nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
PoC-in-GitHub/2026/CVE-2026-8181.json
T

425 lines
15 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1238745373,
"name": "CVE-2026-8181",
"full_name": "zycoder0day\/CVE-2026-8181",
"owner": {
"login": "zycoder0day",
"id": 31403046,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31403046?v=4",
"html_url": "https:\/\/github.com\/zycoder0day",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zycoder0day\/CVE-2026-8181",
"description": "CVE-2026-8181 - Burst Statistics 3.4.0-3.4.1.1 Unauthenticated Authentication Bypass to Admin Account Takeover | Proof of Concept",
"fork": false,
"created_at": "2026-05-14T12:13:08Z",
"updated_at": "2026-09-30T12:45:14Z",
"pushed_at": "2026-05-15T08:30:12Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1239636038,
"name": "CVE-2026-8181",
"full_name": "murrez\/CVE-2026-8181",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-8181",
"description": "CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized testing only. Maintainer: mürrez.",
"fork": false,
"created_at": "2026-05-15T09:35:52Z",
"updated_at": "2026-09-11T18:24:04Z",
"pushed_at": "2026-05-15T09:40:21Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240335375,
"name": "CVE-2026-8181",
"full_name": "Jenderal92\/CVE-2026-8181",
"owner": {
"login": "Jenderal92",
"id": 59664965,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59664965?v=4",
"html_url": "https:\/\/github.com\/Jenderal92",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Jenderal92\/CVE-2026-8181",
"description": "CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.",
"fork": false,
"created_at": "2026-05-16T02:50:28Z",
"updated_at": "2026-05-30T19:38:04Z",
"pushed_at": "2026-05-30T19:38:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"authentication-bypass",
"burst-statistics",
"cve",
"cve-2026-8181",
"exploit",
"pentesting",
"python2",
"rest-api",
"security",
"vulnerability",
"wordpress",
"wordpress-plugin",
"wordpress-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1240621024,
"name": "CVE-2026-8181",
"full_name": "whattheslime\/CVE-2026-8181",
"owner": {
"login": "whattheslime",
"id": 17197583,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17197583?v=4",
"html_url": "https:\/\/github.com\/whattheslime",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/whattheslime\/CVE-2026-8181",
"description": "Exploit for the CVE-2026-8181 - Burst Statistics WordPress Plugin Authentication Bypass",
"fork": false,
"created_at": "2026-05-16T11:06:03Z",
"updated_at": "2026-09-14T17:53:34Z",
"pushed_at": "2026-05-16T11:07:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"auth-by",
"burst-statistics",
"cve",
"cve-2026-8181",
"exploit",
"plugin-wordpress",
"poc"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241377161,
"name": "CVE-2026-8181-Lab",
"full_name": "rootdirective-sec\/CVE-2026-8181-Lab",
"owner": {
"login": "rootdirective-sec",
"id": 253299769,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/253299769?v=4",
"html_url": "https:\/\/github.com\/rootdirective-sec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rootdirective-sec\/CVE-2026-8181-Lab",
"description": null,
"fork": false,
"created_at": "2026-05-17T10:06:35Z",
"updated_at": "2026-05-17T10:06:48Z",
"pushed_at": "2026-05-17T10:06:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241834592,
"name": "CVE-2026-8181",
"full_name": "xShadow-Here\/CVE-2026-8181",
"owner": {
"login": "xShadow-Here",
"id": 237525406,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/237525406?v=4",
"html_url": "https:\/\/github.com\/xShadow-Here",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xShadow-Here\/CVE-2026-8181",
"description": "CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover ",
"fork": false,
"created_at": "2026-05-17T21:47:54Z",
"updated_at": "2026-08-13T21:57:55Z",
"pushed_at": "2026-05-17T21:51:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1246848741,
"name": "CVE-2026-8181",
"full_name": "x48ps\/CVE-2026-8181",
"owner": {
"login": "x48ps",
"id": 287014483,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287014483?v=4",
"html_url": "https:\/\/github.com\/x48ps",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/x48ps\/CVE-2026-8181",
"description": "This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by using any incorrect password in a Basic Authentication header. Attackers could abuse this flaw to create a new administrator account without prior authentication.",
"fork": false,
"created_at": "2026-05-22T16:12:48Z",
"updated_at": "2026-05-22T16:35:49Z",
"pushed_at": "2026-05-22T16:35:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1246888808,
"name": "CVE-2026-8181",
"full_name": "Yucaerin\/CVE-2026-8181",
"owner": {
"login": "Yucaerin",
"id": 105861519,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105861519?v=4",
"html_url": "https:\/\/github.com\/Yucaerin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Yucaerin\/CVE-2026-8181",
"description": "The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass",
"fork": false,
"created_at": "2026-05-22T17:05:11Z",
"updated_at": "2026-05-22T17:17:23Z",
"pushed_at": "2026-05-22T17:08:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1257182452,
"name": "CVE-2026-8181",
"full_name": "Ez4rd1x1\/CVE-2026-8181",
"owner": {
"login": "Ez4rd1x1",
"id": 233739915,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233739915?v=4",
"html_url": "https:\/\/github.com\/Ez4rd1x1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ez4rd1x1\/CVE-2026-8181",
"description": null,
"fork": false,
"created_at": "2026-06-02T12:46:24Z",
"updated_at": "2026-06-02T13:45:00Z",
"pushed_at": "2026-06-02T13:43:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1279905639,
"name": "CVE-2026-8181-PoC",
"full_name": "Squamity\/CVE-2026-8181-PoC",
"owner": {
"login": "Squamity",
"id": 106597701,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106597701?v=4",
"html_url": "https:\/\/github.com\/Squamity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Squamity\/CVE-2026-8181-PoC",
"description": null,
"fork": false,
"created_at": "2026-06-25T05:34:51Z",
"updated_at": "2026-07-21T05:59:54Z",
"pushed_at": "2026-07-21T05:59:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1300608007,
"name": "CVE-2026-8181",
"full_name": "HudzaifahArrantisi\/CVE-2026-8181",
"owner": {
"login": "HudzaifahArrantisi",
"id": 183168964,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183168964?v=4",
"html_url": "https:\/\/github.com\/HudzaifahArrantisi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HudzaifahArrantisi\/CVE-2026-8181",
"description": "CVE-2026-8181 — Burst Statistics WordPress plugin Authentication Bypass (CVSS 9.8) to Admin Account Takeover. Mass scanner with FOFA\/Shodan integration and modern GUI.",
"fork": false,
"created_at": "2026-07-14T14:40:53Z",
"updated_at": "2026-08-14T20:01:50Z",
"pushed_at": "2026-07-14T19:52:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-8181",
"cve-scanning",
"python",
"wordpress-plugin"
],
"visibility": "public",
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1340298855,
"name": "CVE-2026-8181",
"full_name": "0xTerror\/CVE-2026-8181",
"owner": {
"login": "0xTerror",
"id": 212302361,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212302361?v=4",
"html_url": "https:\/\/github.com\/0xTerror",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xTerror\/CVE-2026-8181",
"description": null,
"fork": false,
"created_at": "2026-08-20T04:59:08Z",
"updated_at": "2026-10-28T18:07:29Z",
"pushed_at": "2026-08-20T05:12:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink