admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
414b3e2fa095c1c01ad4aa359cc5f78f933df481
cve/index/trending.json
T

846 lines
26 KiB
JSON
Raw Blame History

[
{
"year": 2026,
"stars": 477,
"name": "CVE-2026-9830",
"url": "https://github.com/opaxial/CVE-2026-9830",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-9830 Proof of Concept",
"pushed": "2026-08-20T21:56:15Z",
"released": null,
"basis": "pending",
"score": 3.1579366329283105,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
"kev": false
},
{
"year": 2026,
"stars": 332,
"name": "CVE-2026-54121",
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
"artifact": false,
"source": "github.com",
"desc": "Certighost POC",
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
"score": 1.6443308844507223,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
"kev": false
},
{
"year": 2026,
"stars": 96,
"name": "CVE-2026-41096-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-41096-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module).",
"pushed": "2026-09-29T06:20:46Z",
"released": "2026-09-29T06:20:46Z",
"basis": "commit",
"score": 1.581144195222171,
"trending": true,
"created": "2026-02-05T10:21:22Z",
"cve": "CVE-2026-41096",
"kev": false
},
{
"year": 2026,
"stars": 185,
"name": "CVE-2026-62911",
"url": "https://github.com/hypnguyen1209/CVE-2026-62911",
"artifact": false,
"source": "github.com",
"desc": "POC pre-auth RCE on Exchange",
"pushed": "2026-08-22T04:49:54Z",
"released": "2026-08-22T04:49:54Z",
"basis": "commit",
"score": 1.2456164834416017,
"trending": true,
"created": "2026-08-22T04:49:33Z",
"cve": "CVE-2026-62911",
"kev": false
},
{
"year": 2026,
"stars": 92,
"name": "CVE-2026-20805-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-20805-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information Disclosure & Memory Leak Diagnostic).",
"pushed": "2026-09-11T16:33:14Z",
"released": null,
"basis": "pending",
"score": 0.8738222197966681,
"trending": true,
"created": "2026-09-10T11:28:38Z",
"cve": "CVE-2026-20805",
"kev": true
},
{
"year": 2026,
"stars": 88,
"name": "CVE-2026-21858-n8n-FullChain",
"url": "https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n \"Ni8mare\" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).",
"pushed": "2026-09-12T00:03:49Z",
"released": null,
"basis": "pending",
"score": 0.8415492471897214,
"trending": true,
"created": "2026-09-12T00:03:07Z",
"cve": "CVE-2026-21858",
"kev": false
},
{
"year": 2026,
"stars": 50,
"name": "CVE-2026-94545",
"url": "https://github.com/EQSTLab/CVE-2026-94545",
"artifact": false,
"source": "github.com",
"desc": "Next.js RCE",
"pushed": "2026-09-29T07:52:23Z",
"released": "2026-09-29T07:57:18Z",
"basis": "created",
"score": 0.8261514242930099,
"trending": true,
"created": "2026-09-29T07:57:18Z",
"cve": "CVE-2026-94545",
"kev": false
},
{
"year": 2026,
"stars": 105,
"name": "CVE-2026-75604-poc",
"url": "https://github.com/rafabd1/CVE-2026-75604-poc",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-75604 Next.js Windows RCE poc",
"pushed": "2026-08-26T02:23:55Z",
"released": "2026-08-25T19:06:37Z",
"basis": "created",
"score": 0.7427689951583664,
"trending": true,
"created": "2026-08-25T19:06:37Z",
"cve": "CVE-2026-75604",
"kev": false
},
{
"year": 2026,
"stars": 86,
"name": "CVE-2026-65343",
"url": "https://github.com/ByteV0rtex/CVE-2026-65343",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)",
"pushed": "2026-09-03T20:38:35Z",
"released": null,
"basis": "pending",
"score": 0.7016266294218059,
"trending": true,
"created": "2026-09-02T20:12:10Z",
"cve": "CVE-2026-65343",
"kev": false
},
{
"year": 2026,
"stars": 108,
"name": "SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"url": "https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"artifact": false,
"source": "github.com",
"desc": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"pushed": "2026-08-03T15:31:59Z",
"released": null,
"basis": "pending",
"score": 0.5888893625645383,
"trending": true,
"created": "2026-08-03T15:29:22Z",
"cve": "CVE-2026-47301",
"kev": false
},
{
"year": 2026,
"stars": 40,
"name": "CVE-2026-84543",
"url": "https://github.com/petermalone/CVE-2026-84543",
"artifact": false,
"source": "github.com",
"desc": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"pushed": "2026-09-24T02:47:40Z",
"released": "2026-09-24T02:47:40Z",
"basis": "commit",
"score": 0.533935225661704,
"trending": true,
"created": "2026-09-24T00:22:30Z",
"cve": "CVE-2026-84543",
"kev": false
},
{
"year": 2026,
"stars": 109,
"name": "CVE-2026-43499-Poc-Analysis",
"url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
"artifact": false,
"source": "github.com",
"desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"pushed": "2026-07-18T21:09:06Z",
"released": null,
"basis": "pending",
"score": 0.5167968803369402,
"trending": true,
"created": "2026-07-14T14:21:27Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 39,
"name": "cve-2026-87902-poc",
"url": "https://github.com/ressl/cve-2026-87902-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"pushed": "2026-09-22T19:36:47Z",
"released": null,
"basis": "pending",
"score": 0.49798801689685296,
"trending": true,
"created": "2026-09-22T18:40:26Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2026,
"stars": 31,
"name": "CVE-2026-34990",
"url": "https://github.com/predyy/CVE-2026-34990",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.",
"pushed": "2026-09-27T19:48:09Z",
"released": "2026-09-27T19:47:52Z",
"basis": "commit",
"score": 0.4782592864538922,
"trending": true,
"created": "2026-09-27T19:41:06Z",
"cve": "CVE-2026-34990",
"kev": false
},
{
"year": 2026,
"stars": 35,
"name": "CVE-2026-87902",
"url": "https://github.com/abraxas/CVE-2026-87902",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)",
"pushed": "2026-10-07T01:07:28Z",
"released": "2026-09-22T18:13:48Z",
"basis": "created",
"score": 0.44606184788967446,
"trending": true,
"created": "2026-09-22T18:13:48Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-8110",
"url": "https://github.com/Ghxstsec/CVE-2025-8110",
"artifact": false,
"source": "github.com",
"desc": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.",
"pushed": "2026-10-12T15:07:46Z",
"released": null,
"basis": "pending",
"score": 0.44142592367065775,
"trending": true,
"created": "2026-04-11T22:40:07Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2026,
"stars": 10,
"name": "telegram-cve-2026-107181",
"url": "https://github.com/SeanDishman/telegram-cve-2026-107181",
"artifact": false,
"source": "github.com",
"desc": "Telegram CVE-2026-107181",
"pushed": "2026-10-10T01:25:53Z",
"released": "2026-10-10T01:25:43Z",
"basis": "commit",
"score": 0.4164985833815097,
"trending": true,
"created": "2026-10-10T01:12:57Z",
"cve": "CVE-2026-107181",
"kev": false
},
{
"year": 2026,
"stars": 43,
"name": "cve-2026-85706",
"url": "https://github.com/guneykabel/cve-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1",
"pushed": "2026-09-11T16:38:12Z",
"released": "2026-09-11T15:54:48Z",
"basis": "commit",
"score": 0.4081806629682943,
"trending": true,
"created": "2026-09-11T15:24:22Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 26,
"name": "CVE-2026-85706",
"url": "https://github.com/EQSTLab/CVE-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "GitLab Unauthenticated Arbitrary File Read",
"pushed": "2026-09-28T05:17:40Z",
"released": "2026-09-28T05:17:40Z",
"basis": "commit",
"score": 0.4081507785489151,
"trending": true,
"created": "2026-09-28T04:47:10Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 7,
"name": "cve-2026-43499-honor",
"url": "https://github.com/knowlily/cve-2026-43499-honor",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.",
"pushed": "2026-10-11T13:05:41Z",
"released": null,
"basis": "pending",
"score": 0.40761339065236585,
"trending": true,
"created": "2026-08-15T15:18:19Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 44,
"name": "CVE-2026-28576-poc",
"url": "https://github.com/mobilehackinglab/CVE-2026-28576-poc",
"artifact": false,
"source": "github.com",
"desc": "SQL injection vulnerability in Android 17 (AOSP)",
"pushed": "2026-09-07T08:42:12Z",
"released": null,
"basis": "pending",
"score": 0.3826848713871651,
"trending": true,
"created": "2026-09-07T09:25:30Z",
"cve": "CVE-2026-28576",
"kev": false
},
{
"year": 2024,
"stars": 17,
"name": "CVE-2024-56426",
"url": "https://github.com/Creeeeger/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
"score": 0.35150774356585407,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 22,
"name": "CVE-2025-7771",
"url": "https://github.com/enessakircolak/CVE-2025-7771",
"artifact": false,
"source": "github.com",
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
"score": 0.12940888481722296,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-85097-Toolkit",
"url": "https://github.com/tc4dy/CVE-2026-85097-Toolkit",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-85097 - Bricksforge WordPress Plugin Unauth File Upload to RCE Toolkit (CVSS 10.0) / Red/Blue Team suite for Bricksforge Pro Forms < 3.1.8.9. 2 tools: Full Exploit (polyglot upload, web shell, mass scan, OPSEC, SQLite/JSON output) + SafeChecker (version detect, non-intrusive audit). Ethical & educational use only.",
"pushed": null,
"released": "2026-10-12T16:16:21Z",
"basis": "commit",
"score": 0.0905378677200985,
"trending": false,
"created": "2026-10-12T16:15:51Z",
"cve": "CVE-2026-85097",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 8,
"name": "CVE-2025-32432-exploit-by-P34NUT",
"url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT",
"artifact": false,
"source": "github.com",
"desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail",
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
"score": 0.08639575825754985,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 10,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
"score": 0.07229593236374472,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-9586_POC_EXPLOIT",
"url": "https://github.com/fromABUV/CVE-2026-9586_POC_EXPLOIT",
"artifact": false,
"source": "github.com",
"desc": "For new CVEs without existing/working/non-mangled POCs",
"pushed": null,
"released": "2026-10-12T03:04:34Z",
"basis": "commit",
"score": 0.07059575048922478,
"trending": false,
"created": "2026-10-12T02:17:17Z",
"cve": "CVE-2026-9586",
"kev": true,
"landed": true
},
{
"year": 2025,
"stars": 7,
"name": "cve-2025-21479_iqooneo8",
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
"artifact": false,
"source": "github.com",
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
"score": 0.04583449043625319,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 8,
"name": "SELinux-Permissive-Only-CVE-2025-21479",
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
"score": 0.04113172762683281,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-8045",
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
"artifact": false,
"source": "github.com",
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
"score": 0.0393251147997445,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
"kev": false
},
{
"year": 2023,
"stars": 6,
"name": "CVE-2023-36003",
"url": "https://github.com/johnnygreeme/CVE-2023-36003",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.",
"pushed": "2026-07-22T19:46:33Z",
"released": null,
"basis": "pending",
"score": 0.029385211282514465,
"trending": true,
"created": "2026-07-22T19:43:34Z",
"cve": "CVE-2023-36003",
"kev": false
},
{
"year": 2024,
"stars": 4,
"name": "CVE-2024-56426",
"url": "https://github.com/xcracker000/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
"score": 0.024701608300085266,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-32432",
"url": "https://github.com/c0gnit00/CVE-2025-32432",
"artifact": false,
"source": "github.com",
"desc": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell",
"pushed": "2026-07-21T16:55:33Z",
"released": null,
"basis": "pending",
"score": 0.02425965133287753,
"trending": true,
"created": "2026-07-21T16:52:22Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-3248-Langflow-RCE",
"url": "https://github.com/hideki233/CVE-2025-3248-Langflow-RCE",
"artifact": false,
"source": "github.com",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
"score": 0.021915471062790876,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
"score": 0.019160720905192434,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-64512",
"url": "https://github.com/matesz44/CVE-2025-64512",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads",
"pushed": "2026-07-19T11:00:00Z",
"released": "2026-07-19T11:00:00Z",
"basis": "commit",
"score": 0.019053469451863467,
"trending": true,
"created": "2026-07-19T10:49:05Z",
"cve": "CVE-2025-64512",
"kev": false
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-8110-gogs-poc",
"url": "https://github.com/Shirouuu/CVE-2025-8110-gogs-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink",
"pushed": "2026-07-17T13:55:11Z",
"released": null,
"basis": "pending",
"score": 0.01876911552743081,
"trending": true,
"created": "2026-07-17T13:46:16Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2024,
"stars": 3,
"name": "CVE-2024-36104-PoC",
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
"score": 0.015634435605915403,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "CVE-2023-52076-PoC",
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
"score": 0.015271080042217165,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"url": "https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation",
"pushed": "2026-07-20T13:33:10Z",
"released": "2026-07-20T13:33:10Z",
"basis": "commit",
"score": 0.014419440581744162,
"trending": true,
"created": "2026-02-13T22:26:25Z",
"cve": "CVE-2025-6019",
"kev": false
},
{
"year": 2022,
"stars": 6,
"name": "CVE-2022-22077",
"url": "https://github.com/grisuno/CVE-2022-22077",
"artifact": false,
"source": "github.com",
"desc": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
"score": 0.009786686281236696,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-3888-PoC",
"url": "https://github.com/alinpfan/CVE-2026-3888-PoC",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-3888 PoC; discovered by the Qualys Threat Research Unit (TRU).",
"pushed": null,
"released": "2026-10-12T22:50:46Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-12T22:50:46Z",
"cve": "CVE-2026-3888",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 0,
"name": "CVE-2025-32432-craftcms-rce",
"url": "https://github.com/l0lsuit/CVE-2025-32432-craftcms-rce",
"artifact": false,
"source": "github.com",
"desc": "Working PoC + debugging writeup for CVE-2025-32432 (Craft CMS pre-auth RCE)",
"pushed": null,
"released": "2026-10-12T21:10:01Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T21:00:16Z",
"cve": "CVE-2025-32432",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-84411-reproduction",
"url": "https://github.com/Apiratchai/CVE-2026-84411-reproduction",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-84411 root cause notes and a non-destructive probe (RouterOS before 7.24)",
"pushed": null,
"released": "2026-10-12T20:08:29Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T20:11:18Z",
"cve": "CVE-2026-84411",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-63030-CVE-2026-60137-WP2SHELL",
"url": "https://github.com/0xCyp1337/CVE-2026-63030-CVE-2026-60137-WP2SHELL",
"artifact": false,
"source": "github.com",
"desc": "WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.",
"pushed": null,
"released": "2026-10-12T15:23:48Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T15:15:32Z",
"cve": "CVE-2026-63030",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-91737",
"url": "https://github.com/sm1ee/CVE-2026-91737",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-91737 Chrome renderer RCE PoC (PDFium)",
"pushed": null,
"released": "2026-10-12T14:08:21Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T13:54:09Z",
"cve": "CVE-2026-91737",
"kev": false,
"landed": true
},
{
"year": 2024,
"stars": 0,
"name": "cve-2024-21626",
"url": "https://github.com/ghs053020-stack/cve-2024-21626",
"artifact": false,
"source": "github.com",
"desc": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem (\"attack 2\"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run (\"attack 1\"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes (\"attack 3a\" and \"attack 3b\"). runc 1.1.12 includes patches for this issue.",
"pushed": null,
"released": "2026-10-12T10:16:37Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T10:11:24Z",
"cve": "CVE-2024-21626",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-103889",
"url": "https://github.com/kayes817/CVE-2026-103889",
"artifact": false,
"source": "github.com",
"desc": "Proof of concept and isolated Docker lab for CVE-2026-103889, an unauthenticated RCE vulnerability in Expivi 3D Product Configurator for WooCommerce ≤ 2.16.2.",
"pushed": null,
"released": "2026-10-12T02:47:38Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-12T02:43:06Z",
"cve": "CVE-2026-103889",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-91136",
"url": "https://github.com/fl0ydsec/CVE-2026-91136",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-91136 Divi Plus <= 2.4.0 unauthenticated arbitrary file read (mass scanner + exploit)",
"pushed": null,
"released": "2026-10-12T01:46:17Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-12T01:46:17Z",
"cve": "CVE-2026-91136",
"kev": false,
"landed": true
}
]
Reference in new issue View Git Blame Copy Permalink