mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
174 lines
6.2 KiB
JSON
174 lines
6.2 KiB
JSON
[
|
|
{
|
|
"id": 1158361045,
|
|
"name": "CVE-2025-4138-4517-POC",
|
|
"full_name": "DesertDemons\/CVE-2025-4138-4517-POC",
|
|
"owner": {
|
|
"login": "DesertDemons",
|
|
"id": 36042871,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36042871?v=4",
|
|
"html_url": "https:\/\/github.com\/DesertDemons",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/DesertDemons\/CVE-2025-4138-4517-POC",
|
|
"description": "CVE-2025-4138 \/ CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass ",
|
|
"fork": false,
|
|
"created_at": "2026-02-15T08:28:28Z",
|
|
"updated_at": "2026-10-25T11:50:36Z",
|
|
"pushed_at": "2026-06-04T04:48:24Z",
|
|
"stargazers_count": 16,
|
|
"watchers_count": 16,
|
|
"has_discussions": false,
|
|
"forks_count": 2,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [
|
|
"cve-2025-4138",
|
|
"cve-20254517",
|
|
"escalate-privilages",
|
|
"python-tarfile",
|
|
"symlink",
|
|
"tarfile"
|
|
],
|
|
"visibility": "public",
|
|
"forks": 2,
|
|
"watchers": 16,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1158765923,
|
|
"name": "CVE-2025-4138_tarfile_filter_bypass",
|
|
"full_name": "thefizzyfish\/CVE-2025-4138_tarfile_filter_bypass",
|
|
"owner": {
|
|
"login": "thefizzyfish",
|
|
"id": 94797978,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94797978?v=4",
|
|
"html_url": "https:\/\/github.com\/thefizzyfish",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/thefizzyfish\/CVE-2025-4138_tarfile_filter_bypass",
|
|
"description": "CVE-2025-4138 - Python Arbitrary file write outside extraction directory",
|
|
"fork": false,
|
|
"created_at": "2026-02-15T21:59:58Z",
|
|
"updated_at": "2026-09-18T00:33:57Z",
|
|
"pushed_at": "2026-02-17T13:01:02Z",
|
|
"stargazers_count": 4,
|
|
"watchers_count": 4,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 4,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1159229440,
|
|
"name": "CVE-2025-4138-poc",
|
|
"full_name": "kyakei\/CVE-2025-4138-poc",
|
|
"owner": {
|
|
"login": "kyakei",
|
|
"id": 68739641,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68739641?v=4",
|
|
"html_url": "https:\/\/github.com\/kyakei",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/kyakei\/CVE-2025-4138-poc",
|
|
"description": "A Python script to generate a malicious tar archive that exploits CVE-2025-4138 \/ CVE-2025-4517.",
|
|
"fork": false,
|
|
"created_at": "2026-02-16T13:31:00Z",
|
|
"updated_at": "2026-03-06T17:34:50Z",
|
|
"pushed_at": "2026-02-16T13:31:46Z",
|
|
"stargazers_count": 1,
|
|
"watchers_count": 1,
|
|
"has_discussions": false,
|
|
"forks_count": 1,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 1,
|
|
"watchers": 1,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1159386493,
|
|
"name": "CVE-2025-4138",
|
|
"full_name": "localh0ste\/CVE-2025-4138",
|
|
"owner": {
|
|
"login": "localh0ste",
|
|
"id": 144812124,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144812124?v=4",
|
|
"html_url": "https:\/\/github.com\/localh0ste",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/localh0ste\/CVE-2025-4138",
|
|
"description": "Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation ",
|
|
"fork": false,
|
|
"created_at": "2026-02-16T17:05:37Z",
|
|
"updated_at": "2026-02-17T03:06:32Z",
|
|
"pushed_at": "2026-02-17T03:06:29Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1163950879,
|
|
"name": "CVE-2025-4138-POC",
|
|
"full_name": "d3vn0mi\/CVE-2025-4138-POC",
|
|
"owner": {
|
|
"login": "d3vn0mi",
|
|
"id": 26750625,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26750625?v=4",
|
|
"html_url": "https:\/\/github.com\/d3vn0mi",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/d3vn0mi\/CVE-2025-4138-POC",
|
|
"description": "Python PoC for CVE-2025-4138, a path traversal in Python's tarfile module abusing symlink chains to bypass PATH_MAX for arbitrary file write",
|
|
"fork": false,
|
|
"created_at": "2026-02-22T12:10:45Z",
|
|
"updated_at": "2026-07-10T15:36:50Z",
|
|
"pushed_at": "2026-02-22T19:35:39Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |