admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3f8c41276e796f3ff603946f90cb9b2c7dca2120
cve/index/trending.json
T

846 lines
25 KiB
JSON
Raw Blame History

[
{
"year": 2026,
"stars": 477,
"name": "CVE-2026-9830",
"url": "https://github.com/opaxial/CVE-2026-9830",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-9830 Proof of Concept",
"pushed": "2026-08-20T21:56:15Z",
"released": null,
"basis": "pending",
"score": 3.0947213062449404,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
"kev": false
},
{
"year": 2026,
"stars": 38,
"name": "CVE-2026-97229-PoC",
"url": "https://github.com/jburgess-r7/CVE-2026-97229-PoC",
"artifact": false,
"source": "github.com",
"desc": "GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image",
"pushed": "2026-10-13T16:00:26Z",
"released": "2026-10-13T16:00:26Z",
"basis": "commit",
"score": 2.6377281026250543,
"trending": true,
"created": "2026-10-13T09:39:17Z",
"cve": "CVE-2026-97229",
"kev": false
},
{
"year": 2026,
"stars": 332,
"name": "CVE-2026-54121",
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
"artifact": false,
"source": "github.com",
"desc": "Certighost POC",
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
"score": 1.6224054257379423,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
"kev": false
},
{
"year": 2026,
"stars": 96,
"name": "CVE-2026-41096-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-41096-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module).",
"pushed": "2026-09-29T06:20:46Z",
"released": "2026-09-29T06:20:46Z",
"basis": "commit",
"score": 1.4718397250119724,
"trending": true,
"created": "2026-02-05T10:21:22Z",
"cve": "CVE-2026-41096",
"kev": false
},
{
"year": 2026,
"stars": 187,
"name": "CVE-2026-62911",
"url": "https://github.com/hypnguyen1209/CVE-2026-62911",
"artifact": false,
"source": "github.com",
"desc": "POC pre-auth RCE on Exchange",
"pushed": "2026-08-22T04:49:54Z",
"released": "2026-08-22T04:49:54Z",
"basis": "commit",
"score": 1.2332787603481294,
"trending": true,
"created": "2026-08-22T04:49:33Z",
"cve": "CVE-2026-62911",
"kev": false
},
{
"year": 2026,
"stars": 92,
"name": "CVE-2026-20805-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-20805-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information Disclosure & Memory Leak Diagnostic).",
"pushed": "2026-09-11T16:33:14Z",
"released": null,
"basis": "pending",
"score": 0.8449996181067371,
"trending": true,
"created": "2026-09-10T11:28:38Z",
"cve": "CVE-2026-20805",
"kev": true
},
{
"year": 2026,
"stars": 88,
"name": "CVE-2026-21858-n8n-FullChain",
"url": "https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n \"Ni8mare\" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).",
"pushed": "2026-09-12T00:03:49Z",
"released": null,
"basis": "pending",
"score": 0.8135303487518061,
"trending": true,
"created": "2026-09-12T00:03:07Z",
"cve": "CVE-2026-21858",
"kev": false
},
{
"year": 2026,
"stars": 51,
"name": "CVE-2026-94545",
"url": "https://github.com/EQSTLab/CVE-2026-94545",
"artifact": false,
"source": "github.com",
"desc": "Next.js RCE",
"pushed": "2026-09-29T07:52:23Z",
"released": "2026-09-29T07:57:18Z",
"basis": "created",
"score": 0.7841758029390744,
"trending": true,
"created": "2026-09-29T07:57:18Z",
"cve": "CVE-2026-94545",
"kev": false
},
{
"year": 2026,
"stars": 107,
"name": "CVE-2026-75604-poc",
"url": "https://github.com/rafabd1/CVE-2026-75604-poc",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-75604 Next.js Windows RCE poc",
"pushed": "2026-08-26T02:23:55Z",
"released": "2026-08-25T19:06:37Z",
"basis": "created",
"score": 0.7403005770713743,
"trending": true,
"created": "2026-08-25T19:06:37Z",
"cve": "CVE-2026-75604",
"kev": false
},
{
"year": 2026,
"stars": 86,
"name": "CVE-2026-65343",
"url": "https://github.com/ByteV0rtex/CVE-2026-65343",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)",
"pushed": "2026-09-03T20:38:35Z",
"released": null,
"basis": "pending",
"score": 0.6828557125503206,
"trending": true,
"created": "2026-09-02T20:12:10Z",
"cve": "CVE-2026-65343",
"kev": false
},
{
"year": 2026,
"stars": 108,
"name": "SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"url": "https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"artifact": false,
"source": "github.com",
"desc": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"pushed": "2026-08-03T15:31:59Z",
"released": null,
"basis": "pending",
"score": 0.5799023238485644,
"trending": true,
"created": "2026-08-03T15:29:22Z",
"cve": "CVE-2026-47301",
"kev": false
},
{
"year": 2026,
"stars": 16,
"name": "telegram-cve-2026-107181",
"url": "https://github.com/SeanDishman/telegram-cve-2026-107181",
"artifact": false,
"source": "github.com",
"desc": "Telegram CVE-2026-107181",
"pushed": "2026-10-10T01:25:53Z",
"released": "2026-10-10T01:25:43Z",
"basis": "commit",
"score": 0.525101667279258,
"trending": true,
"created": "2026-10-10T01:12:57Z",
"cve": "CVE-2026-107181",
"kev": false
},
{
"year": 2026,
"stars": 110,
"name": "CVE-2026-43499-Poc-Analysis",
"url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
"artifact": false,
"source": "github.com",
"desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"pushed": "2026-07-18T21:09:06Z",
"released": null,
"basis": "pending",
"score": 0.5149979880779535,
"trending": true,
"created": "2026-07-14T14:21:27Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 40,
"name": "CVE-2026-84543",
"url": "https://github.com/petermalone/CVE-2026-84543",
"artifact": false,
"source": "github.com",
"desc": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"pushed": "2026-09-24T02:47:40Z",
"released": "2026-09-24T02:47:40Z",
"basis": "commit",
"score": 0.5059942425833835,
"trending": true,
"created": "2026-09-24T00:22:30Z",
"cve": "CVE-2026-84543",
"kev": false
},
{
"year": 2026,
"stars": 39,
"name": "cve-2026-87902-poc",
"url": "https://github.com/ressl/cve-2026-87902-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"pushed": "2026-09-22T19:36:47Z",
"released": null,
"basis": "pending",
"score": 0.4734339455828503,
"trending": true,
"created": "2026-09-22T18:40:26Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2026,
"stars": 31,
"name": "CVE-2026-34990",
"url": "https://github.com/predyy/CVE-2026-34990",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.",
"pushed": "2026-09-27T19:48:09Z",
"released": "2026-09-27T19:47:52Z",
"basis": "commit",
"score": 0.44792088091352633,
"trending": true,
"created": "2026-09-27T19:41:06Z",
"cve": "CVE-2026-34990",
"kev": false
},
{
"year": 2026,
"stars": 35,
"name": "CVE-2026-87902",
"url": "https://github.com/abraxas/CVE-2026-87902",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)",
"pushed": "2026-10-07T01:07:28Z",
"released": "2026-09-22T18:13:48Z",
"basis": "created",
"score": 0.42412430019137076,
"trending": true,
"created": "2026-09-22T18:13:48Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2026,
"stars": 27,
"name": "CVE-2026-85706",
"url": "https://github.com/EQSTLab/CVE-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "GitLab Unauthenticated Arbitrary File Read",
"pushed": "2026-09-28T05:17:40Z",
"released": "2026-09-28T05:17:40Z",
"basis": "commit",
"score": 0.3963390728026315,
"trending": true,
"created": "2026-09-28T04:47:10Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 43,
"name": "cve-2026-85706",
"url": "https://github.com/guneykabel/cve-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1",
"pushed": "2026-09-11T16:38:12Z",
"released": "2026-09-11T15:54:48Z",
"basis": "commit",
"score": 0.39472770306442667,
"trending": true,
"created": "2026-09-11T15:24:22Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 44,
"name": "CVE-2026-28576-poc",
"url": "https://github.com/mobilehackinglab/CVE-2026-28576-poc",
"artifact": false,
"source": "github.com",
"desc": "SQL injection vulnerability in Android 17 (AOSP)",
"pushed": "2026-09-07T08:42:12Z",
"released": null,
"basis": "pending",
"score": 0.3715016910620035,
"trending": true,
"created": "2026-09-07T09:25:30Z",
"cve": "CVE-2026-28576",
"kev": false
},
{
"year": 2024,
"stars": 17,
"name": "CVE-2024-56426",
"url": "https://github.com/Creeeeger/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
"score": 0.3189147708037872,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-8110",
"url": "https://github.com/Ghxstsec/CVE-2025-8110",
"artifact": false,
"source": "github.com",
"desc": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.",
"pushed": "2026-10-12T15:07:46Z",
"released": null,
"basis": "pending",
"score": 0.2553178890668837,
"trending": true,
"created": "2026-04-11T22:40:07Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2026,
"stars": 3,
"name": "CVE-2026-85884",
"url": "https://github.com/Beardhammer/CVE-2026-85884",
"artifact": false,
"source": "github.com",
"desc": "CVE-85884 POC",
"pushed": null,
"released": "2026-10-13T20:06:18Z",
"basis": "commit",
"score": 0.2225226432918874,
"trending": false,
"created": "2026-10-13T20:02:03Z",
"cve": "CVE-2026-85884",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 2,
"name": "CVE-2026-104748",
"url": "https://github.com/joshuavanderpoll/CVE-2026-104748",
"artifact": false,
"source": "github.com",
"desc": "Unauthenticated privilege escalation in SimpleForm WordPress plugin <= 3.10.0. Registers an administrator account without authentication",
"pushed": null,
"released": "2026-10-14T09:59:28Z",
"basis": "commit",
"score": 0.19796541690138075,
"trending": false,
"created": "2026-10-14T09:59:22Z",
"cve": "CVE-2026-104748",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 22,
"name": "CVE-2025-7771",
"url": "https://github.com/enessakircolak/CVE-2025-7771",
"artifact": false,
"source": "github.com",
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
"score": 0.12721266259784447,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-97657",
"url": "https://github.com/murrez/CVE-2026-97657",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-97657 - Authentication Bypass & Account Takeover / Pocbit",
"pushed": null,
"released": "2026-10-14T11:07:40Z",
"basis": "commit",
"score": 0.10198258754655024,
"trending": false,
"created": "2026-10-14T11:07:19Z",
"cve": "CVE-2026-97657",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 8,
"name": "CVE-2025-32432-exploit-by-P34NUT",
"url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT",
"artifact": false,
"source": "github.com",
"desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail",
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
"score": 0.08299949260091893,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 10,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
"score": 0.07066009738592137,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 8,
"name": "SELinux-Permissive-Only-CVE-2025-21479",
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
"score": 0.040553701227108045,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-8045",
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
"artifact": false,
"source": "github.com",
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
"score": 0.03869933371983246,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
"kev": false
},
{
"year": 2025,
"stars": 6,
"name": "cve-2025-21479_iqooneo8",
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
"artifact": false,
"source": "github.com",
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
"score": 0.03851226674344748,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2023,
"stars": 6,
"name": "CVE-2023-36003",
"url": "https://github.com/johnnygreeme/CVE-2023-36003",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.",
"pushed": "2026-07-22T19:46:33Z",
"released": null,
"basis": "pending",
"score": 0.02899950306337865,
"trending": true,
"created": "2026-07-22T19:43:34Z",
"cve": "CVE-2023-36003",
"kev": false
},
{
"year": 2024,
"stars": 4,
"name": "CVE-2024-56426",
"url": "https://github.com/xcracker000/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
"score": 0.024252873027994955,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-32432",
"url": "https://github.com/c0gnit00/CVE-2025-32432",
"artifact": false,
"source": "github.com",
"desc": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell",
"pushed": "2026-07-21T16:55:33Z",
"released": null,
"basis": "pending",
"score": 0.023945395842390815,
"trending": true,
"created": "2026-07-21T16:52:22Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-3248-Langflow-RCE",
"url": "https://github.com/hideki233/CVE-2025-3248-Langflow-RCE",
"artifact": false,
"source": "github.com",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
"score": 0.021412376668333757,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
"kev": true
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-64512",
"url": "https://github.com/matesz44/CVE-2025-64512",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads",
"pushed": "2026-07-19T11:00:00Z",
"released": "2026-07-19T11:00:00Z",
"basis": "commit",
"score": 0.018812966570673363,
"trending": true,
"created": "2026-07-19T10:49:05Z",
"cve": "CVE-2025-64512",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
"score": 0.018795898282430088,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-8110-gogs-poc",
"url": "https://github.com/Shirouuu/CVE-2025-8110-gogs-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink",
"pushed": "2026-07-17T13:55:11Z",
"released": null,
"basis": "pending",
"score": 0.018537161288986782,
"trending": true,
"created": "2026-07-17T13:46:16Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2024,
"stars": 3,
"name": "CVE-2024-36104-PoC",
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
"score": 0.015410502678341128,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "CVE-2023-52076-PoC",
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
"score": 0.015059455202162852,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"url": "https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation",
"pushed": "2026-07-20T13:33:10Z",
"released": "2026-07-20T13:33:10Z",
"basis": "commit",
"score": 0.014235109457475059,
"trending": true,
"created": "2026-02-13T22:26:25Z",
"cve": "CVE-2025-6019",
"kev": false
},
{
"year": 2022,
"stars": 6,
"name": "CVE-2022-22077",
"url": "https://github.com/grisuno/CVE-2022-22077",
"artifact": false,
"source": "github.com",
"desc": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
"score": 0.009759637765405555,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-54121-adcs-chase-nxc",
"url": "https://github.com/ushst/CVE-2026-54121-adcs-chase-nxc",
"artifact": false,
"source": "github.com",
"desc": "Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.",
"pushed": null,
"released": "2026-10-14T12:15:31Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-14T12:15:31Z",
"cve": "CVE-2026-54121",
"kev": false,
"landed": true
},
{
"year": 2024,
"stars": 0,
"name": "CVE-2024-2887",
"url": "https://github.com/jamezx32/CVE-2024-2887",
"artifact": false,
"source": "github.com",
"desc": "V8 Wasm GC type confusion - two PoCs (kExtern / kNone paths)",
"pushed": null,
"released": "2026-10-14T10:49:28Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-14T10:49:28Z",
"cve": "CVE-2024-2887",
"kev": false,
"landed": true
},
{
"year": 2016,
"stars": 0,
"name": "CVE-2016-5195",
"url": "https://github.com/Mr-Ochobot/CVE-2016-5195",
"artifact": false,
"source": "github.com",
"desc": "Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"",
"pushed": null,
"released": "2026-10-14T10:02:09Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-14T09:56:23Z",
"cve": "CVE-2016-5195",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-104711-POC---Brand-New",
"url": "https://github.com/uday952/CVE-2026-104711-POC---Brand-New",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-104711 POC - Brand New",
"pushed": null,
"released": "2026-10-14T05:34:28Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-14T05:33:28Z",
"cve": "CVE-2026-104711",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": null,
"name": "CVE-2026-18116",
"url": "https://github.com/Zi1gotoon/CVE-2026-18116",
"artifact": false,
"source": "github.com",
"desc": "Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard \"Waiting For Me\" block. A registered user permitted to add events to a calendar governed by an approval workflow could submit an event whose name contained a script payload, which then executed in an administrator's browser when the pending request was displayed and could be used to create a new administrator account. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 7.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. Thanks v01demort for reporting.",
"pushed": null,
"released": "2026-10-14T03:57:22Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-18116",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-84411",
"url": "https://github.com/MikroTikDojo/CVE-2026-84411",
"artifact": false,
"source": "github.com",
"desc": "The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.",
"pushed": null,
"released": "2026-10-13T21:45:21Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-13T21:33:09Z",
"cve": "CVE-2026-84411",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "Reflected-XSS-Bludit-CVE-2026-41456",
"url": "https://github.com/lowlevelsec/Reflected-XSS-Bludit-CVE-2026-41456",
"artifact": false,
"source": "github.com",
"desc": "Implementation of varios cross site scripting payloads to exploit CVE-2026-41456",
"pushed": null,
"released": "2026-10-13T21:37:39Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-13T21:35:09Z",
"cve": "CVE-2026-41456",
"kev": false,
"landed": true
}
]
Reference in new issue View Git Blame Copy Permalink