admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
828ae634913fb8a2989c272342018eca2024d073
cve/index/trending.json
T

1129 lines
35 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"year": 2026,
"stars": 476,
"name": "CVE-2026-9830",
"url": "https://github.com/opaxial/CVE-2026-9830",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-9830 Proof of Concept",
"pushed": "2026-10-21T22:09:02Z",
"released": null,
"basis": "pending",
"score": 25.304993602133266,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
"kev": false
},
{
"year": 2025,
"stars": 150,
"name": "samsung-tv-root",
"url": "https://github.com/chris-ritsen/samsung-tv-root",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Samsung QN90B and QN90F root",
"pushed": "2026-10-23T11:21:28Z",
"released": null,
"basis": "pending",
"score": 14.216721310260862,
"trending": true,
"created": "2026-08-17T14:06:15Z",
"cve": "CVE-2025-0072",
"kev": false
},
{
"year": 2026,
"stars": 564,
"name": "wp2shell-PoC",
"url": "https://github.com/gichirimaku/wp2shell-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.",
"pushed": "2026-10-20T17:21:47Z",
"released": "2026-10-15T17:29:44Z",
"basis": "commit",
"score": 13.147368873230084,
"trending": true,
"created": "2026-10-15T17:29:04Z",
"cve": "CVE-2026-63030",
"kev": true
},
{
"year": 2026,
"stars": 533,
"name": "CVE-2026-41940-PoC",
"url": "https://github.com/sakidekin/CVE-2026-41940-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation",
"pushed": "2026-10-20T17:26:07Z",
"released": "2026-10-15T12:44:31Z",
"basis": "commit",
"score": 12.235814657437702,
"trending": true,
"created": "2026-10-11T07:54:18Z",
"cve": "CVE-2026-41940",
"kev": true
},
{
"year": 2026,
"stars": 87,
"name": "root-my-s24",
"url": "https://github.com/NanoTurtle1145/root-my-s24",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))",
"pushed": "2026-10-23T15:50:24Z",
"released": null,
"basis": "pending",
"score": 9.27923503072035,
"trending": true,
"created": "2026-08-16T14:37:06Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 124,
"name": "php2shell",
"url": "https://github.com/syrex1013/php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-109618/109619 PoC - PHP session.upload_progress heap use-after-free (CVSS 9.2)",
"pushed": "2026-10-21T19:17:12Z",
"released": "2026-10-21T15:06:33Z",
"basis": "created",
"score": 6.141475668717009,
"trending": true,
"created": "2026-10-21T15:06:33Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 63,
"name": "actual-php2shell",
"url": "https://github.com/cookiengineer/actual-php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": ":robot: NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)",
"pushed": "2026-10-22T19:04:56Z",
"released": null,
"basis": "pending",
"score": 4.370958979027672,
"trending": true,
"created": "2026-10-22T13:17:09Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 103,
"name": "php-cve-2026-10961x-lab-poc",
"url": "https://github.com/dinosn/php-cve-2026-10961x-lab-poc/blob/eb8558b04a1bbbd85d2b3a7a64780ab17cccc951/scripts/reproduce.py",
"artifact": true,
"shared_repository": false,
"source": "github.com",
"desc": "PHP CVE-2026-109618/109619 - self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12",
"pushed": "2026-10-20T19:15:42Z",
"released": "2026-10-20T19:16:47Z",
"basis": "created",
"score": 4.3133018867210255,
"trending": true,
"created": "2026-10-20T19:16:47Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2023,
"stars": 156,
"name": "Trigon",
"url": "https://github.com/alfiecg24/Trigon",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Deterministic kernel exploit based on CVE-2023-32434.",
"pushed": "2026-10-17T11:25:33Z",
"released": null,
"basis": "pending",
"score": 4.23287549705374,
"trending": true,
"created": "2025-03-01T23:07:37Z",
"cve": "CVE-2023-32434",
"kev": true
},
{
"year": 2026,
"stars": 64,
"name": "PHP2Shell-Full-Chain-Exploit",
"url": "https://github.com/78ResearchLab/PHP2Shell-Full-Chain-Exploit",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": "2026-10-22T11:02:05Z",
"released": "2026-10-22T11:02:05Z",
"basis": "commit",
"score": 3.959394946050647,
"trending": true,
"created": "2026-10-22T08:11:01Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 805,
"name": "wp2shell-poc",
"url": "https://github.com/Icex0/wp2shell-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"pushed": "2026-08-11T13:41:24Z",
"released": "2026-07-18T17:11:12Z",
"basis": "commit",
"score": 3.514823117848406,
"trending": true,
"created": "2026-07-17T20:18:33Z",
"cve": "CVE-2026-63030",
"kev": true
},
{
"year": 2026,
"stars": 37,
"name": "portal-root-kiosk-satellite",
"url": "https://github.com/jxlarrea/portal-root-kiosk-satellite",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Root and provisioning for Meta Portal devices for optimal use with Kiosk Satellite.",
"pushed": "2026-10-23T10:08:14Z",
"released": null,
"basis": "pending",
"score": 3.408009380939089,
"trending": true,
"created": "2026-10-04T02:47:17Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 460,
"name": "Root-My-Pixel",
"url": "https://github.com/alex193a/Root-My-Pixel",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"pushed": "2026-09-07T19:56:32Z",
"released": null,
"basis": "pending",
"score": 3.3660670034911173,
"trending": true,
"created": "2026-08-02T17:34:45Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 44,
"name": "CVE-2026-109618-poc",
"url": "https://github.com/enactive-systems/CVE-2026-109618-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": "2026-10-21T14:21:43Z",
"released": "2026-10-21T14:21:43Z",
"basis": "commit",
"score": 2.1637948816753227,
"trending": true,
"created": "2026-10-21T14:20:15Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 96,
"name": "IonStack-S22U",
"url": "https://github.com/sarabpal-dev/IonStack-S22U",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)",
"pushed": "2026-10-13T03:01:42Z",
"released": null,
"basis": "pending",
"score": 1.8716716515889318,
"trending": true,
"created": "2026-08-08T23:35:25Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 32,
"name": "php-rce",
"url": "https://github.com/david-alvarez-rosa/php-rce",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Exploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets",
"pushed": "2026-10-21T18:07:50Z",
"released": "2026-10-21T17:42:17Z",
"basis": "created",
"score": 1.6254614755698973,
"trending": true,
"created": "2026-10-21T17:42:17Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 31,
"name": "cve-2026-109618-php2shell",
"url": "https://github.com/godylockz/cve-2026-109618-php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell",
"pushed": "2026-10-22T17:44:03Z",
"released": "2026-10-21T19:51:22Z",
"basis": "created",
"score": 1.6091484988109743,
"trending": true,
"created": "2026-10-21T19:51:22Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 337,
"name": "CVE-2026-54121",
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Certighost POC",
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
"score": 1.5313447311402957,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
"kev": false
},
{
"year": 2026,
"stars": 16,
"name": "Reversing-Vulnerabilities",
"url": "https://github.com/jaiswalakshansh/Reversing-Vulnerabilities",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Reversing Vulnerabilities for Fun",
"pushed": "2026-10-23T09:31:20Z",
"released": null,
"basis": "pending",
"score": 1.4530625538990087,
"trending": true,
"created": "2026-09-30T11:20:54Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 60,
"name": "GhostSam",
"url": "https://github.com/snothin/GhostSam",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Samsung temp root tool (until reboot) - Ghostlock / dirtyfrag exploit chains + manager app.",
"pushed": "2026-10-15T14:34:19Z",
"released": null,
"basis": "pending",
"score": 1.3854834309466646,
"trending": true,
"created": "2026-08-31T12:59:51Z",
"cve": "CVE-2026-43284",
"kev": false
},
{
"year": 2025,
"stars": 139,
"name": "unisoc-su",
"url": "https://github.com/Skorpion96/unisoc-su",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models",
"pushed": "2026-09-22T20:16:57Z",
"released": null,
"basis": "pending",
"score": 1.333012334586255,
"trending": true,
"created": "2025-06-06T14:31:13Z",
"cve": "CVE-2025-31710",
"kev": false
},
{
"year": 2026,
"stars": 27,
"name": "php2shell-Lab",
"url": "https://github.com/kuwoo/php2shell-Lab",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "🐘 php2shell（CVE-2026-109618 / CVE-2026-109619）复现靶场 - session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC",
"pushed": "2026-10-21T14:38:32Z",
"released": "2026-10-21T14:12:09Z",
"basis": "commit",
"score": 1.3257827617866624,
"trending": true,
"created": "2026-10-21T12:36:55Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 223,
"name": "ResetNightmare",
"url": "https://github.com/Semperis-Community/ResetNightmare",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "POC tool for ResetNightmare (CVE-2026-27912)",
"pushed": "2026-08-14T17:11:38Z",
"released": null,
"basis": "pending",
"score": 1.2202095233541097,
"trending": true,
"created": "2026-08-02T12:36:16Z",
"cve": "CVE-2026-27912",
"kev": false
},
{
"year": 2024,
"stars": 277,
"name": "skill",
"url": "https://github.com/ptn1411/skill",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ thống mà bạn sở hữu hoặc được phép đánh giá.",
"pushed": "2026-09-10T15:35:03Z",
"released": "2026-05-12T09:45:38Z",
"basis": "commit",
"score": 0.8386657298309814,
"trending": true,
"created": "2026-04-29T16:58:50Z",
"cve": "CVE-2024-6387",
"kev": false
},
{
"year": 2025,
"stars": 245,
"name": "BitUnlocker",
"url": "https://github.com/garatc/BitUnlocker",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Downgrade attack for CVE-2025-48804",
"pushed": "2026-08-31T12:26:18Z",
"released": "2026-04-30T13:16:16Z",
"basis": "commit",
"score": 0.7066734093038741,
"trending": true,
"created": "2026-04-30T13:05:30Z",
"cve": "CVE-2025-48804",
"kev": false
},
{
"year": 2024,
"stars": 68,
"name": "simple-krw-vuln",
"url": "https://github.com/cli0xfa/simple-krw-vuln",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Windows 内核任意内存读写漏洞收集仓库，收录简单、稳定、可编译复现的 Exploit（权限提升 / 终止安全软件）",
"pushed": "2026-09-06T02:44:48Z",
"released": null,
"basis": "pending",
"score": 0.48520745384596525,
"trending": true,
"created": "2026-09-06T02:45:29Z",
"cve": "CVE-2024-35250",
"kev": true
},
{
"year": 2025,
"stars": 29,
"name": "Douglas-Guidebook",
"url": "https://github.com/douglasmun/Douglas-Guidebook",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Douglas Mun's Technical Guidebooks",
"pushed": "2026-09-12T12:02:46Z",
"released": "2026-09-10T12:54:07Z",
"basis": "commit",
"score": 0.22123334162068464,
"trending": true,
"created": "2025-06-28T11:03:09Z",
"cve": "CVE-2025-24257",
"kev": false
},
{
"year": 2024,
"stars": 17,
"name": "CVE-2024-56426",
"url": "https://github.com/Creeeeger/CVE-2024-56426",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
"score": 0.2157261607662176,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2022,
"stars": 31,
"name": "SCRoot",
"url": "https://github.com/hackintoanetwork/SCRoot",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "One-click rooting and KernelSU-Next tool for the Samsung SCR-01 mobile 5G router.",
"pushed": "2026-08-02T14:15:15Z",
"released": null,
"basis": "pending",
"score": 0.15189343879797892,
"trending": true,
"created": "2026-07-29T17:53:15Z",
"cve": "CVE-2022-38181",
"kev": true
},
{
"year": 2025,
"stars": 22,
"name": "CVE-2025-7771",
"url": "https://github.com/enessakircolak/CVE-2025-7771",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
"score": 0.11611976597010762,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2025,
"stars": 7,
"name": "ABrake27",
"url": "https://github.com/vvirei333/ABrake27",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow",
"pushed": "2026-10-06T18:09:51Z",
"released": null,
"basis": "pending",
"score": 0.10035969416612939,
"trending": true,
"created": "2026-10-02T10:59:04Z",
"cve": "CVE-2025-43520",
"kev": true
},
{
"year": 2026,
"stars": 1,
"name": "br-php2shell",
"url": "https://github.com/fellipgomes/br-php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Descubra se sites da internet é vulnerável a php2shell CVE-2026-109619",
"pushed": null,
"released": "2026-10-23T13:03:58Z",
"basis": "commit",
"score": 0.09880582803517202,
"trending": false,
"created": "2026-10-23T12:57:18Z",
"cve": "CVE-2026-109619",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-98260-nezha-android",
"url": "https://github.com/quyicheng03-boop/CVE-2026-98260-nezha-android",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Target-specific Android CVE-2026-98260 research port for Xiaomi nezha",
"pushed": null,
"released": "2026-10-23T12:12:15Z",
"basis": "created",
"score": 0.09667843627524769,
"trending": false,
"created": "2026-10-23T12:12:15Z",
"cve": "CVE-2026-98260",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-8110",
"url": "https://github.com/Ghxstsec/CVE-2025-8110",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.",
"pushed": "2026-10-12T15:07:46Z",
"released": null,
"basis": "pending",
"score": 0.09465426331281294,
"trending": true,
"created": "2026-04-11T22:40:07Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2026,
"stars": 1,
"name": "php2shell_lab",
"url": "https://github.com/D1se0/php2shell_lab",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": null,
"released": "2026-10-23T11:13:29Z",
"basis": "created",
"score": 0.0943915568054603,
"trending": false,
"created": "",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2023,
"stars": 7,
"name": "picohaxx",
"url": "https://github.com/264312431/picohaxx",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A kernel exploit for Pico 4 devices based on cve-2023-33107.",
"pushed": "2026-10-04T18:31:02Z",
"released": "2026-10-03T17:07:27Z",
"basis": "commit",
"score": 0.08992229568346341,
"trending": true,
"created": "2026-07-18T08:06:18Z",
"cve": "CVE-2023-33107",
"kev": true
},
{
"year": 2025,
"stars": 8,
"name": "CVE-2025-32432-exploit-by-P34NUT",
"url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail",
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
"score": 0.06830716564390887,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 10,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
"score": 0.0627297011851473,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 6,
"name": "pruva-sandbox",
"url": "https://github.com/N3mes1s/pruva-sandbox",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Public Codespaces runner for verified CVE/GHSA vulnerability reproductions",
"pushed": "2026-09-07T14:40:23Z",
"released": null,
"basis": "pending",
"score": 0.04376138864292567,
"trending": true,
"created": "2026-01-06T07:26:11Z",
"cve": "CVE-2025-1716",
"kev": false
},
{
"year": 2025,
"stars": 9,
"name": "SELinux-Permissive-Only-CVE-2025-21479",
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
"score": 0.04226636983017561,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2022,
"stars": 8,
"name": "spd_flasher",
"url": "https://github.com/LeoChen-CoreMind/spd_flasher",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices",
"pushed": "2026-08-05T16:51:28Z",
"released": "2026-08-05T16:51:28Z",
"basis": "commit",
"score": 0.04025863615899559,
"trending": true,
"created": "2026-02-20T16:40:39Z",
"cve": "CVE-2022-38694",
"kev": false
},
{
"year": 2025,
"stars": 11,
"name": "Milan0day2026",
"url": "https://github.com/zer0matt/Milan0day2026",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions with ring-0 privileges. The vulnerability enables local attackers to execute arbitrary code in kernel context, resulting in privilege escalation and potential follow-on attacks, such as disabling security software or bypassing kernel-level protections. ThrottleStop.sys version 3.0.0.0 and possibly others are affected. Apply updates per vendor instructions.",
"pushed": "2026-07-31T08:50:07Z",
"released": "2026-05-29T19:08:46Z",
"basis": "commit",
"score": 0.03600008392797865,
"trending": true,
"created": "2026-05-29T18:39:40Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-8045",
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
"score": 0.03551374759879211,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
"kev": false
},
{
"year": 2025,
"stars": 6,
"name": "cve-2025-21479_iqooneo8",
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
"score": 0.03467828680236071,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-21479-FX5P",
"url": "https://github.com/diyiqiuye/CVE-2025-21479-FX5P",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)",
"pushed": "2026-09-27T10:13:48Z",
"released": "2026-09-24T23:33:12Z",
"basis": "commit",
"score": 0.03020352990031933,
"trending": true,
"created": "2026-09-24T23:20:42Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "MSRMapper",
"url": "https://github.com/uLl0a/MSRMapper",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.",
"pushed": "2026-09-17T02:29:34Z",
"released": "2026-09-17T02:29:34Z",
"basis": "commit",
"score": 0.025617374154691553,
"trending": true,
"created": "2026-09-17T02:28:07Z",
"cve": "CVE-2025-8061",
"kev": false
},
{
"year": 2024,
"stars": 5,
"name": "TreeVuln",
"url": "https://github.com/MaximeBonneton/TreeVuln",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"pushed": "2026-08-06T14:21:51Z",
"released": null,
"basis": "pending",
"score": 0.025361062499322164,
"trending": true,
"created": "2026-02-02T13:16:54Z",
"cve": "CVE-2024-1234",
"kev": false
},
{
"year": 2024,
"stars": 4,
"name": "CVE-2024-56426",
"url": "https://github.com/xcracker000/CVE-2024-56426",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
"score": 0.02200615527769874,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-3248-Langflow-RCE",
"url": "https://github.com/hideki233/CVE-2025-3248-Langflow-RCE",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
"score": 0.018979133211924144,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
"score": 0.016980939309906285,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2022,
"stars": 3,
"name": "realme-c53-unlock-root",
"url": "https://github.com/Gopartner/realme-c53-unlock-root",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Bootloader unlock (CVE-2022-38694) & root guide for Realme C53 / RMX3760 (Unisoc T612)",
"pushed": "2026-08-05T10:35:28Z",
"released": null,
"basis": "pending",
"score": 0.015062582526563614,
"trending": true,
"created": "2026-05-16T16:16:31Z",
"cve": "CVE-2022-38694",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "mouseserver-exploit",
"url": "https://github.com/lypd0/mouseserver-exploit",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Mobile Mouse 3.6.0.4 - Remote Code Execution - CVE-2023-31902",
"pushed": "2026-08-04T05:41:49Z",
"released": "2026-08-04T05:41:49Z",
"basis": "commit",
"score": 0.014906419904709827,
"trending": true,
"created": "2026-08-04T05:39:12Z",
"cve": "CVE-2023-31902",
"kev": false
},
{
"year": 2024,
"stars": 3,
"name": "CVE-2024-36104-PoC",
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
"score": 0.014256960647354312,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "CVE-2023-52076-PoC",
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
"score": 0.013965468582994413,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
"kev": false
},
{
"year": 2022,
"stars": 7,
"name": "CVE-2022-22077",
"url": "https://github.com/grisuno/CVE-2022-22077",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
"score": 0.011208407466569372,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
{
"year": 2026,
"stars": 0,
"name": "cve-2026-109618-109619-poc",
"url": "https://github.com/Noshadi-sec/cve-2026-109618-109619-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC exploit harness and research framework for CVE-2026-109618 and CVE-2026-109619 (PHP session.upload_progress UAF).",
"pushed": null,
"released": "2026-10-23T15:30:31Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-23T15:23:13Z",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php2shell_research",
"url": "https://github.com/hardsoftsecurity/php2shell_research",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": null,
"released": "2026-10-23T14:34:52Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php2shell",
"url": "https://github.com/zake1god/php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Loopback-only PHP2Shell research lab for CVE-2026-109618 and CVE-2026-109619",
"pushed": null,
"released": "2026-10-23T14:01:00Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-23T14:01:00Z",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php2shell",
"url": "https://github.com/vm32/php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": null,
"released": "2026-10-23T13:42:10Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619",
"url": "https://github.com/debjit604/PHP2Shell-CVE-2026-109618-CVE-2026-109619",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": null,
"released": "2026-10-23T13:08:05Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-23T12:09:48Z",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php2shell-tools",
"url": "https://github.com/sstrobl-osm/php2shell-tools",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Read-only triage tools for the October 2026 PHP remote-code-execution flaws: CVE-2026-109618 / CVE-2026-109619 / CVE-2026-110447",
"pushed": null,
"released": "2026-10-23T12:28:22Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-23T12:26:19Z",
"cve": "CVE-2026-110447",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php2shell-nginx-fpm-full-rce",
"url": "https://github.com/VABISMO/php2shell-nginx-fpm-full-rce",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 / CVE-2026-109619",
"pushed": null,
"released": "2026-10-23T11:28:22Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-22T21:04:53Z",
"cve": "CVE-2026-109619",
"kev": false,
"landed": true
}
]
Reference in new issue View Git Blame Copy Permalink