nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
e7741b0ca952b36769abaa50fccaba10091feb21
PoC-in-GitHub/2026/CVE-2026-111497.json
T

2710 lines
96 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1428596990,
"name": "CVE-2026-111497-POC",
"full_name": "CaterMaoZi\/CVE-2026-111497-POC",
"owner": {
"login": "CaterMaoZi",
"id": 126097270,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126097270?v=4",
"html_url": "https:\/\/github.com\/CaterMaoZi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CaterMaoZi\/CVE-2026-111497-POC",
"description": "Nodejs漏洞 CVE-2026-111497 POC",
"fork": false,
"created_at": "2026-10-21T15:47:21Z",
"updated_at": "2026-10-27T05:40:48Z",
"pushed_at": "2026-10-24T04:24:25Z",
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429224370,
"name": "CVE-2026-111497-POC",
"full_name": "dimasma0305\/CVE-2026-111497-POC",
"owner": {
"login": "dimasma0305",
"id": 92920739,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92920739?v=4",
"html_url": "https:\/\/github.com\/dimasma0305",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dimasma0305\/CVE-2026-111497-POC",
"description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness",
"fork": false,
"created_at": "2026-10-22T04:08:28Z",
"updated_at": "2026-10-29T23:00:12Z",
"pushed_at": "2026-10-25T01:09:02Z",
"stargazers_count": 71,
"watchers_count": 71,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 71,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429324577,
"name": "nodejs-security-check",
"full_name": "Sami-AlEsh\/nodejs-security-check",
"owner": {
"login": "Sami-AlEsh",
"id": 42234447,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42234447?v=4",
"html_url": "https:\/\/github.com\/Sami-AlEsh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sami-AlEsh\/nodejs-security-check",
"description": "Agent skill + zero-dependency script: check a Node.js project against the Oct 2026 Node.js security release (Brotli RCE CVE-2026-111497 and 9 more) and bump version pins to the patched release",
"fork": false,
"created_at": "2026-10-22T06:15:42Z",
"updated_at": "2026-10-22T08:34:18Z",
"pushed_at": "2026-10-22T08:34:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent-skills",
"cve",
"devsecops",
"nodejs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429482861,
"name": "CVE-2026-111497",
"full_name": "hypnguyen1209\/CVE-2026-111497",
"owner": {
"login": "hypnguyen1209",
"id": 33387061,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33387061?v=4",
"html_url": "https:\/\/github.com\/hypnguyen1209",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hypnguyen1209\/CVE-2026-111497",
"description": "Node.js Brotli Decoder OOB Write to RCE",
"fork": false,
"created_at": "2026-10-22T08:52:11Z",
"updated_at": "2026-10-25T05:23:41Z",
"pushed_at": "2026-10-22T08:53:45Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-111497"
],
"visibility": "public",
"forks": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429678420,
"name": "cve-2026-111497-mitigation",
"full_name": "AdapptOnAzure\/cve-2026-111497-mitigation",
"owner": {
"login": "AdapptOnAzure",
"id": 205210939,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205210939?v=4",
"html_url": "https:\/\/github.com\/AdapptOnAzure",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AdapptOnAzure\/cve-2026-111497-mitigation",
"description": null,
"fork": false,
"created_at": "2026-10-22T11:53:56Z",
"updated_at": "2026-10-23T18:00:26Z",
"pushed_at": "2026-10-22T12:43:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429737104,
"name": "node-brotli-check",
"full_name": "TahuCryptsi\/node-brotli-check",
"owner": {
"login": "TahuCryptsi",
"id": 344393313,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/344393313?v=4",
"html_url": "https:\/\/github.com\/TahuCryptsi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TahuCryptsi\/node-brotli-check",
"description": "Local probe for CVE-2026-111497 (Node.js Brotli decoder OOB write). Fixed in 22.23.4\/24.22.1\/26.12.1; EOL lines unpatched forever. Single file, zero deps.",
"fork": false,
"created_at": "2026-10-22T12:46:12Z",
"updated_at": "2026-10-22T12:46:25Z",
"pushed_at": "2026-10-22T12:46:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve",
"nodejs",
"patch-management",
"security",
"sysadmin",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429827130,
"name": "october-cyber-family",
"full_name": "incu-tech\/october-cyber-family",
"owner": {
"login": "incu-tech",
"id": 293903485,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293903485?v=4",
"html_url": "https:\/\/github.com\/incu-tech",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/incu-tech\/october-cyber-family",
"description": "Security Ways for AI coding agents. First member audits Node.js repos for the Oct 21, 2026 security release (CVE-2026-111497 Brotli RCE) and opens a patch PR only if affected.",
"fork": false,
"created_at": "2026-10-22T14:02:38Z",
"updated_at": "2026-10-22T16:40:43Z",
"pushed_at": "2026-10-22T16:40:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent-skills",
"cve-2026-111497",
"devsecops",
"nodejs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430001060,
"name": "CVE-2026-111497-brotli-pwn",
"full_name": "TheFool-TAROT\/CVE-2026-111497-brotli-pwn",
"owner": {
"login": "TheFool-TAROT",
"id": 57065526,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57065526?v=4",
"html_url": "https:\/\/github.com\/TheFool-TAROT",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheFool-TAROT\/CVE-2026-111497-brotli-pwn",
"description": "CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab",
"fork": false,
"created_at": "2026-10-22T16:30:53Z",
"updated_at": "2026-10-25T12:03:00Z",
"pushed_at": "2026-10-22T16:31:10Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"docker",
"exploit",
"memory-corruption",
"nodejs",
"poc",
"rce",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430198649,
"name": "brotli2crash",
"full_name": "ikow\/brotli2crash",
"owner": {
"login": "ikow",
"id": 5469411,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5469411?v=4",
"html_url": "https:\/\/github.com\/ikow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ikow\/brotli2crash",
"description": "CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.",
"fork": false,
"created_at": "2026-10-22T19:40:47Z",
"updated_at": "2026-10-29T04:07:22Z",
"pushed_at": "2026-10-23T00:41:57Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430422747,
"name": "node-hostcheck",
"full_name": "Charlie-Netdevops\/node-hostcheck",
"owner": {
"login": "Charlie-Netdevops",
"id": 269641338,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/269641338?v=4",
"html_url": "https:\/\/github.com\/Charlie-Netdevops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Charlie-Netdevops\/node-hostcheck",
"description": " Read-only Node.js check for the Oct 2026 security release (CVE-2026-111497 Brotli RCE + 9). Finds every install (nvm, fnm, volta, system), what each running process actually uses, restarts needed, and eMudhra CA issues.",
"fork": false,
"created_at": "2026-10-23T00:45:51Z",
"updated_at": "2026-10-23T00:49:26Z",
"pushed_at": "2026-10-23T00:48:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bash",
"blue-team",
"cve-2026-111497",
"emudhra",
"node",
"node-js",
"nodejs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430428544,
"name": "vulcheck",
"full_name": "datmt\/vulcheck",
"owner": {
"login": "datmt",
"id": 14150061,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14150061?v=4",
"html_url": "https:\/\/github.com\/datmt",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/datmt\/vulcheck",
"description": "Check and fix hosts, Docker containers and k8s pods: leaked eMudhra CA trust, and Brotli decoder CVE-2026-111497 scanner",
"fork": false,
"created_at": "2026-10-23T00:54:47Z",
"updated_at": "2026-10-26T03:06:32Z",
"pushed_at": "2026-10-26T03:06:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430480336,
"name": "nodejs-CVE-2026-111497",
"full_name": "duytien241\/nodejs-CVE-2026-111497",
"owner": {
"login": "duytien241",
"id": 26266413,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26266413?v=4",
"html_url": "https:\/\/github.com\/duytien241",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/duytien241\/nodejs-CVE-2026-111497",
"description": null,
"fork": false,
"created_at": "2026-10-23T02:14:55Z",
"updated_at": "2026-10-23T03:01:21Z",
"pushed_at": "2026-10-23T03:01:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430767122,
"name": "node2shell-detect",
"full_name": "shivrajem\/node2shell-detect",
"owner": {
"login": "shivrajem",
"id": 5117597,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5117597?v=4",
"html_url": "https:\/\/github.com\/shivrajem",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shivrajem\/node2shell-detect",
"description": "Detect systems affected by Node2Shell (CVE-2026-111497) on Unix and Windows",
"fork": false,
"created_at": "2026-10-23T08:16:22Z",
"updated_at": "2026-10-24T10:26:19Z",
"pushed_at": "2026-10-23T08:16:28Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430863711,
"name": "brotli-distro-check",
"full_name": "TahuCryptsi\/brotli-distro-check",
"owner": {
"login": "TahuCryptsi",
"id": 344393313,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/344393313?v=4",
"html_url": "https:\/\/github.com\/TahuCryptsi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TahuCryptsi\/brotli-distro-check",
"description": "Audit Linux hosts for CVE-2026-111497 vulnerable brotli (1.0.3-1.2.0, CVSS 4.0 9.2). dpkg\/apk\/rpm\/Node aware. Verified across live containers.",
"fork": false,
"created_at": "2026-10-23T09:52:05Z",
"updated_at": "2026-10-23T09:52:19Z",
"pushed_at": "2026-10-23T09:52:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"audit",
"bash",
"brotli",
"cve",
"docker",
"linux",
"security",
"sysadmin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430923370,
"name": "node2shell-poc",
"full_name": "ZeroHackOrg\/node2shell-poc",
"owner": {
"login": "ZeroHackOrg",
"id": 309682194,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/309682194?v=4",
"html_url": "https:\/\/github.com\/ZeroHackOrg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZeroHackOrg\/node2shell-poc",
"description": "ZeroHack: Node2Shell (CVE-2026-111497) Docker Lab & PoC Framework",
"fork": false,
"created_at": "2026-10-23T10:53:00Z",
"updated_at": "2026-10-29T17:31:21Z",
"pushed_at": "2026-10-23T11:17:34Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431159567,
"name": "CVE-2026-111497",
"full_name": "Arkango\/CVE-2026-111497",
"owner": {
"login": "Arkango",
"id": 23188987,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23188987?v=4",
"html_url": "https:\/\/github.com\/Arkango",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Arkango\/CVE-2026-111497",
"description": "CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder OOB heap write. Independent research: exploit code, Docker labs, Express RCE gap analysis.",
"fork": false,
"created_at": "2026-10-23T14:34:49Z",
"updated_at": "2026-10-28T00:05:58Z",
"pushed_at": "2026-10-23T15:27:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431201407,
"name": "CVE-2026-111497_nodejs_hash_lookup",
"full_name": "w116tjb\/CVE-2026-111497_nodejs_hash_lookup",
"owner": {
"login": "w116tjb",
"id": 19626682,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19626682?v=4",
"html_url": "https:\/\/github.com\/w116tjb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/w116tjb\/CVE-2026-111497_nodejs_hash_lookup",
"description": null,
"fork": false,
"created_at": "2026-10-23T15:11:00Z",
"updated_at": "2026-10-23T20:05:13Z",
"pushed_at": "2026-10-23T15:11:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431247957,
"name": "node-brotli-check",
"full_name": "AmanSin001\/node-brotli-check",
"owner": {
"login": "AmanSin001",
"id": 65849351,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65849351?v=4",
"html_url": "https:\/\/github.com\/AmanSin001",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AmanSin001\/node-brotli-check",
"description": "Check a Node.js runtime for the CVE-2026-111497 Brotli decoder fix and find where a project decodes outside Brotli data. No dependencies.",
"fork": false,
"created_at": "2026-10-23T15:52:31Z",
"updated_at": "2026-10-27T05:58:55Z",
"pushed_at": "2026-10-27T05:58:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"express",
"nodejs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431290961,
"name": "brotli-checker",
"full_name": "trailofbits\/brotli-checker",
"owner": {
"login": "trailofbits",
"id": 2314423,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2314423?v=4",
"html_url": "https:\/\/github.com\/trailofbits",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/trailofbits\/brotli-checker",
"description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.",
"fork": false,
"created_at": "2026-10-23T16:32:12Z",
"updated_at": "2026-10-30T04:14:37Z",
"pushed_at": "2026-10-29T18:23:32Z",
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 65,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431446570,
"name": "node2shell-check",
"full_name": "CompleteTech-Security\/node2shell-check",
"owner": {
"login": "CompleteTech-Security",
"id": 347271566,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347271566?v=4",
"html_url": "https:\/\/github.com\/CompleteTech-Security",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CompleteTech-Security\/node2shell-check",
"description": "Passive Node2Shell (CVE-2026-111497) exposure checker and offline Node.js runtime assessment with branded HTML reports. Python 3.10+, no dependencies, no exploit payloads.",
"fork": false,
"created_at": "2026-10-23T19:07:13Z",
"updated_at": "2026-10-29T16:05:40Z",
"pushed_at": "2026-10-26T05:19:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"html-report",
"node2shell",
"nodejs",
"passive-detection",
"python",
"security-tools"
],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431541359,
"name": "Node2Shell-CVE-2026-111497",
"full_name": "Ghost-Bx1\/Node2Shell-CVE-2026-111497",
"owner": {
"login": "Ghost-Bx1",
"id": 103540917,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4",
"html_url": "https:\/\/github.com\/Ghost-Bx1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost-Bx1\/Node2Shell-CVE-2026-111497",
"description": "CVE-2026-111497 - Node.js Brotli OOB Write Pre-Auth RCE (Node2Shell) | CVSS 4.0: 9.2 | PoC + Full Exploit | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-23T20:55:34Z",
"updated_at": "2026-10-27T14:41:08Z",
"pushed_at": "2026-10-27T17:26:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431558921,
"name": "n2s-buildpack-probe",
"full_name": "fuzheado\/n2s-buildpack-probe",
"owner": {
"login": "fuzheado",
"id": 187007,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187007?v=4",
"html_url": "https:\/\/github.com\/fuzheado",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fuzheado\/n2s-buildpack-probe",
"description": "Throwaway probe: does Toolforge Build Service honour engines.node (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-23T21:18:46Z",
"updated_at": "2026-10-23T21:20:52Z",
"pushed_at": "2026-10-23T21:20:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431675308,
"name": "brotli-patch",
"full_name": "ks-labs\/brotli-patch",
"owner": {
"login": "ks-labs",
"id": 66478856,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66478856?v=4",
"html_url": "https:\/\/github.com\/ks-labs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ks-labs\/brotli-patch",
"description": "Node.js (14 e 20, em fim de vida) com o decoder Brotli corrigido: CVE-2026-111497 (Node2Shell). Não oficial.",
"fork": false,
"created_at": "2026-10-24T00:25:24Z",
"updated_at": "2026-10-26T14:11:38Z",
"pushed_at": "2026-10-26T14:11:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"docker",
"nodejs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431742642,
"name": "lotstamp",
"full_name": "Blackman99\/lotstamp",
"owner": {
"login": "Blackman99",
"id": 41723543,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41723543?v=4",
"html_url": "https:\/\/github.com\/Blackman99",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Blackman99\/lotstamp",
"description": "Reads the Brotli decoder inside every Node, Bun, Electron app and AI coding tool on your machine: which still carry CVE-2026-111497. Executes nothing.",
"fork": false,
"created_at": "2026-10-24T02:30:57Z",
"updated_at": "2026-10-26T02:14:45Z",
"pushed_at": "2026-10-26T02:14:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-agents",
"brotli",
"bun",
"claude-code",
"cli",
"cve-2026-111497",
"electron",
"golang",
"nodejs",
"security",
"supply-chain-security",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431768975,
"name": "CVE-2026-111497-assessment",
"full_name": "mahumadad\/CVE-2026-111497-assessment",
"owner": {
"login": "mahumadad",
"id": 240999450,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/240999450?v=4",
"html_url": "https:\/\/github.com\/mahumadad",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mahumadad\/CVE-2026-111497-assessment",
"description": "Defensive assessment toolkit for CVE-2026-111497 (Brotli OOB write): ecosystem scanner, Python outbound PoC, canary server, CDN amplification analysis, framework defense matrix",
"fork": false,
"created_at": "2026-10-24T03:17:24Z",
"updated_at": "2026-10-24T03:17:35Z",
"pushed_at": "2026-10-24T03:17:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431917850,
"name": "CVE-2026-111497",
"full_name": "googlesky\/CVE-2026-111497",
"owner": {
"login": "googlesky",
"id": 4094347,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4",
"html_url": "https:\/\/github.com\/googlesky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/googlesky\/CVE-2026-111497",
"description": "PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis included.",
"fork": false,
"created_at": "2026-10-24T07:11:16Z",
"updated_at": "2026-10-27T01:55:24Z",
"pushed_at": "2026-10-24T07:12:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"denial-of-service",
"javascript",
"node2shell",
"nodejs",
"out-of-bounds-write",
"poc",
"proof-of-concept",
"security-research",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432017201,
"name": "node2shell",
"full_name": "lesterlam\/node2shell",
"owner": {
"login": "lesterlam",
"id": 8011680,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8011680?v=4",
"html_url": "https:\/\/github.com\/lesterlam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lesterlam\/node2shell",
"description": "Independent reproduction of the Brotli decoder out-of-bounds write behind CVE-2026-111497 (Node2Shell): payload built from first principles, A\/B against the patched release, and a measured ceiling that rules out the advertised RCE path.",
"fork": false,
"created_at": "2026-10-24T09:24:22Z",
"updated_at": "2026-10-24T09:48:14Z",
"pushed_at": "2026-10-24T09:48:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"denial-of-service",
"memory-corruption",
"nodejs",
"out-of-bounds-write",
"reverse-engineering",
"security-research",
"vulnerability-reproduction"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432034372,
"name": "node2shell-radar",
"full_name": "Secragon\/node2shell-radar",
"owner": {
"login": "Secragon",
"id": 157915777,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157915777?v=4",
"html_url": "https:\/\/github.com\/Secragon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Secragon\/node2shell-radar",
"description": "Find Node.js websites and see which ones need attention. Desktop Node2Shell Scanner for CVE-2026-111497.",
"fork": false,
"created_at": "2026-10-24T09:46:41Z",
"updated_at": "2026-10-28T09:08:57Z",
"pushed_at": "2026-10-24T10:05:46Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"asset-discovery",
"brotli",
"cve-2026-111497",
"linux",
"nextjs",
"node2shell",
"node2shell-scanner",
"nodejs",
"security-scanner",
"subdomain-enumeration",
"windows"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432046550,
"name": "node2shell-cve-2026-111497",
"full_name": "pt-act\/node2shell-cve-2026-111497",
"owner": {
"login": "pt-act",
"id": 211776491,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211776491?v=4",
"html_url": "https:\/\/github.com\/pt-act",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pt-act\/node2shell-cve-2026-111497",
"description": "Node2Shell \/ HTTP2Shell (CVE-2026-111497) exposure-audit kit — read-only scanner + agent prompt pack. Portable: macOS bash 3.2 + Linux. Mutation-tested regression suite, CI on 3 platforms.",
"fork": false,
"created_at": "2026-10-24T10:02:46Z",
"updated_at": "2026-10-26T12:11:16Z",
"pushed_at": "2026-10-26T12:11:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"macos",
"node2shell",
"nodejs",
"security-audit",
"shell"
],
"visibility": "public",
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432077242,
"name": "poc-cve-2026-111497",
"full_name": "s1ko\/poc-cve-2026-111497",
"owner": {
"login": "s1ko",
"id": 3800072,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3800072?v=4",
"html_url": "https:\/\/github.com\/s1ko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/s1ko\/poc-cve-2026-111497",
"description": "CVE-2026-111497 (Node2Shell): deteccion del decoder Brotli vulnerable en Python y Node por el codigo de error real del decoder, con laboratorio HTTP local",
"fork": false,
"created_at": "2026-10-24T10:43:18Z",
"updated_at": "2026-10-24T15:19:47Z",
"pushed_at": "2026-10-24T15:19:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432240549,
"name": "brotli-firing-range",
"full_name": "bastet-ai\/brotli-firing-range",
"owner": {
"login": "bastet-ai",
"id": 229820030,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229820030?v=4",
"html_url": "https:\/\/github.com\/bastet-ai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bastet-ai\/brotli-firing-range",
"description": "CVE-2026-111497 brotli decoder firing range (RoE: loopback lab targets only)",
"fork": false,
"created_at": "2026-10-24T14:01:17Z",
"updated_at": "2026-10-26T19:05:33Z",
"pushed_at": "2026-10-25T01:59:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432303602,
"name": "CVE-2026-111497-Toolkit",
"full_name": "tc4dy\/CVE-2026-111497-Toolkit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-111497-Toolkit",
"description": "CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red\/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE), Blue Team Checker (errno differential, version fingerprint, WAF detection, reporting) Only Use Ethically Only <3",
"fork": false,
"created_at": "2026-10-24T15:09:54Z",
"updated_at": "2026-10-24T15:56:21Z",
"pushed_at": "2026-10-24T15:13:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"blueteam",
"brotli",
"brotli-cve",
"cve",
"cve-2026-111497",
"cve-scanning",
"cves",
"cwe",
"exploit",
"google",
"proof-of-concept",
"redteam",
"toolkit",
"toolkits",
"vulnerability",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432632403,
"name": "cve-2026-111497-rce-checker",
"full_name": "mnk-works\/cve-2026-111497-rce-checker",
"owner": {
"login": "mnk-works",
"id": 341825200,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/341825200?v=4",
"html_url": "https:\/\/github.com\/mnk-works",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mnk-works\/cve-2026-111497-rce-checker",
"description": "Lab-only exact-profile RCE\/DoS validator for CVE-2026-111497; refuses non-loopback targets",
"fork": false,
"created_at": "2026-10-24T22:05:21Z",
"updated_at": "2026-10-24T22:06:29Z",
"pushed_at": "2026-10-24T22:05:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432664971,
"name": "CVE-2026-111497-node2shell",
"full_name": "syrex1013\/CVE-2026-111497-node2shell",
"owner": {
"login": "syrex1013",
"id": 31669127,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31669127?v=4",
"html_url": "https:\/\/github.com\/syrex1013",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/syrex1013\/CVE-2026-111497-node2shell",
"description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-24T23:03:18Z",
"updated_at": "2026-10-30T05:03:31Z",
"pushed_at": "2026-10-25T20:32:46Z",
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 48,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432694609,
"name": "brotli-secfix",
"full_name": "yavuzsemih\/brotli-secfix",
"owner": {
"login": "yavuzsemih",
"id": 145695985,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145695985?v=4",
"html_url": "https:\/\/github.com\/yavuzsemih",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yavuzsemih\/brotli-secfix",
"description": "Security backport toolkit for CVE-2026-111497 on Ubuntu 24.04, featuring upstream patch verification, custom Debian package builds, and offline remediation procedures.",
"fork": false,
"created_at": "2026-10-25T00:02:44Z",
"updated_at": "2026-10-25T00:26:25Z",
"pushed_at": "2026-10-25T00:29:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"backport",
"brotli",
"cve-2026-111497",
"devsecops",
"linux-security",
"patch",
"patch-management",
"security-audit",
"security-patch",
"ubuntu",
"vulnerability-management"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432824057,
"name": "HTTP2Shell-PoC",
"full_name": "GlobularOne\/HTTP2Shell-PoC",
"owner": {
"login": "GlobularOne",
"id": 139503563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139503563?v=4",
"html_url": "https:\/\/github.com\/GlobularOne",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/GlobularOne\/HTTP2Shell-PoC",
"description": "PoC for CVE-2026-111497 (HTTP2Shell)",
"fork": false,
"created_at": "2026-10-25T04:22:02Z",
"updated_at": "2026-10-28T07:46:21Z",
"pushed_at": "2026-10-25T04:29:01Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432825061,
"name": "node2shell-scanner",
"full_name": "assetnote\/node2shell-scanner",
"owner": {
"login": "assetnote",
"id": 35264812,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35264812?v=4",
"html_url": "https:\/\/github.com\/assetnote",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/assetnote\/node2shell-scanner",
"description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-25T04:23:54Z",
"updated_at": "2026-10-29T07:28:19Z",
"pushed_at": "2026-10-25T04:24:27Z",
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 85,
"score": 0,
"subscribers_count": 1
},
{
"id": 1433034132,
"name": "node2shell-lab",
"full_name": "tani2shell\/node2shell-lab",
"owner": {
"login": "tani2shell",
"id": 15151478,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15151478?v=4",
"html_url": "https:\/\/github.com\/tani2shell",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tani2shell\/node2shell-lab",
"description": "Node2Shell (CVE-2026-111497, Node.js Brotli decoder OOB write) black-box pentest lab — crash-gated double flag, agent-calibrated. Part of the *2Shell lab series. EN\/中文\/日本語.",
"fork": false,
"created_at": "2026-10-25T09:36:56Z",
"updated_at": "2026-10-26T01:15:46Z",
"pushed_at": "2026-10-26T01:15:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ctf",
"cve-2026-111497",
"docker",
"memory-corruption",
"node2shell",
"nodejs",
"pentest"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433043830,
"name": "cve-2026-111497-http2shell-guide",
"full_name": "lushinshang\/cve-2026-111497-http2shell-guide",
"owner": {
"login": "lushinshang",
"id": 240306186,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/240306186?v=4",
"html_url": "https:\/\/github.com\/lushinshang",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lushinshang\/cve-2026-111497-http2shell-guide",
"description": null,
"fork": false,
"created_at": "2026-10-25T09:49:21Z",
"updated_at": "2026-10-25T11:35:19Z",
"pushed_at": "2026-10-25T11:35:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433215748,
"name": "brotli-cve-check",
"full_name": "apaonum\/brotli-cve-check",
"owner": {
"login": "apaonum",
"id": 89339590,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89339590?v=4",
"html_url": "https:\/\/github.com\/apaonum",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/apaonum\/brotli-cve-check",
"description": "Agent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes",
"fork": false,
"created_at": "2026-10-25T13:15:15Z",
"updated_at": "2026-10-27T15:17:54Z",
"pushed_at": "2026-10-27T15:17:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433346245,
"name": "cve-2026-111497",
"full_name": "SYM01\/cve-2026-111497",
"owner": {
"login": "SYM01",
"id": 33443792,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33443792?v=4",
"html_url": "https:\/\/github.com\/SYM01",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SYM01\/cve-2026-111497",
"description": null,
"fork": false,
"created_at": "2026-10-25T15:32:16Z",
"updated_at": "2026-10-26T02:02:48Z",
"pushed_at": "2026-10-25T16:38:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433451013,
"name": "http2shell",
"full_name": "FranklinF25\/http2shell",
"owner": {
"login": "FranklinF25",
"id": 96183613,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96183613?v=4",
"html_url": "https:\/\/github.com\/FranklinF25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FranklinF25\/http2shell",
"description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds",
"fork": false,
"created_at": "2026-10-25T17:23:52Z",
"updated_at": "2026-10-28T07:46:25Z",
"pushed_at": "2026-10-27T01:00:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433453830,
"name": "CVE-2026-111497",
"full_name": "tikarammardi\/CVE-2026-111497",
"owner": {
"login": "tikarammardi",
"id": 19359591,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19359591?v=4",
"html_url": "https:\/\/github.com\/tikarammardi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tikarammardi\/CVE-2026-111497",
"description": null,
"fork": false,
"created_at": "2026-10-25T17:26:55Z",
"updated_at": "2026-10-26T11:57:57Z",
"pushed_at": "2026-10-26T11:57:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433480794,
"name": "http2shell-checker",
"full_name": "fbuff-tools\/http2shell-checker",
"owner": {
"login": "fbuff-tools",
"id": 347898110,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347898110?v=4",
"html_url": "https:\/\/github.com\/fbuff-tools",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fbuff-tools\/http2shell-checker",
"description": "Check Node.js, Bun, Python Brotli and libbrotli for HTTP2Shell \/ Node2Shell (CVE-2026-111497): fixed versions and a read-only version check script.",
"fork": false,
"created_at": "2026-10-25T17:57:20Z",
"updated_at": "2026-10-30T05:49:53Z",
"pushed_at": "2026-10-30T05:49:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"http2shell",
"node2shell",
"nodejs",
"python",
"security",
"vulnerability-check"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433519241,
"name": "CVE-2026-111497",
"full_name": "mehmet-emir-eroglu\/CVE-2026-111497",
"owner": {
"login": "mehmet-emir-eroglu",
"id": 206140722,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4",
"html_url": "https:\/\/github.com\/mehmet-emir-eroglu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-111497",
"description": "Non-invasive Python detector for CVE-2026-111497 with Brotli\/Node.js version checks, JSON inventories, and CI-ready reports.",
"fork": false,
"created_at": "2026-10-25T18:42:23Z",
"updated_at": "2026-10-28T19:23:11Z",
"pushed_at": "2026-10-25T18:44:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cli",
"cve-2026-111497",
"dependency-security",
"devsecops",
"nodejs",
"python",
"security-scanner",
"vulnerability-detection",
"vulnerability-management"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433557807,
"name": "CVE-2026-111497",
"full_name": "thebarel\/CVE-2026-111497",
"owner": {
"login": "thebarel",
"id": 291063636,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/291063636?v=4",
"html_url": "https:\/\/github.com\/thebarel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/thebarel\/CVE-2026-111497",
"description": "CVE-2026-111497 client-side research",
"fork": false,
"created_at": "2026-10-25T19:31:08Z",
"updated_at": "2026-10-27T20:39:18Z",
"pushed_at": "2026-10-27T19:42:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433586300,
"name": "Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497",
"full_name": "jeffschafer\/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497",
"owner": {
"login": "jeffschafer",
"id": 120217242,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120217242?v=4",
"html_url": "https:\/\/github.com\/jeffschafer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jeffschafer\/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497",
"description": "BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.",
"fork": false,
"created_at": "2026-10-25T20:09:18Z",
"updated_at": "2026-10-28T18:14:23Z",
"pushed_at": "2026-10-28T18:14:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433637828,
"name": "brotli-check",
"full_name": "sakai-sktech\/brotli-check",
"owner": {
"login": "sakai-sktech",
"id": 52674867,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52674867?v=4",
"html_url": "https:\/\/github.com\/sakai-sktech",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sakai-sktech\/brotli-check",
"description": "Finds copies of the Google Brotli decoder affected by CVE-2026-111497 on Ubuntu and Debian hosts: the OS packages, and the bundled copies an OS update does not fix (Node.js, Python, Envoy, browsers and more). Built by trial and error with AI-Ops, starting with the OSes on my own machines and servers. A PowerShell version for Windows is planned.",
"fork": false,
"created_at": "2026-10-25T21:24:13Z",
"updated_at": "2026-10-29T08:18:44Z",
"pushed_at": "2026-10-29T08:18:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433779392,
"name": "http2shell-check",
"full_name": "CompleteTech-Security\/http2shell-check",
"owner": {
"login": "CompleteTech-Security",
"id": 347271566,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347271566?v=4",
"html_url": "https:\/\/github.com\/CompleteTech-Security",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CompleteTech-Security\/http2shell-check",
"description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.",
"fork": false,
"created_at": "2026-10-26T01:29:29Z",
"updated_at": "2026-10-29T16:06:32Z",
"pushed_at": "2026-10-26T05:18:09Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"html-report",
"http2shell",
"inventory",
"node2shell",
"offline",
"python",
"security-tools"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433920264,
"name": "node2shell-detector",
"full_name": "ionsec\/node2shell-detector",
"owner": {
"login": "ionsec",
"id": 127967266,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127967266?v=4",
"html_url": "https:\/\/github.com\/ionsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ionsec\/node2shell-detector",
"description": "node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in self-test; plus Sigma, Suricata, ModSecurity, YARA rules and edge\/app snippets.",
"fork": false,
"created_at": "2026-10-26T04:56:41Z",
"updated_at": "2026-10-26T04:56:50Z",
"pushed_at": "2026-10-26T04:56:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434202711,
"name": "CVE-2026-111497",
"full_name": "0xredash\/CVE-2026-111497",
"owner": {
"login": "0xredash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xredash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xredash\/CVE-2026-111497",
"description": "CVE-2026-111497",
"fork": false,
"created_at": "2026-10-26T10:03:58Z",
"updated_at": "2026-10-26T21:06:48Z",
"pushed_at": "2026-10-26T11:54:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434399458,
"name": "CVE-2026-111497-DotNetBrotliScan",
"full_name": "AdapptOnAzure\/CVE-2026-111497-DotNetBrotliScan",
"owner": {
"login": "AdapptOnAzure",
"id": 205210939,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205210939?v=4",
"html_url": "https:\/\/github.com\/AdapptOnAzure",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AdapptOnAzure\/CVE-2026-111497-DotNetBrotliScan",
"description": "Cross-platform scanner that finds .NET apps, runtimes and Azure App Service \/ Functions deployments exposed to CVE-2026-111497 (brotli decoder)",
"fork": false,
"created_at": "2026-10-26T13:10:47Z",
"updated_at": "2026-10-26T14:09:36Z",
"pushed_at": "2026-10-26T14:25:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"azure",
"brotli",
"cve",
"dotnet",
"security",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434555752,
"name": "node2shell-checker",
"full_name": "amier-ge\/node2shell-checker",
"owner": {
"login": "amier-ge",
"id": 168223186,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168223186?v=4",
"html_url": "https:\/\/github.com\/amier-ge",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/amier-ge\/node2shell-checker",
"description": "A tool to assess potential exposure to Node2Shell (CVE-2026-111497) in Node.js projects and containers.",
"fork": false,
"created_at": "2026-10-26T15:15:56Z",
"updated_at": "2026-10-26T15:49:11Z",
"pushed_at": "2026-10-26T15:16:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434592376,
"name": "Node2Shell",
"full_name": "amier-ge\/Node2Shell",
"owner": {
"login": "amier-ge",
"id": 168223186,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168223186?v=4",
"html_url": "https:\/\/github.com\/amier-ge",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/amier-ge\/Node2Shell",
"description": "A local Docker environment and proof of concept for Node2Shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-26T15:46:23Z",
"updated_at": "2026-10-28T06:44:59Z",
"pushed_at": "2026-10-26T15:46:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434676229,
"name": "formbricks-patched",
"full_name": "queso\/formbricks-patched",
"owner": {
"login": "queso",
"id": 106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106?v=4",
"html_url": "https:\/\/github.com\/queso",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/queso\/formbricks-patched",
"description": "formbricks 5.1.4 with Node.js 24.22.1 (CVE-2026-111497 and others) swapped in",
"fork": false,
"created_at": "2026-10-26T16:57:01Z",
"updated_at": "2026-10-26T20:48:56Z",
"pushed_at": "2026-10-26T20:48:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435043505,
"name": "CVE-2026-111497",
"full_name": "axisops\/CVE-2026-111497",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2026-111497",
"description": "Brotli decoder CVE-2026-111497 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T23:42:30Z",
"updated_at": "2026-10-29T17:49:59Z",
"pushed_at": "2026-10-29T18:00:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435345357,
"name": "CVE-2026-111497",
"full_name": "paulmann\/CVE-2026-111497",
"owner": {
"login": "paulmann",
"id": 2838788,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2838788?v=4",
"html_url": "https:\/\/github.com\/paulmann",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paulmann\/CVE-2026-111497",
"description": "Security audit and remediation agent for CVE-2026-111497, an out-of-bounds write in the Google Brotli decoder: detect, patch and verify on Debian and Ubuntu",
"fork": false,
"created_at": "2026-10-27T06:35:05Z",
"updated_at": "2026-10-27T11:02:48Z",
"pushed_at": "2026-10-27T11:02:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apt",
"bash",
"brotli",
"cve",
"cve-2026-111497",
"debian",
"defensive-security",
"incident-response",
"node2shell",
"patch-management",
"security-tools",
"shell-script",
"threat-model",
"ubuntu",
"vulnerability-remediation"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435581171,
"name": "brotli2scan",
"full_name": "akaihigurashi\/brotli2scan",
"owner": {
"login": "akaihigurashi",
"id": 47500397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47500397?v=4",
"html_url": "https:\/\/github.com\/akaihigurashi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/akaihigurashi\/brotli2scan",
"description": "Is your website affected by HTTP2Shell (CVE-2026-111497)?",
"fork": false,
"created_at": "2026-10-27T10:33:58Z",
"updated_at": "2026-10-27T18:26:22Z",
"pushed_at": "2026-10-27T18:26:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435627899,
"name": "node2shell-scanner",
"full_name": "tal7aouy\/node2shell-scanner",
"owner": {
"login": "tal7aouy",
"id": 241496409,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/241496409?v=4",
"html_url": "https:\/\/github.com\/tal7aouy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tal7aouy\/node2shell-scanner",
"description": "Scanner for php2shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-27T11:19:53Z",
"updated_at": "2026-10-27T13:33:36Z",
"pushed_at": "2026-10-27T13:22:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436004260,
"name": "brotli-check",
"full_name": "avatarnewyork\/brotli-check",
"owner": {
"login": "avatarnewyork",
"id": 36384,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36384?v=4",
"html_url": "https:\/\/github.com\/avatarnewyork",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/avatarnewyork\/brotli-check",
"description": "Portable PHP Brotli decoder inventory for WordPress, Drupal and Symfony — CVE-2026-111497",
"fork": false,
"created_at": "2026-10-27T16:39:21Z",
"updated_at": "2026-10-27T16:40:40Z",
"pushed_at": "2026-10-27T16:41:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"drupal",
"php",
"security",
"shell",
"symfony",
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436106756,
"name": "brotli-k8s-scan",
"full_name": "depuschm\/brotli-k8s-scan",
"owner": {
"login": "depuschm",
"id": 12600913,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12600913?v=4",
"html_url": "https:\/\/github.com\/depuschm",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/depuschm\/brotli-k8s-scan",
"description": "Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell \/ Node2Shell \/ HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.",
"fork": false,
"created_at": "2026-10-27T18:11:04Z",
"updated_at": "2026-10-29T15:07:24Z",
"pushed_at": "2026-10-28T17:47:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bash",
"broccoli2shell",
"brotli",
"container-security",
"cve-2026-111497",
"devsecops",
"dotnet",
"http2shell",
"incident-response",
"kubernetes",
"node2shell",
"nodejs",
"python",
"sarif",
"security-scanner",
"vulnerability-scanner",
"yara",
"yara-rules"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436140645,
"name": "DotNet-HTTP2Shell-CVE-2026-111497",
"full_name": "Ghost-Bx1\/DotNet-HTTP2Shell-CVE-2026-111497",
"owner": {
"login": "Ghost-Bx1",
"id": 103540917,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4",
"html_url": "https:\/\/github.com\/Ghost-Bx1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost-Bx1\/DotNet-HTTP2Shell-CVE-2026-111497",
"description": "CVE-2026-111497 - .NET Brotli OOB Write PoC and Exploit (HTTP2Shell) | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-27T18:42:43Z",
"updated_at": "2026-10-27T18:50:01Z",
"pushed_at": "2026-10-27T18:49:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436210997,
"name": "brotli-pingback-lab",
"full_name": "Nyamort\/brotli-pingback-lab",
"owner": {
"login": "Nyamort",
"id": 67233336,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67233336?v=4",
"html_url": "https:\/\/github.com\/Nyamort",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nyamort\/brotli-pingback-lab",
"description": "WordPress XML-RPC pingback lab and crash PoC for CVE-2026-111497 (Brotli decoder out-of-bounds write).",
"fork": false,
"created_at": "2026-10-27T19:53:45Z",
"updated_at": "2026-10-29T21:02:10Z",
"pushed_at": "2026-10-27T19:54:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436707333,
"name": "CVE-2026-111497",
"full_name": "suominen\/CVE-2026-111497",
"owner": {
"login": "suominen",
"id": 1939855,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1939855?v=4",
"html_url": "https:\/\/github.com\/suominen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/suominen\/CVE-2026-111497",
"description": null,
"fork": false,
"created_at": "2026-10-28T06:45:04Z",
"updated_at": "2026-10-29T17:50:21Z",
"pushed_at": "2026-10-29T17:50:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436889350,
"name": "node2shell-status",
"full_name": "hkoeck\/node2shell-status",
"owner": {
"login": "hkoeck",
"id": 5988834,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5988834?v=4",
"html_url": "https:\/\/github.com\/hkoeck",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hkoeck\/node2shell-status",
"description": "Node2Shell \/ Broccoli2Shell (CVE-2026-111497) vendor and Linux distro status - AI-generated, verify before acting",
"fork": false,
"created_at": "2026-10-28T09:50:30Z",
"updated_at": "2026-10-28T14:19:00Z",
"pushed_at": "2026-10-28T14:18:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436921652,
"name": "CVE-2026-111497-DOS-",
"full_name": "gik2927\/CVE-2026-111497-DOS-",
"owner": {
"login": "gik2927",
"id": 59925086,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59925086?v=4",
"html_url": "https:\/\/github.com\/gik2927",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gik2927\/CVE-2026-111497-DOS-",
"description": "CVE-2026-111497 DOS ",
"fork": false,
"created_at": "2026-10-28T10:20:58Z",
"updated_at": "2026-10-28T10:26:05Z",
"pushed_at": "2026-10-28T10:26:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1437706015,
"name": "cve-2026-111497-wordpress-poc",
"full_name": "caveeroo\/cve-2026-111497-wordpress-poc",
"owner": {
"login": "caveeroo",
"id": 62477582,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62477582?v=4",
"html_url": "https:\/\/github.com\/caveeroo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/caveeroo\/cve-2026-111497-wordpress-poc",
"description": "CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress",
"fork": false,
"created_at": "2026-10-28T22:42:33Z",
"updated_at": "2026-10-30T07:40:14Z",
"pushed_at": "2026-10-28T23:29:34Z",
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
{
"id": 1437707765,
"name": "node2shell-audit",
"full_name": "Quaerendir\/node2shell-audit",
"owner": {
"login": "Quaerendir",
"id": 42608192,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42608192?v=4",
"html_url": "https:\/\/github.com\/Quaerendir",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Quaerendir\/node2shell-audit",
"description": "Read-only audit for Node2Shell (CVE-2026-111497): Node.js\/Bun Brotli decoder out-of-bounds write",
"fork": false,
"created_at": "2026-10-28T22:44:56Z",
"updated_at": "2026-10-28T22:45:06Z",
"pushed_at": "2026-10-29T10:05:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1437887093,
"name": "brotli-node2shell-check",
"full_name": "fieldse\/brotli-node2shell-check",
"owner": {
"login": "fieldse",
"id": 394065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/394065?v=4",
"html_url": "https:\/\/github.com\/fieldse",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fieldse\/brotli-node2shell-check",
"description": "Vulnerability checker and remediation guide for CVE-2026-111497 vulnerability in Google's Brotli decoder",
"fork": false,
"created_at": "2026-10-29T03:07:32Z",
"updated_at": "2026-10-29T07:56:23Z",
"pushed_at": "2026-10-29T07:56:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve",
"cve-2026-111497",
"http2shell",
"node2shell"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1437940322,
"name": "node2shell-inventory-scanner",
"full_name": "foxcornlab\/node2shell-inventory-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/node2shell-inventory-scanner",
"description": "Local inventory triage for Node2Shell (CVE-2026-111497): grade every Node, Bun and Brotli copy on disk. Detection-only, no network probes, no payloads.",
"fork": false,
"created_at": "2026-10-29T04:22:20Z",
"updated_at": "2026-10-29T04:22:33Z",
"pushed_at": "2026-10-29T04:22:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"detection",
"node2shell",
"nodejs",
"security",
"triage",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1438224977,
"name": "woff2shell",
"full_name": "timosar\/woff2shell",
"owner": {
"login": "timosar",
"id": 316502723,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/316502723?v=4",
"html_url": "https:\/\/github.com\/timosar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/timosar\/woff2shell",
"description": "poc of CVE-2026-111497 delivered as a WOFF2 file",
"fork": false,
"created_at": "2026-10-29T09:49:05Z",
"updated_at": "2026-10-29T09:53:37Z",
"pushed_at": "2026-10-29T09:53:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1438299544,
"name": "node2shell",
"full_name": "Sumit0x00\/node2shell",
"owner": {
"login": "Sumit0x00",
"id": 136874827,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136874827?v=4",
"html_url": "https:\/\/github.com\/Sumit0x00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sumit0x00\/node2shell",
"description": "Scanner to checking (CVE-2026-111497) vulnerability",
"fork": false,
"created_at": "2026-10-29T11:02:42Z",
"updated_at": "2026-10-29T16:21:46Z",
"pushed_at": "2026-10-29T11:20:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1438440168,
"name": "node2shell",
"full_name": "RedSideSecurity\/node2shell",
"owner": {
"login": "RedSideSecurity",
"id": 289903831,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/289903831?v=4",
"html_url": "https:\/\/github.com\/RedSideSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RedSideSecurity\/node2shell",
"description": "Node2Shell (CVE-2026-111497) detection-only scanner + lab — RedSide Security",
"fork": false,
"created_at": "2026-10-29T13:12:28Z",
"updated_at": "2026-10-29T13:30:30Z",
"pushed_at": "2026-10-29T13:30:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"brotli",
"cve-2026-111497",
"node2shell",
"nodejs",
"redside-security",
"security-tools",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1439420116,
"name": "node2shell-two-stage",
"full_name": "miracle438\/node2shell-two-stage",
"owner": {
"login": "miracle438",
"id": 248293850,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248293850?v=4",
"html_url": "https:\/\/github.com\/miracle438",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/miracle438\/node2shell-two-stage",
"description": "CVE-2026-111497 two-stage Brotli harness: local trigger\/error-semantics verification, no exploitation",
"fork": false,
"created_at": "2026-10-30T07:37:13Z",
"updated_at": "2026-10-30T07:38:36Z",
"pushed_at": "2026-10-30T07:38:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink