mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
101 lines
4.1 KiB
JSON
101 lines
4.1 KiB
JSON
[
|
|
{
|
|
"id": 1386009717,
|
|
"name": "CVE-2026-12227",
|
|
"full_name": "murrez\/CVE-2026-12227",
|
|
"owner": {
|
|
"login": "murrez",
|
|
"id": 50166320,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
|
|
"html_url": "https:\/\/github.com\/murrez",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-12227",
|
|
"description": "CVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder ≤45.16.0 — unauthenticated local file inclusion via vcv-template. Educational PoC only.",
|
|
"fork": false,
|
|
"created_at": "2026-09-24T17:11:35Z",
|
|
"updated_at": "2026-09-24T17:12:08Z",
|
|
"pushed_at": "2026-09-24T17:12:02Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1386074053,
|
|
"name": "CVE-2026-12227-visualcomposer-lfi-poc",
|
|
"full_name": "Hassham1\/CVE-2026-12227-visualcomposer-lfi-poc",
|
|
"owner": {
|
|
"login": "Hassham1",
|
|
"id": 31179291,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31179291?v=4",
|
|
"html_url": "https:\/\/github.com\/Hassham1",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/Hassham1\/CVE-2026-12227-visualcomposer-lfi-poc",
|
|
"description": "CVE-2026-12227 - Visual Composer <= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP <= 7.1.1; masked by WP 7.1.2 core gate.",
|
|
"fork": false,
|
|
"created_at": "2026-09-24T17:44:25Z",
|
|
"updated_at": "2026-10-20T16:49:46Z",
|
|
"pushed_at": "2026-09-24T17:48:23Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1390523448,
|
|
"name": "CVE-2026-12227",
|
|
"full_name": "be-keb\/CVE-2026-12227",
|
|
"owner": {
|
|
"login": "be-keb",
|
|
"id": 333881164,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/333881164?v=4",
|
|
"html_url": "https:\/\/github.com\/be-keb",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/be-keb\/CVE-2026-12227",
|
|
"description": "CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).",
|
|
"fork": false,
|
|
"created_at": "2026-09-27T09:03:34Z",
|
|
"updated_at": "2026-09-29T09:27:45Z",
|
|
"pushed_at": "2026-09-27T09:10:09Z",
|
|
"stargazers_count": 1,
|
|
"watchers_count": 1,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 1,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |