nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
PoC-in-GitHub/2026/CVE-2026-3891.json
T

337 lines
12 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1181170442,
"name": "CVE-2026-3891",
"full_name": "joshuavanderpoll\/CVE-2026-3891",
"owner": {
"login": "joshuavanderpoll",
"id": 16516497,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16516497?v=4",
"html_url": "https:\/\/github.com\/joshuavanderpoll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joshuavanderpoll\/CVE-2026-3891",
"description": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload (CVE-2026-3891) PoC",
"fork": false,
"created_at": "2026-03-13T20:33:42Z",
"updated_at": "2026-10-26T21:13:47Z",
"pushed_at": "2026-03-13T21:20:37Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-3891",
"exploit",
"exploits",
"pentest-tool",
"pentesting",
"python",
"rce",
"security",
"security-tools",
"vulnerabilities",
"vulnerability",
"wordpress",
"wordpress-exploit"
],
"visibility": "public",
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1193349059,
"name": "CVE-2026-3891",
"full_name": "Nxploited\/CVE-2026-3891",
"owner": {
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-3891",
"description": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload",
"fork": false,
"created_at": "2026-03-27T06:00:10Z",
"updated_at": "2026-07-13T12:11:39Z",
"pushed_at": "2026-03-27T06:09:36Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1212199227,
"name": "Mass-Scanner-CVE-2026-3891",
"full_name": "AnggaTechI\/Mass-Scanner-CVE-2026-3891",
"owner": {
"login": "AnggaTechI",
"id": 276389265,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276389265?v=4",
"html_url": "https:\/\/github.com\/AnggaTechI",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AnggaTechI\/Mass-Scanner-CVE-2026-3891",
"description": "CVE-2026-3891 Mass Scanning",
"fork": false,
"created_at": "2026-04-16T06:43:25Z",
"updated_at": "2026-04-17T21:14:50Z",
"pushed_at": "2026-04-16T06:46:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255017856,
"name": "CVE-2026-3891-Linux",
"full_name": "willygailo\/CVE-2026-3891-Linux",
"owner": {
"login": "willygailo",
"id": 187465154,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187465154?v=4",
"html_url": "https:\/\/github.com\/willygailo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/willygailo\/CVE-2026-3891-Linux",
"description": "⚡ This tool exploits CVE-2026-3891, a critical unauthenticated arbitrary file upload vulnerability found in the Pix for WooCommerce WordPress plugin (versions ≤ 1.5.0).",
"fork": false,
"created_at": "2026-05-31T09:45:25Z",
"updated_at": "2026-10-30T16:06:05Z",
"pushed_at": "2026-05-31T09:45:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301958363,
"name": "CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"full_name": "m4sh-wacker\/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"owner": {
"login": "m4sh-wacker",
"id": 107651927,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107651927?v=4",
"html_url": "https:\/\/github.com\/m4sh-wacker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/m4sh-wacker\/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit",
"description": "PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0",
"fork": false,
"created_at": "2026-07-15T19:06:14Z",
"updated_at": "2026-08-22T13:40:57Z",
"pushed_at": "2026-07-20T12:26:34Z",
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301970441,
"name": "CVE-2026-3891",
"full_name": "shinthink\/CVE-2026-3891",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-3891",
"description": "Pix for WooCommerce Unauthenticated File Upload via certificate_crt_path Parameter | CVSS 9.8",
"fork": false,
"created_at": "2026-07-15T19:24:19Z",
"updated_at": "2026-07-19T08:44:21Z",
"pushed_at": "2026-07-21T05:24:15Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"0day",
"cve",
"exploit",
"file-upload",
"pentest",
"security",
"vulnerability",
"woocommerce",
"wordpress"
],
"visibility": "public",
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305760781,
"name": "CVE-2026-3891",
"full_name": "VeronnX666\/CVE-2026-3891",
"owner": {
"login": "VeronnX666",
"id": 117339770,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117339770?v=4",
"html_url": "https:\/\/github.com\/VeronnX666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/VeronnX666\/CVE-2026-3891",
"description": "This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out.",
"fork": false,
"created_at": "2026-07-19T14:10:36Z",
"updated_at": "2026-07-19T14:11:44Z",
"pushed_at": "2026-07-19T14:11:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321973962,
"name": "CVE-2026-3891",
"full_name": "Ch4120N\/CVE-2026-3891",
"owner": {
"login": "Ch4120N",
"id": 159701862,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159701862?v=4",
"html_url": "https:\/\/github.com\/Ch4120N",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ch4120N\/CVE-2026-3891",
"description": "PoC for CVE-2026-3891 – Unauthenticated File Upload RCE in Pix for WooCommerce ≤ 1.5.0. Automated nonce retrieval, PHP upload, and command execution.",
"fork": false,
"created_at": "2026-08-03T16:01:31Z",
"updated_at": "2026-08-08T07:31:56Z",
"pushed_at": "2026-08-03T16:07:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-3891",
"ethical-hacking",
"penetration-testing",
"php-webshell",
"pix-woocommerce",
"poc",
"proof-of-concept",
"rce",
"security",
"woocommerce",
"wordpress",
"wordpress-exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1358079861,
"name": "CVE-2026-3891",
"full_name": "katranSefa\/CVE-2026-3891",
"owner": {
"login": "katranSefa",
"id": 179320986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179320986?v=4",
"html_url": "https:\/\/github.com\/katranSefa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/katranSefa\/CVE-2026-3891",
"description": null,
"fork": false,
"created_at": "2026-09-05T10:33:55Z",
"updated_at": "2026-09-05T10:34:12Z",
"pushed_at": "2026-09-05T10:34:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink