From 5452bc8353fd3794d1bb8386ddf85e3454bae87d Mon Sep 17 00:00:00 2001 From: 0xMarcio Date: Sun, 30 Aug 2026 21:53:19 +0200 Subject: [PATCH] Report when a PoC repository last shipped code The trending table sorted and displayed updated_at, which also moves when a repository merely gains a star, so a four-month-old exploit was claiming it had been updated three hours ago. Record pushed_at and created_at and let the page decide: last commit for the age it shows, repository age for the trending rank. The job now writes trending.json alongside the README table, so the site reads the data instead of regex-parsing markdown the same job generated. --- .github/getTrending.py | 25 +- .github/workflows/hot_cves.yml | 2 +- README.md | 202 ++++---- scripts/build_site.py | 103 ++-- trending.json | 902 +++++++++++++++++++++++++++++++++ 5 files changed, 1068 insertions(+), 166 deletions(-) create mode 100644 trending.json diff --git a/.github/getTrending.py b/.github/getTrending.py index 65e1924e7b0..44926c7aa2f 100644 --- a/.github/getTrending.py +++ b/.github/getTrending.py @@ -18,7 +18,9 @@ YEARS = 5 PER_YEAR = 20 MIN_STARS = 2 USER_AGENT = "0xMarcio-cve-trending" -README = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir, "README.md") +ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), os.pardir) +README = os.path.join(ROOT, "README.md") +TRENDING = os.path.join(ROOT, "trending.json") def search_year(year: int) -> tuple[int, list[dict]]: @@ -69,6 +71,7 @@ def cell(value: str) -> str: def main() -> int: current_year = datetime.now(timezone.utc).year lines = ['

Recently updated Proof-of-Concepts

'] + items: list[dict] = [] for year in range(current_year, current_year - YEARS, -1): total, repositories = search_year(year) @@ -80,14 +83,30 @@ def main() -> int: lines.append("| Stars | Updated | Name | Description |") lines.append("| --- | --- | --- | --- |") for repo in repositories: + # pushed_at is the last commit. updated_at also moves when a repository + # only gains a star, which is why the table used to claim that a + # four-month-old exploit had been updated three hours ago. + pushed = str(repo.get("pushed_at") or repo.get("updated_at") or "") + items.append({ + "year": year, + "stars": int(repo.get("stargazers_count") or 0), + "name": cell(repo.get("name")), + "url": repo.get("html_url") or "", + "desc": cell(repo.get("description")), + "pushed": pushed, + "created": str(repo.get("created_at") or ""), + }) lines.append( - f"| {repo.get('stargazers_count', 0)}⭐ | {time_ago(repo['updated_at'])} " + f"| {repo.get('stargazers_count', 0)}⭐ | {time_ago(pushed)} " f"| [{cell(repo.get('name'))}]({repo.get('html_url')}) | {cell(repo.get('description'))} |" ) with open(README, "w", encoding="utf-8") as handle: handle.write("\n".join(lines)) - print(f"Wrote {README}") + with open(TRENDING, "w", encoding="utf-8") as handle: + json.dump(items, handle, ensure_ascii=False, indent=1) + handle.write("\n") + print(f"Wrote {README} and {TRENDING} ({len(items)} repositories)") return 0 diff --git a/.github/workflows/hot_cves.yml b/.github/workflows/hot_cves.yml index 0ed67cc6436..34d40073551 100644 --- a/.github/workflows/hot_cves.yml +++ b/.github/workflows/hot_cves.yml @@ -33,7 +33,7 @@ jobs: run: | git config user.name 'CVE-BOT' git config user.email 'cve@codepwn.win' - git add -- README.md + git add -- README.md trending.json if git diff --cached --quiet; then echo "No changes to commit" exit 0 diff --git a/README.md b/README.md index 235a49a4694..04400431044 100644 --- a/README.md +++ b/README.md @@ -3,30 +3,30 @@ ## 2026 -### Latest 20 of 523 Repositories +### Latest 20 of 525 Repositories | Stars | Updated | Name | Description | | --- | --- | --- | --- | -| 4056⭐ | 3 hours ago | [copy-fail-CVE-2026-31431](https://github.com/theori-io/copy-fail-CVE-2026-31431) | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code | -| 571⭐ | 3 days ago | [cve_2026_31431](https://github.com/rootsecdev/cve_2026_31431) | Exploit POC for CVE_2026_31431 | -| 325⭐ | 2 days ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | -| 531⭐ | 2 days ago | [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | -| 235⭐ | 2 hours ago | [CVE-2026-43499-popsicle](https://github.com/x-spy/CVE-2026-43499-popsicle) | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k | -| 212⭐ | 6 days ago | [CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089) | CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) | -| 260⭐ | 1 day ago | [CVE-2026-21858](https://github.com/Chocapikk/CVE-2026-21858) | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) | -| 262⭐ | 8 hours ago | [CVE-2026-40369-EXPLOIT](https://github.com/orinimron123/CVE-2026-40369-EXPLOIT) | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox | -| 207⭐ | 6 days ago | [CVE-2026-24061](https://github.com/SafeBreach-Labs/CVE-2026-24061) | Exploitation of CVE-2026-24061 | -| 154⭐ | 6 days ago | [CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499) | CVE-2026-43499 PoC | -| 824⭐ | 1 day ago | [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 146⭐ | 1 hour ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | -| 128⭐ | 11 days ago | [CVE-2026-20817](https://github.com/oxfemale/CVE-2026-20817) | Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. | -| 77⭐ | 8 hours ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | -| 100⭐ | 6 days ago | [CVE-2026-42980-POC](https://github.com/G4sp4rCS/CVE-2026-42980-POC) | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH | -| 111⭐ | 1 hour ago | [CVE-2026-31431-Advanced-Exploit](https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit) | CVE-2026-31431 纯文件利用 | -| 119⭐ | 2 hours ago | [CVE-2026-41651](https://github.com/Vozec/CVE-2026-41651) | | -| 18⭐ | 2 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. | -| 63⭐ | 4 days ago | [CVE-2026-45504](https://github.com/hawktrace/CVE-2026-45504) | CVE-2026-45504 Microsoft Exchange File Read | -| 80⭐ | 2 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. | +| 4056⭐ | 122 days ago | [copy-fail-CVE-2026-31431](https://github.com/theori-io/copy-fail-CVE-2026-31431) | Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code | +| 571⭐ | 123 days ago | [cve_2026_31431](https://github.com/rootsecdev/cve_2026_31431) | Exploit POC for CVE_2026_31431 | +| 325⭐ | 33 days ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | +| 531⭐ | 10 days ago | [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | +| 235⭐ | 45 days ago | [CVE-2026-43499-popsicle](https://github.com/x-spy/CVE-2026-43499-popsicle) | CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k | +| 212⭐ | 89 days ago | [CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089) | CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL) | +| 260⭐ | 157 days ago | [CVE-2026-21858](https://github.com/Chocapikk/CVE-2026-21858) | n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0) | +| 262⭐ | 103 days ago | [CVE-2026-40369-EXPLOIT](https://github.com/orinimron123/CVE-2026-40369-EXPLOIT) | Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox | +| 207⭐ | 220 days ago | [CVE-2026-24061](https://github.com/SafeBreach-Labs/CVE-2026-24061) | Exploitation of CVE-2026-24061 | +| 154⭐ | 64 days ago | [CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499) | CVE-2026-43499 PoC | +| 824⭐ | 10 days ago | [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | +| 146⭐ | 8 days ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | +| 79⭐ | 2 days ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | +| 128⭐ | 192 days ago | [CVE-2026-20817](https://github.com/oxfemale/CVE-2026-20817) | Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. | +| 100⭐ | 54 days ago | [CVE-2026-42980-POC](https://github.com/G4sp4rCS/CVE-2026-42980-POC) | CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH | +| 111⭐ | 122 days ago | [CVE-2026-31431-Advanced-Exploit](https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit) | CVE-2026-31431 纯文件利用 | +| 119⭐ | 129 days ago | [CVE-2026-41651](https://github.com/Vozec/CVE-2026-41651) | | +| 18⭐ | 47 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. | +| 63⭐ | 67 days ago | [CVE-2026-45504](https://github.com/hawktrace/CVE-2026-45504) | CVE-2026-45504 Microsoft Exchange File Read | +| 80⭐ | 31 days ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only. | ## 2025 @@ -35,26 +35,26 @@ | Stars | Updated | Name | Description | | --- | --- | --- | --- | -| 1430⭐ | 2 days ago | [CVE-2025-55182](https://github.com/msanft/CVE-2025-55182) | Explanation and full RCE PoC for CVE-2025-55182 | -| 793⭐ | 6 days ago | [CVE-2025-55182-research](https://github.com/ejpir/CVE-2025-55182-research) | CVE-2025-55182 POC | -| 715⭐ | 6 days ago | [CVE-2025-33073](https://github.com/mverschu/CVE-2025-33073) | PoC Exploit for the NTLM reflection SMB flaw. | -| 529⭐ | 5 days ago | [CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot) | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 | -| 475⭐ | 6 days ago | [CVE-2025-32463](https://github.com/kh4sh3i/CVE-2025-32463) | Local Privilege Escalation to Root via Sudo chroot in Linux | -| 268⭐ | 6 days ago | [CVE-2025-48799](https://github.com/Wh04m1001/CVE-2025-48799) | | -| 315⭐ | 14 days ago | [CVE-2025-53770-Exploit](https://github.com/soltanali0/CVE-2025-53770-Exploit) | SharePoint WebPart Injection Exploit Tool | -| 316⭐ | 1 day ago | [CVE-2025-55182](https://github.com/emredavut/CVE-2025-55182) | RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478 | -| 1058⭐ | 1 day ago | [React2Shell-CVE-2025-55182-original-poc](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc) | Original Proof-of-Concepts for React2Shell CVE-2025-55182 | -| 408⭐ | 2 days ago | [CVE-2025-24071_PoC](https://github.com/0x6rss/CVE-2025-24071_PoC) | CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File | -| 215⭐ | 13 days ago | [CVE-2025-32023](https://github.com/leesh3288/CVE-2025-32023) | PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo" | -| 385⭐ | 19 days ago | [ColorOS-CVE-2025-10184](https://github.com/yuuouu/ColorOS-CVE-2025-10184) | ColorOS短信漏洞，以及用户自救方案 | -| 282⭐ | 2 days ago | [CVE-2025-55182-advanced-scanner-](https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-) | | -| 431⭐ | 7 days ago | [Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478) | A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. | -| 197⭐ | 3 days ago | [POC-CVE-2025-24813](https://github.com/absholi7ly/POC-CVE-2025-24813) | his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met. | -| 233⭐ | 11 days ago | [CVE-2025-21333-POC](https://github.com/MrAle98/CVE-2025-21333-POC) | POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY | -| 190⭐ | 157 days ago | [RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182) | RSC Detect CVE 2025 55182 | -| 196⭐ | 40 days ago | [CVE-2025-30208-EXP](https://github.com/ThumpBo/CVE-2025-30208-EXP) | CVE-2025-30208-EXP | -| 161⭐ | 14 days ago | [CVE-2025-21756](https://github.com/hoefler02/CVE-2025-21756) | Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit! | -| 143⭐ | 9 days ago | [CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433) | CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 | +| 1430⭐ | 265 days ago | [CVE-2025-55182](https://github.com/msanft/CVE-2025-55182) | Explanation and full RCE PoC for CVE-2025-55182 | +| 793⭐ | 264 days ago | [CVE-2025-55182-research](https://github.com/ejpir/CVE-2025-55182-research) | CVE-2025-55182 POC | +| 715⭐ | 193 days ago | [CVE-2025-33073](https://github.com/mverschu/CVE-2025-33073) | PoC Exploit for the NTLM reflection SMB flaw. | +| 529⭐ | 284 days ago | [CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot) | Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463 | +| 475⭐ | 424 days ago | [CVE-2025-32463](https://github.com/kh4sh3i/CVE-2025-32463) | Local Privilege Escalation to Root via Sudo chroot in Linux | +| 268⭐ | 418 days ago | [CVE-2025-48799](https://github.com/Wh04m1001/CVE-2025-48799) | | +| 315⭐ | 274 days ago | [CVE-2025-53770-Exploit](https://github.com/soltanali0/CVE-2025-53770-Exploit) | SharePoint WebPart Injection Exploit Tool | +| 316⭐ | 267 days ago | [CVE-2025-55182](https://github.com/emredavut/CVE-2025-55182) | RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478 | +| 1058⭐ | 268 days ago | [React2Shell-CVE-2025-55182-original-poc](https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc) | Original Proof-of-Concepts for React2Shell CVE-2025-55182 | +| 408⭐ | 527 days ago | [CVE-2025-24071_PoC](https://github.com/0x6rss/CVE-2025-24071_PoC) | CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File | +| 215⭐ | 420 days ago | [CVE-2025-32023](https://github.com/leesh3288/CVE-2025-32023) | PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 "Zerodeo" | +| 385⭐ | 319 days ago | [ColorOS-CVE-2025-10184](https://github.com/yuuouu/ColorOS-CVE-2025-10184) | ColorOS短信漏洞，以及用户自救方案 | +| 282⭐ | 266 days ago | [CVE-2025-55182-advanced-scanner-](https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-) | | +| 431⭐ | 257 days ago | [Next.js-RSC-RCE-Scanner-CVE-2025-66478](https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478) | A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. | +| 197⭐ | 534 days ago | [POC-CVE-2025-24813](https://github.com/absholi7ly/POC-CVE-2025-24813) | his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met. | +| 233⭐ | 504 days ago | [CVE-2025-21333-POC](https://github.com/MrAle98/CVE-2025-21333-POC) | POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY | +| 190⭐ | 186 days ago | [RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182) | RSC Detect CVE 2025 55182 | +| 196⭐ | 516 days ago | [CVE-2025-30208-EXP](https://github.com/ThumpBo/CVE-2025-30208-EXP) | CVE-2025-30208-EXP | +| 143⭐ | 393 days ago | [CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433) | CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 | +| 161⭐ | 450 days ago | [CVE-2025-21756](https://github.com/hoefler02/CVE-2025-21756) | Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit! | ## 2024 @@ -63,26 +63,26 @@ | Stars | Updated | Name | Description | | --- | --- | --- | --- | -| 2457⭐ | 9 days ago | [CVE-2024-1086](https://github.com/Notselwyn/CVE-2024-1086) | Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. | -| 693⭐ | 10 days ago | [CVE-2024-38063](https://github.com/ynwarcs/CVE-2024-38063) | poc for CVE-2024-38063 (RCE in tcpip.sys) | -| 496⭐ | 21 hours ago | [cve-2024-6387-poc](https://github.com/zgzhang/cve-2024-6387-poc) | a signal handler race condition in OpenSSH's server (sshd) | -| 520⭐ | 8 days ago | [CVE-2024-49113](https://github.com/SafeBreach-Labs/CVE-2024-49113) | LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 | -| 527⭐ | 4 days ago | [CVE-2024-6387_Check](https://github.com/xaitax/CVE-2024-6387_Check) | CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH | -| 224⭐ | 6 days ago | [CVE-2024-38077](https://github.com/qi4L/CVE-2024-38077) | RDL的堆溢出导致的RCE | -| 380⭐ | 52 days ago | [cve-2024-6387-poc](https://github.com/acrono/cve-2024-6387-poc) | 32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc | -| 335⭐ | 14 days ago | [CVE-2024-21338](https://github.com/hakaioffsec/CVE-2024-21338) | Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. | -| 330⭐ | 18 days ago | [CVE-2024-0044](https://github.com/0xbinder/CVE-2024-0044) | CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 | -| 321⭐ | 4 days ago | [CVE-2024-4577](https://github.com/watchtowrlabs/CVE-2024-4577) | PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC | -| 289⭐ | 14 days ago | [CVE-2024-30088](https://github.com/tykawaii98/CVE-2024-30088) | | -| 278⭐ | 29 minutes ago | [CVE-2024-21413](https://github.com/CMNatic/CVE-2024-21413) | CVE-2024-21413 PoC for THM Lab | -| 769⭐ | 9 days ago | [CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability](https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability) | Microsoft-Outlook-Remote-Code-Execution-Vulnerability | -| 271⭐ | 2 days ago | [CVE-2024-49138-POC](https://github.com/MrAle98/CVE-2024-49138-POC) | POC exploit for CVE-2024-49138 | -| 194⭐ | 1 day ago | [CVE-2024-6387](https://github.com/Karmakstylez/CVE-2024-6387) | Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) | -| 9⭐ | 14 days ago | [CVE-2024-38077-POC](https://github.com/SecStarBot/CVE-2024-38077-POC) | | -| 235⭐ | 34 days ago | [CVE_2024_30078_POC_WIFI](https://github.com/blkph0x/CVE_2024_30078_POC_WIFI) | basic concept for the latest windows wifi driver CVE | -| 180⭐ | 20 days ago | [CVE-2024-25600](https://github.com/Chocapikk/CVE-2024-25600) | Unauthenticated Remote Code Execution – Bricks <= 1.9.6 | -| 217⭐ | 8 days ago | [CVE-2024-21111](https://github.com/mansk1es/CVE-2024-21111) | Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability | -| 136⭐ | 14 days ago | [CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481) | TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006. | +| 2457⭐ | 865 days ago | [CVE-2024-1086](https://github.com/Notselwyn/CVE-2024-1086) | Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. | +| 693⭐ | 733 days ago | [CVE-2024-38063](https://github.com/ynwarcs/CVE-2024-38063) | poc for CVE-2024-38063 (RCE in tcpip.sys) | +| 496⭐ | 790 days ago | [cve-2024-6387-poc](https://github.com/zgzhang/cve-2024-6387-poc) | a signal handler race condition in OpenSSH's server (sshd) | +| 520⭐ | 605 days ago | [CVE-2024-49113](https://github.com/SafeBreach-Labs/CVE-2024-49113) | LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113 | +| 527⭐ | 93 days ago | [CVE-2024-6387_Check](https://github.com/xaitax/CVE-2024-6387_Check) | CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH | +| 224⭐ | 746 days ago | [CVE-2024-38077](https://github.com/qi4L/CVE-2024-38077) | RDL的堆溢出导致的RCE | +| 335⭐ | 865 days ago | [CVE-2024-21338](https://github.com/hakaioffsec/CVE-2024-21338) | Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. | +| 380⭐ | 790 days ago | [cve-2024-6387-poc](https://github.com/acrono/cve-2024-6387-poc) | 32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc | +| 330⭐ | 636 days ago | [CVE-2024-0044](https://github.com/0xbinder/CVE-2024-0044) | CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13 | +| 321⭐ | 799 days ago | [CVE-2024-4577](https://github.com/watchtowrlabs/CVE-2024-4577) | PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC | +| 289⭐ | 760 days ago | [CVE-2024-30088](https://github.com/tykawaii98/CVE-2024-30088) | | +| 278⭐ | 900 days ago | [CVE-2024-21413](https://github.com/CMNatic/CVE-2024-21413) | CVE-2024-21413 PoC for THM Lab | +| 769⭐ | 922 days ago | [CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability](https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability) | Microsoft-Outlook-Remote-Code-Execution-Vulnerability | +| 271⭐ | 561 days ago | [CVE-2024-49138-POC](https://github.com/MrAle98/CVE-2024-49138-POC) | POC exploit for CVE-2024-49138 | +| 194⭐ | 738 days ago | [CVE-2024-6387](https://github.com/Karmakstylez/CVE-2024-6387) | Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) | +| 9⭐ | 751 days ago | [CVE-2024-38077-POC](https://github.com/SecStarBot/CVE-2024-38077-POC) | | +| 235⭐ | 668 days ago | [CVE_2024_30078_POC_WIFI](https://github.com/blkph0x/CVE_2024_30078_POC_WIFI) | basic concept for the latest windows wifi driver CVE | +| 180⭐ | 916 days ago | [CVE-2024-25600](https://github.com/Chocapikk/CVE-2024-25600) | Unauthenticated Remote Code Execution – Bricks <= 1.9.6 | +| 217⭐ | 843 days ago | [CVE-2024-21111](https://github.com/mansk1es/CVE-2024-21111) | Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability | +| 136⭐ | 615 days ago | [CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481) | TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006. | ## 2023 @@ -91,26 +91,26 @@ | Stars | Updated | Name | Description | | --- | --- | --- | --- | -| 782⭐ | 31 days ago | [CVE-2023-38831-winrar-exploit](https://github.com/b1tg/CVE-2023-38831-winrar-exploit) | CVE-2023-38831 winrar exploit generator | -| 382⭐ | 52 days ago | [CVE-2023-32233](https://github.com/Liuk3r/CVE-2023-32233) | CVE-2023-32233: Linux内核中的安全漏洞 | -| 506⭐ | 9 days ago | [Windows_LPE_AFD_CVE-2023-21768](https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768) | LPE exploit for CVE-2023-21768 | -| 418⭐ | 34 days ago | [CVE-2023-0386](https://github.com/xkaneiki/CVE-2023-0386) | CVE-2023-0386在ubuntu22.04上的提权 | -| 116⭐ | 6 days ago | [CVE-2023-21839](https://github.com/ASkyeye/CVE-2023-21839) | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) | -| 328⭐ | 11 days ago | [CVE-2023-21752](https://github.com/Wh04m1001/CVE-2023-21752) | | -| 393⭐ | 5 days ago | [CVE-2023-4911](https://github.com/leesh3288/CVE-2023-4911) | PoC for CVE-2023-4911 | -| 283⭐ | 31 days ago | [CVE-2023-21608](https://github.com/hacksysteam/CVE-2023-21608) | Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit | -| 317⭐ | 9 days ago | [CVE-2023-4863](https://github.com/mistymntncop/CVE-2023-4863) | | -| 242⭐ | 9 days ago | [CVE-2023-36874](https://github.com/Wh04m1001/CVE-2023-36874) | | -| 247⭐ | 16 days ago | [CVE-2023-44487](https://github.com/bcdannyboy/CVE-2023-44487) | Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 | -| 245⭐ | 20 days ago | [CVE-2023-7028](https://github.com/Vozec/CVE-2023-7028) | This repository presents a proof-of-concept of CVE-2023-7028 | -| 228⭐ | 31 days ago | [CVE-2023-3519](https://github.com/BishopFox/CVE-2023-3519) | RCE exploit for CVE-2023-3519 | -| 169⭐ | 48 days ago | [CVE-2023-36745](https://github.com/N1k0la-T/CVE-2023-36745) | | -| 228⭐ | 5 days ago | [CVE-2023-20887](https://github.com/sinsinology/CVE-2023-20887) | VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887) | -| 346⭐ | 44 days ago | [CVE-2023-23397-POC-Powershell](https://github.com/api0cradle/CVE-2023-23397-POC-Powershell) | | -| 183⭐ | 14 days ago | [CVE-2023-28252](https://github.com/fortra/CVE-2023-28252) | | -| 136⭐ | 14 days ago | [CVE-2023-2640-CVE-2023-32629](https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629) | GameOver(lay) Ubuntu Privilege Escalation | -| 241⭐ | 24 days ago | [Weblogic-CVE-2023-21839](https://github.com/DXask88MA/Weblogic-CVE-2023-21839) | | -| 207⭐ | 6 days ago | [CVE-2023-46747-RCE](https://github.com/W01fh4cker/CVE-2023-46747-RCE) | exploit for f5-big-ip RCE cve-2023-46747 | +| 782⭐ | 1008 days ago | [CVE-2023-38831-winrar-exploit](https://github.com/b1tg/CVE-2023-38831-winrar-exploit) | CVE-2023-38831 winrar exploit generator | +| 382⭐ | 1202 days ago | [CVE-2023-32233](https://github.com/Liuk3r/CVE-2023-32233) | CVE-2023-32233: Linux内核中的安全漏洞 | +| 506⭐ | 1147 days ago | [Windows_LPE_AFD_CVE-2023-21768](https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768) | LPE exploit for CVE-2023-21768 | +| 418⭐ | 1174 days ago | [CVE-2023-0386](https://github.com/xkaneiki/CVE-2023-0386) | CVE-2023-0386在ubuntu22.04上的提权 | +| 116⭐ | 19 days ago | [CVE-2023-21839](https://github.com/ASkyeye/CVE-2023-21839) | Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE) | +| 328⭐ | 1325 days ago | [CVE-2023-21752](https://github.com/Wh04m1001/CVE-2023-21752) | | +| 393⭐ | 1061 days ago | [CVE-2023-4911](https://github.com/leesh3288/CVE-2023-4911) | PoC for CVE-2023-4911 | +| 283⭐ | 999 days ago | [CVE-2023-21608](https://github.com/hacksysteam/CVE-2023-21608) | Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit | +| 317⭐ | 986 days ago | [CVE-2023-4863](https://github.com/mistymntncop/CVE-2023-4863) | | +| 242⭐ | 1103 days ago | [CVE-2023-36874](https://github.com/Wh04m1001/CVE-2023-36874) | | +| 247⭐ | 965 days ago | [CVE-2023-44487](https://github.com/bcdannyboy/CVE-2023-44487) | Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 | +| 245⭐ | 960 days ago | [CVE-2023-7028](https://github.com/Vozec/CVE-2023-7028) | This repository presents a proof-of-concept of CVE-2023-7028 | +| 228⭐ | 1103 days ago | [CVE-2023-3519](https://github.com/BishopFox/CVE-2023-3519) | RCE exploit for CVE-2023-3519 | +| 169⭐ | 1036 days ago | [CVE-2023-36745](https://github.com/N1k0la-T/CVE-2023-36745) | | +| 346⭐ | 1262 days ago | [CVE-2023-23397-POC-Powershell](https://github.com/api0cradle/CVE-2023-23397-POC-Powershell) | | +| 228⭐ | 1174 days ago | [CVE-2023-20887](https://github.com/sinsinology/CVE-2023-20887) | VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887) | +| 183⭐ | 1147 days ago | [CVE-2023-28252](https://github.com/fortra/CVE-2023-28252) | | +| 136⭐ | 1055 days ago | [CVE-2023-2640-CVE-2023-32629](https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629) | GameOver(lay) Ubuntu Privilege Escalation | +| 241⭐ | 1281 days ago | [Weblogic-CVE-2023-21839](https://github.com/DXask88MA/Weblogic-CVE-2023-21839) | | +| 207⭐ | 679 days ago | [CVE-2023-46747-RCE](https://github.com/W01fh4cker/CVE-2023-46747-RCE) | exploit for f5-big-ip RCE cve-2023-46747 | ## 2022 @@ -119,23 +119,23 @@ | Stars | Updated | Name | Description | | --- | --- | --- | --- | -| 461⭐ | 2 days ago | [CVE-2022-21882](https://github.com/KaLendsi/CVE-2022-21882) | win32k LPE | -| 1133⭐ | 4 days ago | [CVE-2022-0847-DirtyPipe-Exploit](https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit) | A root exploit for CVE-2022-0847 (Dirty Pipe) | -| 573⭐ | 6 days ago | [CVE-2022-23222](https://github.com/tr3ee/CVE-2022-23222) | CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation | -| 360⭐ | 11 days ago | [CVE-2022-21907](https://github.com/ZZ-SOCMAP/CVE-2022-21907) | HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907 | -| 377⭐ | 9 days ago | [CVE-2022-29464](https://github.com/hakivvi/CVE-2022-29464) | WSO2 RCE (CVE-2022-29464) exploit and writeup. | -| 729⭐ | 15 hours ago | [CVE-2022-0847-DirtyPipe-Exploits](https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits) | A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability. | -| 358⭐ | 35 days ago | [CVE-2022-40684](https://github.com/horizon3ai/CVE-2022-40684) | A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager | -| 437⭐ | 15 days ago | [CVE-2022-25636](https://github.com/Bonfee/CVE-2022-25636) | CVE-2022-25636 | -| 487⭐ | 9 days ago | [CVE-2022-2588](https://github.com/Markakd/CVE-2022-2588) | exploit for CVE-2022-2588 | -| 497⭐ | 21 hours ago | [CVE-2022-0995](https://github.com/Bonfee/CVE-2022-0995) | CVE-2022-0995 exploit | -| 415⭐ | 49 days ago | [CVE-2022-33679](https://github.com/Bdenneu/CVE-2022-33679) | One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html | -| 387⭐ | 34 days ago | [CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) | CobaltStrike <= 4.7.1 RCE | -| 282⭐ | 69 days ago | [CVE-2022-0847](https://github.com/r1is/CVE-2022-0847) | CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe” | -| 353⭐ | 10 days ago | [CVE-2022-21894](https://github.com/Wack0/CVE-2022-21894) | baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability | -| 379⭐ | 49 days ago | [CVE-2022-0185](https://github.com/Crusaders-of-Rust/CVE-2022-0185) | CVE-2022-0185 | -| 595⭐ | 6 hours ago | [CVE-2022-38694_unlock_bootloader](https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader) | This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692 | -| 284⭐ | 6 days ago | [cve-2022-27255](https://github.com/infobyte/cve-2022-27255) | | -| 265⭐ | 147 days ago | [CVE-2022-39952](https://github.com/horizon3ai/CVE-2022-39952) | POC for CVE-2022-39952 | -| 238⭐ | 6 days ago | [CVE-2022-20699](https://github.com/Audiobahn/CVE-2022-20699) | Cisco Anyconnect VPN unauth RCE (rwx stack) | -| 219⭐ | 89 days ago | [CVE-2022-34918](https://github.com/veritas501/CVE-2022-34918) | CVE-2022-34918 netfilter nf_tables 本地提权 POC | \ No newline at end of file +| 461⭐ | 1676 days ago | [CVE-2022-21882](https://github.com/KaLendsi/CVE-2022-21882) | win32k LPE | +| 1133⭐ | 1636 days ago | [CVE-2022-0847-DirtyPipe-Exploit](https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit) | A root exploit for CVE-2022-0847 (Dirty Pipe) | +| 573⭐ | 1545 days ago | [CVE-2022-23222](https://github.com/tr3ee/CVE-2022-23222) | CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation | +| 360⭐ | 1683 days ago | [CVE-2022-21907](https://github.com/ZZ-SOCMAP/CVE-2022-21907) | HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907 | +| 377⭐ | 1586 days ago | [CVE-2022-29464](https://github.com/hakivvi/CVE-2022-29464) | WSO2 RCE (CVE-2022-29464) exploit and writeup. | +| 358⭐ | 1417 days ago | [CVE-2022-40684](https://github.com/horizon3ai/CVE-2022-40684) | A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager | +| 729⭐ | 1198 days ago | [CVE-2022-0847-DirtyPipe-Exploits](https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits) | A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability. | +| 437⭐ | 1637 days ago | [CVE-2022-25636](https://github.com/Bonfee/CVE-2022-25636) | CVE-2022-25636 | +| 487⭐ | 1275 days ago | [CVE-2022-2588](https://github.com/Markakd/CVE-2022-2588) | exploit for CVE-2022-2588 | +| 415⭐ | 658 days ago | [CVE-2022-33679](https://github.com/Bdenneu/CVE-2022-33679) | One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html | +| 497⭐ | 1617 days ago | [CVE-2022-0995](https://github.com/Bonfee/CVE-2022-0995) | CVE-2022-0995 exploit | +| 387⭐ | 1405 days ago | [CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) | CobaltStrike <= 4.7.1 RCE | +| 282⭐ | 1305 days ago | [CVE-2022-0847](https://github.com/r1is/CVE-2022-0847) | CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe” | +| 353⭐ | 1068 days ago | [CVE-2022-21894](https://github.com/Wack0/CVE-2022-21894) | baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability | +| 379⭐ | 1588 days ago | [CVE-2022-0185](https://github.com/Crusaders-of-Rust/CVE-2022-0185) | CVE-2022-0185 | +| 595⭐ | 442 days ago | [CVE-2022-38694_unlock_bootloader](https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader) | This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692 | +| 284⭐ | 1461 days ago | [cve-2022-27255](https://github.com/infobyte/cve-2022-27255) | | +| 265⭐ | 1282 days ago | [CVE-2022-39952](https://github.com/horizon3ai/CVE-2022-39952) | POC for CVE-2022-39952 | +| 238⭐ | 1665 days ago | [CVE-2022-20699](https://github.com/Audiobahn/CVE-2022-20699) | Cisco Anyconnect VPN unauth RCE (rwx stack) | +| 235⭐ | 1379 days ago | [CVE-2022-30075](https://github.com/aaronsvk/CVE-2022-30075) | Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075) | \ No newline at end of file diff --git a/scripts/build_site.py b/scripts/build_site.py index 3f34e13c5a1..c5fcb7c5a25 100644 --- a/scripts/build_site.py +++ b/scripts/build_site.py @@ -11,15 +11,11 @@ from urllib.parse import urlparse ROOT = Path(__file__).resolve().parents[1] DOCS_DIR = ROOT / "docs" BLACKLIST = ROOT / "blacklist.txt" -README_PATH = ROOT / "README.md" +TRENDING_INPUT = ROOT / "trending.json" CVE_OUTPUT = DOCS_DIR / "CVE_list.json" TRENDING_OUTPUT = DOCS_DIR / "trending_poc.json" -TREND_ROW_RE = re.compile( - r"^\|\s*(?P\d+)\s*⭐\s*\|\s*(?P[^|]+)\|\s*" - r"\[(?P[^\]]+)\]\((?P[^)]+)\)\s*\|\s*(?P.*)\|$" -) - - +REPO_META = ROOT / "repo_meta.json" +REPO_META_OUTPUT = DOCS_DIR / "repo_meta.json" def load_blacklist() -> set[str]: if not BLACKLIST.exists(): return set() @@ -30,25 +26,6 @@ def load_blacklist() -> set[str]: } -def parse_trending_from_readme(readme_path: Path) -> List[Dict[str, str]]: - """Read the trending table the hot-CVEs job writes into README.md.""" - if not readme_path.exists(): - return [] - rows: List[Dict[str, str]] = [] - year: Optional[str] = None - for raw in readme_path.read_text(encoding="utf-8").splitlines(): - line = raw.strip() - if line.startswith("## ") and line[3:].strip().isdigit(): - year = line[3:].strip() - continue - match = TREND_ROW_RE.match(line) - if match and year: - row = match.groupdict() - row["year"] = year - rows.append(row) - return rows - - def normalise_block(text: str) -> str: text = text.replace("\r\n", "\n") text = re.sub(r"\n{2,}", "\n", text.strip()) @@ -129,10 +106,12 @@ def collect_links(block: str, *, blacklist: Optional[Collection[str]] = None) -> return links -def build_cve_list(blacklist: Collection[str]) -> List[Dict[str, object]]: +def build_cve_list(blacklist: Collection[str]) -> tuple[List[Dict[str, object]], int]: cve_entries = [] + total = 0 for md_path in sorted(ROOT.glob("[12][0-9][0-9][0-9]/CVE-*.md")): + total += 1 content = md_path.read_text(encoding="utf-8") sections = parse_sections(content) description = normalise_block(sections.get("### Description", "")) @@ -157,47 +136,41 @@ def build_cve_list(blacklist: Collection[str]) -> List[Dict[str, object]]: "poc": poc_entries, }) - return cve_entries + return cve_entries, total + + +def build_repo_meta(cve_entries: List[Dict[str, object]]) -> Dict[str, object]: + """Star count and last-push date for the repositories the index actually links.""" + try: + stored = json.loads(REPO_META.read_text(encoding="utf-8")) + except (OSError, json.JSONDecodeError): + return {} + linked = { + repo_from_url(url) + for entry in cve_entries + for url in entry["poc"] + if repo_from_url(url) + } + return {name: value for name, value in stored.items() if name in linked} def build_trending(blacklist: Collection[str]) -> List[Dict[str, object]]: - rows = parse_trending_from_readme(README_PATH) - if not rows: + """The trending job's own output, minus anything the blacklist covers.""" + try: + rows = json.loads(TRENDING_INPUT.read_text(encoding="utf-8")) + except (OSError, json.JSONDecodeError): return [] - - by_year: Dict[int, List[Dict[str, object]]] = {} - for row in rows: - year_text = row.get("year") or "" - if not str(year_text).isdigit(): - continue - year = int(year_text) - url = (row.get("url") or "").strip() - if url and is_blacklisted(url, blacklist): - continue - stars_text = str(row.get("stars") or "").strip() - stars = int(re.sub(r"\D", "", stars_text) or 0) - item = { - "year": year, - "stars": stars, - "updated": (row.get("updated") or "").strip(), - "name": (row.get("name") or "").strip(), - "url": url, - "desc": (row.get("desc") or "").strip(), - } - by_year.setdefault(year, []).append(item) - - if not by_year: - return [] - - current_year = datetime.now(timezone.utc).year - target_year = current_year if current_year in by_year else max(by_year) - return by_year.get(target_year, []) + return [ + row for row in rows + if row.get("url") and not is_blacklisted(str(row["url"]), blacklist) + ] def write_json(path: Path, data, *, indent: Optional[int] = None) -> None: path.parent.mkdir(parents=True, exist_ok=True) with path.open("w", encoding="utf-8") as handle: - json.dump(data, handle, ensure_ascii=False, indent=indent) + json.dump(data, handle, ensure_ascii=False, indent=indent, + separators=None if indent else (",", ":")) def main() -> int: @@ -206,20 +179,28 @@ def main() -> int: DOCS_DIR.mkdir(parents=True, exist_ok=True) blacklist = load_blacklist() - cve_payload = build_cve_list(blacklist) + cve_payload, total_cves = build_cve_list(blacklist) write_json(CVE_OUTPUT, cve_payload) + repo_meta = build_repo_meta(cve_payload) + write_json(REPO_META_OUTPUT, repo_meta) + trending_items = build_trending(blacklist) write_json( TRENDING_OUTPUT, { "generated": datetime.now(timezone.utc).isoformat(), + "total_cves": total_cves, + "with_pocs": len(cve_payload), "items": trending_items, }, indent=2, ) - print(f"Wrote {CVE_OUTPUT.name} ({len(cve_payload)} CVEs) and {TRENDING_OUTPUT.name}") + print( + f"Wrote {CVE_OUTPUT.name} ({len(cve_payload)} of {total_cves} CVEs), " + f"{REPO_META_OUTPUT.name} ({len(repo_meta)} repositories) and {TRENDING_OUTPUT.name}" + ) return 0 diff --git a/trending.json b/trending.json new file mode 100644 index 00000000000..2b4e38e66a5 --- /dev/null +++ b/trending.json @@ -0,0 +1,902 @@ +[ + { + "year": 2026, + "stars": 4056, + "name": "copy-fail-CVE-2026-31431", + "url": "https://github.com/theori-io/copy-fail-CVE-2026-31431", + "desc": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", + "pushed": "2026-04-29T21:21:46Z", + "created": "2026-04-29T12:15:28Z" + }, + { + "year": 2026, + "stars": 571, + "name": "cve_2026_31431", + "url": "https://github.com/rootsecdev/cve_2026_31431", + "desc": "Exploit POC for CVE_2026_31431", + "pushed": "2026-04-29T18:24:24Z", + "created": "2026-04-29T17:46:43Z" + }, + { + "year": 2026, + "stars": 325, + "name": "CVE-2026-54121", + "url": "https://github.com/aniqfakhrul/CVE-2026-54121", + "desc": "Certighost POC", + "pushed": "2026-07-28T15:44:50Z", + "created": "2026-07-23T18:54:34Z" + }, + { + "year": 2026, + "stars": 531, + "name": "cve-2026-41940-PoC", + "url": "https://github.com/lanicer/cve-2026-41940-PoC", + "desc": "A cPanel and WHM authentication bypassing tool", + "pushed": "2026-08-20T10:15:12Z", + "created": "2026-08-19T12:46:46Z" + }, + { + "year": 2026, + "stars": 235, + "name": "CVE-2026-43499-popsicle", + "url": "https://github.com/x-spy/CVE-2026-43499-popsicle", + "desc": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k", + "pushed": "2026-07-15T22:46:59Z", + "created": "2026-07-12T10:15:03Z" + }, + { + "year": 2026, + "stars": 212, + "name": "CVE-2026-41089", + "url": "https://github.com/0xABCD01/CVE-2026-41089", + "desc": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", + "pushed": "2026-06-02T08:30:55Z", + "created": "2026-06-01T04:22:29Z" + }, + { + "year": 2026, + "stars": 260, + "name": "CVE-2026-21858", + "url": "https://github.com/Chocapikk/CVE-2026-21858", + "desc": "n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)", + "pushed": "2026-03-26T13:11:41Z", + "created": "2026-01-07T19:32:42Z" + }, + { + "year": 2026, + "stars": 262, + "name": "CVE-2026-40369-EXPLOIT", + "url": "https://github.com/orinimron123/CVE-2026-40369-EXPLOIT", + "desc": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox", + "pushed": "2026-05-18T21:29:59Z", + "created": "2026-05-13T20:56:15Z" + }, + { + "year": 2026, + "stars": 207, + "name": "CVE-2026-24061", + "url": "https://github.com/SafeBreach-Labs/CVE-2026-24061", + "desc": "Exploitation of CVE-2026-24061", + "pushed": "2026-01-22T19:37:20Z", + "created": "2026-01-22T18:30:17Z" + }, + { + "year": 2026, + "stars": 154, + "name": "CVE-2026-43499", + "url": "https://github.com/MobiusM/CVE-2026-43499", + "desc": "CVE-2026-43499 PoC", + "pushed": "2026-06-27T05:04:04Z", + "created": "2026-06-27T04:09:11Z" + }, + { + "year": 2026, + "stars": 824, + "name": "CVE-2026-24061", + "url": "https://github.com/jacubes/CVE-2026-24061", + "desc": "CVE-2026-24061 exploit PoC", + "pushed": "2026-08-20T10:06:17Z", + "created": "2026-03-08T11:25:39Z" + }, + { + "year": 2026, + "stars": 146, + "name": "CVE-2026-62911", + "url": "https://github.com/hypnguyen1209/CVE-2026-62911", + "desc": "POC pre-auth RCE on Exchange", + "pushed": "2026-08-22T04:49:54Z", + "created": "2026-08-22T04:49:33Z" + }, + { + "year": 2026, + "stars": 79, + "name": "CVE-2026-75604-poc", + "url": "https://github.com/rafabd1/CVE-2026-75604-poc", + "desc": "CVE-2026-75604 Next.js Windows RCE poc", + "pushed": "2026-08-28T02:53:24Z", + "created": "2026-08-25T19:06:37Z" + }, + { + "year": 2026, + "stars": 128, + "name": "CVE-2026-20817", + "url": "https://github.com/oxfemale/CVE-2026-20817", + "desc": "Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service.", + "pushed": "2026-02-19T13:37:06Z", + "created": "2026-02-18T13:56:17Z" + }, + { + "year": 2026, + "stars": 100, + "name": "CVE-2026-42980-POC", + "url": "https://github.com/G4sp4rCS/CVE-2026-42980-POC", + "desc": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH", + "pushed": "2026-07-07T03:53:22Z", + "created": "2026-07-07T03:52:26Z" + }, + { + "year": 2026, + "stars": 111, + "name": "CVE-2026-31431-Advanced-Exploit", + "url": "https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit", + "desc": "CVE-2026-31431 纯文件利用", + "pushed": "2026-04-30T16:24:17Z", + "created": "2026-04-30T02:55:03Z" + }, + { + "year": 2026, + "stars": 119, + "name": "CVE-2026-41651", + "url": "https://github.com/Vozec/CVE-2026-41651", + "desc": "", + "pushed": "2026-04-23T13:55:33Z", + "created": "2026-04-23T08:57:29Z" + }, + { + "year": 2026, + "stars": 18, + "name": "CVE-2026-43499-Poc-Analysis", + "url": "https://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis", + "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", + "pushed": "2026-07-14T16:28:49Z", + "created": "2026-07-14T17:24:44Z" + }, + { + "year": 2026, + "stars": 63, + "name": "CVE-2026-45504", + "url": "https://github.com/hawktrace/CVE-2026-45504", + "desc": "CVE-2026-45504 Microsoft Exchange File Read", + "pushed": "2026-06-24T01:45:46Z", + "created": "2026-06-24T01:05:34Z" + }, + { + "year": 2026, + "stars": 80, + "name": "CVE-2026-43499-Poc-Analysis", + "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis", + "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", + "pushed": "2026-07-30T11:28:07Z", + "created": "2026-07-14T14:21:27Z" + }, + { + "year": 2025, + "stars": 1430, + "name": "CVE-2025-55182", + "url": "https://github.com/msanft/CVE-2025-55182", + "desc": "Explanation and full RCE PoC for CVE-2025-55182", + "pushed": "2025-12-08T13:51:04Z", + "created": "2025-12-04T11:49:55Z" + }, + { + "year": 2025, + "stars": 793, + "name": "CVE-2025-55182-research", + "url": "https://github.com/ejpir/CVE-2025-55182-research", + "desc": "CVE-2025-55182 POC", + "pushed": "2025-12-08T21:21:26Z", + "created": "2025-12-03T21:16:22Z" + }, + { + "year": 2025, + "stars": 715, + "name": "CVE-2025-33073", + "url": "https://github.com/mverschu/CVE-2025-33073", + "desc": "PoC Exploit for the NTLM reflection SMB flaw.", + "pushed": "2026-02-18T09:15:40Z", + "created": "2025-06-13T12:15:14Z" + }, + { + "year": 2025, + "stars": 529, + "name": "CVE-2025-32463_chwoot", + "url": "https://github.com/pr0v3rbs/CVE-2025-32463_chwoot", + "desc": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463", + "pushed": "2025-11-19T13:30:29Z", + "created": "2025-07-01T11:26:15Z" + }, + { + "year": 2025, + "stars": 475, + "name": "CVE-2025-32463", + "url": "https://github.com/kh4sh3i/CVE-2025-32463", + "desc": "Local Privilege Escalation to Root via Sudo chroot in Linux", + "pushed": "2025-07-02T08:04:44Z", + "created": "2025-07-02T07:20:20Z" + }, + { + "year": 2025, + "stars": 268, + "name": "CVE-2025-48799", + "url": "https://github.com/Wh04m1001/CVE-2025-48799", + "desc": "", + "pushed": "2025-07-08T19:35:55Z", + "created": "2025-07-08T15:26:04Z" + }, + { + "year": 2025, + "stars": 315, + "name": "CVE-2025-53770-Exploit", + "url": "https://github.com/soltanali0/CVE-2025-53770-Exploit", + "desc": "SharePoint WebPart Injection Exploit Tool", + "pushed": "2025-11-28T20:11:11Z", + "created": "2025-07-21T13:48:37Z" + }, + { + "year": 2025, + "stars": 316, + "name": "CVE-2025-55182", + "url": "https://github.com/emredavut/CVE-2025-55182", + "desc": "RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478", + "pushed": "2025-12-06T01:27:19Z", + "created": "2025-12-06T00:36:16Z" + }, + { + "year": 2025, + "stars": 1058, + "name": "React2Shell-CVE-2025-55182-original-poc", + "url": "https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc", + "desc": "Original Proof-of-Concepts for React2Shell CVE-2025-55182", + "pushed": "2025-12-05T08:56:15Z", + "created": "2025-12-05T08:00:07Z" + }, + { + "year": 2025, + "stars": 408, + "name": "CVE-2025-24071_PoC", + "url": "https://github.com/0x6rss/CVE-2025-24071_PoC", + "desc": "CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File", + "pushed": "2025-03-20T21:22:23Z", + "created": "2025-03-16T20:10:19Z" + }, + { + "year": 2025, + "stars": 215, + "name": "CVE-2025-32023", + "url": "https://github.com/leesh3288/CVE-2025-32023", + "desc": "PoC & Exploit for CVE-2025-32023 / PlaidCTF 2025 \"Zerodeo\"", + "pushed": "2025-07-06T18:58:01Z", + "created": "2025-07-06T18:09:11Z" + }, + { + "year": 2025, + "stars": 385, + "name": "ColorOS-CVE-2025-10184", + "url": "https://github.com/yuuouu/ColorOS-CVE-2025-10184", + "desc": "ColorOS短信漏洞，以及用户自救方案", + "pushed": "2025-10-15T11:32:43Z", + "created": "2025-09-24T11:48:03Z" + }, + { + "year": 2025, + "stars": 282, + "name": "CVE-2025-55182-advanced-scanner-", + "url": "https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-", + "desc": "", + "pushed": "2025-12-06T19:52:21Z", + "created": "2025-12-06T14:36:55Z" + }, + { + "year": 2025, + "stars": 431, + "name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478", + "url": "https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478", + "desc": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.", + "pushed": "2025-12-16T03:18:16Z", + "created": "2025-12-04T13:13:33Z" + }, + { + "year": 2025, + "stars": 197, + "name": "POC-CVE-2025-24813", + "url": "https://github.com/absholi7ly/POC-CVE-2025-24813", + "desc": "his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.", + "pushed": "2025-03-14T07:57:27Z", + "created": "2025-03-14T07:36:58Z" + }, + { + "year": 2025, + "stars": 233, + "name": "CVE-2025-21333-POC", + "url": "https://github.com/MrAle98/CVE-2025-21333-POC", + "desc": "POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY", + "pushed": "2025-04-12T22:14:58Z", + "created": "2025-02-27T12:36:55Z" + }, + { + "year": 2025, + "stars": 190, + "name": "RSC-Detect-CVE-2025-55182", + "url": "https://github.com/alptexans/RSC-Detect-CVE-2025-55182", + "desc": "RSC Detect CVE 2025 55182", + "pushed": "2026-02-25T15:37:19Z", + "created": "2026-02-25T15:36:22Z" + }, + { + "year": 2025, + "stars": 196, + "name": "CVE-2025-30208-EXP", + "url": "https://github.com/ThumpBo/CVE-2025-30208-EXP", + "desc": "CVE-2025-30208-EXP", + "pushed": "2025-04-01T07:52:49Z", + "created": "2025-03-26T15:42:31Z" + }, + { + "year": 2025, + "stars": 143, + "name": "CVE-2025-32433", + "url": "https://github.com/ProDefense/CVE-2025-32433", + "desc": "CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2", + "pushed": "2025-08-02T18:24:05Z", + "created": "2025-04-18T00:35:11Z" + }, + { + "year": 2025, + "stars": 161, + "name": "CVE-2025-21756", + "url": "https://github.com/hoefler02/CVE-2025-21756", + "desc": "Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!", + "pushed": "2025-06-05T21:32:05Z", + "created": "2025-04-18T14:22:15Z" + }, + { + "year": 2024, + "stars": 2457, + "name": "CVE-2024-1086", + "url": "https://github.com/Notselwyn/CVE-2024-1086", + "desc": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.", + "pushed": "2024-04-17T16:09:54Z", + "created": "2024-03-20T21:16:41Z" + }, + { + "year": 2024, + "stars": 693, + "name": "CVE-2024-38063", + "url": "https://github.com/ynwarcs/CVE-2024-38063", + "desc": "poc for CVE-2024-38063 (RCE in tcpip.sys)", + "pushed": "2024-08-27T12:22:39Z", + "created": "2024-08-24T18:25:46Z" + }, + { + "year": 2024, + "stars": 496, + "name": "cve-2024-6387-poc", + "url": "https://github.com/zgzhang/cve-2024-6387-poc", + "desc": "a signal handler race condition in OpenSSH's server (sshd)", + "pushed": "2024-07-01T10:54:02Z", + "created": "2024-07-01T10:55:29Z" + }, + { + "year": 2024, + "stars": 520, + "name": "CVE-2024-49113", + "url": "https://github.com/SafeBreach-Labs/CVE-2024-49113", + "desc": "LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113", + "pushed": "2025-01-02T16:07:23Z", + "created": "2025-01-01T15:48:38Z" + }, + { + "year": 2024, + "stars": 527, + "name": "CVE-2024-6387_Check", + "url": "https://github.com/xaitax/CVE-2024-6387_Check", + "desc": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH", + "pushed": "2026-05-29T11:44:40Z", + "created": "2024-07-01T20:33:20Z" + }, + { + "year": 2024, + "stars": 224, + "name": "CVE-2024-38077", + "url": "https://github.com/qi4L/CVE-2024-38077", + "desc": "RDL的堆溢出导致的RCE", + "pushed": "2024-08-14T04:43:05Z", + "created": "2024-08-09T05:00:44Z" + }, + { + "year": 2024, + "stars": 335, + "name": "CVE-2024-21338", + "url": "https://github.com/hakaioffsec/CVE-2024-21338", + "desc": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.", + "pushed": "2024-04-16T21:00:14Z", + "created": "2024-04-13T05:53:02Z" + }, + { + "year": 2024, + "stars": 380, + "name": "cve-2024-6387-poc", + "url": "https://github.com/acrono/cve-2024-6387-poc", + "desc": "32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc", + "pushed": "2024-07-01T12:25:01Z", + "created": "2024-07-01T12:16:21Z" + }, + { + "year": 2024, + "stars": 330, + "name": "CVE-2024-0044", + "url": "https://github.com/0xbinder/CVE-2024-0044", + "desc": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13", + "pushed": "2024-12-02T06:29:52Z", + "created": "2024-06-18T12:30:53Z" + }, + { + "year": 2024, + "stars": 321, + "name": "CVE-2024-4577", + "url": "https://github.com/watchtowrlabs/CVE-2024-4577", + "desc": "PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC", + "pushed": "2024-06-22T15:13:52Z", + "created": "2024-06-07T09:52:54Z" + }, + { + "year": 2024, + "stars": 289, + "name": "CVE-2024-30088", + "url": "https://github.com/tykawaii98/CVE-2024-30088", + "desc": "", + "pushed": "2024-07-31T19:11:55Z", + "created": "2024-06-24T10:37:26Z" + }, + { + "year": 2024, + "stars": 278, + "name": "CVE-2024-21413", + "url": "https://github.com/CMNatic/CVE-2024-21413", + "desc": "CVE-2024-21413 PoC for THM Lab", + "pushed": "2024-03-13T02:44:28Z", + "created": "2024-02-17T14:52:52Z" + }, + { + "year": 2024, + "stars": 769, + "name": "CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability", + "url": "https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability", + "desc": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability", + "pushed": "2024-02-19T20:00:35Z", + "created": "2024-02-16T15:17:59Z" + }, + { + "year": 2024, + "stars": 271, + "name": "CVE-2024-49138-POC", + "url": "https://github.com/MrAle98/CVE-2024-49138-POC", + "desc": "POC exploit for CVE-2024-49138", + "pushed": "2025-02-14T22:04:41Z", + "created": "2025-01-15T00:43:37Z" + }, + { + "year": 2024, + "stars": 194, + "name": "CVE-2024-6387", + "url": "https://github.com/Karmakstylez/CVE-2024-6387", + "desc": "Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)", + "pushed": "2024-08-22T08:50:25Z", + "created": "2024-07-08T11:27:49Z" + }, + { + "year": 2024, + "stars": 9, + "name": "CVE-2024-38077-POC", + "url": "https://github.com/SecStarBot/CVE-2024-38077-POC", + "desc": "", + "pushed": "2024-08-09T01:19:08Z", + "created": "2024-08-09T01:24:59Z" + }, + { + "year": 2024, + "stars": 235, + "name": "CVE_2024_30078_POC_WIFI", + "url": "https://github.com/blkph0x/CVE_2024_30078_POC_WIFI", + "desc": "basic concept for the latest windows wifi driver CVE", + "pushed": "2024-10-31T14:05:40Z", + "created": "2024-06-20T05:58:45Z" + }, + { + "year": 2024, + "stars": 180, + "name": "CVE-2024-25600", + "url": "https://github.com/Chocapikk/CVE-2024-25600", + "desc": "Unauthenticated Remote Code Execution – Bricks <= 1.9.6", + "pushed": "2024-02-25T21:50:09Z", + "created": "2024-02-20T20:16:09Z" + }, + { + "year": 2024, + "stars": 217, + "name": "CVE-2024-21111", + "url": "https://github.com/mansk1es/CVE-2024-21111", + "desc": "Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability", + "pushed": "2024-05-09T16:39:55Z", + "created": "2024-04-22T07:05:04Z" + }, + { + "year": 2024, + "stars": 136, + "name": "CVE-2024-7479_CVE-2024-7481", + "url": "https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481", + "desc": "TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.", + "pushed": "2024-12-22T21:34:26Z", + "created": "2024-09-29T10:58:15Z" + }, + { + "year": 2023, + "stars": 782, + "name": "CVE-2023-38831-winrar-exploit", + "url": "https://github.com/b1tg/CVE-2023-38831-winrar-exploit", + "desc": "CVE-2023-38831 winrar exploit generator", + "pushed": "2023-11-26T06:46:44Z", + "created": "2023-08-25T09:44:08Z" + }, + { + "year": 2023, + "stars": 382, + "name": "CVE-2023-32233", + "url": "https://github.com/Liuk3r/CVE-2023-32233", + "desc": "CVE-2023-32233: Linux内核中的安全漏洞", + "pushed": "2023-05-16T04:34:16Z", + "created": "2023-05-16T03:06:40Z" + }, + { + "year": 2023, + "stars": 506, + "name": "Windows_LPE_AFD_CVE-2023-21768", + "url": "https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768", + "desc": "LPE exploit for CVE-2023-21768", + "pushed": "2023-07-10T16:35:49Z", + "created": "2023-03-07T23:00:27Z" + }, + { + "year": 2023, + "stars": 418, + "name": "CVE-2023-0386", + "url": "https://github.com/xkaneiki/CVE-2023-0386", + "desc": "CVE-2023-0386在ubuntu22.04上的提权", + "pushed": "2023-06-13T08:58:53Z", + "created": "2023-05-05T03:02:13Z" + }, + { + "year": 2023, + "stars": 116, + "name": "CVE-2023-21839", + "url": "https://github.com/ASkyeye/CVE-2023-21839", + "desc": "Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)", + "pushed": "2026-08-11T13:17:49Z", + "created": "2023-02-24T13:54:42Z" + }, + { + "year": 2023, + "stars": 328, + "name": "CVE-2023-21752", + "url": "https://github.com/Wh04m1001/CVE-2023-21752", + "desc": "", + "pushed": "2023-01-13T09:01:20Z", + "created": "2023-01-10T15:59:26Z" + }, + { + "year": 2023, + "stars": 393, + "name": "CVE-2023-4911", + "url": "https://github.com/leesh3288/CVE-2023-4911", + "desc": "PoC for CVE-2023-4911", + "pushed": "2023-10-04T14:16:36Z", + "created": "2023-10-04T14:12:16Z" + }, + { + "year": 2023, + "stars": 283, + "name": "CVE-2023-21608", + "url": "https://github.com/hacksysteam/CVE-2023-21608", + "desc": "Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit", + "pushed": "2023-12-05T12:21:02Z", + "created": "2023-01-30T12:57:48Z" + }, + { + "year": 2023, + "stars": 317, + "name": "CVE-2023-4863", + "url": "https://github.com/mistymntncop/CVE-2023-4863", + "desc": "", + "pushed": "2023-12-18T04:25:00Z", + "created": "2023-09-21T05:22:51Z" + }, + { + "year": 2023, + "stars": 242, + "name": "CVE-2023-36874", + "url": "https://github.com/Wh04m1001/CVE-2023-36874", + "desc": "", + "pushed": "2023-08-23T16:46:53Z", + "created": "2023-08-23T12:07:40Z" + }, + { + "year": 2023, + "stars": 247, + "name": "CVE-2023-44487", + "url": "https://github.com/bcdannyboy/CVE-2023-44487", + "desc": "Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487", + "pushed": "2024-01-08T11:12:08Z", + "created": "2023-10-10T14:20:42Z" + }, + { + "year": 2023, + "stars": 245, + "name": "CVE-2023-7028", + "url": "https://github.com/Vozec/CVE-2023-7028", + "desc": "This repository presents a proof-of-concept of CVE-2023-7028", + "pushed": "2024-01-13T13:50:20Z", + "created": "2024-01-12T18:29:27Z" + }, + { + "year": 2023, + "stars": 228, + "name": "CVE-2023-3519", + "url": "https://github.com/BishopFox/CVE-2023-3519", + "desc": "RCE exploit for CVE-2023-3519", + "pushed": "2023-08-23T16:27:28Z", + "created": "2023-07-21T20:17:43Z" + }, + { + "year": 2023, + "stars": 169, + "name": "CVE-2023-36745", + "url": "https://github.com/N1k0la-T/CVE-2023-36745", + "desc": "", + "pushed": "2023-10-29T11:12:26Z", + "created": "2023-10-23T19:06:36Z" + }, + { + "year": 2023, + "stars": 346, + "name": "CVE-2023-23397-POC-Powershell", + "url": "https://github.com/api0cradle/CVE-2023-23397-POC-Powershell", + "desc": "", + "pushed": "2023-03-17T07:47:40Z", + "created": "2023-03-16T19:43:39Z" + }, + { + "year": 2023, + "stars": 228, + "name": "CVE-2023-20887", + "url": "https://github.com/sinsinology/CVE-2023-20887", + "desc": "VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)", + "pushed": "2023-06-13T14:39:17Z", + "created": "2023-06-13T13:17:23Z" + }, + { + "year": 2023, + "stars": 183, + "name": "CVE-2023-28252", + "url": "https://github.com/fortra/CVE-2023-28252", + "desc": "", + "pushed": "2023-07-10T16:57:44Z", + "created": "2023-06-27T12:22:05Z" + }, + { + "year": 2023, + "stars": 136, + "name": "CVE-2023-2640-CVE-2023-32629", + "url": "https://github.com/g1vi/CVE-2023-2640-CVE-2023-32629", + "desc": "GameOver(lay) Ubuntu Privilege Escalation", + "pushed": "2023-10-09T22:44:21Z", + "created": "2023-10-09T22:02:42Z" + }, + { + "year": 2023, + "stars": 241, + "name": "Weblogic-CVE-2023-21839", + "url": "https://github.com/DXask88MA/Weblogic-CVE-2023-21839", + "desc": "", + "pushed": "2023-02-26T06:43:18Z", + "created": "2023-02-21T16:08:56Z" + }, + { + "year": 2023, + "stars": 207, + "name": "CVE-2023-46747-RCE", + "url": "https://github.com/W01fh4cker/CVE-2023-46747-RCE", + "desc": "exploit for f5-big-ip RCE cve-2023-46747", + "pushed": "2024-10-20T10:27:37Z", + "created": "2023-11-01T09:31:05Z" + }, + { + "year": 2022, + "stars": 461, + "name": "CVE-2022-21882", + "url": "https://github.com/KaLendsi/CVE-2022-21882", + "desc": "win32k LPE", + "pushed": "2022-01-27T04:18:18Z", + "created": "2022-01-27T03:44:10Z" + }, + { + "year": 2022, + "stars": 1133, + "name": "CVE-2022-0847-DirtyPipe-Exploit", + "url": "https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit", + "desc": "A root exploit for CVE-2022-0847 (Dirty Pipe)", + "pushed": "2022-03-08T06:20:05Z", + "created": "2022-03-07T18:55:20Z" + }, + { + "year": 2022, + "stars": 573, + "name": "CVE-2022-23222", + "url": "https://github.com/tr3ee/CVE-2022-23222", + "desc": "CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation", + "pushed": "2022-06-07T03:41:13Z", + "created": "2022-06-07T03:20:23Z" + }, + { + "year": 2022, + "stars": 360, + "name": "CVE-2022-21907", + "url": "https://github.com/ZZ-SOCMAP/CVE-2022-21907", + "desc": "HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907", + "pushed": "2022-01-20T02:07:59Z", + "created": "2022-01-17T02:28:50Z" + }, + { + "year": 2022, + "stars": 377, + "name": "CVE-2022-29464", + "url": "https://github.com/hakivvi/CVE-2022-29464", + "desc": "WSO2 RCE (CVE-2022-29464) exploit and writeup.", + "pushed": "2022-04-27T05:52:43Z", + "created": "2022-04-20T21:23:52Z" + }, + { + "year": 2022, + "stars": 358, + "name": "CVE-2022-40684", + "url": "https://github.com/horizon3ai/CVE-2022-40684", + "desc": "A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager", + "pushed": "2022-10-13T15:25:00Z", + "created": "2022-10-13T14:24:12Z" + }, + { + "year": 2022, + "stars": 729, + "name": "CVE-2022-0847-DirtyPipe-Exploits", + "url": "https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits", + "desc": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.", + "pushed": "2023-05-20T05:55:45Z", + "created": "2022-03-12T20:57:24Z" + }, + { + "year": 2022, + "stars": 437, + "name": "CVE-2022-25636", + "url": "https://github.com/Bonfee/CVE-2022-25636", + "desc": "CVE-2022-25636", + "pushed": "2022-03-07T17:18:19Z", + "created": "2022-03-07T13:38:41Z" + }, + { + "year": 2022, + "stars": 487, + "name": "CVE-2022-2588", + "url": "https://github.com/Markakd/CVE-2022-2588", + "desc": "exploit for CVE-2022-2588", + "pushed": "2023-03-04T05:52:28Z", + "created": "2022-08-11T06:01:24Z" + }, + { + "year": 2022, + "stars": 415, + "name": "CVE-2022-33679", + "url": "https://github.com/Bdenneu/CVE-2022-33679", + "desc": "One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html", + "pushed": "2024-11-10T17:21:28Z", + "created": "2022-11-02T18:38:01Z" + }, + { + "year": 2022, + "stars": 497, + "name": "CVE-2022-0995", + "url": "https://github.com/Bonfee/CVE-2022-0995", + "desc": "CVE-2022-0995 exploit", + "pushed": "2022-03-27T09:07:01Z", + "created": "2022-03-26T21:46:09Z" + }, + { + "year": 2022, + "stars": 387, + "name": "CVE-2022-39197", + "url": "https://github.com/its-arun/CVE-2022-39197", + "desc": "CobaltStrike <= 4.7.1 RCE", + "pushed": "2022-10-25T05:32:54Z", + "created": "2022-10-14T11:46:01Z" + }, + { + "year": 2022, + "stars": 282, + "name": "CVE-2022-0847", + "url": "https://github.com/r1is/CVE-2022-0847", + "desc": "CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”", + "pushed": "2023-02-02T02:17:30Z", + "created": "2022-03-07T18:36:50Z" + }, + { + "year": 2022, + "stars": 353, + "name": "CVE-2022-21894", + "url": "https://github.com/Wack0/CVE-2022-21894", + "desc": "baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability", + "pushed": "2023-09-27T06:44:27Z", + "created": "2022-08-09T15:53:48Z" + }, + { + "year": 2022, + "stars": 379, + "name": "CVE-2022-0185", + "url": "https://github.com/Crusaders-of-Rust/CVE-2022-0185", + "desc": "CVE-2022-0185", + "pushed": "2022-04-25T04:11:33Z", + "created": "2022-01-19T06:19:38Z" + }, + { + "year": 2022, + "stars": 595, + "name": "CVE-2022-38694_unlock_bootloader", + "url": "https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader", + "desc": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https://github.com/TomKing062/CVE-2022-38691_38692", + "pushed": "2025-06-14T16:55:26Z", + "created": "2023-06-10T08:31:26Z" + }, + { + "year": 2022, + "stars": 284, + "name": "cve-2022-27255", + "url": "https://github.com/infobyte/cve-2022-27255", + "desc": "", + "pushed": "2022-08-30T13:23:51Z", + "created": "2022-07-06T17:29:04Z" + }, + { + "year": 2022, + "stars": 265, + "name": "CVE-2022-39952", + "url": "https://github.com/horizon3ai/CVE-2022-39952", + "desc": "POC for CVE-2022-39952", + "pushed": "2023-02-25T08:52:03Z", + "created": "2023-02-20T15:12:33Z" + }, + { + "year": 2022, + "stars": 238, + "name": "CVE-2022-20699", + "url": "https://github.com/Audiobahn/CVE-2022-20699", + "desc": "Cisco Anyconnect VPN unauth RCE (rwx stack)", + "pushed": "2022-02-07T15:55:03Z", + "created": "2022-02-07T15:53:21Z" + }, + { + "year": 2022, + "stars": 235, + "name": "CVE-2022-30075", + "url": "https://github.com/aaronsvk/CVE-2022-30075", + "desc": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)", + "pushed": "2022-11-20T03:03:53Z", + "created": "2022-06-07T23:26:47Z" + } +]