mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
662 lines
27 KiB
JSON
662 lines
27 KiB
JSON
[
|
|
{
|
|
"year": 2026,
|
|
"stars": 80,
|
|
"name": "CVE-2026-75604-poc",
|
|
"url": "https://github.com/rafabd1/CVE-2026-75604-poc",
|
|
"desc": "CVE-2026-75604 Next.js Windows RCE poc",
|
|
"pushed": "2026-08-26T02:23:55Z",
|
|
"created": "2026-08-25T19:06:37Z",
|
|
"cve": "CVE-2026-75604",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 157,
|
|
"name": "CVE-2026-62911",
|
|
"url": "https://github.com/hypnguyen1209/CVE-2026-62911",
|
|
"desc": "POC pre-auth RCE on Exchange",
|
|
"pushed": "2026-08-22T04:49:54Z",
|
|
"created": "2026-08-22T04:49:33Z",
|
|
"cve": "CVE-2026-62911",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 53,
|
|
"name": "CVE-2026-64638-PoC-XSS2Shell-",
|
|
"url": "https://github.com/Boreas37/CVE-2026-64638-PoC-XSS2Shell-",
|
|
"desc": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain - PoC exploit + defensive audit tool + nuclei template",
|
|
"pushed": "2026-08-21T13:31:56Z",
|
|
"created": "2026-08-07T17:07:17Z",
|
|
"cve": "CVE-2026-64638",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 37,
|
|
"name": "CVE-2026-18963-Exploit",
|
|
"url": "https://github.com/Snizi/CVE-2026-18963-Exploit",
|
|
"desc": "Exploit for KeyCloak CVE-2026-18963",
|
|
"pushed": "2026-08-20T22:18:11Z",
|
|
"created": "2026-08-20T22:01:11Z",
|
|
"cve": "CVE-2026-18963",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 416,
|
|
"name": "CVE-2026-9830",
|
|
"url": "https://github.com/opaxial/CVE-2026-9830",
|
|
"desc": "CVE-2026-9830 Proof of Concept",
|
|
"pushed": "2026-08-20T21:56:15Z",
|
|
"created": "2026-08-15T20:57:13Z",
|
|
"cve": "CVE-2026-9830",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 531,
|
|
"name": "cve-2026-41940-PoC",
|
|
"url": "https://github.com/lanicer/cve-2026-41940-PoC",
|
|
"desc": "A cPanel and WHM authentication bypassing tool",
|
|
"pushed": "2026-08-20T10:15:12Z",
|
|
"created": "2026-08-19T12:46:46Z",
|
|
"cve": "CVE-2026-41940",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 824,
|
|
"name": "CVE-2026-24061",
|
|
"url": "https://github.com/jacubes/CVE-2026-24061",
|
|
"desc": "CVE-2026-24061 exploit PoC",
|
|
"pushed": "2026-08-20T10:06:17Z",
|
|
"created": "2026-03-08T11:25:39Z",
|
|
"cve": "CVE-2026-24061",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 60,
|
|
"name": "watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452",
|
|
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452",
|
|
"desc": "CVE-2026-8452 PreAuth RCE",
|
|
"pushed": "2026-08-14T15:01:41Z",
|
|
"created": "2026-08-14T15:01:25Z",
|
|
"cve": "CVE-2026-8452",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 24,
|
|
"name": "CVE-2026-66804-CrossDevice-Service-EoP",
|
|
"url": "https://github.com/Rat5ak/CVE-2026-66804-CrossDevice-Service-EoP",
|
|
"desc": "CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM",
|
|
"pushed": "2026-08-13T03:37:37Z",
|
|
"created": "2026-08-13T01:42:43Z",
|
|
"cve": "CVE-2026-66804",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 33,
|
|
"name": "CVE-2026-68138",
|
|
"url": "https://github.com/aramosf/CVE-2026-68138",
|
|
"desc": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
|
|
"pushed": "2026-08-12T15:30:58Z",
|
|
"created": "2026-08-11T22:22:22Z",
|
|
"cve": "CVE-2026-68138",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 19,
|
|
"name": "CVE-2026-63077",
|
|
"url": "https://github.com/sfewer-r7/CVE-2026-63077",
|
|
"desc": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)",
|
|
"pushed": "2026-08-07T11:52:30Z",
|
|
"created": "2026-08-07T08:38:01Z",
|
|
"cve": "CVE-2026-63077",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 58,
|
|
"name": "CVE-2026-55040",
|
|
"url": "https://github.com/sfewer-r7/CVE-2026-55040",
|
|
"desc": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)",
|
|
"pushed": "2026-08-06T11:50:17Z",
|
|
"created": "2026-08-06T11:46:34Z",
|
|
"cve": "CVE-2026-55040",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 53,
|
|
"name": "CVE-2026-64560-Analysis",
|
|
"url": "https://github.com/villager1314/CVE-2026-64560-Analysis",
|
|
"desc": "In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-leader exec() race Wongi and Jungwoo decoded and reported a non-leader exec() related race which can result in an UAF: sys_timer_delete() exec() posix_cpu_timer_del() // Observes old leader p = pid_task(pid, pid_type); de_thread() switch_leader(); release_task(old_leader) __exit_signal(old_leader) sighand = lock(old_leader, sighand); posix_cpu_timers*_exit(); sighand = lock_task_sighand(p) unhash_task(old_leader); sh = lock(p, sighand) old_leader->sighand = NULL; unlock(sighand); (p->sighand == NULL) unlock(sh) return NULL; // Returns without action if(!sighand) return 0; free_posix_timer(); This is \"harmless\" unless the deleted timer was armed and enqueued in p->signal because on exec() a TGID targeted timer is inherited. As sys_timer_delete() freed the underlying posix timer object run_posix_cpu_timers() or any timerqueue related add/delete operations on other timers will access the freed object's timerqueue node, which results in an UAF. There is a similar problem vs. posix_cpu_timer_set(). For regular posix timers it just transiently returns -ESRCH to user space, but for the use case in do_cpu_nanosleep() it's the same UAF just that the k_itimer is allocated on the stack. Also posix_cpu_timer_rearm() fails to rearm the timer, which means it stops to expire. While debating solutions Frederic pointed out another problem: posix_cpu_timer_del(tmr) __exit_signal(p) posix_cpu_timers*_exit(p); unhash_task(p); p->sighand = NULL; sh = lock_task_sighand(p) sighand = p->sighand; if (!sighand) return NULL; lock(sighand); if (!sh) WARN_ON_ONCE(timer_queued(tmr)); On weakly ordered architectures it is not guaranteed that posix_cpu_timer_del() will observe the stores in posix_cpu_timers*_exit() when p->sighand is observed as NULL, which means the WARN() can be a false positive. Solve these issues by: 1) Changing the store in __exit_signal() to smp_store_release(). 2) Adding a smp_acquire__after_ctrl_dep() into the !sighand path of lock_task_sighand(). 3) Creating a helper function for looking up the task and locking sighand which does not return when sighand == NULL. Instead it retries the task lookup and only if that fails it gives up. 4) Using that helper in the three affected functions. #1/#2 ensures that the reader side which observes sighand == NULL also observes all preceeding stores, i.e. the stores in posix_cpu_timers*_exit() and the ones in unhash_task(). #3 ensures that the above described non-leader exec() situation is handled gracefully. When the task lookup returns the old leader, but sighand == NULL then it retries. In the non-leader exec() case the subsequent task lookup will observe the new leader due to #1/#2. In normal exit() scenarios the subsequent lookup fails. When the task lookup fails, the function also checks whether the timer is still enqueued and issues a warning if that's the case. Unfortunately there is nothing which can be done about it, but as the task is already not longer visible the timer should not be accessed anymore. This check also requires memory ordering, which is not provided when the first lookup fails. To achieve that the check is preceeded by a smp_rmb() which pairs with the smp_wmb() in write_seqlock() in __exit_signal(). That ensures that the stores in posix_cpu_timers*_exit() are visible. The history of the non-leader exec() issue goes back to the early days of posix CPU timers, which stored a pointer to the group leader task in the timer. That obviously fails when a non-leader exec() switches the leader. commit e0a70217107e (\"posix-cpu-timers: workaround to suppress the problems with mt exec\") added a temporary workaround for that in 2010 which surv ---truncated---",
|
|
"pushed": "2026-08-03T12:39:41Z",
|
|
"created": "2026-08-03T12:36:27Z",
|
|
"cve": "CVE-2026-64560",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 17,
|
|
"name": "CVE-2026-60004-POC",
|
|
"url": "https://github.com/imbas007/CVE-2026-60004-POC",
|
|
"desc": "CVE-2026-60004 Pre-Auth RCE Exploit - Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)",
|
|
"pushed": "2026-08-03T08:31:36Z",
|
|
"created": "2026-08-03T07:48:39Z",
|
|
"cve": "CVE-2026-60004",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 81,
|
|
"name": "CVE-2026-43499-Poc-Analysis",
|
|
"url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
|
|
"desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
|
|
"pushed": "2026-07-30T11:28:07Z",
|
|
"created": "2026-07-14T14:21:27Z",
|
|
"cve": "CVE-2026-43499",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 23,
|
|
"name": "CVE-2026-66066-POC",
|
|
"url": "https://github.com/Zer0SumGam3/CVE-2026-66066-POC",
|
|
"desc": "PoC for CVE-2026-66066 in Ruby on Rails",
|
|
"pushed": "2026-07-29T23:00:12Z",
|
|
"created": "2026-07-29T21:08:30Z",
|
|
"cve": "CVE-2026-66066",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 11,
|
|
"name": "CVE-2026-16232",
|
|
"url": "https://github.com/sfewer-r7/CVE-2026-16232",
|
|
"desc": "A proof-of-concept script to exploit CVE-2026-16232, an authentication bypass via the SmartConsole login process using an application token.",
|
|
"pushed": "2026-07-28T16:51:44Z",
|
|
"created": "2026-07-28T16:19:31Z",
|
|
"cve": "CVE-2026-16232",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 325,
|
|
"name": "CVE-2026-54121",
|
|
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
|
|
"desc": "Certighost POC",
|
|
"pushed": "2026-07-27T19:12:07Z",
|
|
"created": "2026-07-23T18:54:34Z",
|
|
"cve": "CVE-2026-54121",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 35,
|
|
"name": "CVE-2026-42533",
|
|
"url": "https://github.com/imbas007/CVE-2026-42533",
|
|
"desc": "nginx heap buffer overflow PoC - CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.",
|
|
"pushed": "2026-07-27T08:09:52Z",
|
|
"created": "2026-07-27T08:03:07Z",
|
|
"cve": "CVE-2026-42533",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 27,
|
|
"name": "CVE-2026-54121-PoC-Exploit",
|
|
"url": "https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit",
|
|
"desc": "👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework / Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash extraction. Features: detect safe check, exploit full multi-threaded. 🛡️ CVSS 8.8 High - Use Ethically, Stay Legal. 🔒",
|
|
"pushed": "2026-07-26T12:22:13Z",
|
|
"created": "2026-07-25T18:01:04Z",
|
|
"cve": "CVE-2026-54121",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 6,
|
|
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
|
|
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
|
|
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
|
|
"pushed": "2026-08-27T07:13:42Z",
|
|
"created": "2026-08-19T09:39:46Z",
|
|
"cve": "CVE-2025-21479",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 4,
|
|
"name": "cve-2025-21479_iqooneo8",
|
|
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
|
|
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
|
|
"pushed": "2026-08-20T01:33:10Z",
|
|
"created": "2026-08-20T01:13:39Z",
|
|
"cve": "CVE-2025-21479",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 20,
|
|
"name": "CVE-2025-7771",
|
|
"url": "https://github.com/enessakircolak/CVE-2025-7771",
|
|
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
|
|
"pushed": "2026-08-10T23:15:22Z",
|
|
"created": "2026-08-10T23:15:36Z",
|
|
"cve": "CVE-2025-7771",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 6,
|
|
"name": "CVE-2025-8045",
|
|
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
|
|
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
|
|
"pushed": "2026-08-06T14:58:53Z",
|
|
"created": "2026-08-06T13:52:33Z",
|
|
"cve": "CVE-2025-8045",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 6,
|
|
"name": "SELinux-Permissive-Only-CVE-2025-21479",
|
|
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
|
|
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
|
|
"pushed": "2026-08-02T06:48:32Z",
|
|
"created": "2026-07-28T06:41:38Z",
|
|
"cve": "CVE-2025-21479",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 4,
|
|
"name": "CVE-2025-32432",
|
|
"url": "https://github.com/c0gnit00/CVE-2025-32432",
|
|
"desc": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell",
|
|
"pushed": "2026-07-21T16:55:33Z",
|
|
"created": "2026-07-21T16:52:22Z",
|
|
"cve": "CVE-2025-32432",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 4,
|
|
"name": "CVE-2025-64512",
|
|
"url": "https://github.com/matesz44/CVE-2025-64512",
|
|
"desc": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads",
|
|
"pushed": "2026-07-19T11:00:00Z",
|
|
"created": "2026-07-19T10:49:05Z",
|
|
"cve": "CVE-2025-64512",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 5,
|
|
"name": "CVE-2025-8110-gogs-poc",
|
|
"url": "https://github.com/Shirouuu/CVE-2025-8110-gogs-poc",
|
|
"desc": "PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink",
|
|
"pushed": "2026-07-17T13:55:11Z",
|
|
"created": "2026-07-17T13:46:16Z",
|
|
"cve": "CVE-2025-8110",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 7,
|
|
"name": "CVE-2025-30065",
|
|
"url": "https://github.com/h3st4k3r/CVE-2025-30065",
|
|
"desc": "This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsing, enabling code execution when untrusted data is processed without proper controls.",
|
|
"pushed": "2026-07-08T08:01:25Z",
|
|
"created": "2025-04-04T08:45:24Z",
|
|
"cve": "CVE-2025-30065",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 4,
|
|
"name": "CVE-2025-69212-PoC",
|
|
"url": "https://github.com/BridgerAlderson/CVE-2025-69212-PoC",
|
|
"desc": "OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function.",
|
|
"pushed": "2026-07-02T20:41:12Z",
|
|
"created": "2026-06-30T13:38:40Z",
|
|
"cve": "CVE-2025-69212",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 3,
|
|
"name": "CVE-2025-57819",
|
|
"url": "https://github.com/K3ysTr0K3R/CVE-2025-57819",
|
|
"desc": "CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE)",
|
|
"pushed": "2026-07-02T19:17:51Z",
|
|
"created": "2026-07-02T19:07:36Z",
|
|
"cve": "CVE-2025-57819",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 4,
|
|
"name": "CVE-2025-69212-PoC",
|
|
"url": "https://github.com/tohib09/CVE-2025-69212-PoC",
|
|
"desc": "OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.",
|
|
"pushed": "2026-06-27T23:56:25Z",
|
|
"created": "2026-06-27T23:54:57Z",
|
|
"cve": "CVE-2025-69212",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 5,
|
|
"name": "CVE-2025-8110",
|
|
"url": "https://github.com/joaquinrrr/CVE-2025-8110",
|
|
"desc": "PoC exploit for CVE-2025-8110",
|
|
"pushed": "2026-06-25T16:53:11Z",
|
|
"created": "2026-06-25T16:48:18Z",
|
|
"cve": "CVE-2025-8110",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 14,
|
|
"name": "vulnerable-nextjs-14-CVE-2025-29927",
|
|
"url": "https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927",
|
|
"desc": "Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.",
|
|
"pushed": "2026-06-12T09:41:28Z",
|
|
"created": "2025-03-23T09:22:35Z",
|
|
"cve": "CVE-2025-29927",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 13,
|
|
"name": "FreePBX-CVE-2025-57819-RCE",
|
|
"url": "https://github.com/0xEhab/FreePBX-CVE-2025-57819-RCE",
|
|
"desc": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.",
|
|
"pushed": "2026-06-06T21:35:46Z",
|
|
"created": "2026-06-06T20:49:03Z",
|
|
"cve": "CVE-2025-57819",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 7,
|
|
"name": "CVE-2025-57819-poc",
|
|
"url": "https://github.com/b4sh2/CVE-2025-57819-poc",
|
|
"desc": "CVE-2025-57819 -> rce",
|
|
"pushed": "2026-06-06T20:21:04Z",
|
|
"created": "2026-06-06T20:13:34Z",
|
|
"cve": "CVE-2025-57819",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 16,
|
|
"name": "CVE-2024-56426",
|
|
"url": "https://github.com/Creeeeger/CVE-2024-56426",
|
|
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
|
|
"pushed": "2026-08-16T15:12:56Z",
|
|
"created": "2026-04-07T12:02:52Z",
|
|
"cve": "CVE-2024-56426",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 3,
|
|
"name": "CVE-2024-56426",
|
|
"url": "https://github.com/xcracker000/CVE-2024-56426",
|
|
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
|
|
"pushed": "2026-08-15T06:21:41Z",
|
|
"created": "2026-08-15T06:12:04Z",
|
|
"cve": "CVE-2024-56426",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 3,
|
|
"name": "CVE-2024-36104-PoC",
|
|
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
|
|
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
|
|
"pushed": "2026-07-29T21:15:12Z",
|
|
"created": "2026-07-29T19:59:36Z",
|
|
"cve": "CVE-2024-36104",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 31,
|
|
"name": "CVE-2024-24919-Bulk-Scanner",
|
|
"url": "https://github.com/ifconfig-me/CVE-2024-24919-Bulk-Scanner",
|
|
"desc": "CVE-2024-24919 [Check Point Security Gateway Information Disclosure]",
|
|
"pushed": "2026-06-28T05:45:51Z",
|
|
"created": "2024-06-01T10:51:14Z",
|
|
"cve": "CVE-2024-24919",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 3,
|
|
"name": "CVE-2024-36991",
|
|
"url": "https://github.com/0xFZin/CVE-2024-36991",
|
|
"desc": "Exploit for CVE-2024-36991 , written by me, enumerates a handfull of things, not all, cause not needed.",
|
|
"pushed": "2026-06-21T09:24:33Z",
|
|
"created": "2025-07-06T03:50:13Z",
|
|
"cve": "CVE-2024-36991",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 7,
|
|
"name": "CVE-2024-27983-nodejs-http2",
|
|
"url": "https://github.com/lirantal/CVE-2024-27983-nodejs-http2",
|
|
"desc": "CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers.",
|
|
"pushed": "2026-06-12T09:43:05Z",
|
|
"created": "2024-04-14T11:34:52Z",
|
|
"cve": "CVE-2024-27983",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2024,
|
|
"stars": 4,
|
|
"name": "CVE-2024-1065",
|
|
"url": "https://github.com/kuzeyardabulut/CVE-2024-1065",
|
|
"desc": "Page Cache Exploit for CVE-2024-1065",
|
|
"pushed": "2026-06-06T14:00:55Z",
|
|
"created": "2026-06-02T10:21:23Z",
|
|
"cve": "CVE-2024-1065",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2023,
|
|
"stars": 3,
|
|
"name": "CVE-2023-52076-PoC",
|
|
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
|
|
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
|
|
"pushed": "2026-07-27T07:00:54Z",
|
|
"created": "2026-07-27T06:51:21Z",
|
|
"cve": "CVE-2023-52076",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2023,
|
|
"stars": 5,
|
|
"name": "CVE-2023-36003",
|
|
"url": "https://github.com/johnnygreeme/CVE-2023-36003",
|
|
"desc": "PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.",
|
|
"pushed": "2026-07-22T19:46:33Z",
|
|
"created": "2026-07-22T19:43:34Z",
|
|
"cve": "CVE-2023-36003",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2023,
|
|
"stars": 3,
|
|
"name": "cve-2023-4911-exploit-optimized",
|
|
"url": "https://github.com/jarpex/cve-2023-4911-exploit-optimized",
|
|
"desc": "Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser.",
|
|
"pushed": "2026-07-07T21:02:04Z",
|
|
"created": "2026-06-29T21:05:09Z",
|
|
"cve": "CVE-2023-4911",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2023,
|
|
"stars": 15,
|
|
"name": "CVE-2023-32315-EXPLOIT",
|
|
"url": "https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT",
|
|
"desc": "A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass",
|
|
"pushed": "2026-07-05T17:29:00Z",
|
|
"created": "2023-12-15T16:30:51Z",
|
|
"cve": "CVE-2023-32315",
|
|
"kev": true
|
|
},
|
|
{
|
|
"year": 2023,
|
|
"stars": 6,
|
|
"name": "CVE-2023-6019",
|
|
"url": "https://github.com/joaquinrrr/CVE-2023-6019",
|
|
"desc": "PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API.",
|
|
"pushed": "2026-06-19T19:09:34Z",
|
|
"created": "2026-06-19T19:08:58Z",
|
|
"cve": "CVE-2023-6019",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2022,
|
|
"stars": 6,
|
|
"name": "NimbusPWN-CVE-2022-29799-29800",
|
|
"url": "https://github.com/joshuavanderpoll/NimbusPWN-CVE-2022-29799-29800",
|
|
"desc": "NimbusPwn (CVE-2022-29799/29800) local privilege escalation PoC in C.",
|
|
"pushed": "2026-06-17T20:06:02Z",
|
|
"created": "2026-06-17T19:44:47Z",
|
|
"cve": "CVE-2022-29799",
|
|
"kev": false
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 0,
|
|
"name": "CVE-2026-68138",
|
|
"url": "https://github.com/suominen/CVE-2026-68138",
|
|
"desc": "Tracking CVE-2026-68138, the Linux kernel net/sched qdisc rate-table use-after-free",
|
|
"pushed": "2026-09-01T03:18:16Z",
|
|
"created": "2026-08-17T07:33:31Z",
|
|
"cve": "CVE-2026-68138",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 0,
|
|
"name": "CVE-2025-69080",
|
|
"url": "https://github.com/AndrielSec/CVE-2025-69080",
|
|
"desc": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.",
|
|
"pushed": "2026-08-31T21:38:27Z",
|
|
"created": "2026-08-31T21:00:26Z",
|
|
"cve": "CVE-2025-69080",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 0,
|
|
"name": "cve-2025-20333",
|
|
"url": "https://github.com/cobbbex/cve-2025-20333",
|
|
"desc": "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.",
|
|
"pushed": "2026-08-31T14:22:49Z",
|
|
"created": "2026-08-31T14:29:28Z",
|
|
"cve": "CVE-2025-20333",
|
|
"kev": true,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 0,
|
|
"name": "CVE-2026-76569",
|
|
"url": "https://github.com/toanln-cov/CVE-2026-76569",
|
|
"desc": "Reflected XSS via search GET Parameter in Phoca Download",
|
|
"pushed": "2026-08-31T07:54:25Z",
|
|
"created": "2026-08-31T07:51:07Z",
|
|
"cve": "CVE-2026-76569",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 2,
|
|
"name": "CVE-2025-49844",
|
|
"url": "https://github.com/Zain3311/CVE-2025-49844",
|
|
"desc": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
|
|
"pushed": "2026-08-31T01:52:38Z",
|
|
"created": "2022-04-06T09:27:39Z",
|
|
"cve": "CVE-2025-49844",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 10,
|
|
"name": "cve-2025-21479-iqoo11pro",
|
|
"url": "https://github.com/Type010/cve-2025-21479-iqoo11pro",
|
|
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
|
|
"pushed": "2026-08-31T00:20:50Z",
|
|
"created": "2026-08-13T08:02:16Z",
|
|
"cve": "CVE-2025-21479",
|
|
"kev": true,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 0,
|
|
"name": "cve-2026-42945",
|
|
"url": "https://github.com/FranklinF25/cve-2026-42945",
|
|
"desc": "NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",
|
|
"pushed": "2026-08-30T21:06:53Z",
|
|
"created": "2026-08-30T19:36:38Z",
|
|
"cve": "CVE-2026-42945",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 0,
|
|
"name": "CVE-2025-6440",
|
|
"url": "https://github.com/katranSefa/CVE-2025-6440",
|
|
"desc": "The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.",
|
|
"pushed": "2026-08-30T13:04:44Z",
|
|
"created": "2026-08-30T12:49:43Z",
|
|
"cve": "CVE-2025-6440",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2026,
|
|
"stars": 10,
|
|
"name": "givewp-cve-2026-82222-rce-lab",
|
|
"url": "https://github.com/dinosn/givewp-cve-2026-82222-rce-lab",
|
|
"desc": "Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.",
|
|
"pushed": "2026-08-30T05:18:46Z",
|
|
"created": "2026-08-30T05:15:27Z",
|
|
"cve": "CVE-2026-82222",
|
|
"kev": false,
|
|
"landed": true
|
|
},
|
|
{
|
|
"year": 2025,
|
|
"stars": 0,
|
|
"name": "CVE-2025-55182-scanner",
|
|
"url": "https://github.com/mayank729/CVE-2025-55182-scanner",
|
|
"desc": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
|
|
"pushed": "2026-08-30T04:24:27Z",
|
|
"created": "2022-06-17T10:19:10Z",
|
|
"cve": "CVE-2025-55182",
|
|
"kev": true,
|
|
"landed": true
|
|
}
|
|
]
|