-2022-24715-go](https://github.com/d4rkb0n3/CVE-2022-24715-go) - -### CVE-2022-24716 (2022-03-08) - -Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database credentials. This issue has been resolved in versions 2.9.6 and 2.10 of Icinga Web 2. Database credentials should be rotated. - - -- [gmh5225/CVE-2022-24716](https://github.com/gmh5225/CVE-2022-24716) -- [pumpkinpiteam/CVE-2022-24716](https://github.com/pumpkinpiteam/CVE-2022-24716) -- [0x0Jackal/CVE-2022-24716](https://github.com/0x0Jackal/CVE-2022-24716) -- [antisecc/CVE-2022-24716](https://github.com/antisecc/CVE-2022-24716) -- [gmh5225/CVE-2022-24716-2](https://github.com/gmh5225/CVE-2022-24716-2) - ### CVE-2022-24734 (2022-03-09) MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed on on _Change Settings_ pages. This results in a Remote Code Execution (RCE) vulnerability. The vulnerable module requires Admin CP access with the `Can manage settings?` permission. MyBB's Settings module, which allows administrators to add, edit, and delete non-default settings, stores setting data in an options code string ($options_code; mybb_settings.optionscode database column) that identifies the setting type and its options, separated by a new line character (\n). In MyBB 1.2.0, support for setting type php was added, for which the remaining part of the options code is PHP code executed on Change Settings pages (reserved for plugins and internal use). MyBB 1.8.30 resolves this issue. There are no known workarounds. @@ -38776,26 +35697,11 @@ - [pS3ud0RAnD0m/cve-2022-24785-poc-lab](https://github.com/pS3ud0RAnD0m/cve-2022-24785-poc-lab) -### CVE-2022-24816 (2022-04-13) - -JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath. - - -- [c1ph3rbyt3/CVE-2022-24816](https://github.com/c1ph3rbyt3/CVE-2022-24816) - -### CVE-2022-24818 (2022-04-13) - -GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code execution. Similar to the Log4J case, the vulnerability can be triggered if the JNDI names are user-provided, but requires admin-level login to be triggered. The lookups are now restricted in GeoTools 26.4, GeoTools 25.6, and GeoTools 24.6. Users unable to upgrade should ensure that any downstream application should not allow usage of remotely provided JNDI strings. - - -- [mbadanoiu/CVE-2022-24818](https://github.com/mbadanoiu/CVE-2022-24818) - ### CVE-2022-24834 (2023-07-13) Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20. -- [convisolabs/CVE-2022-24834](https://github.com/convisolabs/CVE-2022-24834) - [DukeSec97/CVE-2022-24834-](https://github.com/DukeSec97/CVE-2022-24834-) ### CVE-2022-24853 (2022-04-14) @@ -38874,7 +35780,6 @@ Argus Surveillance DVR v4.0 employs weak password encryption. -- [s3l33/CVE-2022-25012](https://github.com/s3l33/CVE-2022-25012) - [G4sp4rCS/CVE-2022-25012-POC](https://github.com/G4sp4rCS/CVE-2022-25012-POC) - [XK3NF4/CVE-2022-25012](https://github.com/XK3NF4/CVE-2022-25012) @@ -39032,7 +35937,6 @@ - [ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25313](https://github.com/ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25313) -- [Trinadh465/external_expat-2.1.0_CVE-2022-25313](https://github.com/Trinadh465/external_expat-2.1.0_CVE-2022-25313) ### CVE-2022-25314 (2022-02-18) @@ -39048,13 +35952,6 @@ - [ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25315](https://github.com/ShaikUsaf/external_expact_AOSP10_r33_CVE-2022-25315) -### CVE-2022-25365 (2022-02-19) - -Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774. - - -- [followboy1999/CVE-2022-25365](https://github.com/followboy1999/CVE-2022-25365) - ### CVE-2022-25375 (2022-02-20) An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory. @@ -39062,13 +35959,6 @@ - [szymonh/rndis-co](https://github.com/szymonh/rndis-co) -### CVE-2022-25479 (2024-07-02) - -Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 allows for the leakage of kernel memory from both the stack and the heap. - - -- [SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN](https://github.com/SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN) - ### CVE-2022-25581 (2022-03-18) Classcms v2.5 and below contains an arbitrary file upload via the component \class\classupload. This vulnerability allows attackers to execute code injection via a crafted .txt file. @@ -39108,20 +35998,11 @@ - [Wai-Yan-Kyaw/PDFKitExploit](https://github.com/Wai-Yan-Kyaw/PDFKitExploit) - [LordRNA/CVE-2022-25765](https://github.com/LordRNA/CVE-2022-25765) - [shamo0/PDFkit-CMD-Injection](https://github.com/shamo0/PDFkit-CMD-Injection) -- [nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765](https://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765) - [UNICORDev/exploit-CVE-2022-25765](https://github.com/UNICORDev/exploit-CVE-2022-25765) -- [lekosbelas/PDFkit-CMD-Injection](https://github.com/lekosbelas/PDFkit-CMD-Injection) - [lowercasenumbers/CVE-2022-25765](https://github.com/lowercasenumbers/CVE-2022-25765) - [lst15/pdfkit-cve-2022-25765](https://github.com/lst15/pdfkit-cve-2022-25765) - [Jeanback1/CVE-2022-25765-exploit](https://github.com/Jeanback1/CVE-2022-25765-exploit) -### CVE-2022-25813 (2022-09-02) - -In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible. - - -- [mbadanoiu/CVE-2022-25813](https://github.com/mbadanoiu/CVE-2022-25813) - ### CVE-2022-25842 (2022-05-01) All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine. @@ -39135,10 +36016,6 @@ - [hosch3n/FastjsonVulns](https://github.com/hosch3n/FastjsonVulns) -- [nerowander/CVE-2022-25845-exploit](https://github.com/nerowander/CVE-2022-25845-exploit) -- [scabench/fastjson-tp1fn1](https://github.com/scabench/fastjson-tp1fn1) -- [luelueking/CVE-2022-25845-In-Spring](https://github.com/luelueking/CVE-2022-25845-In-Spring) -- [ph0ebus/CVE-2022-25845-In-Spring](https://github.com/ph0ebus/CVE-2022-25845-In-Spring) - [cuijiung/fastjson-CVE-2022-25845](https://github.com/cuijiung/fastjson-CVE-2022-25845) ### CVE-2022-25869 (2022-07-15) @@ -39153,7 +36030,6 @@ Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.\r\r -- [masahiro331/cve-2022-25927](https://github.com/masahiro331/cve-2022-25927) - [Sleuth-in-town/CVE-2022-25927-test](https://github.com/Sleuth-in-town/CVE-2022-25927-test) ### CVE-2022-25943 (2022-03-09) @@ -39246,17 +36122,6 @@ - [yyqxi/CVE-2022-26134](https://github.com/yyqxi/CVE-2022-26134) - [b4dboy17/CVE-2022-26134](https://github.com/b4dboy17/CVE-2022-26134) - [wjlin0/CVE-2022-26134](https://github.com/wjlin0/CVE-2022-26134) -- [cbk914/CVE-2022-26134_check](https://github.com/cbk914/CVE-2022-26134_check) -- [MaskCyberSecurityTeam/CVE-2022-26134_Behinder_MemShell](https://github.com/MaskCyberSecurityTeam/CVE-2022-26134_Behinder_MemShell) -- [Muhammad-Ali007/Atlassian_CVE-2022-26134](https://github.com/Muhammad-Ali007/Atlassian_CVE-2022-26134) -- [acfirthh/CVE-2022-26134](https://github.com/acfirthh/CVE-2022-26134) -- [yTxZx/CVE-2022-26134](https://github.com/yTxZx/CVE-2022-26134) -- [DARKSTUFF-LAB/-CVE-2022-26134](https://github.com/DARKSTUFF-LAB/-CVE-2022-26134) -- [404fu/CVE-2022-26134-POC](https://github.com/404fu/CVE-2022-26134-POC) -- [xsxtw/CVE-2022-26134](https://github.com/xsxtw/CVE-2022-26134) -- [BBD-YZZ/Confluence-RCE](https://github.com/BBD-YZZ/Confluence-RCE) -- [cc3305/CVE-2022-26134](https://github.com/cc3305/CVE-2022-26134) -- [Gilospy/CVE-2022-26134](https://github.com/Gilospy/CVE-2022-26134) - [Khalidhaimur/CVE-2022-26134](https://github.com/Khalidhaimur/CVE-2022-26134) - [tpdlshdmlrkfmcla/cve-2022-26134](https://github.com/tpdlshdmlrkfmcla/cve-2022-26134) - [thetowsif/CVE-2022-26134](https://github.com/thetowsif/CVE-2022-26134) @@ -39295,7 +36160,6 @@ - [SystemVll/CVE-2022-26265](https://github.com/SystemVll/CVE-2022-26265) -- [redteamsecurity2023/CVE-2022-26265](https://github.com/redteamsecurity2023/CVE-2022-26265) ### CVE-2022-26269 (2022-03-29) @@ -39312,28 +36176,6 @@ - [misterxid/watchguard_cve-2022-26318](https://github.com/misterxid/watchguard_cve-2022-26318) - [h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318](https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318) - [BabyTeam1024/CVE-2022-26318](https://github.com/BabyTeam1024/CVE-2022-26318) -- [egilas/Watchguard-RCE-POC-CVE-2022-26318](https://github.com/egilas/Watchguard-RCE-POC-CVE-2022-26318) - -### CVE-2022-26377 (2022-06-08) - -Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. - - -- [watchtowrlabs/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc](https://github.com/watchtowrlabs/ibm-qradar-ajp_smuggling_CVE-2022-26377_poc) - -### CVE-2022-26485 (2022-12-22) - -Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0. - - -- [mistymntncop/CVE-2022-26485](https://github.com/mistymntncop/CVE-2022-26485) - -### CVE-2022-26488 (2022-03-07) - -In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2. - - -- [techspence/PyPATHPwner](https://github.com/techspence/PyPATHPwner) ### CVE-2022-26503 (2022-03-17) @@ -39430,9 +36272,6 @@ - [r1skkam/TryHackMe-CVE-2022-26923](https://github.com/r1skkam/TryHackMe-CVE-2022-26923) - [LudovicPatho/CVE-2022-26923_AD-Certificate-Services](https://github.com/LudovicPatho/CVE-2022-26923_AD-Certificate-Services) - [lsecqt/CVE-2022-26923-Powershell-POC](https://github.com/lsecqt/CVE-2022-26923-Powershell-POC) -- [evilashz/PIGADVulnScanner](https://github.com/evilashz/PIGADVulnScanner) -- [Gh-Badr/CVE-2022-26923](https://github.com/Gh-Badr/CVE-2022-26923) -- [Yowise/CVE-2022-26923](https://github.com/Yowise/CVE-2022-26923) - [rayngnpc/CVE-2022-26923-rayng](https://github.com/rayngnpc/CVE-2022-26923-rayng) - [Eliasdekiniweek/CVE-2022-26923](https://github.com/Eliasdekiniweek/CVE-2022-26923) - [Nefhara/CVE-2022-26923](https://github.com/Nefhara/CVE-2022-26923) @@ -39453,13 +36292,6 @@ - [omair2084/CVE-2022-26937](https://github.com/omair2084/CVE-2022-26937) - [Malwareman007/CVE-2022-26937](https://github.com/Malwareman007/CVE-2022-26937) -### CVE-2022-26965 (2022-03-18) - -In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution. - - -- [SkDevilS/Pluck-Exploitation-by-skdevils](https://github.com/SkDevilS/Pluck-Exploitation-by-skdevils) - ### CVE-2022-27134 (2022-05-12) EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryptocurrency without paying ticket fee via the `std::string memo` parameter. @@ -39516,13 +36348,6 @@ - [gar-re/cve-2022-27438](https://github.com/gar-re/cve-2022-27438) -### CVE-2022-27499 (2022-11-11) - -Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. - - -- [web-logs2/snapshot-demo](https://github.com/web-logs2/snapshot-demo) - ### CVE-2022-27502 (2022-06-10) RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM. @@ -39530,20 +36355,6 @@ - [alirezac0/CVE-2022-27502](https://github.com/alirezac0/CVE-2022-27502) -### CVE-2022-27518 (2022-12-13) - -Unauthenticated remote arbitrary code execution - - -- [dolby360/CVE-2022-27518_POC](https://github.com/dolby360/CVE-2022-27518_POC) - -### CVE-2022-27646 (2023-03-29) - -This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the circled daemon. A crafted circleinfo.txt file can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15879. - - -- [cyber-defence-campus/netgear_r6700v3_circled](https://github.com/cyber-defence-campus/netgear_r6700v3_circled) - ### CVE-2022-27665 (2023-04-03) Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI. @@ -39557,7 +36368,6 @@ - [plummm/CVE-2022-27666](https://github.com/plummm/CVE-2022-27666) -- [Albocoder/cve-2022-27666-exploits](https://github.com/Albocoder/cve-2022-27666-exploits) - [ngtuonghung/CVE-2022-27666](https://github.com/ngtuonghung/CVE-2022-27666) ### CVE-2022-27772 (2022-03-30) @@ -39590,7 +36400,6 @@ - [jam620/Zimbra](https://github.com/jam620/Zimbra) - [SystemVll/CVE-2022-27925](https://github.com/SystemVll/CVE-2022-27925) - [onlyHerold22/CVE-2022-27925-PoC](https://github.com/onlyHerold22/CVE-2022-27925-PoC) -- [sanan2004/CVE-2022-27925](https://github.com/sanan2004/CVE-2022-27925) ### CVE-2022-27927 (2022-04-19) @@ -39599,9 +36408,6 @@ - [erengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated](https://github.com/erengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated) -### CVE-2022-27997 -- [Cyb3rEnthusiast/CVE-2023-27997](https://github.com/Cyb3rEnthusiast/CVE-2023-27997) - ### CVE-2022-28077 (2022-05-11) Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter. @@ -39637,13 +36443,6 @@ - [IbrahimEkimIsik/CVE-2022-28099](https://github.com/IbrahimEkimIsik/CVE-2022-28099) -### CVE-2022-28108 (2022-04-19) - -Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. - - -- [ZeroEthical/CVE-2022-28108](https://github.com/ZeroEthical/CVE-2022-28108) - ### CVE-2022-28113 (2022-04-15) An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session cookie. @@ -39657,7 +36456,6 @@ - [cheshireca7/CVE-2022-28117](https://github.com/cheshireca7/CVE-2022-28117) -- [kimstars/POC-CVE-2022-28117](https://github.com/kimstars/POC-CVE-2022-28117) ### CVE-2022-28118 (2022-05-03) @@ -39666,14 +36464,6 @@ - [Richard-Tang/SSCMS-PluginShell](https://github.com/Richard-Tang/SSCMS-PluginShell) -### CVE-2022-28171 (2022-06-27) - -The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device. - - -- [NyaMeeEain/CVE-2022-28171-POC](https://github.com/NyaMeeEain/CVE-2022-28171-POC) -- [aengussong/hikvision_probe](https://github.com/aengussong/hikvision_probe) - ### CVE-2022-28219 (2022-04-05) Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution. @@ -39697,8 +36487,6 @@ - [YouGina/CVE-2022-28346](https://github.com/YouGina/CVE-2022-28346) - [DeEpinGh0st/CVE-2022-28346](https://github.com/DeEpinGh0st/CVE-2022-28346) -- [vincentinttsh/CVE-2022-28346](https://github.com/vincentinttsh/CVE-2022-28346) -- [kamal-marouane/CVE-2022-28346](https://github.com/kamal-marouane/CVE-2022-28346) ### CVE-2022-28367 (2022-04-21) @@ -39707,15 +36495,6 @@ - [shoucheng3/nahsra__antisamy_CVE-2022-28367_1-6-5](https://github.com/shoucheng3/nahsra__antisamy_CVE-2022-28367_1-6-5) -### CVE-2022-28368 (2022-04-03) - -Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file). - - -- [rvzsec/CVE-2022-28368](https://github.com/rvzsec/CVE-2022-28368) -- [That-Guy-Steve/CVE-2022-28368-handler](https://github.com/That-Guy-Steve/CVE-2022-28368-handler) -- [Henryisnotavailable/Dompdf-Exploit-RCE](https://github.com/Henryisnotavailable/Dompdf-Exploit-RCE) - ### CVE-2022-28381 (2022-04-03) Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932. @@ -39771,7 +36550,6 @@ - [hacksysteam/CVE-2022-28672](https://github.com/hacksysteam/CVE-2022-28672) -- [fastmo/CVE-2022-28672](https://github.com/fastmo/CVE-2022-28672) ### CVE-2022-28943 - [zhefox/CVE-2022-28943](https://github.com/zhefox/CVE-2022-28943) @@ -39839,13 +36617,6 @@ - [chessredoffsec/CVE-2022-29056](https://github.com/chessredoffsec/CVE-2022-29056) -### CVE-2022-29063 (2022-09-02) - -The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a server restart, in order to run arbitrary code. Upgrade to at least 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12646. - - -- [mbadanoiu/CVE-2022-29063](https://github.com/mbadanoiu/CVE-2022-29063) - ### CVE-2022-29072 (2022-04-15) 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This is caused by misconfiguration of 7z.dll and a heap overflow. The command runs in a child process under the 7zFM.exe process. NOTE: multiple third parties have reported that no privilege escalation can occur @@ -39855,7 +36626,6 @@ - [tiktb8/CVE-2022-29072](https://github.com/tiktb8/CVE-2022-29072) - [sentinelblue/CVE-2022-29072](https://github.com/sentinelblue/CVE-2022-29072) - [Phantomiman/7-Zip.chm-Mitigation](https://github.com/Phantomiman/7-Zip.chm-Mitigation) -- [rasan2001/CVE-2022-29072](https://github.com/rasan2001/CVE-2022-29072) ### CVE-2022-29078 (2022-04-25) @@ -39863,9 +36633,6 @@ - [miko550/CVE-2022-29078](https://github.com/miko550/CVE-2022-29078) -- [shurochka1396/expluatation_CVE-2022-29078](https://github.com/shurochka1396/expluatation_CVE-2022-29078) -- [l0n3m4n/CVE-2022-29078](https://github.com/l0n3m4n/CVE-2022-29078) -- [chuckdu21/CVE-2022-29078](https://github.com/chuckdu21/CVE-2022-29078) - [seal-sec-demo-2/npm-demo](https://github.com/seal-sec-demo-2/npm-demo) - [amusedx/CVE-2022-29078](https://github.com/amusedx/CVE-2022-29078) - [test-avm-714877d2df585126/vuln-ejs-critical](https://github.com/test-avm-714877d2df585126/vuln-ejs-critical) @@ -39878,13 +36645,6 @@ - [EgeBalci/CVE-2022-29154](https://github.com/EgeBalci/CVE-2022-29154) -### CVE-2022-29170 (2022-05-20) - -Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present starting with version 7.4.0-beta1 and prior to versions 7.5.16 and 8.5.3 allows someone to bypass these security configurations if a malicious datasource (running on an allowed host) returns an HTTP redirect to a forbidden host. The vulnerability only impacts Grafana Enterprise when the Request security allow list is used and there is a possibility to add a custom datasource to Grafana which returns HTTP redirects. In this scenario, Grafana would blindly follow the redirects and potentially give secure information to the clients. Grafana Cloud is not impacted by this vulnerability. Versions 7.5.16 and 8.5.3 contain a patch for this issue. There are currently no known workarounds. - - -- [yijikeji/CVE-2022-29170](https://github.com/yijikeji/CVE-2022-29170) - ### CVE-2022-29221 (2022-05-24) Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include} file name. Sites that cannot fully trust template authors should upgrade to versions 3.1.45 or 4.1.1 to receive a patch for this issue. There are currently no known workarounds. @@ -39914,21 +36674,6 @@ - [ZSECURE/CVE-2022-29359](https://github.com/ZSECURE/CVE-2022-29359) -### CVE-2022-29361 (2022-05-24) - -Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project - - -- [kevin-mizu/Werkzeug-CVE-2022-29361-PoC](https://github.com/kevin-mizu/Werkzeug-CVE-2022-29361-PoC) -- [l3ragio/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS](https://github.com/l3ragio/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS) - -### CVE-2022-29380 (2022-05-25) - -Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel. - - -- [OpenXP-Research/CVE-2022-29380](https://github.com/OpenXP-Research/CVE-2022-29380) - ### CVE-2022-29383 (2022-05-13) NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi. @@ -39944,8 +36689,6 @@ - [GULL2100/Wordpress_xss-CVE-2022-29455](https://github.com/GULL2100/Wordpress_xss-CVE-2022-29455) - [akhilkoradiya/CVE-2022-29455](https://github.com/akhilkoradiya/CVE-2022-29455) -- [abdipranata/CVE-2022-29455](https://github.com/abdipranata/CVE-2022-29455) -- [0xc4t/CVE-2022-29455](https://github.com/0xc4t/CVE-2022-29455) ### CVE-2022-29464 (2022-04-18) @@ -39976,11 +36719,6 @@ - [hupe1980/CVE-2022-29464](https://github.com/hupe1980/CVE-2022-29464) - [gbrsh/CVE-2022-29464](https://github.com/gbrsh/CVE-2022-29464) - [devengpk/CVE-2022-29464](https://github.com/devengpk/CVE-2022-29464) -- [Ap0dexMe0/CVE-2022-29464](https://github.com/Ap0dexMe0/CVE-2022-29464) -- [Pushkarup/CVE-2022-29464](https://github.com/Pushkarup/CVE-2022-29464) -- [SynixCyberCrimeMy/CVE-2022-29464](https://github.com/SynixCyberCrimeMy/CVE-2022-29464) -- [cc3305/CVE-2022-29464](https://github.com/cc3305/CVE-2022-29464) -- [c1ph3rbyt3/CVE-2022-29464](https://github.com/c1ph3rbyt3/CVE-2022-29464) ### CVE-2022-29465 (2022-08-05) @@ -39989,9 +36727,6 @@ - [badguy233/CVE-2022-29465](https://github.com/badguy233/CVE-2022-29465) -### CVE-2022-29469 -- [S4muraiMelayu1337/CVE-2022-29469](https://github.com/S4muraiMelayu1337/CVE-2022-29469) - ### CVE-2022-29548 (2022-04-21) A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0. @@ -40147,13 +36882,6 @@ - [M4fiaB0y/CVE-2022-30075](https://github.com/M4fiaB0y/CVE-2022-30075) - [RhestCorp/TP-L-NK-SIZMA-EXPLO-T](https://github.com/RhestCorp/TP-L-NK-SIZMA-EXPLO-T) -### CVE-2022-30114 (2023-05-19) - -A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS. - - -- [str0ng4le/CVE-2022-30114](https://github.com/str0ng4le/CVE-2022-30114) - ### CVE-2022-30129 (2022-05-10) Visual Studio Code Remote Code Execution Vulnerability @@ -40161,14 +36889,6 @@ - [RoccoPearce/CVE-2022-30129](https://github.com/RoccoPearce/CVE-2022-30129) -### CVE-2022-30136 (2022-06-15) - -Windows Network File System Remote Code Execution Vulnerability - - -- [fortra/CVE-2022-30136](https://github.com/fortra/CVE-2022-30136) -- [AXRoux/CVE-2022-30136](https://github.com/AXRoux/CVE-2022-30136) - ### CVE-2022-30190 (2022-06-01) A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.\nPlease see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability. @@ -40246,15 +36966,6 @@ - [Nyx2022/Follina-CVE-2022-30190-Sample](https://github.com/Nyx2022/Follina-CVE-2022-30190-Sample) - [michealadams30/Cve-2022-30190](https://github.com/michealadams30/Cve-2022-30190) - [melting0256/Enterprise-Cybersecurity](https://github.com/melting0256/Enterprise-Cybersecurity) -- [yrkuo/CVE-2022-30190](https://github.com/yrkuo/CVE-2022-30190) -- [ToxicEnvelope/FOLLINA-CVE-2022-30190](https://github.com/ToxicEnvelope/FOLLINA-CVE-2022-30190) -- [hycheng15/CVE-2022-30190](https://github.com/hycheng15/CVE-2022-30190) -- [aminetitrofine/CVE-2022-30190](https://github.com/aminetitrofine/CVE-2022-30190) -- [Muhammad-Ali007/Follina_MSDT_CVE-2022-30190](https://github.com/Muhammad-Ali007/Follina_MSDT_CVE-2022-30190) -- [Jump-Wang-111/AmzWord](https://github.com/Jump-Wang-111/AmzWord) -- [shri142/ZipScan](https://github.com/shri142/ZipScan) -- [alienkeric/CVE-2022-30190](https://github.com/alienkeric/CVE-2022-30190) -- [ethicalblue/Follina-CVE-2022-30190-Sample](https://github.com/ethicalblue/Follina-CVE-2022-30190-Sample) - [Potato-9257/CVE-2022-30190_page](https://github.com/Potato-9257/CVE-2022-30190_page) - [yeep1115/ICT287_CVE-2022-30190_Exploit](https://github.com/yeep1115/ICT287_CVE-2022-30190_Exploit) - [RathoreAbhiii/Folina-Vulnerability-Exploitation-Detection-and-Mitigation](https://github.com/RathoreAbhiii/Folina-Vulnerability-Exploitation-Detection-and-Mitigation) @@ -40268,13 +36979,6 @@ - [kaleth4/CVE-2022-30190](https://github.com/kaleth4/CVE-2022-30190) - [czabatta/THM-Tempest](https://github.com/czabatta/THM-Tempest) -### CVE-2022-30203 (2022-07-12) - -Windows Boot Manager Security Feature Bypass Vulnerability - - -- [Wack0/dubiousdisk](https://github.com/Wack0/dubiousdisk) - ### CVE-2022-30206 (2022-07-12) Windows Print Spooler Elevation of Privilege Vulnerability @@ -40306,7 +37010,6 @@ - [rbowes-r7/unrar-cve-2022-30333-poc](https://github.com/rbowes-r7/unrar-cve-2022-30333-poc) - [aslitsecurity/Zimbra-CVE-2022-30333](https://github.com/aslitsecurity/Zimbra-CVE-2022-30333) - [RakhithJK/CVE-2022-30333](https://github.com/RakhithJK/CVE-2022-30333) -- [paradox0909/cve-2022-30333_online_rar_extracor](https://github.com/paradox0909/cve-2022-30333_online_rar_extracor) ### CVE-2022-30489 (2022-05-13) @@ -40353,13 +37056,6 @@ - [bigzooooz/CVE-2022-30514](https://github.com/bigzooooz/CVE-2022-30514) -### CVE-2022-30524 (2022-05-09) - -There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact. - - -- [rishvic/xpdf-docker](https://github.com/rishvic/xpdf-docker) - ### CVE-2022-30525 (2022-05-12) A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device. @@ -40378,8 +37074,6 @@ - [west9b/CVE-2022-30525](https://github.com/west9b/CVE-2022-30525) - [furkanzengin/CVE-2022-30525](https://github.com/furkanzengin/CVE-2022-30525) - [ProngedFork/CVE-2022-30525](https://github.com/ProngedFork/CVE-2022-30525) -- [cbk914/CVE-2022-30525_check](https://github.com/cbk914/CVE-2022-30525_check) -- [arajsingh-infosec/CVE-2022-30525_Exploit](https://github.com/arajsingh-infosec/CVE-2022-30525_Exploit) ### CVE-2022-30526 (2022-07-19) @@ -40425,7 +37119,6 @@ - [p0dalirius/CVE-2022-30780-lighttpd-denial-of-service](https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service) -- [xiw1ll/CVE-2022-30780_Checker](https://github.com/xiw1ll/CVE-2022-30780_Checker) ### CVE-2022-30781 (2022-05-16) @@ -40477,13 +37170,6 @@ - [ly1g3/Mailcow-CVE-2022-31138](https://github.com/ly1g3/Mailcow-CVE-2022-31138) -### CVE-2022-31144 (2022-07-19) - -Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7.0.4. The patch is released in version 7.0.4. - - -- [SpiralBL0CK/CVE-2022-31144](https://github.com/SpiralBL0CK/CVE-2022-31144) - ### CVE-2022-31147 (2022-07-14) The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix for CVE-2021-43306. Users should upgrade to version 1.19.5 to receive a patch. @@ -40691,14 +37377,6 @@ - [blipzip/cve-2022-31692](https://github.com/blipzip/cve-2022-31692) -- [hotblac/cve-2022-31692](https://github.com/hotblac/cve-2022-31692) - -### CVE-2022-31705 (2022-12-14) - -VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed. - - -- [s0duku/cve-2022-31705](https://github.com/s0duku/cve-2022-31705) ### CVE-2022-31749 (2025-01-27) @@ -40736,13 +37414,6 @@ - [EvergreenCartoons/SenselessViolence](https://github.com/EvergreenCartoons/SenselessViolence) -- [Madliife0/CVE-2022-31814](https://github.com/Madliife0/CVE-2022-31814) -- [TheUnknownSoul/CVE-2022-31814](https://github.com/TheUnknownSoul/CVE-2022-31814) -- [drcayber/RCE](https://github.com/drcayber/RCE) -- [Chocapikk/CVE-2022-31814](https://github.com/Chocapikk/CVE-2022-31814) -- [dkstar11q/CVE-2022-31814](https://github.com/dkstar11q/CVE-2022-31814) -- [Laburity/CVE-2022-31814](https://github.com/Laburity/CVE-2022-31814) -- [ArunHAtter/CVE-2022-31814](https://github.com/ArunHAtter/CVE-2022-31814) - [SystemVll/CVE-2022-31814](https://github.com/SystemVll/CVE-2022-31814) ### CVE-2022-31854 (2022-07-07) @@ -40752,20 +37423,6 @@ - [Vikaran101/CVE-2022-31854](https://github.com/Vikaran101/CVE-2022-31854) -### CVE-2022-31889 (2023-04-05) - -Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae. - - -- [reewardius/CVE-2022-31889](https://github.com/reewardius/CVE-2022-31889) - -### CVE-2022-31890 (2023-04-05) - -SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function. - - -- [reewardius/CVE-2022-31890](https://github.com/reewardius/CVE-2022-31890) - ### CVE-2022-31897 (2022-06-29) SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=. @@ -40823,13 +37480,6 @@ - [mgregus/project_BIT_nmap_script](https://github.com/mgregus/project_BIT_nmap_script) -### CVE-2022-32074 (2022-07-13) - -A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file. - - -- [reewardius/CVE-2022-32074](https://github.com/reewardius/CVE-2022-32074) - ### CVE-2022-32114 (2022-07-13) An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission is supposed to be able to upload PDF files containing JavaScript, and that all files in a public assets folder are accessible to the outside world (unless the filename begins with a dot character). The administrator can choose to allow only image, video, and audio files (i.e., not PDF) if desired. @@ -40851,16 +37501,6 @@ - [JC175/CVE-2022-32119](https://github.com/JC175/CVE-2022-32119) -### CVE-2022-32132 -- [reewardius/CVE-2022-32132](https://github.com/reewardius/CVE-2022-32132) - -### CVE-2022-32199 (2023-03-27) - -db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traversal sequence in the file parameter. - - -- [Toxich4/CVE-2022-32199](https://github.com/Toxich4/CVE-2022-32199) - ### CVE-2022-32223 (2022-07-14) Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:* OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf” exists.Whenever the above conditions are present, `node.exe` will search for `providers.dll` in the current user directory.After that, `node.exe` will try to search for `providers.dll` by the DLL Search Order in Windows.It is possible for an attacker to place the malicious file `providers.dll` under a variety of paths and exploit this vulnerability. @@ -40881,10 +37521,6 @@ - [theori-io/CVE-2022-32250-exploit](https://github.com/theori-io/CVE-2022-32250-exploit) -- [ysanatomic/CVE-2022-32250-LPE](https://github.com/ysanatomic/CVE-2022-32250-LPE) -- [Decstor5/2022-32250LPE](https://github.com/Decstor5/2022-32250LPE) -- [Kristal-g/CVE-2022-32250](https://github.com/Kristal-g/CVE-2022-32250) -- [seadragnol/CVE-2022-32250](https://github.com/seadragnol/CVE-2022-32250) - [KuanKuanQAQ/cve-testing](https://github.com/KuanKuanQAQ/cve-testing) - [rem0t3/CVE-2022-32250-Compiled](https://github.com/rem0t3/CVE-2022-32250-Compiled) - [LSinus/CacheMeIfYouCan](https://github.com/LSinus/CacheMeIfYouCan) @@ -40905,13 +37541,6 @@ - [Lay0us/CVE-2022-32532](https://github.com/Lay0us/CVE-2022-32532) - [my0113/shiro-cve-2022-32532](https://github.com/my0113/shiro-cve-2022-32532) -### CVE-2022-32548 (2022-08-29) - -An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field. - - -- [MosaedH/CVE-2022-32548-RCE-POC](https://github.com/MosaedH/CVE-2022-32548-RCE-POC) - ### CVE-2022-32832 (2022-09-23) The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges. @@ -40920,13 +37549,6 @@ - [Muirey03/CVE-2022-32832](https://github.com/Muirey03/CVE-2022-32832) - [AkbarTrilaksana/CVE-2022-32832](https://github.com/AkbarTrilaksana/CVE-2022-32832) -### CVE-2022-32862 (2022-11-01) - -This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root privileges may be able to access private information. - - -- [rohitc33/CVE-2022-32862](https://github.com/rohitc33/CVE-2022-32862) - ### CVE-2022-32883 (2022-09-20) A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to read sensitive location information. @@ -40934,34 +37556,6 @@ - [breakpointHQ/CVE-2022-32883](https://github.com/breakpointHQ/CVE-2022-32883) -### CVE-2022-32898 (2022-11-01) - -The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges. - - -- [ox1111/CVE-2022-32898](https://github.com/ox1111/CVE-2022-32898) - -### CVE-2022-32932 (2022-11-01) - -The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges. - - -- [ox1111/CVE-2022-32932](https://github.com/ox1111/CVE-2022-32932) - -### CVE-2022-32947 (2022-11-01) - -The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges. - - -- [hoshinolina/agx-exploit](https://github.com/hoshinolina/agx-exploit) - -### CVE-2022-32981 (2022-06-10) - -An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in ptrace PEEKUSER and POKEUSER (aka PEEKUSR and POKEUSR) when accessing floating point registers. - - -- [SpiralBL0CK/CVE-2022-32981](https://github.com/SpiralBL0CK/CVE-2022-32981) - ### CVE-2022-32988 (2022-06-30) Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list" parameters (e.g. filter_lwlist, keyword_rulelist, etc) in every ".asp" page containing a list of stored strings. The following asp files are affected: (1) cgi-bin/APP_Installation.asp, (2) cgi-bin/Advanced_ACL_Content.asp, (3) cgi-bin/Advanced_ADSL_Content.asp, (4) cgi-bin/Advanced_ASUSDDNS_Content.asp, (5) cgi-bin/Advanced_AiDisk_ftp.asp, (6) cgi-bin/Advanced_AiDisk_samba.asp, (7) cgi-bin/Advanced_DSL_Content.asp, (8) cgi-bin/Advanced_Firewall_Content.asp, (9) cgi-bin/Advanced_FirmwareUpgrade_Content.asp, (10) cgi-bin/Advanced_GWStaticRoute_Content.asp, (11) cgi-bin/Advanced_IPTV_Content.asp, (12) cgi-bin/Advanced_IPv6_Content.asp, (13) cgi-bin/Advanced_KeywordFilter_Content.asp, (14) cgi-bin/Advanced_LAN_Content.asp, (15) cgi-bin/Advanced_Modem_Content.asp, (16) cgi-bin/Advanced_PortTrigger_Content.asp, (17) cgi-bin/Advanced_QOSUserPrio_Content.asp, (18) cgi-bin/Advanced_QOSUserRules_Content.asp, (19) cgi-bin/Advanced_SettingBackup_Content.asp, (20) cgi-bin/Advanced_System_Content.asp, (21) cgi-bin/Advanced_URLFilter_Content.asp, (22) cgi-bin/Advanced_VPN_PPTP.asp, (23) cgi-bin/Advanced_VirtualServer_Content.asp, (24) cgi-bin/Advanced_WANPort_Content.asp, (25) cgi-bin/Advanced_WAdvanced_Content.asp, (26) cgi-bin/Advanced_WMode_Content.asp, (27) cgi-bin/Advanced_WWPS_Content.asp, (28) cgi-bin/Advanced_Wireless_Content.asp, (29) cgi-bin/Bandwidth_Limiter.asp, (30) cgi-bin/Guest_network.asp, (31) cgi-bin/Main_AccessLog_Content.asp, (32) cgi-bin/Main_AdslStatus_Content.asp, (33) cgi-bin/Main_Spectrum_Content.asp, (34) cgi-bin/Main_WebHistory_Content.asp, (35) cgi-bin/ParentalControl.asp, (36) cgi-bin/QIS_wizard.asp, (37) cgi-bin/QoS_EZQoS.asp, (38) cgi-bin/aidisk.asp, (39) cgi-bin/aidisk/Aidisk-1.asp, (40) cgi-bin/aidisk/Aidisk-2.asp, (41) cgi-bin/aidisk/Aidisk-3.asp, (42) cgi-bin/aidisk/Aidisk-4.asp, (43) cgi-bin/blocking.asp, (44) cgi-bin/cloud_main.asp, (45) cgi-bin/cloud_router_sync.asp, (46) cgi-bin/cloud_settings.asp, (47) cgi-bin/cloud_sync.asp, (48) cgi-bin/device-map/DSL_dashboard.asp, (49) cgi-bin/device-map/clients.asp, (50) cgi-bin/device-map/disk.asp, (51) cgi-bin/device-map/internet.asp, (52) cgi-bin/error_page.asp, (53) cgi-bin/index.asp, (54) cgi-bin/index2.asp, (55) cgi-bin/qis/QIS_PTM_manual_setting.asp, (56) cgi-bin/qis/QIS_admin_pass.asp, (57) cgi-bin/qis/QIS_annex_setting.asp, (58) cgi-bin/qis/QIS_bridge_cfg_tmp.asp, (59) cgi-bin/qis/QIS_detect.asp, (60) cgi-bin/qis/QIS_finish.asp, (61) cgi-bin/qis/QIS_ipoa_cfg_tmp.asp, (62) cgi-bin/qis/QIS_manual_setting.asp, (63) cgi-bin/qis/QIS_mer_cfg.asp, (64) cgi-bin/qis/QIS_mer_cfg_tmp.asp, (65) cgi-bin/qis/QIS_ppp_cfg.asp, (66) cgi-bin/qis/QIS_ppp_cfg_tmp.asp, (67) cgi-bin/qis/QIS_wireless.asp, (68) cgi-bin/query_wan_status.asp, (69) cgi-bin/query_wan_status2.asp, and (70) cgi-bin/start_apply.asp. @@ -40976,13 +37570,6 @@ - [angelopioamirante/CVE-2022-33075](https://github.com/angelopioamirante/CVE-2022-33075) -### CVE-2022-33082 (2022-06-30) - -An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input. - - -- [cyberqueenmeg/cve-2022-33082-exploit](https://github.com/cyberqueenmeg/cve-2022-33082-exploit) - ### CVE-2022-33098 (2022-07-07) Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. @@ -41035,8 +37622,6 @@ - [DrLinuxOfficial/CVE-2022-33891](https://github.com/DrLinuxOfficial/CVE-2022-33891) - [Vulnmachines/Apache-spark-CVE-2022-33891](https://github.com/Vulnmachines/Apache-spark-CVE-2022-33891) - [ps-interactive/lab_security_apache_spark_emulation_detection](https://github.com/ps-interactive/lab_security_apache_spark_emulation_detection) -- [elsvital/cve-2022-33891-fix](https://github.com/elsvital/cve-2022-33891-fix) -- [K3ysTr0K3R/CVE-2022-33891-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2022-33891-EXPLOIT) - [asepsaepdin/CVE-2022-33891](https://github.com/asepsaepdin/CVE-2022-33891) ### CVE-2022-33980 (2022-07-06) @@ -41048,7 +37633,6 @@ - [HKirito/CVE-2022-33980](https://github.com/HKirito/CVE-2022-33980) - [sammwyy/CVE-2022-33980-POC](https://github.com/sammwyy/CVE-2022-33980-POC) - [P0lar1ght/CVE-2022-33980-POC](https://github.com/P0lar1ght/CVE-2022-33980-POC) -- [joseluisinigo/riskootext4shell](https://github.com/joseluisinigo/riskootext4shell) ### CVE-2022-34024 (2022-07-19) @@ -41070,8 +37654,6 @@ - [bor8/CVE-2022-34169](https://github.com/bor8/CVE-2022-34169) -- [flowerwind/AutoGenerateXalanPayload](https://github.com/flowerwind/AutoGenerateXalanPayload) -- [Disnaming/CVE-2022-34169](https://github.com/Disnaming/CVE-2022-34169) ### CVE-2022-34265 (2022-07-04) @@ -41090,20 +37672,6 @@ - [watchtowrlabs/CVE-2022-34298](https://github.com/watchtowrlabs/CVE-2022-34298) -### CVE-2022-34527 (2022-07-29) - -D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte_4C0160. - - -- [FzBacon/CVE-2022-34527_D-Link_DSL-3782_Router_command_injection](https://github.com/FzBacon/CVE-2022-34527_D-Link_DSL-3782_Router_command_injection) - -### CVE-2022-34556 (2022-07-28) - -PicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c. - - -- [Halcy0nic/CVE-2022-34556](https://github.com/Halcy0nic/CVE-2022-34556) - ### CVE-2022-34662 (2022-11-01) When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher @@ -41111,13 +37679,6 @@ - [shoucheng3/apache__dolphinscheduler_CVE-2022-34662_2-0-9](https://github.com/shoucheng3/apache__dolphinscheduler_CVE-2022-34662_2-0-9) -### CVE-2022-34683 (2022-12-30) - -NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service. - - -- [gmh5225/CVE-2022-34683](https://github.com/gmh5225/CVE-2022-34683) - ### CVE-2022-34715 (2022-08-09) Windows Network File System Remote Code Execution Vulnerability @@ -41132,20 +37693,6 @@ - [SecLabResearchBV/CVE-2022-34718-PoC](https://github.com/SecLabResearchBV/CVE-2022-34718-PoC) -### CVE-2022-34753 (2022-07-13) - -A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Controller (5200WHC2), formerly known as C-Bus Wiser Homer Controller MK2 (V1.31.460 and prior) - - -- [K3ysTr0K3R/CVE-2022-34753-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2022-34753-EXPLOIT) - -### CVE-2022-34913 (2022-07-02) - -md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. NOTE: the vendor's position is that the product is not intended for untrusted input - - -- [Halcy0nic/CVE-2022-34913](https://github.com/Halcy0nic/CVE-2022-34913) - ### CVE-2022-34918 (2022-07-04) An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c. @@ -41211,7 +37758,6 @@ rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle. -- [Neo-okami/CVE-2022-35411](https://github.com/Neo-okami/CVE-2022-35411) - [CSpanias/rpc-rce.py](https://github.com/CSpanias/rpc-rce.py) ### CVE-2022-35416 (2022-07-11) @@ -41242,13 +37788,6 @@ - [p1ckzi/CVE-2022-35513](https://github.com/p1ckzi/CVE-2022-35513) -### CVE-2022-35649 (2022-07-25) - -The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system. - - -- [antoinenguyen-09/CVE-2022-35649](https://github.com/antoinenguyen-09/CVE-2022-35649) - ### CVE-2022-35650 (2022-07-25) The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default. @@ -41269,7 +37808,6 @@ - [gmh5225/CVE-2022-35737](https://github.com/gmh5225/CVE-2022-35737) -- [rvermeulen/codeql-cve-2022-35737](https://github.com/rvermeulen/codeql-cve-2022-35737) ### CVE-2022-35841 (2022-09-13) @@ -41294,17 +37832,6 @@ - [Lzer0Kx01/CVE-2022-35914](https://github.com/Lzer0Kx01/CVE-2022-35914) - [6E6L6F/CVE-2022-35914](https://github.com/6E6L6F/CVE-2022-35914) - [0xGabe/CVE-2022-35914](https://github.com/0xGabe/CVE-2022-35914) -- [Johnermac/CVE-2022-35914](https://github.com/Johnermac/CVE-2022-35914) -- [senderend/CVE-2022-35914](https://github.com/senderend/CVE-2022-35914) -- [noxlumens/CVE-2022-35914_poc](https://github.com/noxlumens/CVE-2022-35914_poc) -- [btar1gan/exploit_CVE-2022-35914](https://github.com/btar1gan/exploit_CVE-2022-35914) - -### CVE-2022-35919 (2022-08-01) - -MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow access to contents at any arbitrary paths that are readable by MinIO process. Users are advised to upgrade. Users unable to upgrade may disable ServerUpdate API by denying the `admin:ServerUpdate` action for your admin users via IAM policies. - - -- [ifulxploit/Minio-Security-Vulnerability-Checker](https://github.com/ifulxploit/Minio-Security-Vulnerability-Checker) ### CVE-2022-35978 (2022-08-15) @@ -41334,13 +37861,6 @@ ### CVE-2022-36163 - [MaherAzzouzi/CVE-2022-36163](https://github.com/MaherAzzouzi/CVE-2022-36163) -### CVE-2022-36193 (2022-11-28) - -SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries. - - -- [G37SYS73M/CVE-2022-36193](https://github.com/G37SYS73M/CVE-2022-36193) - ### CVE-2022-36200 (2022-08-29) In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed. @@ -41355,20 +37875,6 @@ - [affix/CVE-2022-36231](https://github.com/affix/CVE-2022-36231) -### CVE-2022-36234 (2022-07-28) - -SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets. - - -- [Halcy0nic/CVE-2022-36234](https://github.com/Halcy0nic/CVE-2022-36234) - -### CVE-2022-36267 (2022-08-08) - -In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by injecting code in one of the parameters allowing for remote code execution. This vulnerability is exploited via the binary file /home/www/cgi-bin/diagnostics.cgi that accepts unauthenticated requests and unsanitized data. As a result, a malicious actor can craft a specific request and interact remotely with the device. - - -- [0xNslabs/CVE-2022-36267-PoC](https://github.com/0xNslabs/CVE-2022-36267-PoC) - ### CVE-2022-36271 (2022-09-07) Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges. @@ -41397,7 +37903,6 @@ - [p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE](https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE) - [emirpolatt/CVE-2022-36446](https://github.com/emirpolatt/CVE-2022-36446) -- [Kang3639/CVE-2022-36446](https://github.com/Kang3639/CVE-2022-36446) ### CVE-2022-36532 (2022-09-16) @@ -41422,13 +37927,6 @@ - [Fopje/CVE-2022-36539](https://github.com/Fopje/CVE-2022-36539) -### CVE-2022-36553 (2022-08-29) - -Hytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection vulnerability via the component /www/cgi-bin/popen.cgi. - - -- [0xNslabs/CVE-2022-36553-PoC](https://github.com/0xNslabs/CVE-2022-36553-PoC) - ### CVE-2022-36663 (2022-09-06) Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter. @@ -41436,20 +37934,11 @@ - [aqeisi/CVE-2022-36663-PoC](https://github.com/aqeisi/CVE-2022-36663-PoC) -### CVE-2022-36752 (2022-07-28) - -png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. - - -- [Halcy0nic/CVE-2022-36752](https://github.com/Halcy0nic/CVE-2022-36752) - ### CVE-2022-36779 (2022-09-13) PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/industrial-Cellular-Router/industrial-Cellular-Router.html https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICE_Industrial_4G_LTE_Cellular_Router_ICR111WG.pdf?v=1620814301 -- [rootDR/CVE-2022-36779](https://github.com/rootDR/CVE-2022-36779) -- [EmadYaY/CVE-2022-36779](https://github.com/EmadYaY/CVE-2022-36779) - [rootdr-backup/exploit-CVE-2022-36779](https://github.com/rootdr-backup/exploit-CVE-2022-36779) ### CVE-2022-36804 (2022-08-25) @@ -41470,8 +37959,6 @@ - [SystemVll/CVE-2022-36804](https://github.com/SystemVll/CVE-2022-36804) - [ColdFusionX/CVE-2022-36804](https://github.com/ColdFusionX/CVE-2022-36804) - [devengpk/CVE-2022-36804](https://github.com/devengpk/CVE-2022-36804) -- [walnutsecurity/cve-2022-36804](https://github.com/walnutsecurity/cve-2022-36804) -- [imbas007/Atlassian-Bitbucket-CVE-2022-36804](https://github.com/imbas007/Atlassian-Bitbucket-CVE-2022-36804) - [asepsaepdin/CVE-2022-36804](https://github.com/asepsaepdin/CVE-2022-36804) - [DanielHallbro/CVE-2022-36804-Bitbucket-RCE-Analysis](https://github.com/DanielHallbro/CVE-2022-36804-Bitbucket-RCE-Analysis) - [JohanGabrielson/bitbucket-test](https://github.com/JohanGabrielson/bitbucket-test) @@ -41491,13 +37978,6 @@ - [tdawg506/mailenable-cve-2022-36934](https://github.com/tdawg506/mailenable-cve-2022-36934) -### CVE-2022-36944 (2022-09-23) - -Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java object deserialization within an application. In such situations, it allows attackers to erase contents of arbitrary files, make network connections, or possibly run arbitrary code (specifically, Function0 functions) via a gadget chain. - - -- [yarocher/lazylist-cve-poc](https://github.com/yarocher/lazylist-cve-poc) - ### CVE-2022-36946 (2022-07-27) nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len. @@ -41506,20 +37986,6 @@ - [Pwnzer0tt1/CVE-2022-36946](https://github.com/Pwnzer0tt1/CVE-2022-36946) - [Satheesh575555/linux-4.19.72_CVE-2022-36946](https://github.com/Satheesh575555/linux-4.19.72_CVE-2022-36946) -### CVE-2022-37017 (2022-12-01) - -Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled. - - -- [apeppels/CVE-2022-37017](https://github.com/apeppels/CVE-2022-37017) - -### CVE-2022-37032 (2022-09-19) - -An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. - - -- [spwpun/CVE-2022-37032](https://github.com/spwpun/CVE-2022-37032) - ### CVE-2022-37042 (2022-08-11) Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925. @@ -41612,13 +38078,6 @@ - [dbyio/cve-2022-37298](https://github.com/dbyio/cve-2022-37298) -### CVE-2022-37332 (2022-11-21) - -A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled. - - -- [SpiralBL0CK/CVE-2022-37332-RCE-](https://github.com/SpiralBL0CK/CVE-2022-37332-RCE-) - ### CVE-2022-37418 (2022-08-24) The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely. @@ -41639,8 +38098,6 @@ - [xen0bit/CVE-2022-37434_poc](https://github.com/xen0bit/CVE-2022-37434_poc) -- [Trinadh465/external_zlib_android-6.0.1_r22_CVE-2022-37434](https://github.com/Trinadh465/external_zlib_android-6.0.1_r22_CVE-2022-37434) -- [Trinadh465/external_zlib_CVE-2022-37434](https://github.com/Trinadh465/external_zlib_CVE-2022-37434) ### CVE-2022-37703 (2022-09-13) @@ -41670,11 +38127,6 @@ - [MaherAzzouzi/CVE-2022-37706-LPE-exploit](https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit) - [ECU-10525611-Xander/CVE-2022-37706](https://github.com/ECU-10525611-Xander/CVE-2022-37706) -- [junnythemarksman/CVE-2022-37706](https://github.com/junnythemarksman/CVE-2022-37706) -- [TACTICAL-HACK/CVE-2022-37706-SUID](https://github.com/TACTICAL-HACK/CVE-2022-37706-SUID) -- [sanan2004/CVE-2022-37706](https://github.com/sanan2004/CVE-2022-37706) -- [KaoXx/CVE-2022-37706](https://github.com/KaoXx/CVE-2022-37706) -- [d3ndr1t30x/CVE-2022-37706](https://github.com/d3ndr1t30x/CVE-2022-37706) - [Massive43/CVE-2022-37706](https://github.com/Massive43/CVE-2022-37706) ### CVE-2022-37708 @@ -41692,36 +38144,18 @@ Windows Common Log File System Driver Elevation of Privilege Vulnerability -- [fortra/CVE-2022-37969](https://github.com/fortra/CVE-2022-37969) - [grass341/CVE-2022-37969](https://github.com/grass341/CVE-2022-37969) - [NoobCat2000/CVE-2022-37969](https://github.com/NoobCat2000/CVE-2022-37969) - [EmilC3978/CVE-2022-37969PoC](https://github.com/EmilC3978/CVE-2022-37969PoC) - [uname1able/CVE-2022-37969](https://github.com/uname1able/CVE-2022-37969) - [nhh9905/CVE-2022-37969](https://github.com/nhh9905/CVE-2022-37969) -### CVE-2022-38029 (2022-10-11) - -Windows ALPC Elevation of Privilege Vulnerability - - -- [SpiralBL0CK/SIDECHANNEL-CVE-2022-38029](https://github.com/SpiralBL0CK/SIDECHANNEL-CVE-2022-38029) - -### CVE-2022-38181 (2022-10-25) - -The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0. - - -- [Pro-me3us/CVE_2022_38181_Raven](https://github.com/Pro-me3us/CVE_2022_38181_Raven) -- [Pro-me3us/CVE_2022_38181_Gazelle](https://github.com/Pro-me3us/CVE_2022_38181_Gazelle) -- [R0rt1z2/CVE-2022-38181](https://github.com/R0rt1z2/CVE-2022-38181) - ### CVE-2022-38374 (2022-11-02) A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0.2 and 6.2.0 - 6.2.4 allows an attacker to execute unauthorized code or commands via the URL and User fields observed in the traffic and event logviews. - [azhurtanov/CVE-2022-38374](https://github.com/azhurtanov/CVE-2022-38374) -- [M4fiaB0y/CVE-2022-38374](https://github.com/M4fiaB0y/CVE-2022-38374) ### CVE-2022-38532 (2022-09-19) @@ -41744,9 +38178,6 @@ - [sornram9254/CVE-2022-38577-Processmaker](https://github.com/sornram9254/CVE-2022-38577-Processmaker) -### CVE-2022-38601 -- [jet-pentest/CVE-2022-38601](https://github.com/jet-pentest/CVE-2022-38601) - ### CVE-2022-38604 (2023-04-11) Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability. @@ -41777,13 +38208,6 @@ - [JoshAtticus/ztewaste](https://github.com/JoshAtticus/ztewaste) - [sloden1977-lang/ROOT-ZTE-X1001](https://github.com/sloden1977-lang/ROOT-ZTE-X1001) -### CVE-2022-38725 (2023-01-23) - -An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected. - - -- [wdahlenburg/CVE-2022-38725](https://github.com/wdahlenburg/CVE-2022-38725) - ### CVE-2022-38766 (2023-01-03) The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for each door-open request, which allows for a replay attack. @@ -41812,13 +38236,6 @@ - [v0lp3/CVE-2022-39066](https://github.com/v0lp3/CVE-2022-39066) -### CVE-2022-39073 (2023-01-06) - -There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to execute arbitrary commands. - - -- [v0lp3/CVE-2022-39073](https://github.com/v0lp3/CVE-2022-39073) - ### CVE-2022-39196 (2022-09-04) Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced. @@ -41844,16 +38261,12 @@ - [its-arun/CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) - [TheCryingGame/CVE-2022-39197-RCE](https://github.com/TheCryingGame/CVE-2022-39197-RCE) - [adeljck/CVE-2022-39197](https://github.com/adeljck/CVE-2022-39197) -- [xiao-zhu-zhu/pig_CS4.4](https://github.com/xiao-zhu-zhu/pig_CS4.4) -- [Romanc9/Gui-poc-test](https://github.com/Romanc9/Gui-poc-test) ### CVE-2022-39227 (2022-09-23) python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secret key. Depending on the application, this may for example enable the attacker to spoof other user's identities, hijack their sessions, or bypass authentication. Users should upgrade to version 3.3.4. There are no known workarounds. -- [user0x1337/CVE-2022-39227](https://github.com/user0x1337/CVE-2022-39227) -- [NoSpaceAvailable/CVE-2022-39227](https://github.com/NoSpaceAvailable/CVE-2022-39227) - [melikesraoz/cve-2022-39227-jwt-auth-bypass-demo](https://github.com/melikesraoz/cve-2022-39227-jwt-auth-bypass-demo) ### CVE-2022-39253 (2022-10-19) @@ -41862,7 +38275,6 @@ - [ssst0n3/docker-cve-2022-39253-poc](https://github.com/ssst0n3/docker-cve-2022-39253-poc) -- [HiImDarwin/NetworkSecurityFinalProject](https://github.com/HiImDarwin/NetworkSecurityFinalProject) ### CVE-2022-39275 (2022-10-06) @@ -41903,16 +38315,6 @@ ### CVE-2022-39841 - [stealthcopter/CVE-2022-39841](https://github.com/stealthcopter/CVE-2022-39841) -### CVE-2022-39952 (2023-02-16) - -A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request. - - -- [horizon3ai/CVE-2022-39952](https://github.com/horizon3ai/CVE-2022-39952) -- [shiyeshu/CVE-2022-39952_webshell](https://github.com/shiyeshu/CVE-2022-39952_webshell) -- [Chocapikk/CVE-2022-39952](https://github.com/Chocapikk/CVE-2022-39952) -- [dkstar11q/CVE-2022-39952-better](https://github.com/dkstar11q/CVE-2022-39952-better) - ### CVE-2022-39959 (2022-10-07) Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation because a service, running as SYSTEM, uses the unquoted path of %PROGRAMDATA%\Panini\Everest Engine\EverestEngine.exe and therefore a Trojan horse %PROGRAMDATA%\Panini\Everest.exe may be executed instead of the intended vendor-supplied EverestEngine.exe file. @@ -41920,13 +38322,6 @@ - [usmarine2141/CVE-2022-39959](https://github.com/usmarine2141/CVE-2022-39959) -### CVE-2022-39986 (2023-08-01) - -A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php. - - -- [mind2hex/CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE](https://github.com/mind2hex/CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE) - ### CVE-2022-39996 (2024-08-27) Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page. @@ -41934,13 +38329,6 @@ - [uyhacked/Teldat-Router-CVE-2022-POC](https://github.com/uyhacked/Teldat-Router-CVE-2022-POC) -### CVE-2022-40032 (2023-02-17) - -SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information. - - -- [h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated](https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated) - ### CVE-2022-40126 (2022-09-29) A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated. @@ -41954,7 +38342,6 @@ - [Mr-xn/CVE-2022-40127](https://github.com/Mr-xn/CVE-2022-40127) -- [jakabakos/CVE-2022-40127-Airflow-RCE](https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE) ### CVE-2022-40140 (2022-09-19) @@ -41971,7 +38358,6 @@ - [cckuailong/CVE-2022-40146_Exploit_Jar](https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar) -- [soulfoodisgood/CVE-2022-40146](https://github.com/soulfoodisgood/CVE-2022-40146) ### CVE-2022-40297 (2022-09-08) @@ -41987,27 +38373,6 @@ - [izdiwho/CVE-2022-40317](https://github.com/izdiwho/CVE-2022-40317) -### CVE-2022-40347 (2023-02-17) - -SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information. - - -- [h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated](https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated) - -### CVE-2022-40348 (2023-02-18) - -Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code. - - -- [h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated](https://github.com/h4md153v63n/CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated) - -### CVE-2022-40363 (2022-09-29) - -A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file. - - -- [Olafdaf/CVE-2022-40363](https://github.com/Olafdaf/CVE-2022-40363) - ### CVE-2022-40470 (2022-11-21) Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature. @@ -42037,20 +38402,6 @@ - [dhammon/pfBlockerNg-CVE-2022-40624](https://github.com/dhammon/pfBlockerNg-CVE-2022-40624) -### CVE-2022-40634 (2022-09-13) - -Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI. - - -- [mbadanoiu/CVE-2022-40634](https://github.com/mbadanoiu/CVE-2022-40634) - -### CVE-2022-40635 (2022-09-13) - -Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. - - -- [mbadanoiu/CVE-2022-40635](https://github.com/mbadanoiu/CVE-2022-40635) - ### CVE-2022-40684 (2022-10-18) An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. @@ -42075,13 +38426,7 @@ - [TaroballzChen/CVE-2022-40684-metasploit-scanner](https://github.com/TaroballzChen/CVE-2022-40684-metasploit-scanner) - [gustavorobertux/gotigate](https://github.com/gustavorobertux/gotigate) - [hughink/CVE-2022-40684](https://github.com/hughink/CVE-2022-40684) -- [notareaperbutDR34P3r/CVE-2022-40684-Rust](https://github.com/notareaperbutDR34P3r/CVE-2022-40684-Rust) -- [dkstar11q/CVE-2022-40684](https://github.com/dkstar11q/CVE-2022-40684) -- [z-bool/CVE-2022-40684](https://github.com/z-bool/CVE-2022-40684) -- [Anthony1500/CVE-2022-40684](https://github.com/Anthony1500/CVE-2022-40684) -- [arsolutioner/fortigate-belsen-leak](https://github.com/arsolutioner/fortigate-belsen-leak) - [XalfiE/Fortigate-Belsen-Leak-Dump-CVE-2022-40684-](https://github.com/XalfiE/Fortigate-Belsen-Leak-Dump-CVE-2022-40684-) -- [niklasmato/fortileak-01-2025-Be](https://github.com/niklasmato/fortileak-01-2025-Be) - [Yami0x777/Belsen_Group-et-exploitation-de-la-CVE-2022-40684](https://github.com/Yami0x777/Belsen_Group-et-exploitation-de-la-CVE-2022-40684) - [ccordeiro/CVE-2022-40684](https://github.com/ccordeiro/CVE-2022-40684) - [pintukumar-sutradhar/fortigate-cve-2022-40684-tool](https://github.com/pintukumar-sutradhar/fortigate-cve-2022-40684-tool) @@ -42091,16 +38436,8 @@ profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022. -- [PLSRcoin/CVE-2022-40769](https://github.com/PLSRcoin/CVE-2022-40769) - [ethicbrudhack/CVE-2022-40769---Profanity](https://github.com/ethicbrudhack/CVE-2022-40769---Profanity) -### CVE-2022-40881 (2022-11-17) - -SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php - - -- [yilin1203/CVE-2022-40881](https://github.com/yilin1203/CVE-2022-40881) - ### CVE-2022-40916 (2025-02-06) Tiny File Manager v2.4.7 and below is vulnerable to session fixation. @@ -42115,13 +38452,6 @@ - [ethomson/cve-2022-41032](https://github.com/ethomson/cve-2022-41032) -### CVE-2022-41034 (2022-10-11) - -Visual Studio Code Remote Code Execution Vulnerability - - -- [andyhsu024/CVE-2022-41034](https://github.com/andyhsu024/CVE-2022-41034) - ### CVE-2022-41040 (2022-10-03) Microsoft Exchange Server Elevation of Privilege Vulnerability @@ -42135,7 +38465,6 @@ - [rjsudlow/proxynotshell-IOC-Checker](https://github.com/rjsudlow/proxynotshell-IOC-Checker) - [ITPATJIDR/CVE-2022-41040](https://github.com/ITPATJIDR/CVE-2022-41040) - [TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell](https://github.com/TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell) -- [0-Gram/CVE-2022-41040](https://github.com/0-Gram/CVE-2022-41040) ### CVE-2022-41080 (2022-11-09) @@ -42153,29 +38482,8 @@ - [notareaperbutDR34P3r/http-vuln-CVE-2022-41082](https://github.com/notareaperbutDR34P3r/http-vuln-CVE-2022-41082) - [sikkertech/CVE-2022-41082](https://github.com/sikkertech/CVE-2022-41082) - [balki97/OWASSRF-CVE-2022-41082-POC](https://github.com/balki97/OWASSRF-CVE-2022-41082-POC) -- [bigherocenter/CVE-2022-41082-POC](https://github.com/bigherocenter/CVE-2022-41082-POC) -- [notareaperbutDR34P3r/vuln-CVE-2022-41082](https://github.com/notareaperbutDR34P3r/vuln-CVE-2022-41082) -- [SUPRAAA-1337/CVE-2022-41082](https://github.com/SUPRAAA-1337/CVE-2022-41082) -- [soltanali0/CVE-2022-41082](https://github.com/soltanali0/CVE-2022-41082) - [CyprianAtsyor/LetsDefend-CVE-2022-41082-Exploitation-Attempt](https://github.com/CyprianAtsyor/LetsDefend-CVE-2022-41082-Exploitation-Attempt) -### CVE-2022-41099 (2022-11-09) - -BitLocker Security Feature Bypass Vulnerability - - -- [o0MattE0o/CVE-2022-41099-Fix](https://github.com/o0MattE0o/CVE-2022-41099-Fix) -- [tylermontneyacc/UpdateWindowsRE-CVE-2022-41099](https://github.com/tylermontneyacc/UpdateWindowsRE-CVE-2022-41099) -- [g-gill24/WinRE-Patch](https://github.com/g-gill24/WinRE-Patch) -- [dsn1321/KB5025175-CVE-2022-41099](https://github.com/dsn1321/KB5025175-CVE-2022-41099) - -### CVE-2022-41114 (2022-11-09) - -Windows Bind Filter Driver Elevation of Privilege Vulnerability - - -- [gmh5225/CVE-2022-41114](https://github.com/gmh5225/CVE-2022-41114) - ### CVE-2022-41218 (2022-09-21) In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. @@ -42183,13 +38491,6 @@ - [Tobey123/CVE-2022-41218](https://github.com/Tobey123/CVE-2022-41218) -### CVE-2022-41220 (2022-09-21) - -md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input - - -- [Halcy0nic/CVE-2022-41220](https://github.com/Halcy0nic/CVE-2022-41220) - ### CVE-2022-41272 (2022-12-13) An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver Process Integration (PI) - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data across the entire system. This allows the attacker to have full read access to user data, make limited modifications to user data, and degrade the performance of the system, leading to a high impact on confidentiality and a limited impact on the availability and integrity of the application.\n @@ -42197,20 +38498,6 @@ - [redrays-io/CVE-2022-41272](https://github.com/redrays-io/CVE-2022-41272) -### CVE-2022-41333 (2023-03-07) - -An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests. - - -- [polar0x/CVE-2022-41333](https://github.com/polar0x/CVE-2022-41333) - -### CVE-2022-41343 (2022-09-25) - -registerFont in FontMetrics.php in Dompdf before 2.0.1 allows remote file inclusion because a URI validation failure does not halt font registration, as demonstrated by a @font-face rule. - - -- [BKreisel/CVE-2022-41343](https://github.com/BKreisel/CVE-2022-41343) - ### CVE-2022-41352 (2022-09-26) An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio. @@ -42218,7 +38505,6 @@ - [segfault-it/cve-2022-41352](https://github.com/segfault-it/cve-2022-41352) - [Cr4ckC4t/cve-2022-41352-zimbra-rce](https://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce) -- [qailanet/cve-2022-41352-zimbra-rce](https://github.com/qailanet/cve-2022-41352-zimbra-rce) ### CVE-2022-41358 (2022-10-20) @@ -42227,13 +38513,6 @@ - [thecasual/CVE-2022-41358](https://github.com/thecasual/CVE-2022-41358) -### CVE-2022-41401 (2023-08-04) - -OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. - - -- [ixSly/CVE-2022-41401](https://github.com/ixSly/CVE-2022-41401) - ### CVE-2022-41445 (2022-11-22) A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Subject page. @@ -42260,7 +38539,6 @@ GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php. -- [yosef0x01/CVE-2022-41544](https://github.com/yosef0x01/CVE-2022-41544) - [h3x0v3rl0rd/CVE-2022-41544](https://github.com/h3x0v3rl0rd/CVE-2022-41544) ### CVE-2022-41622 (2022-12-07) @@ -42275,7 +38553,6 @@ Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. \n\nIn details, in ActiveMQ configurations, jetty allows\norg.jolokia.http.AgentServlet to handler request to /api/jolokia\n\norg.jolokia.http.HttpRequestHandler#handlePostRequest is able to\ncreate JmxRequest through JSONObject. And calls to\norg.jolokia.http.HttpRequestHandler#executeRequest.\n\nInto deeper calling stacks,\norg.jolokia.handler.ExecHandler#doHandleRequest can be invoked\nthrough refection. This could lead to RCE through via\nvarious mbeans. One example is unrestricted deserialization in jdk.management.jfr.FlightRecorderMXBeanImpl which exists on Java version above 11.\n\n1 Call newRecording.\n\n2 Call setConfiguration. And a webshell data hides in it.\n\n3 Call startRecording.\n\n4 Call copyTo method. The webshell will be written to a .jsp file.\n\nThe mitigation is to restrict (by default) the actions authorized on Jolokia, or disable Jolokia.\nA more restrictive Jolokia configuration has been defined in default ActiveMQ distribution. We encourage users to upgrade to ActiveMQ distributions version including updated Jolokia configuration: 5.16.6, 5.17.4, 5.18.0, 6.0.0.\n -- [mbadanoiu/CVE-2022-41678](https://github.com/mbadanoiu/CVE-2022-41678) - [URJACK2025/CVE-2022-41678](https://github.com/URJACK2025/CVE-2022-41678) - [Catherines77/ActiveMQ-EXPtools](https://github.com/Catherines77/ActiveMQ-EXPtools) @@ -42291,7 +38568,6 @@ NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module. -- [dumbbutt0/evilMP4](https://github.com/dumbbutt0/evilMP4) - [moften/CVE-2022-41741-742-Nginx-Vulnerability-Scanner](https://github.com/moften/CVE-2022-41741-742-Nginx-Vulnerability-Scanner) ### CVE-2022-41828 (2022-09-29) @@ -42310,28 +38586,6 @@ ### CVE-2022-41852 - [Warxim/CVE-2022-41852](https://github.com/Warxim/CVE-2022-41852) -- [xpectomas/CVE-2022-41852-Disable](https://github.com/xpectomas/CVE-2022-41852-Disable) - -### CVE-2022-41853 (2022-10-06) - -Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can be prevented by updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be called. For example, System.setProperty("hsqldb.method_class_names", "abc") or Java argument -Dhsqldb.method_class_names="abc" can be used. From version 2.7.1 all classes by default are not accessible except those in java.lang.Math and need to be manually enabled. - - -- [mbadanoiu/CVE-2022-41853](https://github.com/mbadanoiu/CVE-2022-41853) - -### CVE-2022-41876 (2022-11-10) - -ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hashes of users that have created or modified content, typically administrators and editors. This issue has been patched in versions 2.3.12, and 1.0.13 on the 1.X branch. Users unable to upgrade can remove the "passwordHash" entry from "src/bundle/Resources/config/graphql/User.types.yaml" in the GraphQL package, and other properties like hash type, email, login if you prefer. - - -- [Skileau/CVE-2022-41876](https://github.com/Skileau/CVE-2022-41876) - -### CVE-2022-41903 (2023-01-17) - -Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, there is a integer overflow in `pretty.c::format_and_pad_commit()` where a `size_t` is stored improperly as an `int`, and then added as an offset to a `memcpy()`. This overflow can be triggered directly by a user running a command which invokes the commit formatting machinery (e.g., `git log --format=...`). It may also be triggered indirectly through git archive via the export-subst mechanism, which expands format specifiers inside of files within the repository during a git archive. This integer overflow can result in arbitrary heap writes, which may result in arbitrary code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. Users who are unable to upgrade should disable `git archive` in untrusted repositories. If you expose git archive via `git daemon`, disable it by running `git config --global daemon.uploadArch false`. - - -- [sondermc/git-cveissues](https://github.com/sondermc/git-cveissues) ### CVE-2022-41923 (2022-11-23) @@ -42340,20 +38594,6 @@ - [grails/GSSC-CVE-2022-41923](https://github.com/grails/GSSC-CVE-2022-41923) -### CVE-2022-41924 (2022-11-23) - -A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows client GUI in cleartext with no Host header verification. This allowed an attacker-controlled website visited by the node to rebind DNS to an attacker-controlled DNS server, and then make local API requests in the client, including changing the coordination server to an attacker-controlled coordination server. An attacker-controlled coordination server can send malicious URL responses to the client, including pushing executables or installing an SMB share. These allow the attacker to remotely execute code on the node. All Windows clients prior to version v.1.32.3 are affected. If you are running Tailscale on Windows, upgrade to v1.32.3 or later to remediate the issue. - - -- [oalieno/CVE-2022-41924](https://github.com/oalieno/CVE-2022-41924) - -### CVE-2022-41966 (2022-12-27) - -XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack uses the hash code implementation for collections and maps to force recursive hash calculation causing a stack overflow. This issue is patched in version 1.4.20 which handles the stack overflow and raises an InputManipulationException instead. A potential workaround for users who only use HashMap or HashSet and whose XML refers these only as default map or set, is to change the default implementation of java.util.Map and java.util per the code example in the referenced advisory. However, this implies that your application does not care about the implementation of the map and all elements are comparable. - - -- [111ddea/Xstream_cve-2022-41966](https://github.com/111ddea/Xstream_cve-2022-41966) - ### CVE-2022-42005 - [AnalyticETH/tesla-security-research](https://github.com/AnalyticETH/tesla-security-research) @@ -42432,30 +38672,8 @@ A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. -- [bryanster/ioc-cve-2022-42475](https://github.com/bryanster/ioc-cve-2022-42475) -- [scrt/cve-2022-42475](https://github.com/scrt/cve-2022-42475) -- [Amir-hy/cve-2022-42475](https://github.com/Amir-hy/cve-2022-42475) -- [Mustafa1986/cve-2022-42475-Fortinet](https://github.com/Mustafa1986/cve-2022-42475-Fortinet) -- [P4x1s/CVE-2022-42475-RCE-POC](https://github.com/P4x1s/CVE-2022-42475-RCE-POC) -- [natceil/cve-2022-42475](https://github.com/natceil/cve-2022-42475) -- [0xhaggis/CVE-2022-42475](https://github.com/0xhaggis/CVE-2022-42475) - [ArthurHendrich/CVE-2022-42475-POC](https://github.com/ArthurHendrich/CVE-2022-42475-POC) -### CVE-2022-42703 (2022-10-09) - -mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. - - -- [Squirre17/hbp-attack-demo](https://github.com/Squirre17/hbp-attack-demo) -- [Satheesh575555/linux-4.1.15_CVE-2022-42703](https://github.com/Satheesh575555/linux-4.1.15_CVE-2022-42703) - -### CVE-2022-42864 (2022-12-15) - -A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges. - - -- [Muirey03/CVE-2022-42864](https://github.com/Muirey03/CVE-2022-42864) - ### CVE-2022-42889 (2022-10-13) Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default. @@ -42492,17 +38710,8 @@ - [vickyaryan7/Text4shell-exploit](https://github.com/vickyaryan7/Text4shell-exploit) - [gokul-ramesh/text4shell-exploit](https://github.com/gokul-ramesh/text4shell-exploit) - [f0ng/text4shellburpscanner](https://github.com/f0ng/text4shellburpscanner) -- [devenes/text4shell-cve-2022-42889](https://github.com/devenes/text4shell-cve-2022-42889) -- [hotblac/text4shell](https://github.com/hotblac/text4shell) -- [necroteddy/CVE-2022-42889](https://github.com/necroteddy/CVE-2022-42889) - [ReachabilityOrg/cve-2022-42889-text4shell-docker](https://github.com/ReachabilityOrg/cve-2022-42889-text4shell-docker) -- [Dima2021/cve-2022-42889-text4shell](https://github.com/Dima2021/cve-2022-42889-text4shell) -- [aaronm-sysdig/text4shell-docker](https://github.com/aaronm-sysdig/text4shell-docker) -- [alealeluyah/CVE-2022-42889-Text4Shell-POC](https://github.com/alealeluyah/CVE-2022-42889-Text4Shell-POC) -- [Sic4rio/CVE-2022-42889](https://github.com/Sic4rio/CVE-2022-42889) -- [34006133/CVE-2022-42889](https://github.com/34006133/CVE-2022-42889) - [DimaMend/cve-2022-42889-text4shell](https://github.com/DimaMend/cve-2022-42889-text4shell) -- [joshbnewton31080/cve-2022-42889-text4shell](https://github.com/joshbnewton31080/cve-2022-42889-text4shell) - [Syndicate27/text4shell-exploit](https://github.com/Syndicate27/text4shell-exploit) - [ifconfig-me/Log4Shell-Payloads](https://github.com/ifconfig-me/Log4Shell-Payloads) - [shoucheng3/asf__commons-text_CVE-2022-42889_1-9](https://github.com/shoucheng3/asf__commons-text_CVE-2022-42889_1-9) @@ -42511,15 +38720,6 @@ - [sangrok-jeon/CVE-2022-42889-Analysis](https://github.com/sangrok-jeon/CVE-2022-42889-Analysis) - [KosmicOwl045/ICT287-CVE-2022-42889](https://github.com/KosmicOwl045/ICT287-CVE-2022-42889) -### CVE-2022-42896 (2022-11-23) - -There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim.\n\nWe recommend upgrading past commit  https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url \n\n - - -- [Satheesh575555/linux-4.19.72_CVE-2022-42896](https://github.com/Satheesh575555/linux-4.19.72_CVE-2022-42896) -- [Trinadh465/linux-4.19.72_CVE-2022-42896](https://github.com/Trinadh465/linux-4.19.72_CVE-2022-42896) -- [himanshu667/kernel_v4.19.72_CVE-2022-42896](https://github.com/himanshu667/kernel_v4.19.72_CVE-2022-42896) - ### CVE-2022-42899 (2022-10-13) Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for MicroStation and 10.17.01.19* for Bentley View. @@ -42576,13 +38776,6 @@ - [SecurityWillCheck/CVE-2022-43271](https://github.com/SecurityWillCheck/CVE-2022-43271) -### CVE-2022-43293 (2023-04-11) - -Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe. - - -- [LucaBarile/CVE-2022-43293](https://github.com/LucaBarile/CVE-2022-43293) - ### CVE-2022-43332 (2022-11-17) A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel. @@ -42590,13 +38783,6 @@ - [maikroservice/CVE-2022-43332](https://github.com/maikroservice/CVE-2022-43332) -### CVE-2022-43343 (2022-11-08) - -N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c. - - -- [Halcy0nic/CVE-2022-43343](https://github.com/Halcy0nic/CVE-2022-43343) - ### CVE-2022-43369 (2022-12-06) AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php. @@ -42640,36 +38826,13 @@ - [UmbertoDellaMonica/Linksys-WRT54GL-Exploitation](https://github.com/UmbertoDellaMonica/Linksys-WRT54GL-Exploitation) -### CVE-2022-43980 (2023-01-27) - -There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An attacker could modify a network map, including on purpose the name of an XSS payload. Once created, if a user with admin privileges clicks on the edited network maps, the XSS payload will be executed. The exploitation of this vulnerability could allow an atacker to steal the value of the admin user´s cookie. - - -- [Argonx21/CVE-2022-43980](https://github.com/Argonx21/CVE-2022-43980) - -### CVE-2022-44118 (2022-11-23) - -dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php. - - -- [Athishpranav2003/CVE-2022-44118-Exploit](https://github.com/Athishpranav2003/CVE-2022-44118-Exploit) - ### CVE-2022-44136 (2022-11-30) Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE). -- [IgorDuino/CVE-2022-44136-exploit](https://github.com/IgorDuino/CVE-2022-44136-exploit) - [Ch35h1r3c47/CVE-2022-44136-poc](https://github.com/Ch35h1r3c47/CVE-2022-44136-poc) -### CVE-2022-44149 (2023-01-06) - -The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required - - -- [yerodin/CVE-2022-44149](https://github.com/yerodin/CVE-2022-44149) -- [geniuszly/CVE-2022-44149](https://github.com/geniuszly/CVE-2022-44149) - ### CVE-2022-44215 (2023-08-22) There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL. @@ -42690,79 +38853,13 @@ ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it). -- [duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC](https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC) -- [y1nglamore/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment](https://github.com/y1nglamore/CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment) -- [agathanon/cve-2022-44268](https://github.com/agathanon/cve-2022-44268) -- [jnschaeffer/cve-2022-44268-detector](https://github.com/jnschaeffer/cve-2022-44268-detector) -- [Ashifcoder/CVE-2022-44268-automated-poc](https://github.com/Ashifcoder/CVE-2022-44268-automated-poc) -- [Baikuya/CVE-2022-44268-PoC](https://github.com/Baikuya/CVE-2022-44268-PoC) - [voidz0r/CVE-2022-44268](https://github.com/voidz0r/CVE-2022-44268) -- [Sybil-Scan/imagemagick-lfi-poc](https://github.com/Sybil-Scan/imagemagick-lfi-poc) -- [Vulnmachines/imagemagick-CVE-2022-44268](https://github.com/Vulnmachines/imagemagick-CVE-2022-44268) -- [kljunowsky/CVE-2022-44268](https://github.com/kljunowsky/CVE-2022-44268) -- [nfm/heroku-CVE-2022-44268-reproduction](https://github.com/nfm/heroku-CVE-2022-44268-reproduction) -- [betillogalvanfbc/POC-CVE-2022-44268](https://github.com/betillogalvanfbc/POC-CVE-2022-44268) -- [adhikara13/CVE-2022-44268-MagiLeak](https://github.com/adhikara13/CVE-2022-44268-MagiLeak) -- [bhavikmalhotra/CVE-2022-44268-Exploit](https://github.com/bhavikmalhotra/CVE-2022-44268-Exploit) -- [entr0pie/CVE-2022-44268](https://github.com/entr0pie/CVE-2022-44268) -- [Pog-Frog/cve-2022-44268](https://github.com/Pog-Frog/cve-2022-44268) -- [narekkay/auto-cve-2022-44268.sh](https://github.com/narekkay/auto-cve-2022-44268.sh) -- [fanbyprinciple/ImageMagick-lfi-poc](https://github.com/fanbyprinciple/ImageMagick-lfi-poc) -- [chairat095/CVE-2022-44268_By_Kyokito](https://github.com/chairat095/CVE-2022-44268_By_Kyokito) -- [atici/Exploit-for-ImageMagick-CVE-2022-44268](https://github.com/atici/Exploit-for-ImageMagick-CVE-2022-44268) -- [Vagebondcur/IMAGE-MAGICK-CVE-2022-44268](https://github.com/Vagebondcur/IMAGE-MAGICK-CVE-2022-44268) -- [NataliSemi/-CVE-2022-44268](https://github.com/NataliSemi/-CVE-2022-44268) -- [CygnusX-26/CVE-2022-44268-fixed-PoC](https://github.com/CygnusX-26/CVE-2022-44268-fixed-PoC) -- [FlojBoj/CVE-2022-44268](https://github.com/FlojBoj/CVE-2022-44268) - [katseyres2/CVE-2022-44268-pilgrimage](https://github.com/katseyres2/CVE-2022-44268-pilgrimage) - [J0ey17/Automate_Exploit_CVE-2022-44268](https://github.com/J0ey17/Automate_Exploit_CVE-2022-44268) - [jkobierczynski/cve-2022-44268](https://github.com/jkobierczynski/cve-2022-44268) - [mouftan/CVE-2022-44268](https://github.com/mouftan/CVE-2022-44268) - [k-javaman12/CVE-2022-44268-](https://github.com/k-javaman12/CVE-2022-44268-) -### CVE-2022-44276 (2023-06-28) - -In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE. - - -- [HerrLeStrate/CVE-2022-44276-PoC](https://github.com/HerrLeStrate/CVE-2022-44276-PoC) - -### CVE-2022-44311 (2022-11-08) - -html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file. - - -- [Halcy0nic/CVE-2022-44311](https://github.com/Halcy0nic/CVE-2022-44311) -- [DesmondSanctity/CVE-2022-44311](https://github.com/DesmondSanctity/CVE-2022-44311) - -### CVE-2022-44312 (2022-11-08) - -PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator. - - -- [Halcy0nic/CVEs-for-picoc-3.2.2](https://github.com/Halcy0nic/CVEs-for-picoc-3.2.2) - -### CVE-2022-44318 (2022-11-08) - -PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. - - -- [Halcy0nic/CVE-2022-44318](https://github.com/Halcy0nic/CVE-2022-44318) - -### CVE-2022-44569 (2023-11-03) - -A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication. - - -- [rweijnen/ivanti-automationmanager-exploit](https://github.com/rweijnen/ivanti-automationmanager-exploit) - -### CVE-2022-44666 (2022-12-13) - -Windows Contacts Remote Code Execution Vulnerability - - -- [j00sean/CVE-2022-44666](https://github.com/j00sean/CVE-2022-44666) - ### CVE-2022-44721 - [gmh5225/CVE-2022-44721-CsFalconUninstaller](https://github.com/gmh5225/CVE-2022-44721-CsFalconUninstaller) @@ -42787,27 +38884,6 @@ - [Cedric1314/CVE-2022-44870](https://github.com/Cedric1314/CVE-2022-44870) -### CVE-2022-44875 (2023-03-06) - -KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via KioUtils.Execute in JavaScript code. - - -- [AesirSec/CVE-2022-44875-Test](https://github.com/AesirSec/CVE-2022-44875-Test) - -### CVE-2022-44877 (2023-01-05) - -login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter. - - -- [numanturle/CVE-2022-44877](https://github.com/numanturle/CVE-2022-44877) -- [komomon/CVE-2022-44877-RCE](https://github.com/komomon/CVE-2022-44877-RCE) -- [ColdFusionX/CVE-2022-44877-CWP7](https://github.com/ColdFusionX/CVE-2022-44877-CWP7) -- [Chocapikk/CVE-2022-44877](https://github.com/Chocapikk/CVE-2022-44877) -- [hotpotcookie/CVE-2022-44877-white-box](https://github.com/hotpotcookie/CVE-2022-44877-white-box) -- [dkstar11q/CVE-2022-44877](https://github.com/dkstar11q/CVE-2022-44877) -- [rhymsc/CVE-2022-44877-RCE](https://github.com/rhymsc/CVE-2022-44877-RCE) -- [G01d3nW01f/CVE-2022-44877](https://github.com/G01d3nW01f/CVE-2022-44877) - ### CVE-2022-44900 (2022-12-06) A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file. @@ -42815,41 +38891,12 @@ - [0xless/CVE-2022-44900-demo-lab](https://github.com/0xless/CVE-2022-44900-demo-lab) -### CVE-2022-45003 (2023-03-22) - -Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus. - - -- [mha98/CVE-2022-45003](https://github.com/mha98/CVE-2022-45003) - -### CVE-2022-45004 (2023-03-22) - -Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page. - - -- [mha98/CVE-2022-45004](https://github.com/mha98/CVE-2022-45004) - ### CVE-2022-45025 (2022-12-07) Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function. - [yuriisanin/CVE-2022-45025](https://github.com/yuriisanin/CVE-2022-45025) -- [andyhsu024/CVE-2022-45025](https://github.com/andyhsu024/CVE-2022-45025) - -### CVE-2022-45047 (2022-11-16) - -Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server. - - -- [hktalent/CVE-2022-45047](https://github.com/hktalent/CVE-2022-45047) - -### CVE-2022-45059 (2022-11-09) - -An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend. - - -- [martinvks/CVE-2022-45059-demo](https://github.com/martinvks/CVE-2022-45059-demo) ### CVE-2022-45217 (2022-12-07) @@ -42868,20 +38915,6 @@ - [offalltn/CVE-2022-45299](https://github.com/offalltn/CVE-2022-45299) -### CVE-2022-45354 (2024-01-08) - -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60. - - -- [RandomRobbieBF/CVE-2022-45354](https://github.com/RandomRobbieBF/CVE-2022-45354) - -### CVE-2022-45436 (2023-02-15) - -Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting (XSS). As a manager privilege user , create a network map containing name as xss payload. Once created, admin user must click on the edit network maps and XSS payload will be executed, which could be used for stealing admin users cookie value.\n\n - - -- [damodarnaik/CVE-2022-45436](https://github.com/damodarnaik/CVE-2022-45436) - ### CVE-2022-45451 (2023-08-31) Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984. @@ -42903,13 +38936,6 @@ - [nicbrinkley/CVE-2022-45472](https://github.com/nicbrinkley/CVE-2022-45472) -### CVE-2022-45477 (2022-12-05) - -Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - - -- [M507/nmap-vulnerability-scan-scripts](https://github.com/M507/nmap-vulnerability-scan-scripts) - ### CVE-2022-45511 (2022-12-08) Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex. @@ -42917,67 +38943,12 @@ - [kinderscsaa/cve-2022-45511](https://github.com/kinderscsaa/cve-2022-45511) -### CVE-2022-45599 (2023-02-22) - -Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regarding a given accounts hashed password. - - -- [ethancunt/CVE-2022-45599](https://github.com/ethancunt/CVE-2022-45599) - -### CVE-2022-45600 (2023-02-22) - -Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. - - -- [ethancunt/CVE-2022-45600](https://github.com/ethancunt/CVE-2022-45600) - -### CVE-2022-45688 (2022-12-13) - -A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. - - -- [scabench/jsonorg-tp1](https://github.com/scabench/jsonorg-tp1) -- [scabench/jsonorg-fp1](https://github.com/scabench/jsonorg-fp1) -- [scabench/jsonorg-fp2](https://github.com/scabench/jsonorg-fp2) -- [scabench/jsonorg-fp3](https://github.com/scabench/jsonorg-fp3) -- [scabench/jsonorg-fn1](https://github.com/scabench/jsonorg-fn1) - -### CVE-2022-45701 (2023-02-17) - -Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature. - - -- [yerodin/CVE-2022-45701](https://github.com/yerodin/CVE-2022-45701) -- [geniuszly/CVE-2022-45701](https://github.com/geniuszly/CVE-2022-45701) - -### CVE-2022-45728 (2023-01-12) - -Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. - - -- [sudoninja-noob/CVE-2022-45728](https://github.com/sudoninja-noob/CVE-2022-45728) - -### CVE-2022-45729 (2023-01-12) - -A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter. - - -- [sudoninja-noob/CVE-2022-45729](https://github.com/sudoninja-noob/CVE-2022-45729) - -### CVE-2022-45770 (2023-01-26) - -Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation. - - -- [Marsel-marsel/CVE-2022-45770](https://github.com/Marsel-marsel/CVE-2022-45770) - ### CVE-2022-45771 (2022-12-05) An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file. - [p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE](https://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE) -- [yuriisanin/CVE-2022-45771](https://github.com/yuriisanin/CVE-2022-45771) ### CVE-2022-45782 (2023-02-01) @@ -42986,22 +38957,6 @@ - [ninajafli/DotCMS-CVE-2022-45782](https://github.com/ninajafli/DotCMS-CVE-2022-45782) -### CVE-2022-45808 (2023-01-24) - -SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. - - -- [RandomRobbieBF/CVE-2022-45808](https://github.com/RandomRobbieBF/CVE-2022-45808) - -### CVE-2022-45934 (2022-11-27) - -An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets. - - -- [Trinadh465/linux-4.19.72_CVE-2022-45934](https://github.com/Trinadh465/linux-4.19.72_CVE-2022-45934) -- [Trinadh465/linux-4.1.15_CVE-2022-45934](https://github.com/Trinadh465/linux-4.1.15_CVE-2022-45934) -- [Satheesh575555/linux-4.1.15_CVE-2022-45934](https://github.com/Satheesh575555/linux-4.1.15_CVE-2022-45934) - ### CVE-2022-45988 (2023-03-03) starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload. @@ -43009,24 +38964,6 @@ - [happy0717/CVE-2022-45988](https://github.com/happy0717/CVE-2022-45988) -### CVE-2022-46080 (2023-07-06) - -Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET. - - -- [yerodin/CVE-2022-46080](https://github.com/yerodin/CVE-2022-46080) -- [geniuszly/CVE-2022-46080](https://github.com/geniuszly/CVE-2022-46080) - -### CVE-2022-46087 (2023-01-30) - -CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user. - - -- [G37SYS73M/CVE-2022-46087](https://github.com/G37SYS73M/CVE-2022-46087) - -### CVE-2022-46104 -- [NurSec747/CVE-2022-46104---POC](https://github.com/NurSec747/CVE-2022-46104---POC) - ### CVE-2022-46152 (2022-11-29) OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The commands `OPTEE_MSG_CMD_OPEN_SESSION` and `OPTEE_MSG_CMD_INVOKE_COMMAND` can be executed from the normal world via an OP-TEE SMC. This function is not validating the `num_params` argument, which is only limited to `OPTEE_MSG_MAX_NUM_PARAMS` (127) in the function `get_cmd_buffer()`. Therefore, an attacker in the normal world can craft an SMC call that will cause out-of-bounds reading in `cleanup_shm_refs` and potentially freeing of fake-objects in the function `mobj_put()`. A normal-world attacker with permission to execute SMC instructions may exploit this flaw. Maintainers believe this problem permits local privilege escalation from the normal world to the secure world. Version 3.19.0 contains a fix for this issue. There are no known workarounds. @@ -43034,13 +38971,6 @@ - [qianfei11/CVE-2022-46152](https://github.com/qianfei11/CVE-2022-46152) -### CVE-2022-46164 (2022-12-05) - -NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io message handling a specially crafted payload can be used to impersonate other users and takeover accounts. This vulnerability has been patched in version 2.6.1. Users are advised to upgrade. Users unable to upgrade may cherry-pick commit `48d143921753914da45926cca6370a92ed0c46b8` into their codebase to patch the exploit.\n - - -- [stephenbradshaw/CVE-2022-46164-poc](https://github.com/stephenbradshaw/CVE-2022-46164-poc) - ### CVE-2022-46166 (2022-12-09) Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers (e.g. Teams-Notifier) and write access to environment variables via UI are affected. Users are advised to upgrade to the most recent releases of Spring Boot Admin 2.6.10 and 2.7.8 to resolve this issue. Users unable to upgrade may disable any notifier or disable write access (POST request) on `/env` actuator endpoint.\n\n @@ -43057,48 +38987,10 @@ - [0xf4n9x/CVE-2022-46169](https://github.com/0xf4n9x/CVE-2022-46169) - [taythebot/CVE-2022-46169](https://github.com/taythebot/CVE-2022-46169) - [SystemVll/CVE-2022-46169](https://github.com/SystemVll/CVE-2022-46169) -- [sAsPeCt488/CVE-2022-46169](https://github.com/sAsPeCt488/CVE-2022-46169) -- [c3rrberu5/CVE-2022-46169](https://github.com/c3rrberu5/CVE-2022-46169) -- [Habib0x0/CVE-2022-46169](https://github.com/Habib0x0/CVE-2022-46169) -- [N1arut/CVE-2022-46169_POC](https://github.com/N1arut/CVE-2022-46169_POC) -- [miko550/CVE-2022-46169](https://github.com/miko550/CVE-2022-46169) -- [ariyaadinatha/cacti-cve-2022-46169-exploit](https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit) -- [0x0Jackal/CVE-2022-46169](https://github.com/0x0Jackal/CVE-2022-46169) -- [m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application](https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application) -- [devAL3X/CVE-2022-46169_poc](https://github.com/devAL3X/CVE-2022-46169_poc) -- [svchost9913/CVE-2022-46169_unauth_remote_code_execution](https://github.com/svchost9913/CVE-2022-46169_unauth_remote_code_execution) -- [icebreack/CVE-2022-46169](https://github.com/icebreack/CVE-2022-46169) -- [devilgothies/CVE-2022-46169](https://github.com/devilgothies/CVE-2022-46169) -- [yassinebk/CVE-2022-46169](https://github.com/yassinebk/CVE-2022-46169) -- [ruycr4ft/CVE-2022-46169](https://github.com/ruycr4ft/CVE-2022-46169) -- [FredBrave/CVE-2022-46169-CACTI-1.2.22](https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22) -- [r1nzleer/RCE-Cacti-1.2.22](https://github.com/r1nzleer/RCE-Cacti-1.2.22) -- [Safarchand/CVE-2022-46169](https://github.com/Safarchand/CVE-2022-46169) -- [BKreisel/CVE-2022-46169](https://github.com/BKreisel/CVE-2022-46169) -- [Rickster5555/EH2-PoC](https://github.com/Rickster5555/EH2-PoC) -- [antisecc/CVE-2022-46169](https://github.com/antisecc/CVE-2022-46169) -- [nou-man/CVE-2022-46169](https://github.com/nou-man/CVE-2022-46169) -- [dawnl3ss/CVE-2022-46169](https://github.com/dawnl3ss/CVE-2022-46169) -- [a1665454764/CVE-2022-46169](https://github.com/a1665454764/CVE-2022-46169) -- [0xZon/CVE-2022-46169-Exploit](https://github.com/0xZon/CVE-2022-46169-Exploit) -- [0xN7y/CVE-2022-46169](https://github.com/0xN7y/CVE-2022-46169) -- [mind2hex/CVE-2022-46169-Cacti-v1.2.22-RCE](https://github.com/mind2hex/CVE-2022-46169-Cacti-v1.2.22-RCE) -- [HPT-Intern-Task-Submission/CVE-2022-46169](https://github.com/HPT-Intern-Task-Submission/CVE-2022-46169) -- [lof1sec/CVE-2022-46169](https://github.com/lof1sec/CVE-2022-46169) - [RdBBB3/SHELL-POC-CVE-2022-46169](https://github.com/RdBBB3/SHELL-POC-CVE-2022-46169) - [alv-david/CVE-2022-46169-Cacti-1.2.22](https://github.com/alv-david/CVE-2022-46169-Cacti-1.2.22) - [nicostan15/CVE-2022-46169](https://github.com/nicostan15/CVE-2022-46169) -### CVE-2022-46175 (2022-12-24) - -JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, elevation of privilege, and in extreme cases, remote code execution. `JSON5.parse` should restrict parsing of `__proto__` keys when parsing JSON strings to objects. As a point of reference, the `JSON.parse` method included in JavaScript ignores `__proto__` keys. Simply changing `JSON5.parse` to `JSON.parse` in the examples above mitigates this vulnerability. This vulnerability is patched in json5 versions 1.0.2, 2.2.2, and later. - - -- [giz-berlin/quasar-app-webpack-json5-vulnerability](https://github.com/giz-berlin/quasar-app-webpack-json5-vulnerability) - -### CVE-2022-46196 -- [dpgg101/CVE-2022-46196](https://github.com/dpgg101/CVE-2022-46196) - ### CVE-2022-46364 (2022-12-13) A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.  @@ -43122,9 +39014,6 @@ An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0. -- [Pro-me3us/CVE_2022_46395_Gazelle](https://github.com/Pro-me3us/CVE_2022_46395_Gazelle) -- [Pro-me3us/CVE_2022_46395_Raven](https://github.com/Pro-me3us/CVE_2022_46395_Raven) -- [SmileTabLabo/CVE-2022-46395](https://github.com/SmileTabLabo/CVE-2022-46395) - [Gao-Zuin/cve-2022-46395-qemu](https://github.com/Gao-Zuin/cve-2022-46395-qemu) ### CVE-2022-46463 (2023-01-12) @@ -43133,8 +39022,6 @@ - [nu0l/CVE-2022-46463](https://github.com/nu0l/CVE-2022-46463) -- [404tk/CVE-2022-46463](https://github.com/404tk/CVE-2022-46463) -- [CodeSecurityTeam/harbor](https://github.com/CodeSecurityTeam/harbor) ### CVE-2022-46484 (2023-08-02) @@ -43150,35 +39037,13 @@ - [NevaSec/CVE-2022-46485](https://github.com/NevaSec/CVE-2022-46485) -### CVE-2022-46505 (2023-01-18) - -An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. - - -- [SmallTown123/details-for-CVE-2022-46505](https://github.com/SmallTown123/details-for-CVE-2022-46505) - ### CVE-2022-46604 (2023-02-02) An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution. -- [galoget/ResponsiveFileManager-CVE-2022-46604](https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604) - [CyberQuestor-infosec/CVE-2022-46604-Responsive-File-Manager](https://github.com/CyberQuestor-infosec/CVE-2022-46604-Responsive-File-Manager) -### CVE-2022-46622 (2023-01-12) - -A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter. - - -- [sudoninja-noob/CVE-2022-46622](https://github.com/sudoninja-noob/CVE-2022-46622) - -### CVE-2022-46623 (2023-01-12) - -Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter. - - -- [sudoninja-noob/CVE-2022-46623](https://github.com/sudoninja-noob/CVE-2022-46623) - ### CVE-2022-46638 - [naonymous101/CVE-2022-46638](https://github.com/naonymous101/CVE-2022-46638) @@ -43199,24 +39064,9 @@ - [straight-tamago/NoCameraSound](https://github.com/straight-tamago/NoCameraSound) - [ginsudev/WDBFontOverwrite](https://github.com/ginsudev/WDBFontOverwrite) - [mineek/FileManager](https://github.com/mineek/FileManager) -- [straight-tamago/NoHomeBar](https://github.com/straight-tamago/NoHomeBar) -- [straight-tamago/DockTransparent](https://github.com/straight-tamago/DockTransparent) -- [straight-tamago/FileSwitcherX](https://github.com/straight-tamago/FileSwitcherX) -- [bomberfish/Mandela-Legacy](https://github.com/bomberfish/Mandela-Legacy) -- [iswaxan/JailedCement](https://github.com/iswaxan/JailedCement) -- [bomberfish/Mandela-Classic](https://github.com/bomberfish/Mandela-Classic) -- [enty8080/MacDirtyCow](https://github.com/enty8080/MacDirtyCow) -- [tdquang266/MDC](https://github.com/tdquang266/MDC) - [daviszhto/overwrite](https://github.com/daviszhto/overwrite) - [LumberjackStorys/CVE](https://github.com/LumberjackStorys/CVE) -### CVE-2022-46718 (2023-06-23) - -A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information - - -- [biscuitehh/cve-2022-46718-leaky-location](https://github.com/biscuitehh/cve-2022-46718-leaky-location) - ### CVE-2022-46907 (2023-05-25) A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.0 or later. @@ -43231,41 +39081,6 @@ - [dest-3/CVE-2022-47052](https://github.com/dest-3/CVE-2022-47052) -### CVE-2022-47102 (2023-01-12) - -A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. - - -- [sudoninja-noob/CVE-2022-47102](https://github.com/sudoninja-noob/CVE-2022-47102) - -### CVE-2022-47130 (2023-02-03) - -A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page. - - -- [OpenXP-Research/CVE-2022-47130](https://github.com/OpenXP-Research/CVE-2022-47130) - -### CVE-2022-47131 (2023-02-03) - -A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page. - - -- [OpenXP-Research/CVE-2022-47131](https://github.com/OpenXP-Research/CVE-2022-47131) - -### CVE-2022-47132 (2023-02-03) - -A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users. - - -- [OpenXP-Research/CVE-2022-47132](https://github.com/OpenXP-Research/CVE-2022-47132) - -### CVE-2022-47373 (2023-02-15) - -Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload. - - -- [Argonx21/CVE-2022-47373](https://github.com/Argonx21/CVE-2022-47373) - ### CVE-2022-47447 (2023-05-24) Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <= 3.3.8 versions. @@ -43280,27 +39095,6 @@ - [toffeenutt/CVE-2022-47522-PoC](https://github.com/toffeenutt/CVE-2022-47522-PoC) -### CVE-2022-47529 (2023-03-28) - -Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification. - - -- [hyp3rlinx/CVE-2022-47529](https://github.com/hyp3rlinx/CVE-2022-47529) - -### CVE-2022-47615 (2023-01-24) - -Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. - - -- [RandomRobbieBF/CVE-2022-47615](https://github.com/RandomRobbieBF/CVE-2022-47615) - -### CVE-2022-47872 (2023-02-01) - -A Server-Side Request Forgery (SSRF) in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module. - - -- [Cedric1314/CVE-2022-47872](https://github.com/Cedric1314/CVE-2022-47872) - ### CVE-2022-47952 (2023-01-01) lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that "we will report back to the user that the open() failed but the user has no way of knowing why it failed"; however, in many realistic cases, there are no plausible reasons for failing except that the file does not exist. @@ -43313,26 +39107,7 @@ Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active). -- [horizon3ai/CVE-2022-47966](https://github.com/horizon3ai/CVE-2022-47966) -- [shameem-testing/PoC-for-ME-SAML-Vulnerability](https://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability) - [SystemVll/CVE-2022-47966](https://github.com/SystemVll/CVE-2022-47966) -- [ACE-Responder/CVE-2022-47966_checker](https://github.com/ACE-Responder/CVE-2022-47966_checker) -- [vonahisec/CVE-2022-47966-Scan](https://github.com/vonahisec/CVE-2022-47966-Scan) - -### CVE-2022-47986 (2023-02-17) - -IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512. - - -- [ohnonoyesyes/CVE-2022-47986](https://github.com/ohnonoyesyes/CVE-2022-47986) -- [mauricelambert/CVE-2022-47986](https://github.com/mauricelambert/CVE-2022-47986) - -### CVE-2022-48150 (2023-04-21) - -Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI. - - -- [SahilH4ck4you/-CVE-2022-48150](https://github.com/SahilH4ck4you/-CVE-2022-48150) ### CVE-2022-48194 (2022-12-30) @@ -43341,41 +39116,6 @@ - [otsmr/internet-of-vulnerable-things](https://github.com/otsmr/internet-of-vulnerable-things) -### CVE-2022-48197 (2023-01-02) - -Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. - - -- [ryan412/CVE-2022-48197](https://github.com/ryan412/CVE-2022-48197) - -### CVE-2022-48311 (2023-02-06) - -**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. - - -- [swzhouu/CVE-2022-48311](https://github.com/swzhouu/CVE-2022-48311) - -### CVE-2022-48429 (2023-03-27) - -In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible\n - - -- [echo-devim/CVE-2022-48429_poc](https://github.com/echo-devim/CVE-2022-48429_poc) - -### CVE-2022-48474 (2023-09-12) - -Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process. - - -- [sapellaniz/CVE-2022-48474_CVE-2022-48475](https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475) - -### CVE-2022-48565 (2023-08-22) - -An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. - - -- [Einstein2150/CVE-2022-48565-POC](https://github.com/Einstein2150/CVE-2022-48565-POC) - ### CVE-2022-49186 (2025-02-26) In the Linux kernel, the following vulnerability has been resolved:\n\nclk: visconti: prevent array overflow in visconti_clk_register_gates()\n\nThis code was using -1 to represent that there was no reset function.\nUnfortunately, the -1 was stored in u8 so the if (clks[i].rs_id >= 0)\ncondition was always true. This lead to an out of bounds access in\nvisconti_clk_register_gates(). @@ -52325,6 +48065,13 @@ - [s4dbrd/CVE-2020-9496](https://github.com/s4dbrd/CVE-2020-9496) - [Ly0nt4r/CVE-2020-9496](https://github.com/Ly0nt4r/CVE-2020-9496) +### CVE-2020-9529 (2020-08-10) + +Firmware developed by Shenzhen Hichip Vision Technology (V6 through V20), as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This affects products marketed under the following brand names: Accfly, Alptop, Anlink, Besdersec, BOAVISION, COOAU, CPVAN, Ctronics, D3D Security, Dericam, Elex System, Elite Security, ENSTER, ePGes, Escam, FLOUREON, GENBOLT, Hongjingtian (HJT), ICAMI, Iegeek, Jecurity, Jennov, KKMoon, LEFTEK, Loosafe, Luowice, Nesuniq, Nettoly, ProElite, QZT, Royallite, SDETER, SV3C, SY2L, Tenvis, ThinkValue, TOMLOV, TPTEK, WGCC, and ZILINK. + + +- [prisect/hichipreset](https://github.com/prisect/hichipreset) + ### CVE-2020-9547 (2020-03-02) FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap). @@ -71962,6 +67709,13 @@ - [alt3kx/CVE-2007-6638](https://github.com/alt3kx/CVE-2007-6638) +### CVE-2007-6750 (2011-12-27) + +The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15. + + +- [sarjanpatel22/siem-threat-detection-lab](https://github.com/sarjanpatel22/siem-threat-detection-lab) + ## 2006 ### CVE-2006-0450 (2006-01-27)