nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
e7741b0ca952b36769abaa50fccaba10091feb21
PoC-in-GitHub/2024/CVE-2024-2961.json
T

573 lines
20 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 791152279,
"name": "FIX-CVE-2024-2961",
"full_name": "mattaperkins\/FIX-CVE-2024-2961",
"owner": {
"login": "mattaperkins",
"id": 37165019,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37165019?v=4",
"html_url": "https:\/\/github.com\/mattaperkins",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mattaperkins\/FIX-CVE-2024-2961",
"description": "Quick mitigation script ",
"fork": false,
"created_at": "2024-04-24T07:32:08Z",
"updated_at": "2024-06-06T00:03:18Z",
"pushed_at": "2024-04-24T07:43:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 803147840,
"name": "CVE-2024-2961",
"full_name": "rvzsec\/CVE-2024-2961",
"owner": {
"login": "rvzsec",
"id": 84989569,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84989569?v=4",
"html_url": "https:\/\/github.com\/rvzsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rvzsec\/CVE-2024-2961",
"description": "CVE-2024–2961 Security Issue Mitigation Script",
"fork": false,
"created_at": "2024-05-20T06:53:23Z",
"updated_at": "2024-07-10T16:47:26Z",
"pushed_at": "2024-05-20T07:12:24Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
{
"id": 806456046,
"name": "cnext-exploits",
"full_name": "ambionics\/cnext-exploits",
"owner": {
"login": "ambionics",
"id": 29630660,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29630660?v=4",
"html_url": "https:\/\/github.com\/ambionics",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ambionics\/cnext-exploits",
"description": "Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()",
"fork": false,
"created_at": "2024-05-27T08:30:06Z",
"updated_at": "2026-10-30T03:57:04Z",
"pushed_at": "2024-09-30T08:45:56Z",
"stargazers_count": 504,
"watchers_count": 504,
"has_discussions": false,
"forks_count": 61,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 61,
"watchers": 504,
"score": 0,
"subscribers_count": 9
},
{
"id": 808153966,
"name": "iconvfix",
"full_name": "absolutedesignltd\/iconvfix",
"owner": {
"login": "absolutedesignltd",
"id": 11164000,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11164000?v=4",
"html_url": "https:\/\/github.com\/absolutedesignltd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/absolutedesignltd\/iconvfix",
"description": "Bash script to patch for CVE-2024-2961",
"fork": false,
"created_at": "2024-05-30T13:45:43Z",
"updated_at": "2024-05-30T13:57:37Z",
"pushed_at": "2024-05-30T13:57:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 3
},
{
"id": 810040956,
"name": "test_iconv",
"full_name": "exfil0\/test_iconv",
"owner": {
"login": "exfil0",
"id": 84948741,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84948741?v=4",
"html_url": "https:\/\/github.com\/exfil0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/exfil0\/test_iconv",
"description": "This repository contains a C program to test for CVE-2024-2961, a buffer overflow vulnerability in the iconv() function of glibc.",
"fork": false,
"created_at": "2024-06-03T23:53:43Z",
"updated_at": "2024-06-04T00:22:16Z",
"pushed_at": "2024-06-04T00:22:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer",
"cve",
"cve-202402961",
"glibc",
"iconv",
"overflow",
"pentest",
"test",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 810186958,
"name": "cve-2024-2961",
"full_name": "tnishiox\/cve-2024-2961",
"owner": {
"login": "tnishiox",
"id": 163162093,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163162093?v=4",
"html_url": "https:\/\/github.com\/tnishiox",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tnishiox\/cve-2024-2961",
"description": null,
"fork": false,
"created_at": "2024-06-04T08:05:09Z",
"updated_at": "2024-06-04T09:01:19Z",
"pushed_at": "2024-06-04T09:01:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 810234472,
"name": "CVE-2024-2961_poc",
"full_name": "kjdfklha\/CVE-2024-2961_poc",
"owner": {
"login": "kjdfklha",
"id": 106435455,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106435455?v=4",
"html_url": "https:\/\/github.com\/kjdfklha",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kjdfklha\/CVE-2024-2961_poc",
"description": null,
"fork": false,
"created_at": "2024-06-04T09:57:46Z",
"updated_at": "2025-02-09T20:09:34Z",
"pushed_at": "2024-06-04T10:02:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 922771086,
"name": "CVE-2024-2961-Remote-File-Read",
"full_name": "kyotozx\/CVE-2024-2961-Remote-File-Read",
"owner": {
"login": "kyotozx",
"id": 134347770,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134347770?v=4",
"html_url": "https:\/\/github.com\/kyotozx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kyotozx\/CVE-2024-2961-Remote-File-Read",
"description": "This script demonstrates a proof-of-concept (PoC) for exploiting a file read vulnerability in the iconv library, as detailed in Ambionics Security's blog https:\/\/www.ambionics.io\/blog\/iconv-cve-2024-2961-p1.",
"fork": false,
"created_at": "2025-01-27T03:06:37Z",
"updated_at": "2025-06-05T17:08:17Z",
"pushed_at": "2025-05-07T17:59:49Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
{
"id": 924126046,
"name": "CVE-2024-2961",
"full_name": "4wayhandshake\/CVE-2024-2961",
"owner": {
"login": "4wayhandshake",
"id": 122475838,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122475838?v=4",
"html_url": "https:\/\/github.com\/4wayhandshake",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4wayhandshake\/CVE-2024-2961",
"description": "Uses CVE-2024-2961 to perform an arbitrary file read",
"fork": false,
"created_at": "2025-01-29T13:15:11Z",
"updated_at": "2025-02-01T10:48:49Z",
"pushed_at": "2025-02-01T10:48:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 925889678,
"name": "exploit_cve-2023-26326_using_cve-2024-2961",
"full_name": "omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961",
"owner": {
"login": "omarelshopky",
"id": 69885253,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69885253?v=4",
"html_url": "https:\/\/github.com\/omarelshopky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961",
"description": "Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization limitations by chaining vulnerabilities with php:\/\/filter.",
"fork": false,
"created_at": "2025-02-02T01:35:43Z",
"updated_at": "2025-04-05T18:21:01Z",
"pushed_at": "2025-02-02T11:26:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 927144920,
"name": "CVE-2024-2961",
"full_name": "suce0155\/CVE-2024-2961",
"owner": {
"login": "suce0155",
"id": 149517309,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149517309?v=4",
"html_url": "https:\/\/github.com\/suce0155",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/suce0155\/CVE-2024-2961",
"description": "CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7",
"fork": false,
"created_at": "2025-02-04T13:34:33Z",
"updated_at": "2026-05-05T15:48:37Z",
"pushed_at": "2025-02-04T18:51:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
{
"id": 1171577658,
"name": "osTicketFileReadIntoRCE",
"full_name": "Clarissss\/osTicketFileReadIntoRCE",
"owner": {
"login": "Clarissss",
"id": 168723447,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168723447?v=4",
"html_url": "https:\/\/github.com\/Clarissss",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Clarissss\/osTicketFileReadIntoRCE",
"description": "Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 (CNEXT) for unauthenticated Remote Code Execution on vulnerable osTicket installations.",
"fork": false,
"created_at": "2026-03-03T11:37:56Z",
"updated_at": "2026-03-03T11:47:41Z",
"pushed_at": "2026-03-03T11:47:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237076521,
"name": "my-cool-demo-php-code",
"full_name": "rcribelar-nucleus\/my-cool-demo-php-code",
"owner": {
"login": "rcribelar-nucleus",
"id": 145605978,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145605978?v=4",
"html_url": "https:\/\/github.com\/rcribelar-nucleus",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rcribelar-nucleus\/my-cool-demo-php-code",
"description": "PHP RCE CVE-2024-2961 Nucleus Hackathon Demo",
"fork": false,
"created_at": "2026-05-12T21:15:39Z",
"updated_at": "2026-05-13T14:38:23Z",
"pushed_at": "2026-05-12T21:19:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1252912757,
"name": "wongpress",
"full_name": "whyuhurtz\/wongpress",
"owner": {
"login": "whyuhurtz",
"id": 78311798,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78311798?v=4",
"html_url": "https:\/\/github.com\/whyuhurtz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/whyuhurtz\/wongpress",
"description": "A WordPress demo lab for CVE-2024-2961 & CVE-2024-29510",
"fork": false,
"created_at": "2026-05-29T01:57:15Z",
"updated_at": "2026-05-29T02:01:25Z",
"pushed_at": "2026-05-29T02:01:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1324842994,
"name": "CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"full_name": "HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"description": "CVE-2022-31626, CVE-2024-2961, CVE-2019-6977, PHP security research",
"fork": false,
"created_at": "2026-08-06T06:39:46Z",
"updated_at": "2026-08-06T06:43:40Z",
"pushed_at": "2026-08-06T06:42:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1362185353,
"name": "CVE-2024-2961-XXE-Exploit",
"full_name": "qinglove777\/CVE-2024-2961-XXE-Exploit",
"owner": {
"login": "qinglove777",
"id": 247069275,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247069275?v=4",
"html_url": "https:\/\/github.com\/qinglove777",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qinglove777\/CVE-2024-2961-XXE-Exploit",
"description": "CVE-2024-2961 (CNEXT) PHP file-read to RCE exploit adapted to an XXE\/CTF channel",
"fork": false,
"created_at": "2026-09-09T04:14:08Z",
"updated_at": "2026-09-09T08:01:02Z",
"pushed_at": "2026-09-09T04:14:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1421498911,
"name": "cve-2024-2961",
"full_name": "Sib1110\/cve-2024-2961",
"owner": {
"login": "Sib1110",
"id": 87344553,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87344553?v=4",
"html_url": "https:\/\/github.com\/Sib1110",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sib1110\/cve-2024-2961",
"description": null,
"fork": false,
"created_at": "2026-10-16T01:19:38Z",
"updated_at": "2026-10-16T04:34:28Z",
"pushed_at": "2026-10-16T04:34:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink