mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
Fill blank descriptions in the year tables too
Five rows on the last run were an empty cell. The landed lane already fell back to the CVE's own summary; these CVEs are older and always in the index, so the same lookup costs nothing and no row ships blank now.
This commit is contained in:
0xMarcio committed
1 parent
188f0646c5
commit
fc827abb8f
3 files changed
+38
-35
No files matched your search
@@ -491,12 +491,15 @@ def main() -> int:
|
||||
cve = cve_of(repo)
|
||||
exploited = cve in kev
|
||||
flagged += exploited
|
||||
# Same fallback the landed lane uses. These CVEs are old enough to
|
||||
# be in the index already, so it costs nothing to ask.
|
||||
summary = cell(repo.get("description")) or nvd_description(cve)
|
||||
items.append({
|
||||
"year": year,
|
||||
"stars": int(repo.get("stargazers_count") or 0),
|
||||
"name": cell(repo.get("name")),
|
||||
"url": repo.get("html_url") or "",
|
||||
"desc": cell(repo.get("description")),
|
||||
"desc": summary,
|
||||
"pushed": pushed,
|
||||
"created": str(repo.get("created_at") or ""),
|
||||
"cve": cve,
|
||||
@@ -505,7 +508,7 @@ def main() -> int:
|
||||
block.append(
|
||||
f"| {repo.get('stargazers_count', 0)}\u2b50 | {time_ago(pushed)} "
|
||||
f"| {KEV_MARK if exploited else ''}[{cell(repo.get('name'))}]({repo.get('html_url')}) "
|
||||
f"| {shorten(repo.get('description'))} |"
|
||||
f"| {shorten(summary)} |"
|
||||
)
|
||||
sections.append(block)
|
||||
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
<div align="center">
|
||||
|
||||
<a href="https://cve.codepwn.win/"><img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/hero.svg?v=202609010342" alt="CVE Radar" width="100%"></a>
|
||||
<a href="https://cve.codepwn.win/"><img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/hero.svg?v=202609010346" alt="CVE Radar" width="100%"></a>
|
||||
|
||||
[](https://github.com/0xMarcio/cve/commits/main) [](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [](https://cve.codepwn.win/) [](https://cve.codepwn.win/) [](https://github.com/0xMarcio/cve/stargazers)
|
||||
[](https://github.com/0xMarcio/cve/commits/main) [](https://github.com/0xMarcio/cve/actions/workflows/hot_cves.yml) [](https://cve.codepwn.win/) [](https://cve.codepwn.win/) [](https://github.com/0xMarcio/cve/stargazers)
|
||||
|
||||
</div>
|
||||
|
||||
@@ -17,13 +17,13 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
| 0⭐ | 6h ago | [CVE-2025-69080](https://github.com/AndrielSec/CVE-2025-69080) | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')… |
|
||||
| 0⭐ | 12h ago | [CVE-2026-68138](https://github.com/suominen/CVE-2026-68138) | Tracking CVE-2026-68138, the Linux kernel net/sched qdisc rate-table use-after-free |
|
||||
| 0⭐ | 13h ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-20333](https://github.com/cobbbex/cve-2025-20333) | A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and… |
|
||||
| 0⭐ | 19h ago | [CVE-2026-76569](https://github.com/toanln-cov/CVE-2026-76569) | Reflected XSS via search GET Parameter in Phoca Download |
|
||||
| 1⭐ | 1d ago | [CVE-2026-31802](https://github.com/Recorded-texteditor120/CVE-2026-31802) | Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file… |
|
||||
| 2⭐ | 1d ago | [CVE-2025-49844](https://github.com/Zain3311/CVE-2025-49844) | 🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain… |
|
||||
| 10⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-21479-iqoo11pro](https://github.com/Type010/cve-2025-21479-iqoo11pro) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
|
||||
| 0⭐ | 1d ago | [cve-2026-42945](https://github.com/FranklinF25/cve-2026-42945) | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This… |
|
||||
| 0⭐ | 1d ago | [cve-2026-42533](https://github.com/FranklinF25/cve-2026-42533) | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a… |
|
||||
| 0⭐ | 1d ago | [CVE-2025-6440](https://github.com/katranSefa/CVE-2025-6440) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… |
|
||||
| 10⭐ | 1d ago | [givewp-cve-2026-82222-rce-lab](https://github.com/dinosn/givewp-cve-2026-82222-rce-lab) | Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix. |
|
||||
| 0⭐ | 1d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-55182-scanner](https://github.com/mayank729/CVE-2025-55182-scanner) | 🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect… |
|
||||
|
||||
## 2026 · newest 20 of 253
|
||||
|
||||
@@ -41,7 +41,7 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
| 33⭐ | 19d ago | [CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138) | CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC |
|
||||
| 19⭐ | 24d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-63077](https://github.com/sfewer-r7/CVE-2026-63077) | Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077) |
|
||||
| 58⭐ | 25d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-55040](https://github.com/sfewer-r7/CVE-2026-55040) | Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040) |
|
||||
| 53⭐ | 28d ago | [CVE-2026-64560-Analysis](https://github.com/villager1314/CVE-2026-64560-Analysis) | |
|
||||
| 53⭐ | 28d ago | [CVE-2026-64560-Analysis](https://github.com/villager1314/CVE-2026-64560-Analysis) | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by… |
|
||||
| 17⭐ | 28d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2026-60004-POC](https://github.com/imbas007/CVE-2026-60004-POC) | CVE-2026-60004 Pre-Auth RCE Exploit - Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8) |
|
||||
| 81⭐ | 32d ago | [CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis) | Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For… |
|
||||
| 23⭐ | 33d ago | [CVE-2026-66066-POC](https://github.com/Zer0SumGam3/CVE-2026-66066-POC) | PoC for CVE-2026-66066 in Ruby on Rails |
|
||||
@@ -54,7 +54,7 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
|
||||
| Stars | Updated | Repository | Description |
|
||||
| --- | --- | --- | --- |
|
||||
| 6⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | |
|
||||
| 6⭐ | 4d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
|
||||
| 4⭐ | 12d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
|
||||
| 20⭐ | 21d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W |
|
||||
| 6⭐ | 25d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
|
||||
@@ -65,10 +65,10 @@ No star floor here, so a PoC published this morning shows up the same day rather
|
||||
| 7⭐ | 54d ago | [CVE-2025-30065](https://github.com/h3st4k3r/CVE-2025-30065) | This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It… |
|
||||
| 4⭐ | 60d ago | [CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) | OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M… |
|
||||
| 3⭐ | 60d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819) | CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE) |
|
||||
| 4⭐ | 65d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | |
|
||||
| 4⭐ | 65d ago | [CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) | OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and… |
|
||||
| 5⭐ | 67d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-8110](https://github.com/joaquinrrr/CVE-2025-8110) | PoC exploit for CVE-2025-8110 |
|
||||
| 14⭐ | 80d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | |
|
||||
| 13⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | |
|
||||
| 14⭐ | 80d ago | [vulnerable-nextjs-14-CVE-2025-29927](https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… |
|
||||
| 13⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [FreePBX-CVE-2025-57819-RCE](https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE) | FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable… |
|
||||
| 7⭐ | 86d ago | <img src="https://raw.githubusercontent.com/0xMarcio/cve/main/docs/kev.svg" alt="KEV" title="CISA known exploited" height="14"> [CVE-2025-57819-poc](https://github.com/b4sh2/CVE-2025-57819-poc) | CVE-2025-57819 -> rce |
|
||||
|
||||
<details>
|
||||
|
||||
+24
-24
@@ -136,7 +136,7 @@
|
||||
"stars": 53,
|
||||
"name": "CVE-2026-64560-Analysis",
|
||||
"url": "https://github.com/villager1314/CVE-2026-64560-Analysis",
|
||||
"desc": "",
|
||||
"desc": "In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL; // Returns without action if(!sighand) return 0; free_posix_timer(); This is \"harmless\" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited. As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF. There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack. Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire. While debating solutions Frederic pointed out another problem: posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand); if (!sh) WARN_ON_ONCE(timer_queued(tmr)); On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive. Solve these issues by: 1) Changing the store in __exit_signal() to smp_store_release(). 2) Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand(). 3) Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up. 4) Using that helper in the three affected functions. #1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task(). #3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails. When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible. The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e (\"posix-cpu-timers: workaround to suppress the problems with mt exec\") added a temporary workaround for that in 2010 which surv ---truncated---",
|
||||
"pushed": "2026-08-03T12:39:41Z",
|
||||
"created": "2026-08-03T12:36:27Z",
|
||||
"cve": "CVE-2026-64560",
|
||||
@@ -224,7 +224,7 @@
|
||||
"stars": 6,
|
||||
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
|
||||
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
|
||||
"desc": "",
|
||||
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
|
||||
"pushed": "2026-08-27T07:13:42Z",
|
||||
"created": "2026-08-19T09:39:46Z",
|
||||
"cve": "CVE-2025-21479",
|
||||
@@ -345,7 +345,7 @@
|
||||
"stars": 4,
|
||||
"name": "CVE-2025-69212-PoC",
|
||||
"url": "https://github.com/tohib09/CVE-2025-69212-PoC",
|
||||
"desc": "",
|
||||
"desc": "OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.",
|
||||
"pushed": "2026-06-27T23:56:25Z",
|
||||
"created": "2026-06-27T23:54:57Z",
|
||||
"cve": "CVE-2025-69212",
|
||||
@@ -367,7 +367,7 @@
|
||||
"stars": 14,
|
||||
"name": "vulnerable-nextjs-14-CVE-2025-29927",
|
||||
"url": "https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927",
|
||||
"desc": "",
|
||||
"desc": "Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.",
|
||||
"pushed": "2026-06-12T09:41:28Z",
|
||||
"created": "2025-03-23T09:22:35Z",
|
||||
"cve": "CVE-2025-29927",
|
||||
@@ -378,7 +378,7 @@
|
||||
"stars": 13,
|
||||
"name": "FreePBX-CVE-2025-57819-RCE",
|
||||
"url": "https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE",
|
||||
"desc": "",
|
||||
"desc": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.",
|
||||
"pushed": "2026-06-06T21:35:46Z",
|
||||
"created": "2026-06-06T20:49:03Z",
|
||||
"cve": "CVE-2025-57819",
|
||||
@@ -576,13 +576,13 @@
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 0,
|
||||
"name": "CVE-2026-76569",
|
||||
"url": "https://github.com/toanln-cov/CVE-2026-76569",
|
||||
"desc": "Reflected XSS via search GET Parameter in Phoca Download",
|
||||
"pushed": "2026-08-31T07:54:25Z",
|
||||
"created": "2026-08-31T07:51:07Z",
|
||||
"cve": "CVE-2026-76569",
|
||||
"stars": 1,
|
||||
"name": "CVE-2026-31802",
|
||||
"url": "https://github.com/Recorded-texteditor120/CVE-2026-31802",
|
||||
"desc": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
|
||||
"pushed": "2026-08-31T02:15:38Z",
|
||||
"created": "2026-03-28T20:49:46Z",
|
||||
"cve": "CVE-2026-31802",
|
||||
"kev": false,
|
||||
"landed": true
|
||||
},
|
||||
@@ -622,18 +622,6 @@
|
||||
"kev": false,
|
||||
"landed": true
|
||||
},
|
||||
{
|
||||
"year": 2026,
|
||||
"stars": 0,
|
||||
"name": "cve-2026-42533",
|
||||
"url": "https://github.com/FranklinF25/cve-2026-42533",
|
||||
"desc": "A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable in a string expression under certain conditions. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or to possibly trigger a code execution. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
|
||||
"pushed": "2026-08-30T13:29:46Z",
|
||||
"created": "2026-08-29T14:21:49Z",
|
||||
"cve": "CVE-2026-42533",
|
||||
"kev": false,
|
||||
"landed": true
|
||||
},
|
||||
{
|
||||
"year": 2025,
|
||||
"stars": 0,
|
||||
@@ -657,5 +645,17 @@
|
||||
"cve": "CVE-2026-82222",
|
||||
"kev": false,
|
||||
"landed": true
|
||||
},
|
||||
{
|
||||
"year": 2025,
|
||||
"stars": 0,
|
||||
"name": "CVE-2025-55182-scanner",
|
||||
"url": "https://github.com/mayank729/CVE-2025-55182-scanner",
|
||||
"desc": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
|
||||
"pushed": "2026-08-30T04:24:27Z",
|
||||
"created": "2022-06-17T10:19:10Z",
|
||||
"cve": "CVE-2025-55182",
|
||||
"kev": true,
|
||||
"landed": true
|
||||
}
|
||||
]
|
||||
Reference in new issue
Block a user