From 55279dcfe511cdc3bf00f5e134ec283206dd4ffe Mon Sep 17 00:00:00 2001 From: 0xMarcio Date: Wed, 2 Sep 2026 00:44:21 +0200 Subject: [PATCH] Improve trending year coverage --- .github/getTrending.py | 71 +++++---- README.md | 60 ++++---- index/trending.json | 324 ++++++++++++++++++++--------------------- 3 files changed, 237 insertions(+), 218 deletions(-) diff --git a/.github/getTrending.py b/.github/getTrending.py index 922ed2191b2..130011ca4f8 100644 --- a/.github/getTrending.py +++ b/.github/getTrending.py @@ -27,7 +27,8 @@ LANGUAGES = ( ) YEARS = 5 PER_YEAR = 20 -POOL = 50 # fetched per year before re-sorting by last commit +SEARCH_PAGE = 100 +SEARCH_LIMIT = 1000 WINDOW_DAYS = 90 # a PoC nobody has touched this quarter is not "recent" MIN_STARS = 2 # A PoC published today has no stars yet, so the star floor hid exactly the @@ -35,6 +36,7 @@ MIN_STARS = 2 # short window and a hard cap. LANDED_DAYS = 10 LANDED_ROWS = 10 +LANDED_POOL = 50 NVD_API = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=" # NVD allows five requests per thirty seconds unauthenticated, and only a # couple of rows per run ever need one. @@ -135,7 +137,7 @@ def just_landed(token: str, seen: set[str]) -> list[dict]: year = datetime.now(timezone.utc).year rows: list[dict] = [] for target in (year, year - 1): - _, found = search(f'"CVE-{target}" in:name pushed:>{since}', POOL) + _, found = search(f'"CVE-{target}" in:name pushed:>{since}', LANDED_POOL) rows.extend(found) candidates = [] @@ -176,20 +178,12 @@ def just_landed(token: str, seen: set[str]) -> list[dict]: def search_year(year: int, since: str) -> tuple[int, list[dict]]: """Return how many PoC repositories for one CVE year were pushed since a - date, and the most recently pushed of them. - - The API can only sort by updated_at, which also moves when a repository - merely gains a star. Since a push always bumps updated_at too, the newest - commits are guaranteed to sit near the top of that order: take a pool from - there and re-sort it by the date the table actually shows. + date, and every result GitHub exposes for the final artifact-date sort. """ query = " ".join( [f'"CVE-{year}" in:name', f"stars:>{MIN_STARS}", f"pushed:>{since}"] + [f"language:{language}" for language in LANGUAGES] ) - url = SEARCH_URL + "?" + parse.urlencode( - {"q": query, "s": "updated", "o": "desc", "per_page": POOL} - ) headers = {"Accept": "application/vnd.github+json", "User-Agent": USER_AGENT} # The token authenticates the API only; it is never placed in the URL, # written to disk, or printed, so it cannot leak through logs or the commit. @@ -197,19 +191,42 @@ def search_year(year: int, since: str) -> tuple[int, list[dict]]: if token: headers["Authorization"] = f"Bearer {token}" - for attempt in range(3): - try: - with request.urlopen(request.Request(url, headers=headers), timeout=30) as response: - payload = json.load(response) - return int(payload.get("total_count") or 0), payload.get("items") or [] - except error.HTTPError as exc: - if exc.code not in {403, 429, 500, 502, 503, 504} or attempt == 2: - raise - except (error.URLError, TimeoutError, json.JSONDecodeError): - if attempt == 2: - raise - time.sleep(5 * (attempt + 1)) - raise RuntimeError(f"GitHub search failed for CVE-{year}") + repositories: list[dict] = [] + seen: set[str] = set() + total = 0 + for page in range(1, SEARCH_LIMIT // SEARCH_PAGE + 1): + url = SEARCH_URL + "?" + parse.urlencode({ + "q": query, + "s": "updated", + "o": "desc", + "per_page": SEARCH_PAGE, + "page": page, + }) + for attempt in range(3): + try: + with request.urlopen( + request.Request(url, headers=headers), timeout=30 + ) as response: + payload = json.load(response) + break + except error.HTTPError as exc: + if exc.code not in {403, 429, 500, 502, 503, 504} or attempt == 2: + raise + except (error.URLError, TimeoutError, json.JSONDecodeError): + if attempt == 2: + raise + time.sleep(5 * (attempt + 1)) + + total = int(payload.get("total_count") or 0) + found = payload.get("items") or [] + for repo in found: + name = str(repo.get("full_name") or "") + if name and name not in seen: + seen.add(name) + repositories.append(repo) + if not found or len(repositories) >= min(total, SEARCH_LIMIT): + break + return total, repositories def github_token() -> str: @@ -608,7 +625,7 @@ def main() -> int: if not repositories: continue block = [ - f"## {year} · newest {len(repositories)} of {total}", + f"## Trending in {year}", "", "| Stars | Updated | Repository | Description |", "| --- | --- | --- | --- |", @@ -691,7 +708,9 @@ def main() -> int: lines.append("") for index, block in enumerate(sections): if index == FOLDED_AFTER and len(sections) > FOLDED_AFTER: - years = ", ".join(section[0][3:7] for section in sections[FOLDED_AFTER:]) + years = ", ".join( + section[0].rsplit(" ", 1)[-1] for section in sections[FOLDED_AFTER:] + ) lines.append(f"
\n{years}\n") lines.extend(block) lines.append("") diff --git a/README.md b/README.md index 757abbd1153..8752c056efb 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-CVE Radar +CVE Radar -[![last sync](https://img.shields.io/badge/last%20sync-01%20Sep%202026%2020%3A57%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/cve/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/cve/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609012057)](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-91%2C895-2f81f7?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C190-f85149?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![stars](https://img.shields.io/github/stars/0xMarcio/cve?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609012057)](https://github.com/0xMarcio/cve/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-01%20Sep%202026%2022%3A40%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/cve/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/cve/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609012240)](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-91%2C895-2f81f7?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C190-f85149?style=flat-square&labelColor=161b22)](https://cve.codepwn.win/) [![stars](https://img.shields.io/github/stars/0xMarcio/cve?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609012240)](https://github.com/0xMarcio/cve/stargazers)
@@ -14,43 +14,43 @@ No star floor here, so a PoC published this morning shows up the same day rather | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 10h ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… | -| 0⭐ | 23h ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | +| 0⭐ | 11h ago | [CVE-2025-39401](https://github.com/katranSefa/CVE-2025-39401) | Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows… | +| 0⭐ | 1d ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… | | 0⭐ | 1d ago | KEV [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… | | 10⭐ | 1d ago | KEV [cve-2025-21479-iqoo11pro](https://github.com/Type010/cve-2025-21479-iqoo11pro) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 2⭐ | 1d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | +| 2⭐ | 2d ago | [CVE-2026-78904-Digital-Dinar-Drain](https://github.com/vxssroott/CVE-2026-78904-Digital-Dinar-Drain) | CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central… | +| 0⭐ | 2d ago | [cve-2026-42945](https://github.com/FranklinF25/cve-2026-42945) | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This… | | 0⭐ | 2d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | -| 10⭐ | 2d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | +| 0⭐ | 2d ago | [CVE-2026-76581](https://github.com/HORKimhab/CVE-2026-76581) | The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and… | | 2⭐ | 3d ago | [CVE-2026-19745](https://github.com/drbloop2000/CVE-2026-19745) | Learn how I found my first two CVEs by pure accident. | | 2⭐ | 3d ago | KEV [PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078) | Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078 | -| 0⭐ | 3d ago | [cve-2025-29927](https://github.com/kuyrathdaro/cve-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | -## 2026 · newest 20 of 255 +## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | +| 10⭐ | 2d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. | +| 18⭐ | 5d ago | KEV [CVE-2026-72898](https://github.com/EQSTLab/CVE-2026-72898) | Metabase SQLi | +| 3⭐ | 5d ago | [CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478) | GitLab Code injection | +| 3⭐ | 5d ago | KEV [CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion… | +| 4⭐ | 6d ago | KEV [CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570) | Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc) | | 81⭐ | 6d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | +| 5⭐ | 7d ago | KEV [CVE-2026-73570](https://github.com/HORKimhab/CVE-2026-73570) | A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional… | +| 3⭐ | 7d ago | [CVE-2026-32475-PoC](https://github.com/Boreas37/CVE-2026-32475-PoC) | PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python. | +| 13⭐ | 7d ago | [Keycloak_CVE-2026-18963_PoC](https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC) | This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...). | +| 19⭐ | 7d ago | [CVE-2026-18963-keycloak](https://github.com/Red-Darkin/CVE-2026-18963-keycloak) | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine… | +| 4⭐ | 8d ago | [CVE-2026-20079](https://github.com/CyberAuth/CVE-2026-20079) | Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center. | +| 4⭐ | 10d ago | KEV [CVE-2026-65400](https://github.com/acheong08/CVE-2026-65400) | Apple MacOS Screen Sharing Arbitrary File read/write -> RCE | | 160⭐ | 10d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange | +| 4⭐ | 11d ago | KEV [CVE-2026-65400-poc](https://github.com/panchocosil/CVE-2026-65400-poc) | Read-only PoC for CVE-2026-65400 - macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file… | +| 6⭐ | 11d ago | KEV [CVE-2026-34910-PoC](https://github.com/Boreas37/CVE-2026-34910-PoC) | CVE-2026-34910/34909 - UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW) | | 53⭐ | 11d ago | [CVE-2026-64638-PoC-XSS2Shell-](https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-) | XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain - PoC exploit + defensive audit tool + nuclei… | -| 37⭐ | 11d ago | [CVE-2026-18963-Exploit](https://github.com/Snizi/CVE-2026-18963-Exploit) | Exploit for KeyCloak CVE-2026-18963 | -| 431⭐ | 11d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | +| 37⭐ | 12d ago | [CVE-2026-18963-Exploit](https://github.com/Snizi/CVE-2026-18963-Exploit) | Exploit for KeyCloak CVE-2026-18963 | +| 431⭐ | 12d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 531⭐ | 12d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 824⭐ | 12d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | -| 24⭐ | 19d ago | [CVE-2026-66804-CrossDevice-Service-EoP](https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP) | CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM | -| 33⭐ | 20d ago | [CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138) | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC | -| 19⭐ | 25d ago | KEV [CVE-2026-63077](https://github.com/sfewer-r7/CVE-2026-63077) | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) | -| 58⭐ | 26d ago | KEV [CVE-2026-55040](https://github.com/sfewer-r7/CVE-2026-55040) | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) | -| 17⭐ | 29d ago | KEV [CVE-2026-60004-POC](https://github.com/imbas007/CVE-2026-60004-POC) | CVE-2026-60004 Pre-Auth RCE Exploit - Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) | -| 81⭐ | 33d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… | -| 23⭐ | 33d ago | [CVE-2026-66066-POC](https://github.com/Zer0SumGam3/CVE-2026-66066-POC) | PoC for CVE-2026-66066 in Ruby on Rails | -| 11⭐ | 35d ago | KEV [CVE-2026-16232](https://github.com/sfewer-r7/CVE-2026-16232) | A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login… | -| 325⭐ | 36d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | -| 35⭐ | 36d ago | [CVE-2026-42533](https://github.com/imbas007/CVE-2026-42533) | nginx heap buffer overflow PoC - CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed… | -| 26⭐ | 37d ago | [CVE-2026-43499-root-KernelSU](https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU) | 基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 | -| 27⭐ | 37d ago | [CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) | 👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP… | -| 34⭐ | 39d ago | [POC-CVE-2026-60206](https://github.com/imbas007/POC-CVE-2026-60206) | cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security | -## 2025 · newest 16 of 24 +## Trending in 2025 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | @@ -68,34 +68,34 @@ No star floor here, so a PoC published this morning shows up the same day rather | 4⭐ | 65d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… | | 5⭐ | 68d ago | KEV [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 | | 14⭐ | 81d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | -| 14⭐ | 86d ago | KEV [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable… | +| 14⭐ | 87d ago | KEV [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable… | | 7⭐ | 87d ago | KEV [CVE-2025-57819-poc](https://github.com/b4sh2/CVE-2025-57819-poc) | CVE-2025-57819 -> rce |
2024, 2023, 2022 -## 2024 · newest 6 of 10 +## Trending in 2024 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 16⭐ | 16d ago | [CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) | A PoC of the CVE-2024-56426 vulnerability. | | 3⭐ | 17d ago | [CVE-2024-56426](https://github.com/xcracker000/CVE-2024-56426) | CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F | -| 3⭐ | 33d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | +| 3⭐ | 34d ago | [CVE-2024-36104-PoC](https://github.com/Groppoxx/CVE-2024-36104-PoC) | PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path… | | 3⭐ | 72d ago | [CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) | Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed. | | 7⭐ | 81d ago | [CVE-2024-27983-nodejs-http2](https://github.com/lirantal/CVE-2024-27983-nodejs-http2) | CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on… | | 4⭐ | 87d ago | [CVE-2024-1065](https://github.com/kuzeyardabulut/CVE-2024-1065) | Page Cache Exploit for CVE-2024-1065 | -## 2023 · newest 5 of 8 +## Trending in 2023 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | | 3⭐ | 36d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | | 5⭐ | 41d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | -| 3⭐ | 55d ago | KEV [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | +| 3⭐ | 56d ago | KEV [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | | 15⭐ | 58d ago | KEV [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass | | 6⭐ | 74d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. | -## 2022 · newest 1 of 11 +## Trending in 2022 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | diff --git a/index/trending.json b/index/trending.json index d0c890fb6a8..1402c5773d1 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,4 +1,59 @@ [ + { + "year": 2026, + "stars": 10, + "name": "givewp-cve-2026-82222-rce-lab", + "url": "https://github.com/dinosn/givewp-cve-2026-82222-rce-lab", + "desc": "Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.", + "pushed": "2026-08-30T05:18:46Z", + "created": "2026-08-30T05:15:27Z", + "cve": "CVE-2026-82222", + "kev": false + }, + { + "year": 2026, + "stars": 18, + "name": "CVE-2026-72898", + "url": "https://github.com/EQSTLab/CVE-2026-72898", + "desc": "Metabase SQLi", + "pushed": "2026-08-27T07:03:38Z", + "created": "2026-08-27T06:51:58Z", + "cve": "CVE-2026-72898", + "kev": true + }, + { + "year": 2026, + "stars": 3, + "name": "CVE-2026-19478", + "url": "https://github.com/EQSTLab/CVE-2026-19478", + "desc": "GitLab Code injection", + "pushed": "2026-08-27T06:35:52Z", + "created": "2026-08-27T06:30:36Z", + "cve": "CVE-2026-19478", + "kev": false + }, + { + "year": 2026, + "stars": 3, + "name": "CVE-2026-21962", + "url": "https://github.com/zeetee1235/CVE-2026-21962", + "desc": "Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in accessible data. Note: Affected version for Weblogic Server Proxy Plug-in for IIS is 12.2.1.4.0 only. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).", + "pushed": "2026-08-27T03:00:13Z", + "created": "2026-08-27T02:59:01Z", + "cve": "CVE-2026-21962", + "kev": true + }, + { + "year": 2026, + "stars": 4, + "name": "CVE-2026-73570", + "url": "https://github.com/gabrielunknown/CVE-2026-73570", + "desc": "Zimbra SNMP Notification OS Command Injection - Unauthenticated RCE via SMTP exploit (Poc)", + "pushed": "2026-08-26T03:33:12Z", + "created": "2026-08-26T03:30:14Z", + "cve": "CVE-2026-73570", + "kev": true + }, { "year": 2026, "stars": 81, @@ -10,6 +65,72 @@ "cve": "CVE-2026-75604", "kev": false }, + { + "year": 2026, + "stars": 5, + "name": "CVE-2026-73570", + "url": "https://github.com/HORKimhab/CVE-2026-73570", + "desc": "A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send specially crafted SMTP requests that may result in execution of arbitrary operating system commands as the Zimbra user.", + "pushed": "2026-08-25T19:39:26Z", + "created": "2026-08-21T03:18:23Z", + "cve": "CVE-2026-73570", + "kev": true + }, + { + "year": 2026, + "stars": 3, + "name": "CVE-2026-32475-PoC", + "url": "https://github.com/Boreas37/CVE-2026-32475-PoC", + "desc": "PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python.", + "pushed": "2026-08-25T12:09:33Z", + "created": "2026-08-25T01:20:49Z", + "cve": "CVE-2026-32475", + "kev": false + }, + { + "year": 2026, + "stars": 13, + "name": "Keycloak_CVE-2026-18963_PoC", + "url": "https://github.com/prot0tw/Keycloak_CVE-2026-18963_PoC", + "desc": "This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...).", + "pushed": "2026-08-25T03:58:23Z", + "created": "2026-08-25T02:28:04Z", + "cve": "CVE-2026-18963", + "kev": false + }, + { + "year": 2026, + "stars": 19, + "name": "CVE-2026-18963-keycloak", + "url": "https://github.com/Red-Darkin/CVE-2026-18963-keycloak", + "desc": "A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.", + "pushed": "2026-08-24T23:44:49Z", + "created": "2026-08-24T23:40:17Z", + "cve": "CVE-2026-18963", + "kev": false + }, + { + "year": 2026, + "stars": 4, + "name": "CVE-2026-20079", + "url": "https://github.com/CyberAuth/CVE-2026-20079", + "desc": "Python proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.", + "pushed": "2026-08-24T16:58:50Z", + "created": "2026-08-17T18:36:35Z", + "cve": "CVE-2026-20079", + "kev": false + }, + { + "year": 2026, + "stars": 4, + "name": "CVE-2026-65400", + "url": "https://github.com/acheong08/CVE-2026-65400", + "desc": "Apple MacOS Screen Sharing Arbitrary File read/write -> RCE", + "pushed": "2026-08-22T08:56:04Z", + "created": "2026-08-22T08:54:26Z", + "cve": "CVE-2026-65400", + "kev": true + }, { "year": 2026, "stars": 160, @@ -21,6 +142,28 @@ "cve": "CVE-2026-62911", "kev": false }, + { + "year": 2026, + "stars": 4, + "name": "CVE-2026-65400-poc", + "url": "https://github.com/panchocosil/CVE-2026-65400-poc", + "desc": "Read-only PoC for CVE-2026-65400 - macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 / 14.8.9.", + "pushed": "2026-08-21T18:22:20Z", + "created": "2026-08-21T18:22:37Z", + "cve": "CVE-2026-65400", + "kev": true + }, + { + "year": 2026, + "stars": 6, + "name": "CVE-2026-34910-PoC", + "url": "https://github.com/Boreas37/CVE-2026-34910-PoC", + "desc": "CVE-2026-34910/34909 - UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)", + "pushed": "2026-08-21T13:31:58Z", + "created": "2026-08-09T16:58:00Z", + "cve": "CVE-2026-34910", + "kev": true + }, { "year": 2026, "stars": 53, @@ -76,149 +219,6 @@ "cve": "CVE-2026-24061", "kev": true }, - { - "year": 2026, - "stars": 24, - "name": "CVE-2026-66804-CrossDevice-Service-EoP", - "url": "https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP", - "desc": "CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM", - "pushed": "2026-08-13T03:37:37Z", - "created": "2026-08-13T01:42:43Z", - "cve": "CVE-2026-66804", - "kev": false - }, - { - "year": 2026, - "stars": 33, - "name": "CVE-2026-68138", - "url": "https://github.com/aramosf/CVE-2026-68138", - "desc": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC", - "pushed": "2026-08-12T15:30:58Z", - "created": "2026-08-11T22:22:22Z", - "cve": "CVE-2026-68138", - "kev": false - }, - { - "year": 2026, - "stars": 19, - "name": "CVE-2026-63077", - "url": "https://github.com/sfewer-r7/CVE-2026-63077", - "desc": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)", - "pushed": "2026-08-07T11:52:30Z", - "created": "2026-08-07T08:38:01Z", - "cve": "CVE-2026-63077", - "kev": true - }, - { - "year": 2026, - "stars": 58, - "name": "CVE-2026-55040", - "url": "https://github.com/sfewer-r7/CVE-2026-55040", - "desc": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)", - "pushed": "2026-08-06T11:50:17Z", - "created": "2026-08-06T11:46:34Z", - "cve": "CVE-2026-55040", - "kev": true - }, - { - "year": 2026, - "stars": 17, - "name": "CVE-2026-60004-POC", - "url": "https://github.com/imbas007/CVE-2026-60004-POC", - "desc": "CVE-2026-60004 Pre-Auth RCE Exploit - Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)", - "pushed": "2026-08-03T08:31:36Z", - "created": "2026-08-03T07:48:39Z", - "cve": "CVE-2026-60004", - "kev": true - }, - { - "year": 2026, - "stars": 81, - "name": "CVE-2026-43499-Poc-Analysis", - "url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis", - "desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", - "pushed": "2026-07-30T11:28:07Z", - "created": "2026-07-14T14:21:27Z", - "cve": "CVE-2026-43499", - "kev": false - }, - { - "year": 2026, - "stars": 23, - "name": "CVE-2026-66066-POC", - "url": "https://github.com/Zer0SumGam3/CVE-2026-66066-POC", - "desc": "PoC for CVE-2026-66066 in Ruby on Rails", - "pushed": "2026-07-29T23:00:12Z", - "created": "2026-07-29T21:08:30Z", - "cve": "CVE-2026-66066", - "kev": false - }, - { - "year": 2026, - "stars": 11, - "name": "CVE-2026-16232", - "url": "https://github.com/sfewer-r7/CVE-2026-16232", - "desc": "A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.", - "pushed": "2026-07-28T16:51:44Z", - "created": "2026-07-28T16:19:31Z", - "cve": "CVE-2026-16232", - "kev": true - }, - { - "year": 2026, - "stars": 325, - "name": "CVE-2026-54121", - "url": "https://github.com/aniqfakhrul/CVE-2026-54121", - "desc": "Certighost POC", - "pushed": "2026-07-27T19:12:07Z", - "created": "2026-07-23T18:54:34Z", - "cve": "CVE-2026-54121", - "kev": false - }, - { - "year": 2026, - "stars": 35, - "name": "CVE-2026-42533", - "url": "https://github.com/imbas007/CVE-2026-42533", - "desc": "nginx heap buffer overflow PoC - CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.", - "pushed": "2026-07-27T08:09:52Z", - "created": "2026-07-27T08:03:07Z", - "cve": "CVE-2026-42533", - "kev": false - }, - { - "year": 2026, - "stars": 26, - "name": "CVE-2026-43499-root-KernelSU", - "url": "https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU", - "desc": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式", - "pushed": "2026-07-26T14:04:48Z", - "created": "2026-07-26T12:39:00Z", - "cve": "CVE-2026-43499", - "kev": false - }, - { - "year": 2026, - "stars": 27, - "name": "CVE-2026-54121-PoC-Exploit", - "url": "https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit", - "desc": "👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒", - "pushed": "2026-07-26T12:22:13Z", - "created": "2026-07-25T18:01:04Z", - "cve": "CVE-2026-54121", - "kev": false - }, - { - "year": 2026, - "stars": 34, - "name": "POC-CVE-2026-60206", - "url": "https://github.com/imbas007/POC-CVE-2026-60206", - "desc": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security", - "pushed": "2026-07-24T02:46:06Z", - "created": "2026-07-24T02:30:11Z", - "cve": "CVE-2026-60206", - "kev": false - }, { "year": 2025, "stars": 6, @@ -587,6 +587,18 @@ "kev": false, "landed": true }, + { + "year": 2026, + "stars": 0, + "name": "cve-2026-42945", + "url": "https://github.com/FranklinF25/cve-2026-42945", + "desc": "NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", + "pushed": "2026-08-30T21:06:53Z", + "created": "2026-08-30T19:36:38Z", + "cve": "CVE-2026-42945", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 0, @@ -601,13 +613,13 @@ }, { "year": 2026, - "stars": 10, - "name": "givewp-cve-2026-82222-rce-lab", - "url": "https://github.com/dinosn/givewp-cve-2026-82222-rce-lab", - "desc": "Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.", - "pushed": "2026-08-30T05:18:46Z", - "created": "2026-08-30T05:15:27Z", - "cve": "CVE-2026-82222", + "stars": 0, + "name": "CVE-2026-76581", + "url": "https://github.com/HORKimhab/CVE-2026-76581", + "desc": "The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated `wdpsso_step1` and `wdpsso_step2` AJAX actions, where step 1 signs and discloses an unseparated concatenation of the token, state, redirect, and domain values, while step 2 verifies an unseparated concatenation that omits the domain field. This makes it possible for unauthenticated attackers, on sites connected to WPMU DEV with Hub SSO enabled and mapped to an administrator, to obtain a valid HMAC from step 1 and replay it to step 2 by moving the domain value into the redirect field, resulting in an authenticated administrator session.", + "pushed": "2026-08-30T12:57:31Z", + "created": "2026-08-30T12:52:47Z", + "cve": "CVE-2026-76581", "kev": false, "landed": true }, @@ -634,17 +646,5 @@ "cve": "CVE-2026-81578", "kev": true, "landed": true - }, - { - "year": 2025, - "stars": 0, - "name": "cve-2025-29927", - "url": "https://github.com/kuyrathdaro/cve-2025-29927", - "desc": "Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.", - "pushed": "2026-08-29T09:10:43Z", - "created": "2026-08-29T09:05:12Z", - "cve": "CVE-2025-29927", - "kev": false, - "landed": true } ]