admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
caff3d3c30c3bc4af8f2e5dd493cfd6f064bdf84
cve/index/trending.json
T

1129 lines
36 KiB
JSON
Raw Blame History

[
{
"year": 2026,
"stars": 401,
"name": "CVE-2026-9830",
"url": "https://github.com/opaxial/CVE-2026-9830",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-9830 Proof of Concept",
"pushed": "2026-10-21T22:09:02Z",
"released": null,
"basis": "pending",
"score": 16.41262473232228,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
"kev": false
},
{
"year": 2026,
"stars": 564,
"name": "wp2shell-PoC",
"url": "https://github.com/gichirimaku/wp2shell-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.",
"pushed": "2026-10-20T17:21:47Z",
"released": "2026-10-15T17:29:44Z",
"basis": "commit",
"score": 11.998955938918371,
"trending": true,
"created": "2026-10-15T17:29:04Z",
"cve": "CVE-2026-63030",
"kev": true
},
{
"year": 2025,
"stars": 201,
"name": "samsung-tv-root",
"url": "https://github.com/chris-ritsen/samsung-tv-root",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Samsung Tizen root",
"pushed": "2026-10-23T11:21:28Z",
"released": null,
"basis": "pending",
"score": 11.58765379231753,
"trending": true,
"created": "2026-08-17T14:06:15Z",
"cve": "CVE-2025-0072",
"kev": false
},
{
"year": 2026,
"stars": 533,
"name": "CVE-2026-41940-PoC",
"url": "https://github.com/sakidekin/CVE-2026-41940-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation",
"pushed": "2026-10-20T17:26:07Z",
"released": "2026-10-15T12:44:31Z",
"basis": "commit",
"score": 11.187788196964958,
"trending": true,
"created": "2026-10-11T07:54:18Z",
"cve": "CVE-2026-41940",
"kev": true
},
{
"year": 2026,
"stars": 88,
"name": "root-my-s24",
"url": "https://github.com/NanoTurtle1145/root-my-s24",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))",
"pushed": "2026-10-24T14:54:05Z",
"released": null,
"basis": "pending",
"score": 7.887524081570851,
"trending": true,
"created": "2026-08-16T14:37:06Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 138,
"name": "php2shell",
"url": "https://github.com/syrex1013/php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-109618/109619 PoC - PHP session.upload_progress heap use-after-free (CVSS 9.2)",
"pushed": "2026-10-24T11:02:53Z",
"released": "2026-10-21T15:06:33Z",
"basis": "created",
"score": 5.3755157068636485,
"trending": true,
"created": "2026-10-21T15:06:33Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 45,
"name": "GhostLock",
"url": "https://github.com/R0rt1z2/GhostLock",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Kernel root exploit (CVE-2026-43499) for some Amazon devices",
"pushed": "2026-10-24T13:35:00Z",
"released": null,
"basis": "pending",
"score": 3.918840684310652,
"trending": true,
"created": "2026-08-17T16:57:57Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2023,
"stars": 156,
"name": "Trigon",
"url": "https://github.com/alfiecg24/Trigon",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Deterministic kernel exploit based on CVE-2023-32434.",
"pushed": "2026-10-17T11:25:33Z",
"released": null,
"basis": "pending",
"score": 3.7849719218759272,
"trending": true,
"created": "2025-03-01T23:07:37Z",
"cve": "CVE-2023-32434",
"kev": true
},
{
"year": 2026,
"stars": 109,
"name": "php-cve-2026-10961x-lab-poc",
"url": "https://github.com/dinosn/php-cve-2026-10961x-lab-poc/blob/eb8558b04a1bbbd85d2b3a7a64780ab17cccc951/scripts/reproduce.py",
"artifact": true,
"shared_repository": false,
"source": "github.com",
"desc": "PHP CVE-2026-109618/109619 - self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12",
"pushed": "2026-10-20T19:15:42Z",
"released": "2026-10-20T19:16:47Z",
"basis": "created",
"score": 3.7542064919999323,
"trending": true,
"created": "2026-10-20T19:16:47Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 74,
"name": "actual-php2shell",
"url": "https://github.com/cookiengineer/actual-php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": ":robot: NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)",
"pushed": "2026-10-22T19:04:56Z",
"released": null,
"basis": "pending",
"score": 3.5969186709005565,
"trending": true,
"created": "2026-10-22T13:17:09Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 78,
"name": "PHP2Shell-Full-Chain-Exploit",
"url": "https://github.com/78ResearchLab/PHP2Shell-Full-Chain-Exploit",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": "2026-10-22T11:02:05Z",
"released": "2026-10-22T11:02:05Z",
"basis": "commit",
"score": 3.530865556996861,
"trending": true,
"created": "2026-10-22T08:11:01Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 806,
"name": "wp2shell-poc",
"url": "https://github.com/Icex0/wp2shell-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"pushed": "2026-08-11T13:41:24Z",
"released": "2026-07-18T17:11:12Z",
"basis": "commit",
"score": 3.488131807987532,
"trending": true,
"created": "2026-07-17T20:18:33Z",
"cve": "CVE-2026-63030",
"kev": true
},
{
"year": 2026,
"stars": 463,
"name": "Root-My-Pixel",
"url": "https://github.com/alex193a/Root-My-Pixel",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"pushed": "2026-09-07T19:56:32Z",
"released": null,
"basis": "pending",
"score": 3.326218056797115,
"trending": true,
"created": "2026-08-02T17:34:45Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 38,
"name": "portal-root-kiosk-satellite",
"url": "https://github.com/jxlarrea/portal-root-kiosk-satellite",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Root and provisioning for Meta Portal devices for optimal use with Kiosk Satellite.",
"pushed": "2026-10-23T10:08:14Z",
"released": null,
"basis": "pending",
"score": 2.159773344585091,
"trending": true,
"created": "2026-10-04T02:47:17Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 97,
"name": "IonStack-S22U",
"url": "https://github.com/sarabpal-dev/IonStack-S22U",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)",
"pushed": "2026-10-13T03:01:42Z",
"released": null,
"basis": "pending",
"score": 1.7600951182442268,
"trending": true,
"created": "2026-08-08T23:35:25Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 45,
"name": "CVE-2026-109618-poc",
"url": "https://github.com/enactive-systems/CVE-2026-109618-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).",
"pushed": "2026-10-21T14:21:43Z",
"released": "2026-10-21T14:21:43Z",
"basis": "commit",
"score": 1.7440522372723295,
"trending": true,
"created": "2026-10-21T14:20:15Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 38,
"name": "CVE-2026-111497-POC",
"url": "https://github.com/dimasma0305/CVE-2026-111497-POC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness",
"pushed": "2026-10-24T16:23:08Z",
"released": "2026-10-22T04:08:28Z",
"basis": "created",
"score": 1.6269733163773588,
"trending": true,
"created": "2026-10-22T04:08:28Z",
"cve": "CVE-2026-111497",
"kev": false
},
{
"year": 2026,
"stars": 336,
"name": "CVE-2026-54121",
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Certighost POC",
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
"score": 1.5125446317959879,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
"kev": false
},
{
"year": 2026,
"stars": 35,
"name": "php-rce",
"url": "https://github.com/david-alvarez-rosa/php-rce",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Exploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets",
"pushed": "2026-10-21T18:07:50Z",
"released": "2026-10-21T17:42:17Z",
"basis": "created",
"score": 1.387892659684738,
"trending": true,
"created": "2026-10-21T17:42:17Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 34,
"name": "cve-2026-109618-php2shell",
"url": "https://github.com/godylockz/cve-2026-109618-php2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell",
"pushed": "2026-10-22T17:44:03Z",
"released": "2026-10-21T19:51:22Z",
"basis": "created",
"score": 1.3688030005587215,
"trending": true,
"created": "2026-10-21T19:51:22Z",
"cve": "CVE-2026-109618",
"kev": false
},
{
"year": 2026,
"stars": 62,
"name": "GhostSam",
"url": "https://github.com/snothin/GhostSam",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Samsung temp root tool (until reboot) - Ghostlock / dirtyfrag exploit chains + manager app.",
"pushed": "2026-10-15T14:34:19Z",
"released": null,
"basis": "pending",
"score": 1.3081166397665607,
"trending": true,
"created": "2026-08-31T12:59:51Z",
"cve": "CVE-2026-43284",
"kev": false
},
{
"year": 2025,
"stars": 139,
"name": "unisoc-su",
"url": "https://github.com/Skorpion96/unisoc-su",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A method for CVE-2025-31710 and to connect to cmd_skt to obtain a root shell on unisoc unpatched models",
"pushed": "2026-09-22T20:16:57Z",
"released": null,
"basis": "pending",
"score": 1.2976005547618887,
"trending": true,
"created": "2025-06-06T14:31:13Z",
"cve": "CVE-2025-31710",
"kev": false
},
{
"year": 2026,
"stars": 223,
"name": "ResetNightmare",
"url": "https://github.com/Semperis-Community/ResetNightmare",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "POC tool for ResetNightmare (CVE-2026-27912)",
"pushed": "2026-08-14T17:11:38Z",
"released": null,
"basis": "pending",
"score": 1.20540393108019,
"trending": true,
"created": "2026-08-02T12:36:16Z",
"cve": "CVE-2026-27912",
"kev": false
},
{
"year": 2024,
"stars": 278,
"name": "skill",
"url": "https://github.com/ptn1411/skill",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây dựng kế hoạch khắc phục cho các hệ thống mà bạn sở hữu hoặc được phép đánh giá.",
"pushed": "2026-09-10T15:35:03Z",
"released": "2026-05-12T09:45:38Z",
"basis": "commit",
"score": 0.8372718540241724,
"trending": true,
"created": "2026-04-29T16:58:50Z",
"cve": "CVE-2024-6387",
"kev": false
},
{
"year": 2025,
"stars": 245,
"name": "BitUnlocker",
"url": "https://github.com/garatc/BitUnlocker",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Downgrade attack for CVE-2025-48804",
"pushed": "2026-08-31T12:26:18Z",
"released": "2026-04-30T13:16:16Z",
"basis": "commit",
"score": 0.7032078700818869,
"trending": true,
"created": "2026-04-30T13:05:30Z",
"cve": "CVE-2025-48804",
"kev": false
},
{
"year": 2024,
"stars": 70,
"name": "simple-krw-vuln",
"url": "https://github.com/cli0xfa/simple-krw-vuln",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Windows 内核任意内存读写漏洞收集仓库，收录简单、稳定、可编译复现的 Exploit（权限提升 / 终止安全软件）",
"pushed": "2026-09-06T02:44:48Z",
"released": null,
"basis": "pending",
"score": 0.4906837469042953,
"trending": true,
"created": "2026-09-06T02:45:29Z",
"cve": "CVE-2024-35250",
"kev": true
},
{
"year": 2025,
"stars": 29,
"name": "Douglas-Guidebook",
"url": "https://github.com/douglasmun/Douglas-Guidebook",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Douglas Mun's Technical Guidebooks",
"pushed": "2026-09-12T12:02:46Z",
"released": "2026-09-10T12:54:07Z",
"basis": "commit",
"score": 0.21695650833519453,
"trending": true,
"created": "2025-06-28T11:03:09Z",
"cve": "CVE-2025-24257",
"kev": false
},
{
"year": 2024,
"stars": 17,
"name": "CVE-2024-56426",
"url": "https://github.com/Creeeeger/CVE-2024-56426",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
"score": 0.20730934119456515,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2022,
"stars": 31,
"name": "SCRoot",
"url": "https://github.com/hackintoanetwork/SCRoot",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "One-click rooting and KernelSU-Next tool for the Samsung SCR-01 mobile 5G router.",
"pushed": "2026-08-02T14:15:15Z",
"released": null,
"basis": "pending",
"score": 0.15031625367390763,
"trending": true,
"created": "2026-07-29T17:53:15Z",
"cve": "CVE-2022-38181",
"kev": true
},
{
"year": 2025,
"stars": 22,
"name": "CVE-2025-7771",
"url": "https://github.com/enessakircolak/CVE-2025-7771",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
"score": 0.11478060528927272,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2025,
"stars": 7,
"name": "ABrake27",
"url": "https://github.com/vvirei333/ABrake27",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow",
"pushed": "2026-10-06T18:09:51Z",
"released": null,
"basis": "pending",
"score": 0.0957393233881787,
"trending": true,
"created": "2026-10-02T10:59:04Z",
"cve": "CVE-2025-43520",
"kev": true
},
{
"year": 2025,
"stars": 5,
"name": "CVE-2025-8110",
"url": "https://github.com/Ghxstsec/CVE-2025-8110",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.",
"pushed": "2026-10-12T15:07:46Z",
"released": null,
"basis": "pending",
"score": 0.08834299682726052,
"trending": true,
"created": "2026-04-11T22:40:07Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2023,
"stars": 7,
"name": "picohaxx",
"url": "https://github.com/264312431/picohaxx",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A kernel exploit for Pico 4 devices based on cve-2023-33107.",
"pushed": "2026-10-04T18:31:02Z",
"released": "2026-10-03T17:07:27Z",
"basis": "commit",
"score": 0.08635500195651276,
"trending": true,
"created": "2026-07-18T08:06:18Z",
"cve": "CVE-2023-33107",
"kev": true
},
{
"year": 2025,
"stars": 8,
"name": "CVE-2025-32432-exploit-by-P34NUT",
"url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail",
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
"score": 0.06676241659556695,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 10,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
"score": 0.06180748436921497,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 6,
"name": "pruva-sandbox",
"url": "https://github.com/N3mes1s/pruva-sandbox",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Public Codespaces runner for verified CVE/GHSA vulnerability reproductions",
"pushed": "2026-09-07T14:40:23Z",
"released": null,
"basis": "pending",
"score": 0.04296684079924143,
"trending": true,
"created": "2026-01-06T07:26:11Z",
"cve": "CVE-2025-1716",
"kev": false
},
{
"year": 2025,
"stars": 9,
"name": "SELinux-Permissive-Only-CVE-2025-21479",
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
"score": 0.0418529579980646,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2022,
"stars": 8,
"name": "spd_flasher",
"url": "https://github.com/LeoChen-CoreMind/spd_flasher",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices",
"pushed": "2026-08-05T16:51:28Z",
"released": "2026-08-05T16:51:28Z",
"basis": "commit",
"score": 0.039824576015741346,
"trending": true,
"created": "2026-02-20T16:40:39Z",
"cve": "CVE-2022-38694",
"kev": false
},
{
"year": 2025,
"stars": 11,
"name": "Milan0day2026",
"url": "https://github.com/zer0matt/Milan0day2026",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions with ring-0 privileges. The vulnerability enables local attackers to execute arbitrary code in kernel context, resulting in privilege escalation and potential follow-on attacks, such as disabling security software or bypassing kernel-level protections. ThrottleStop.sys version 3.0.0.0 and possibly others are affected. Apply updates per vendor instructions.",
"pushed": "2026-07-31T08:50:07Z",
"released": "2026-05-29T19:08:46Z",
"basis": "commit",
"score": 0.03578887433208837,
"trending": true,
"created": "2026-05-29T18:39:40Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-8045",
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
"score": 0.03512639463707248,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
"kev": false
},
{
"year": 2025,
"stars": 6,
"name": "cve-2025-21479_iqooneo8",
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
"score": 0.03422386117062639,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-21479-FX5P",
"url": "https://github.com/diyiqiuye/CVE-2025-21479-FX5P",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Temporary root for OPPO Find X5 Pro (PFEM00) via CVE-2025-21479 + KernelSU LKM late-load (cloud-buildable)",
"pushed": "2026-09-27T10:13:48Z",
"released": "2026-09-24T23:33:12Z",
"basis": "commit",
"score": 0.02934543374867466,
"trending": true,
"created": "2026-09-24T23:20:42Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2024,
"stars": 5,
"name": "TreeVuln",
"url": "https://github.com/MaximeBonneton/TreeVuln",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"pushed": "2026-08-06T14:21:51Z",
"released": null,
"basis": "pending",
"score": 0.025084553814572818,
"trending": true,
"created": "2026-02-02T13:16:54Z",
"cve": "CVE-2024-1234",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "MSRMapper",
"url": "https://github.com/uLl0a/MSRMapper",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.",
"pushed": "2026-09-17T02:29:34Z",
"released": "2026-09-17T02:29:34Z",
"basis": "commit",
"score": 0.025037975072892935,
"trending": true,
"created": "2026-09-17T02:28:07Z",
"cve": "CVE-2025-8061",
"kev": false
},
{
"year": 2024,
"stars": 4,
"name": "CVE-2024-56426",
"url": "https://github.com/xcracker000/CVE-2024-56426",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
"score": 0.021737132395116546,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-3248-Langflow-RCE",
"url": "https://github.com/hideki233/CVE-2025-3248-Langflow-RCE",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
"score": 0.018696774109847297,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
"score": 0.016764857464331987,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2022,
"stars": 3,
"name": "realme-c53-unlock-root",
"url": "https://github.com/Gopartner/realme-c53-unlock-root",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Bootloader unlock (CVE-2022-38694) & root guide for Realme C53 / RMX3760 (Unisoc T612)",
"pushed": "2026-08-05T10:35:28Z",
"released": null,
"basis": "pending",
"score": 0.014900702520222315,
"trending": true,
"created": "2026-05-16T16:16:31Z",
"cve": "CVE-2022-38694",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "mouseserver-exploit",
"url": "https://github.com/lypd0/mouseserver-exploit",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Mobile Mouse 3.6.0.4 - Remote Code Execution - CVE-2023-31902",
"pushed": "2026-08-04T05:41:49Z",
"released": "2026-08-04T05:41:49Z",
"basis": "commit",
"score": 0.014748551444695272,
"trending": true,
"created": "2026-08-04T05:39:12Z",
"cve": "CVE-2023-31902",
"kev": false
},
{
"year": 2024,
"stars": 3,
"name": "CVE-2024-36104-PoC",
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
"score": 0.01411516529809748,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "CVE-2023-52076-PoC",
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
"score": 0.013830566147918569,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
"kev": false
},
{
"year": 2022,
"stars": 7,
"name": "CVE-2022-22077",
"url": "https://github.com/grisuno/CVE-2022-22077",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
"score": 0.011184618725801737,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
{
"year": 2021,
"stars": 0,
"name": "cve-2021-31166-poc",
"url": "https://github.com/testerxma/cve-2021-31166-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "HTTP Protocol Stack Remote Code Execution Vulnerability",
"pushed": null,
"released": "2026-10-24T20:24:33Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-24T20:23:59Z",
"cve": "CVE-2021-31166",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "Emudhra-Ca-Compromise-Lab",
"url": "https://github.com/Ishanoshada/Emudhra-Ca-Compromise-Lab",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.",
"pushed": null,
"released": "2026-10-24T19:04:45Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-111943",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "node2shell",
"url": "https://github.com/Rabbitbong/node2shell",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
"pushed": null,
"released": "2026-10-24T17:24:43Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-111497",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "TamperForge",
"url": "https://github.com/dntaskmehow/TamperForge",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01. Proof of concept exploit: https://github.com/JoakimBulow/CVE-2026-1337",
"pushed": null,
"released": "2026-10-24T17:23:17Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "",
"cve": "CVE-2026-1337",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "cve-2026-110152-chrome-ngle-rce-poc",
"url": "https://github.com/utkarsssh17/cve-2026-110152-chrome-ngle-rce-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PoC: CVE-2026-110152 Chrome ANGLE vertex-attribute translation heap buffer overflow (CVSS 9.6)",
"pushed": null,
"released": "2026-10-24T17:21:47Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-24T17:21:47Z",
"cve": "CVE-2026-110152",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577",
"url": "https://github.com/Ghost-Bx1/php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)",
"pushed": null,
"released": "2026-10-24T16:52:15Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-23T15:14:01Z",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "cve-2026-109619-php-uaf-poc",
"url": "https://github.com/utkarsssh17/cve-2026-109619-php-uaf-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).",
"pushed": null,
"released": "2026-10-24T16:13:43Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-24T16:13:43Z",
"cve": "CVE-2026-109619",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "cve-2026-109618-php2shell-poc",
"url": "https://github.com/utkarsssh17/cve-2026-109618-php2shell-poc",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "CVE-2026-109618 (php2shell part 1): local deterministic memory-safety PoC",
"pushed": null,
"released": "2026-10-24T15:54:42Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-24T15:54:42Z",
"cve": "CVE-2026-109618",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm",
"url": "https://github.com/Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authenticated internal user to have crafted metadata containing a forged administrator credential encrypted and returned by the API-key flow. Replaying that ciphertext as a bearer token causes the proxy to trust the forged proxy administrator identity, permitting administrative access and arbitrary commands through the MCP stdio endpoint. Versions 1.87.0 through 1.90.x require EXPERIMENTAL_UI_LOGIN to be enabled, while versions after 1.91.0 are exploitable in the default configuration. This issue was fixed in LiteLLM 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2.",
"pushed": null,
"released": "2026-10-24T15:22:22Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-24T15:18:04Z",
"cve": "CVE-2026-114612",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "sonicwall-sma1000-cve-2026-102255-check",
"url": "https://github.com/CompleTetech-Security/sonicwall-sma1000-cve-2026-102255-check",
"artifact": false,
"shared_repository": false,
"source": "github.com",
"desc": "Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.",
"pushed": null,
"released": "2026-10-24T15:17:30Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-23T23:41:33Z",
"cve": "CVE-2026-102255",
"kev": false,
"landed": true
}
]
Reference in new issue View Git Blame Copy Permalink