Files
PoC-in-GitHub/2025/CVE-2025-66034.json

204 lines
7.2 KiB
JSON

[
{
"id": 1182434081,
"name": "varlib-cve-2025-66034",
"full_name": "symphony2colour\/varlib-cve-2025-66034",
"owner": {
"login": "symphony2colour",
"id": 117383949,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117383949?v=4",
"html_url": "https:\/\/github.com\/symphony2colour",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/symphony2colour\/varlib-cve-2025-66034",
"description": "Proof-of-concept exploit for CVE-2025-66034 in the fontTools variable font generation pipeline. A crafted .designspace file allows control of the output path, enabling arbitrary file writes. The script automates payload creation, font generation, and upload to demonstrate the issue.",
"fork": false,
"created_at": "2026-03-15T14:16:58Z",
"updated_at": "2026-08-31T09:00:47Z",
"pushed_at": "2026-08-31T08:56:58Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2025-66034",
"hackthebox",
"htb-scripts"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1183741422,
"name": "Variatype.htb-CVE-2025-66034",
"full_name": "Liquid-Sec\/Variatype.htb-CVE-2025-66034",
"owner": {
"login": "Liquid-Sec",
"id": 72028942,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72028942?v=4",
"html_url": "https:\/\/github.com\/Liquid-Sec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Liquid-Sec\/Variatype.htb-CVE-2025-66034",
"description": null,
"fork": false,
"created_at": "2026-03-16T22:57:22Z",
"updated_at": "2026-03-19T11:05:38Z",
"pushed_at": "2026-03-16T23:06:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1187267960,
"name": "CVE-2025-66034",
"full_name": "tristanqtn\/CVE-2025-66034",
"owner": {
"login": "tristanqtn",
"id": 77152870,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77152870?v=4",
"html_url": "https:\/\/github.com\/tristanqtn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tristanqtn\/CVE-2025-66034",
"description": "CVE-2025-66034 exploit and documentation",
"fork": false,
"created_at": "2026-03-20T14:30:10Z",
"updated_at": "2026-08-11T21:17:15Z",
"pushed_at": "2026-03-29T15:20:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1188118834,
"name": "POC-CVE-2025-66034",
"full_name": "v3cn4x00\/POC-CVE-2025-66034",
"owner": {
"login": "v3cn4x00",
"id": 97059953,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97059953?v=4",
"html_url": "https:\/\/github.com\/v3cn4x00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/v3cn4x00\/POC-CVE-2025-66034",
"description": null,
"fork": false,
"created_at": "2026-03-21T16:36:37Z",
"updated_at": "2026-06-02T05:18:23Z",
"pushed_at": "2026-03-21T16:48:30Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1194338461,
"name": "CVE-2025-66034",
"full_name": "4nuxd\/CVE-2025-66034",
"owner": {
"login": "4nuxd",
"id": 180190091,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180190091?v=4",
"html_url": "https:\/\/github.com\/4nuxd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4nuxd\/CVE-2025-66034",
"description": "CVE-2025-66034 - fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability in fontTools.varLib.",
"fork": false,
"created_at": "2026-03-28T08:04:55Z",
"updated_at": "2026-03-28T08:05:42Z",
"pushed_at": "2026-03-28T08:05:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1203896040,
"name": "CVE-2025-66034-htb-ctf",
"full_name": "jwsly12\/CVE-2025-66034-htb-ctf",
"owner": {
"login": "jwsly12",
"id": 236815742,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/236815742?v=4",
"html_url": "https:\/\/github.com\/jwsly12",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jwsly12\/CVE-2025-66034-htb-ctf",
"description": null,
"fork": false,
"created_at": "2026-04-07T13:43:38Z",
"updated_at": "2026-05-22T02:49:25Z",
"pushed_at": "2026-04-07T13:59:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]