mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
170 lines
5.8 KiB
JSON
170 lines
5.8 KiB
JSON
[
|
|
{
|
|
"id": 1381205954,
|
|
"name": "CVE-2026-93485",
|
|
"full_name": "HORKimhab\/CVE-2026-93485",
|
|
"owner": {
|
|
"login": "HORKimhab",
|
|
"id": 41143106,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
|
|
"html_url": "https:\/\/github.com\/HORKimhab",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-93485",
|
|
"description": "CVE-2026-93485 - Draft or TODO",
|
|
"fork": false,
|
|
"created_at": "2026-09-22T09:34:07Z",
|
|
"updated_at": "2026-09-22T09:34:18Z",
|
|
"pushed_at": "2026-09-22T09:34:13Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1381631291,
|
|
"name": "CVE-2026-93485",
|
|
"full_name": "0xBlackash\/CVE-2026-93485",
|
|
"owner": {
|
|
"login": "0xBlackash",
|
|
"id": 259905299,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
|
|
"html_url": "https:\/\/github.com\/0xBlackash",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-93485",
|
|
"description": "CVE-2026-93485",
|
|
"fork": false,
|
|
"created_at": "2026-09-22T13:47:36Z",
|
|
"updated_at": "2026-09-22T15:41:40Z",
|
|
"pushed_at": "2026-09-22T15:41:36Z",
|
|
"stargazers_count": 0,
|
|
"watchers_count": 0,
|
|
"has_discussions": false,
|
|
"forks_count": 0,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [],
|
|
"visibility": "public",
|
|
"forks": 0,
|
|
"watchers": 0,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1386511925,
|
|
"name": "Comment2Shell",
|
|
"full_name": "DeathShotXD\/Comment2Shell",
|
|
"owner": {
|
|
"login": "DeathShotXD",
|
|
"id": 87466051,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87466051?v=4",
|
|
"html_url": "https:\/\/github.com\/DeathShotXD",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/DeathShotXD\/Comment2Shell",
|
|
"description": "Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker ",
|
|
"fork": false,
|
|
"created_at": "2026-09-25T00:13:54Z",
|
|
"updated_at": "2026-11-03T01:30:08Z",
|
|
"pushed_at": "2026-10-06T03:27:58Z",
|
|
"stargazers_count": 65,
|
|
"watchers_count": 65,
|
|
"has_discussions": false,
|
|
"forks_count": 16,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [
|
|
"bug-bounty",
|
|
"cve-2026-93485",
|
|
"exploit",
|
|
"infosec",
|
|
"nuclei",
|
|
"nuclei-templates",
|
|
"poc",
|
|
"pre-auth",
|
|
"rce",
|
|
"security-research",
|
|
"web-application-security",
|
|
"web-exploitation",
|
|
"webappsec",
|
|
"webshell",
|
|
"wordpress",
|
|
"xss",
|
|
"zero-click",
|
|
"zeroday"
|
|
],
|
|
"visibility": "public",
|
|
"forks": 16,
|
|
"watchers": 65,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
},
|
|
{
|
|
"id": 1389184252,
|
|
"name": "POC-WP-CORE-CVE-2026-93485",
|
|
"full_name": "686f6c61\/POC-WP-CORE-CVE-2026-93485",
|
|
"owner": {
|
|
"login": "686f6c61",
|
|
"id": 6115107,
|
|
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6115107?v=4",
|
|
"html_url": "https:\/\/github.com\/686f6c61",
|
|
"user_view_type": "public"
|
|
},
|
|
"html_url": "https:\/\/github.com\/686f6c61\/POC-WP-CORE-CVE-2026-93485",
|
|
"description": "Laboratorio pedagógico de CVE-2026-93485 (Comment2Shell): stored XSS no autenticado en WordPress core vía wpautop -> RCE, con demo del root cause auto-verificada, control 7.1.1 y la vía Post2Shell",
|
|
"fork": false,
|
|
"created_at": "2026-09-26T12:34:44Z",
|
|
"updated_at": "2026-10-16T20:41:40Z",
|
|
"pushed_at": "2026-09-26T12:55:42Z",
|
|
"stargazers_count": 2,
|
|
"watchers_count": 2,
|
|
"has_discussions": false,
|
|
"forks_count": 1,
|
|
"allow_forking": true,
|
|
"is_template": false,
|
|
"web_commit_signoff_required": false,
|
|
"has_pull_requests": true,
|
|
"pull_request_creation_policy": "all",
|
|
"topics": [
|
|
"cve",
|
|
"cve-2026-93485",
|
|
"cve-analysis",
|
|
"docker",
|
|
"docker-compose",
|
|
"education",
|
|
"exploit",
|
|
"proof-of-concept",
|
|
"rce",
|
|
"security",
|
|
"security-lab",
|
|
"security-research",
|
|
"wordpress",
|
|
"wordpress-security",
|
|
"writeup",
|
|
"xss"
|
|
],
|
|
"visibility": "public",
|
|
"forks": 1,
|
|
"watchers": 2,
|
|
"score": 0,
|
|
"subscribers_count": 0
|
|
}
|
|
] |