Files
PoC-in-GitHub/2026/CVE-2026-44578.json

266 lines
9.5 KiB
JSON

[
{
"id": 1237366425,
"name": "verify-ghsa-c4j6-fc7j-m34r",
"full_name": "panchocosil\/verify-ghsa-c4j6-fc7j-m34r",
"owner": {
"login": "panchocosil",
"id": 17915493,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17915493?v=4",
"html_url": "https:\/\/github.com\/panchocosil",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/panchocosil\/verify-ghsa-c4j6-fc7j-m34r",
"description": "OOB verifier for GHSA-c4j6-fc7j-m34r \/ CVE-2026-44578 (Next.js WebSocket-upgrade SSRF)",
"fork": false,
"created_at": "2026-05-13T05:49:11Z",
"updated_at": "2026-05-13T17:48:26Z",
"pushed_at": "2026-05-13T17:48:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1239436048,
"name": "nextssrf",
"full_name": "ynsmroztas\/nextssrf",
"owner": {
"login": "ynsmroztas",
"id": 58443521,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58443521?v=4",
"html_url": "https:\/\/github.com\/ynsmroztas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ynsmroztas\/nextssrf",
"description": "NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF",
"fork": false,
"created_at": "2026-05-15T05:02:38Z",
"updated_at": "2026-09-16T08:52:44Z",
"pushed_at": "2026-05-15T05:09:54Z",
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 77,
"score": 0,
"subscribers_count": 0
},
{
"id": 1239609079,
"name": "CVE-2026-44578-PoC",
"full_name": "tocong282\/CVE-2026-44578-PoC",
"owner": {
"login": "tocong282",
"id": 133035037,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133035037?v=4",
"html_url": "https:\/\/github.com\/tocong282",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tocong282\/CVE-2026-44578-PoC",
"description": null,
"fork": false,
"created_at": "2026-05-15T09:02:22Z",
"updated_at": "2026-05-15T09:02:32Z",
"pushed_at": "2026-05-15T09:02:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240011136,
"name": "nextjs-cve-2026-44578",
"full_name": "love07oj\/nextjs-cve-2026-44578",
"owner": {
"login": "love07oj",
"id": 69665590,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69665590?v=4",
"html_url": "https:\/\/github.com\/love07oj",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/love07oj\/nextjs-cve-2026-44578",
"description": "Nuclei templates for detecting CVE-2026-44578 (Next.js WebSocket Upgrade SSRF) with multi-cloud metadata validation, Next.js fingerprinting, and real-world scanning workflows. Includes references to the original NextSSRF research and exploit tooling.",
"fork": false,
"created_at": "2026-05-15T17:14:35Z",
"updated_at": "2026-09-03T06:34:45Z",
"pushed_at": "2026-05-15T17:36:21Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240589500,
"name": "CVE-2026-44578",
"full_name": "dinosn\/CVE-2026-44578",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/CVE-2026-44578",
"description": "CVE-2026-44578: Next.js WebSocket Upgrade SSRF — pre-auth credential theft via localhost:80. Lab + exploit + audit.",
"fork": false,
"created_at": "2026-05-16T10:15:20Z",
"updated_at": "2026-07-28T15:30:48Z",
"pushed_at": "2026-05-16T10:23:10Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240764446,
"name": "CVE-2026-44578",
"full_name": "0xBlackash\/CVE-2026-44578",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-44578",
"description": "CVE-2026-44578",
"fork": false,
"created_at": "2026-05-16T14:41:12Z",
"updated_at": "2026-10-20T18:20:04Z",
"pushed_at": "2026-05-17T10:46:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1338509897,
"name": "CVE-2026-44578",
"full_name": "lxxexxbxx\/CVE-2026-44578",
"owner": {
"login": "lxxexxbxx",
"id": 171360358,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171360358?v=4",
"html_url": "https:\/\/github.com\/lxxexxbxx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lxxexxbxx\/CVE-2026-44578",
"description": "CVE-2026-44578 PoC",
"fork": false,
"created_at": "2026-08-18T14:37:24Z",
"updated_at": "2026-08-20T15:01:35Z",
"pushed_at": "2026-08-20T11:03:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1359295642,
"name": "CVE-2026-44578-next-js-ssrf",
"full_name": "isaca0315\/CVE-2026-44578-next-js-ssrf",
"owner": {
"login": "isaca0315",
"id": 31411458,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31411458?v=4",
"html_url": "https:\/\/github.com\/isaca0315",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/isaca0315\/CVE-2026-44578-next-js-ssrf",
"description": "este laboratorio puede estar bien o mal esta el pruebas pero debe funcionar preguntale a la IA hahah",
"fork": false,
"created_at": "2026-09-06T15:54:41Z",
"updated_at": "2026-09-07T14:41:58Z",
"pushed_at": "2026-09-06T17:16:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]