Files
PoC-in-GitHub/2026/CVE-2026-85097.json

179 lines
6.4 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1412766072,
"name": "CVE-2026-85097",
"full_name": "Wayang1337\/CVE-2026-85097",
"owner": {
"login": "Wayang1337",
"id": 247382810,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247382810?v=4",
"html_url": "https:\/\/github.com\/Wayang1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Wayang1337\/CVE-2026-85097",
"description": " Bricksforge <= 3.1.8.9 Unauthenticated Arbitrary File Upload",
"fork": false,
"created_at": "2026-10-10T04:51:32Z",
"updated_at": "2026-10-12T16:15:52Z",
"pushed_at": "2026-10-10T04:53:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1415842475,
"name": "CVE-2026-85097-Toolkit",
"full_name": "tc4dy\/CVE-2026-85097-Toolkit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-85097-Toolkit",
"description": "CVE-2026-85097 – Bricksforge WordPress Plugin Unauth File Upload to RCE Toolkit (CVSS 10.0) | Red\/Blue Team suite for Bricksforge Pro Forms < 3.1.8.9. 2 tools: Full Exploit (polyglot upload, web shell, mass scan, OPSEC, SQLite\/JSON output) + SafeChecker (version detect, non-intrusive audit). Ethical & educational use only.",
"fork": false,
"created_at": "2026-10-12T16:15:51Z",
"updated_at": "2026-10-22T09:14:21Z",
"pushed_at": "2026-10-16T20:52:37Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-85097",
"exploit",
"proof-of-concept",
"toolkit",
"wordpress",
"wordpress-cve",
"wordpress-plugin",
"wordpress-vuln",
"wordpress-vulnerability",
"wordpress-vulnerability-scanner",
"wordpress-vulnerable"
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1416519195,
"name": "CVE-2026-85097",
"full_name": "Masriyan\/CVE-2026-85097",
"owner": {
"login": "Masriyan",
"id": 15161949,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15161949?v=4",
"html_url": "https:\/\/github.com\/Masriyan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Masriyan\/CVE-2026-85097",
"description": "POC CVE-2026-85097",
"fork": false,
"created_at": "2026-10-13T05:39:40Z",
"updated_at": "2026-10-13T10:58:29Z",
"pushed_at": "2026-10-13T10:58:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1418197125,
"name": "CVE-2026-85097",
"full_name": "RootMantap\/CVE-2026-85097",
"owner": {
"login": "RootMantap",
"id": 193886218,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193886218?v=4",
"html_url": "https:\/\/github.com\/RootMantap",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RootMantap\/CVE-2026-85097",
"description": "For WordPress ",
"fork": false,
"created_at": "2026-10-14T01:08:11Z",
"updated_at": "2026-10-14T01:08:50Z",
"pushed_at": "2026-10-14T01:08:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1420707660,
"name": "CVE-2026-85097",
"full_name": "BlackHatExploitation\/CVE-2026-85097",
"owner": {
"login": "BlackHatExploitation",
"id": 188622654,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188622654?v=4",
"html_url": "https:\/\/github.com\/BlackHatExploitation",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BlackHatExploitation\/CVE-2026-85097",
"description": "CVE-2026-85097 — Bricksforge <= 3.1.8.9 unauth file upload to RCE. GIF\/PHP polyglot + temporaryFileUploads.url mismatch. python3 exploit.py --url http:\/\/TARGET",
"fork": false,
"created_at": "2026-10-15T12:41:13Z",
"updated_at": "2026-10-15T16:05:55Z",
"pushed_at": "2026-10-15T12:42:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]