Files
PoC-in-GitHub/2026/CVE-2026-34990.json
T

408 lines
15 KiB
JSON

[
{
"id": 1324746434,
"name": "CVE-2026-34990",
"full_name": "HORKimhab\/CVE-2026-34990",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-34990",
"description": "CVE-2026-34990 - Draft or Todo",
"fork": false,
"created_at": "2026-08-06T04:46:51Z",
"updated_at": "2026-08-06T04:47:39Z",
"pushed_at": "2026-08-06T04:46:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1345274851,
"name": "CVE-2026-34990-cups-lpe",
"full_name": "TRX-0\/CVE-2026-34990-cups-lpe",
"owner": {
"login": "TRX-0",
"id": 18309375,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18309375?v=4",
"html_url": "https:\/\/github.com\/TRX-0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TRX-0\/CVE-2026-34990-cups-lpe",
"description": null,
"fork": false,
"created_at": "2026-08-24T18:21:15Z",
"updated_at": "2026-10-03T08:28:05Z",
"pushed_at": "2026-09-21T18:58:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1390599827,
"name": "CVE-2026-34990-poc",
"full_name": "0xc4rc3l\/CVE-2026-34990-poc",
"owner": {
"login": "0xc4rc3l",
"id": 196307487,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196307487?v=4",
"html_url": "https:\/\/github.com\/0xc4rc3l",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xc4rc3l\/CVE-2026-34990-poc",
"description": null,
"fork": false,
"created_at": "2026-09-27T09:58:34Z",
"updated_at": "2026-10-20T23:56:00Z",
"pushed_at": "2026-09-27T09:59:45Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1390629983,
"name": "CVE-2026-34990",
"full_name": "gbuyssens\/CVE-2026-34990",
"owner": {
"login": "gbuyssens",
"id": 306151405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306151405?v=4",
"html_url": "https:\/\/github.com\/gbuyssens",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gbuyssens\/CVE-2026-34990",
"description": "Local privilege escalation against a root `cupsd`.",
"fork": false,
"created_at": "2026-09-27T10:27:04Z",
"updated_at": "2026-09-27T10:30:27Z",
"pushed_at": "2026-09-27T10:30:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391270591,
"name": "CVE-2026-34990-poc",
"full_name": "DENNISDGR\/CVE-2026-34990-poc",
"owner": {
"login": "DENNISDGR",
"id": 88437053,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88437053?v=4",
"html_url": "https:\/\/github.com\/DENNISDGR",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DENNISDGR\/CVE-2026-34990-poc",
"description": "LPE PoC for CVE-2026-34990 using a CUPS root file write vulnerability.",
"fork": false,
"created_at": "2026-09-27T18:24:03Z",
"updated_at": "2026-10-11T18:22:42Z",
"pushed_at": "2026-09-27T18:59:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391341133,
"name": "CVE-2026-34990",
"full_name": "predyy\/CVE-2026-34990",
"owner": {
"login": "predyy",
"id": 69515690,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69515690?v=4",
"html_url": "https:\/\/github.com\/predyy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/predyy\/CVE-2026-34990",
"description": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.",
"fork": false,
"created_at": "2026-09-27T19:41:06Z",
"updated_at": "2026-11-06T18:27:13Z",
"pushed_at": "2026-09-27T19:49:16Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391428206,
"name": "CVE-2026-34990-poc",
"full_name": "khush-613\/CVE-2026-34990-poc",
"owner": {
"login": "khush-613",
"id": 85167129,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85167129?v=4",
"html_url": "https:\/\/github.com\/khush-613",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/khush-613\/CVE-2026-34990-poc",
"description": null,
"fork": false,
"created_at": "2026-09-27T21:38:26Z",
"updated_at": "2026-09-29T06:17:20Z",
"pushed_at": "2026-09-27T21:39:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391631766,
"name": "CVE-2026-34990-poc",
"full_name": "bara-almustafa\/CVE-2026-34990-poc",
"owner": {
"login": "bara-almustafa",
"id": 150091230,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150091230?v=4",
"html_url": "https:\/\/github.com\/bara-almustafa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bara-almustafa\/CVE-2026-34990-poc",
"description": "CVE-2026-34990 — CUPS <= 2.4.16 Local Privilege Escalation",
"fork": false,
"created_at": "2026-09-28T02:40:44Z",
"updated_at": "2026-09-28T02:45:50Z",
"pushed_at": "2026-09-28T02:45:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391693730,
"name": "CVE-2026-34990-CUPS-LPE-PoC",
"full_name": "Noorkhalel\/CVE-2026-34990-CUPS-LPE-PoC",
"owner": {
"login": "Noorkhalel",
"id": 108550197,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108550197?v=4",
"html_url": "https:\/\/github.com\/Noorkhalel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Noorkhalel\/CVE-2026-34990-CUPS-LPE-PoC",
"description": "Generic PoC for CVE-2026-34990 - CUPS 2.4.16 Local Privilege Escalation via Local token disclosure and arbitrary root file overwrite.",
"fork": false,
"created_at": "2026-09-28T03:21:43Z",
"updated_at": "2026-10-12T13:26:52Z",
"pushed_at": "2026-09-28T03:39:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cups",
"cve-2026-34990",
"cybersecurity",
"exploit",
"linux",
"poc",
"privilege-escalation",
"privilege-escalation-linux",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1392646018,
"name": "CVE-2026-34990-POC",
"full_name": "OffensiveBias20\/CVE-2026-34990-POC",
"owner": {
"login": "OffensiveBias20",
"id": 100131963,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100131963?v=4",
"html_url": "https:\/\/github.com\/OffensiveBias20",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OffensiveBias20\/CVE-2026-34990-POC",
"description": "Proof-of-concept research for CVE-2026-34990, a local privilege-escalation vulnerability affecting CUPS. This repository documents the vulnerability mechanics, CUPS\/IPP request flow, authentication-token disclosure, the localhost callback technique, and the subsequent privilege-escalation primitive.",
"fork": false,
"created_at": "2026-09-28T12:24:38Z",
"updated_at": "2026-10-14T09:50:30Z",
"pushed_at": "2026-09-28T15:06:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1393685359,
"name": "CVE-2026-34990",
"full_name": "ungabunga-ctf\/CVE-2026-34990",
"owner": {
"login": "ungabunga-ctf",
"id": 241449088,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/241449088?v=4",
"html_url": "https:\/\/github.com\/ungabunga-ctf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ungabunga-ctf\/CVE-2026-34990",
"description": "CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token.",
"fork": false,
"created_at": "2026-09-28T19:12:35Z",
"updated_at": "2026-09-29T22:39:10Z",
"pushed_at": "2026-09-28T19:26:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1395807243,
"name": "cups-2.4.16-lpe",
"full_name": "mrdebora\/cups-2.4.16-lpe",
"owner": {
"login": "mrdebora",
"id": 171737305,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171737305?v=4",
"html_url": "https:\/\/github.com\/mrdebora",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrdebora\/cups-2.4.16-lpe",
"description": "CUPS 2.4.16 Local Privilege Escalation via Local Admin Token Leak and file:\/\/ Arbitrary File Write (CVE-2026-34990)",
"fork": false,
"created_at": "2026-09-29T15:42:08Z",
"updated_at": "2026-09-29T16:19:23Z",
"pushed_at": "2026-09-29T16:15:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]