admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-29 17:01:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
fda7bb80e657b744a825252e4b572fd10714cc5d
cve/index/trending.json
T

829 lines
27 KiB
JSON
Raw Blame History

[
{
"year": 2026,
"stars": 498,
"name": "CVE-2026-9830",
"url": "https://github.com/opaxial/CVE-2026-9830",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-9830 Proof of Concept",
"pushed": "2026-08-20T21:56:15Z",
"released": null,
"basis": "pending",
"score": 3.4711952418132035,
"trending": true,
"created": "2026-08-15T20:57:13Z",
"cve": "CVE-2026-9830",
"kev": false
},
{
"year": 2026,
"stars": 96,
"name": "CVE-2026-41096-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-41096-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module).",
"pushed": "2026-09-29T06:20:46Z",
"released": "2026-09-29T06:20:46Z",
"basis": "commit",
"score": 1.9535510460127783,
"trending": true,
"created": "2026-02-05T10:21:22Z",
"cve": "CVE-2026-41096",
"kev": false
},
{
"year": 2026,
"stars": 332,
"name": "CVE-2026-54121",
"url": "https://github.com/aniqfakhrul/CVE-2026-54121",
"artifact": false,
"source": "github.com",
"desc": "Certighost POC",
"pushed": "2026-07-27T19:12:07Z",
"released": "2026-07-24T03:30:17Z",
"basis": "commit",
"score": 1.7005049226887687,
"trending": true,
"created": "2026-07-23T18:54:34Z",
"cve": "CVE-2026-54121",
"kev": false
},
{
"year": 2026,
"stars": 184,
"name": "CVE-2026-62911",
"url": "https://github.com/hypnguyen1209/CVE-2026-62911",
"artifact": false,
"source": "github.com",
"desc": "POC pre-auth RCE on Exchange",
"pushed": "2026-08-22T04:49:54Z",
"released": "2026-08-22T04:49:54Z",
"basis": "commit",
"score": 1.3060560667459191,
"trending": true,
"created": "2026-08-22T04:49:33Z",
"cve": "CVE-2026-62911",
"kev": false
},
{
"year": 2026,
"stars": 49,
"name": "CVE-2026-94545",
"url": "https://github.com/EQSTLab/CVE-2026-94545",
"artifact": false,
"source": "github.com",
"desc": "Next.js RCE",
"pushed": "2026-09-29T07:52:23Z",
"released": "2026-09-29T07:57:18Z",
"basis": "created",
"score": 1.0014531936640323,
"trending": true,
"created": "2026-09-29T07:57:18Z",
"cve": "CVE-2026-94545",
"kev": false
},
{
"year": 2026,
"stars": 92,
"name": "CVE-2026-20805-PoC",
"url": "https://github.com/ZeroDayEvil/CVE-2026-20805-PoC",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information Disclosure & Memory Leak Diagnostic).",
"pushed": "2026-09-11T16:33:14Z",
"released": null,
"basis": "pending",
"score": 0.9546913494852076,
"trending": true,
"created": "2026-09-10T11:28:38Z",
"cve": "CVE-2026-20805",
"kev": true
},
{
"year": 2026,
"stars": 88,
"name": "CVE-2026-21858-n8n-FullChain",
"url": "https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain",
"artifact": false,
"source": "github.com",
"desc": "🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n \"Ni8mare\" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).",
"pushed": "2026-09-12T00:03:49Z",
"released": null,
"basis": "pending",
"score": 0.9202818133364632,
"trending": true,
"created": "2026-09-12T00:03:07Z",
"cve": "CVE-2026-21858",
"kev": false
},
{
"year": 2026,
"stars": 105,
"name": "CVE-2026-75604-poc",
"url": "https://github.com/rafabd1/CVE-2026-75604-poc",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-75604 Next.js Windows RCE poc",
"pushed": "2026-08-26T02:23:55Z",
"released": "2026-08-25T19:06:37Z",
"basis": "created",
"score": 0.7861973780699595,
"trending": true,
"created": "2026-08-25T19:06:37Z",
"cve": "CVE-2026-75604",
"kev": false
},
{
"year": 2026,
"stars": 86,
"name": "CVE-2026-65343",
"url": "https://github.com/ByteV0rtex/CVE-2026-65343",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)",
"pushed": "2026-09-03T20:38:35Z",
"released": null,
"basis": "pending",
"score": 0.7527485126130604,
"trending": true,
"created": "2026-09-02T20:12:10Z",
"cve": "CVE-2026-65343",
"kev": false
},
{
"year": 2026,
"stars": 40,
"name": "CVE-2026-84543",
"url": "https://github.com/petermalone/CVE-2026-84543",
"artifact": false,
"source": "github.com",
"desc": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"pushed": "2026-09-24T02:47:40Z",
"released": "2026-09-24T02:47:40Z",
"basis": "commit",
"score": 0.6204813189307667,
"trending": true,
"created": "2026-09-24T00:22:30Z",
"cve": "CVE-2026-84543",
"kev": false
},
{
"year": 2026,
"stars": 108,
"name": "SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"url": "https://github.com/OmriBaso/SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit",
"artifact": false,
"source": "github.com",
"desc": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"pushed": "2026-08-03T15:31:59Z",
"released": null,
"basis": "pending",
"score": 0.6121119381424152,
"trending": true,
"created": "2026-08-03T15:29:22Z",
"cve": "CVE-2026-47301",
"kev": false
},
{
"year": 2026,
"stars": 31,
"name": "CVE-2026-34990",
"url": "https://github.com/predyy/CVE-2026-34990",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.",
"pushed": "2026-09-27T19:48:09Z",
"released": "2026-09-27T19:47:52Z",
"basis": "commit",
"score": 0.5782291914606534,
"trending": true,
"created": "2026-09-27T19:41:06Z",
"cve": "CVE-2026-34990",
"kev": false
},
{
"year": 2026,
"stars": 38,
"name": "cve-2026-87902-poc",
"url": "https://github.com/ressl/cve-2026-87902-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"pushed": "2026-09-22T19:36:47Z",
"released": null,
"basis": "pending",
"score": 0.5581361291903305,
"trending": true,
"created": "2026-09-22T18:40:26Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2026,
"stars": 108,
"name": "CVE-2026-43499-Poc-Analysis",
"url": "https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis",
"artifact": false,
"source": "github.com",
"desc": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"pushed": "2026-07-18T21:09:06Z",
"released": null,
"basis": "pending",
"score": 0.5284497475388167,
"trending": true,
"created": "2026-07-14T14:21:27Z",
"cve": "CVE-2026-43499",
"kev": false
},
{
"year": 2026,
"stars": 35,
"name": "CVE-2026-87902",
"url": "https://github.com/abraxas/CVE-2026-87902",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)",
"pushed": "2026-10-07T01:07:28Z",
"released": "2026-09-22T18:13:48Z",
"basis": "created",
"score": 0.5128784817934534,
"trending": true,
"created": "2026-09-22T18:13:48Z",
"cve": "CVE-2026-87902",
"kev": true
},
{
"year": 2024,
"stars": 17,
"name": "CVE-2024-56426",
"url": "https://github.com/Creeeeger/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "A PoC of the CVE-2024-56426 vulnerability.",
"pushed": "2026-10-03T08:14:17Z",
"released": null,
"basis": "pending",
"score": 0.48087498702332915,
"trending": true,
"created": "2026-04-07T12:02:52Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2026,
"stars": 25,
"name": "CVE-2026-85706",
"url": "https://github.com/EQSTLab/CVE-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "GitLab Unauthenticated Arbitrary File Read",
"pushed": "2026-09-28T05:17:40Z",
"released": "2026-09-28T05:17:40Z",
"basis": "commit",
"score": 0.4771040143393345,
"trending": true,
"created": "2026-09-28T04:47:10Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 23,
"name": "watchTowr-vs-Citrix-Netscaler-CVE-2026-88771",
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88771",
"artifact": false,
"source": "github.com",
"desc": "Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.",
"pushed": "2026-09-28T09:24:46Z",
"released": "2026-09-28T09:24:46Z",
"basis": "commit",
"score": 0.4434168873715214,
"trending": true,
"created": "2026-09-27T18:15:38Z",
"cve": "CVE-2026-88771",
"kev": true
},
{
"year": 2026,
"stars": 42,
"name": "cve-2026-85706",
"url": "https://github.com/guneykabel/cve-2026-85706",
"artifact": false,
"source": "github.com",
"desc": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7-19.1.7; 19.2.0-19.2.5; 19.3.0-19.3.1",
"pushed": "2026-09-11T16:38:12Z",
"released": "2026-09-11T15:54:48Z",
"basis": "commit",
"score": 0.4355512967689405,
"trending": true,
"created": "2026-09-11T15:24:22Z",
"cve": "CVE-2026-85706",
"kev": true
},
{
"year": 2026,
"stars": 10,
"name": "watchTowr-vs-Atlassian-CVE-2026-21589",
"url": "https://github.com/watchtowrlabs/watchTowr-vs-Atlassian-CVE-2026-21589",
"artifact": false,
"source": "github.com",
"desc": "h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file's exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents. In some configurations, there may be some sensitive files that make this highly severe. h3. Context This vulnerability allows an unauthenticated remote attacker to access specific files within the web application root directory in affected versions. h3. Details: * The vulnerability must be addressed for affected versions of: Bitbucket Data Center, introduced in version >= 4.6.0, fix versions: 9.4.26, 10.2.8, 10.5.1 Confluence Data Center, introduced in version >= 5.10.0, fix versions 9.2.26, 10.2.19 Crowd Data Center, introduced in version >= 2.11.0, fix versions 6.3.7, 7.0.3, 7.1.1, 7.2.4 Jira Software Data Center, introduced in version >= 7.1.0, fix versions 9.12.40, 10.3.26, 11.3.12 Jira Service Management Data Center, introduced in version >= 3.1.0, fix versions 5.12.40, 10.3.26, 11.3.12 Bamboo Data Center >= 7.0.1, fix versions 10.2.24, 12.1.12 Crucible, fix versions 4.9.15 Fisheye, fix version 4.9.15 * Exploitation requires prior knowledge of the target file's exact name and path. * The vulnerability does not include the capability to enumerate or list directory contents.",
"pushed": "2026-10-06T10:48:38Z",
"released": "2026-10-06T10:48:38Z",
"basis": "commit",
"score": 0.434123340649475,
"trending": true,
"created": "2026-10-06T10:40:59Z",
"cve": "CVE-2026-21589",
"kev": false
},
{
"year": 2026,
"stars": 30,
"name": "CVE-2026-43786",
"url": "https://github.com/Malwation/CVE-2026-43786",
"artifact": false,
"source": "github.com",
"desc": "Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.",
"pushed": "2026-09-21T15:02:37Z",
"released": "2026-09-21T15:02:37Z",
"basis": "commit",
"score": 0.4205955794900388,
"trending": true,
"created": "2026-09-21T15:02:05Z",
"cve": "CVE-2026-43786",
"kev": false
},
{
"year": 2025,
"stars": 22,
"name": "CVE-2025-7771",
"url": "https://github.com/enessakircolak/CVE-2025-7771",
"artifact": false,
"source": "github.com",
"desc": "ThrottleStop.sys Arbitrary Physical Memory R/W",
"pushed": "2026-08-10T23:15:22Z",
"released": "2026-08-10T23:15:36Z",
"basis": "created",
"score": 0.13512741841158632,
"trending": true,
"created": "2026-08-10T23:15:36Z",
"cve": "CVE-2025-7771",
"kev": false
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-32432-exploit-by-P34NUT",
"url": "https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT",
"artifact": false,
"source": "github.com",
"desc": "Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail",
"pushed": "2026-09-17T02:22:58Z",
"released": "2026-09-17T02:22:58Z",
"basis": "commit",
"score": 0.08419853453604696,
"trending": true,
"created": "2026-09-16T23:32:09Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 10,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
"pushed": "2026-08-27T07:13:42Z",
"released": null,
"basis": "pending",
"score": 0.07666626577591071,
"trending": true,
"created": "2026-08-19T09:39:46Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2026,
"stars": 1,
"name": "CVE-2026-21589",
"url": "https://github.com/murrez/CVE-2026-21589",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-21589 - Atlassian DC pre-auth arbitrary file read (CVSS 4.0 9.3). PoCbit PoC: atlassian-plugins-webresource ..:: traversal on /download/resources/ for Jira, Confluence, Bitbucket. check + exploit (WEB-INF/web.xml, crowd.properties). Batch JSONL, hits.txt. Not RCE. https://pocbit.org/pocs/cve-2026-21589",
"pushed": null,
"released": "2026-10-08T08:31:47Z",
"basis": "commit",
"score": 0.07228380661565095,
"trending": false,
"created": "2026-10-08T08:31:03Z",
"cve": "CVE-2026-21589",
"kev": false,
"landed": true
},
{
"year": 2025,
"stars": 7,
"name": "cve-2025-21479_iqooneo8",
"url": "https://github.com/Qingizi7/cve-2025-21479_iqooneo8",
"artifact": false,
"source": "github.com",
"desc": "Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell",
"pushed": "2026-08-20T01:33:10Z",
"released": "2026-08-20T01:20:07Z",
"basis": "commit",
"score": 0.048216355939203336,
"trending": true,
"created": "2026-08-20T01:13:39Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 8,
"name": "SELinux-Permissive-Only-CVE-2025-21479",
"url": "https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"pushed": "2026-08-02T06:48:32Z",
"released": "2026-07-28T09:37:42Z",
"basis": "commit",
"score": 0.04261735797942233,
"trending": true,
"created": "2026-07-28T06:41:38Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 7,
"name": "CVE-2025-8045",
"url": "https://github.com/kuzeyardabulut/CVE-2025-8045",
"artifact": false,
"source": "github.com",
"desc": "Dirty Pagetable Exploit for CVE-2025-8045",
"pushed": "2026-08-06T14:58:53Z",
"released": "2026-08-06T14:58:53Z",
"basis": "commit",
"score": 0.0409468307171903,
"trending": true,
"created": "2026-08-06T13:52:33Z",
"cve": "CVE-2025-8045",
"kev": false
},
{
"year": 2023,
"stars": 6,
"name": "CVE-2023-36003",
"url": "https://github.com/johnnygreeme/CVE-2023-36003",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.",
"pushed": "2026-07-22T19:46:33Z",
"released": null,
"basis": "pending",
"score": 0.030372455924031854,
"trending": true,
"created": "2026-07-22T19:43:34Z",
"cve": "CVE-2023-36003",
"kev": false
},
{
"year": 2024,
"stars": 4,
"name": "CVE-2024-56426",
"url": "https://github.com/xcracker000/CVE-2024-56426",
"artifact": false,
"source": "github.com",
"desc": "CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F",
"pushed": "2026-08-15T06:21:41Z",
"released": null,
"basis": "pending",
"score": 0.025876273652725035,
"trending": true,
"created": "2026-08-15T06:12:04Z",
"cve": "CVE-2024-56426",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-3248-Langflow-RCE",
"url": "https://github.com/hideki233/CVE-2025-3248-Langflow-RCE",
"artifact": false,
"source": "github.com",
"desc": "Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrarycode.",
"pushed": "2026-08-28T00:05:41Z",
"released": "2026-08-28T00:05:42Z",
"basis": "created",
"score": 0.023261591617734972,
"trending": true,
"created": "2026-08-28T00:05:42Z",
"cve": "CVE-2025-3248",
"kev": true
},
{
"year": 2025,
"stars": 3,
"name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"url": "https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479",
"artifact": false,
"source": "github.com",
"desc": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"pushed": "2026-08-18T01:39:34Z",
"released": null,
"basis": "pending",
"score": 0.020119547415877643,
"trending": true,
"created": "2026-08-18T02:31:53Z",
"cve": "CVE-2025-21479",
"kev": true
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-32432",
"url": "https://github.com/c0gnit00/CVE-2025-32432",
"artifact": false,
"source": "github.com",
"desc": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell",
"pushed": "2026-07-21T16:55:33Z",
"released": null,
"basis": "pending",
"score": 0.020050748232343835,
"trending": true,
"created": "2026-07-21T16:52:22Z",
"cve": "CVE-2025-32432",
"kev": true
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-64512",
"url": "https://github.com/matesz44/CVE-2025-64512",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads",
"pushed": "2026-07-19T11:00:00Z",
"released": "2026-07-19T11:00:00Z",
"basis": "commit",
"score": 0.01966771766416922,
"trending": true,
"created": "2026-07-19T10:49:05Z",
"cve": "CVE-2025-64512",
"kev": false
},
{
"year": 2025,
"stars": 4,
"name": "CVE-2025-8110-gogs-poc",
"url": "https://github.com/Shirouuu/CVE-2025-8110-gogs-poc",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2025-8110 - Gogs arbitrary file write via symlink",
"pushed": "2026-07-17T13:55:11Z",
"released": null,
"basis": "pending",
"score": 0.019360843242727282,
"trending": true,
"created": "2026-07-17T13:46:16Z",
"cve": "CVE-2025-8110",
"kev": true
},
{
"year": 2024,
"stars": 3,
"name": "CVE-2024-36104-PoC",
"url": "https://github.com/Groppoxx/CVE-2024-36104-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path traversal to ProgramExport",
"pushed": "2026-07-29T21:15:12Z",
"released": "2026-07-29T21:15:12Z",
"basis": "commit",
"score": 0.016210646596251602,
"trending": true,
"created": "2026-07-29T19:59:36Z",
"cve": "CVE-2024-36104",
"kev": false
},
{
"year": 2023,
"stars": 3,
"name": "CVE-2023-52076-PoC",
"url": "https://github.com/Groppoxx/CVE-2023-52076-PoC",
"artifact": false,
"source": "github.com",
"desc": "PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary file write and RCE via crafted EPUB. Authorized security testing only.",
"pushed": "2026-07-27T07:00:54Z",
"released": "2026-07-27T06:52:27Z",
"basis": "commit",
"score": 0.015814499497171647,
"trending": true,
"created": "2026-07-27T06:51:21Z",
"cve": "CVE-2023-52076",
"kev": false
},
{
"year": 2025,
"stars": 3,
"name": "CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"url": "https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation",
"artifact": false,
"source": "github.com",
"desc": "CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation",
"pushed": "2026-07-20T13:33:10Z",
"released": "2026-07-20T13:33:10Z",
"basis": "commit",
"score": 0.014890558561935661,
"trending": true,
"created": "2026-02-13T22:26:25Z",
"cve": "CVE-2025-6019",
"kev": false
},
{
"year": 2022,
"stars": 6,
"name": "CVE-2022-22077",
"url": "https://github.com/grisuno/CVE-2022-22077",
"artifact": false,
"source": "github.com",
"desc": "CVE-2022-22077 is a high-severity vulnerability (CVSS score 7.8) affecting the RTCore64.sys driver distributed with MSI Center",
"pushed": "2026-10-08T15:42:17Z",
"released": "2025-09-09T01:31:54Z",
"basis": "commit",
"score": 0.009852900066361367,
"trending": true,
"created": "2025-09-08T21:12:19Z",
"cve": "CVE-2022-22077",
"kev": false
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-55450",
"url": "https://github.com/0xBlackash/CVE-2026-55450",
"artifact": false,
"source": "github.com",
"desc": "Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1.",
"pushed": null,
"released": "2026-10-08T22:58:38Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T22:48:26Z",
"cve": "CVE-2026-55450",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-91940-crawl4ai-Arbitrary-File-Write",
"url": "https://github.com/BiiTts/CVE-2026-91940-crawl4ai-Arbitrary-File-Write",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-91940: arbitrary file write in crawl4ai <=0.9.2 via the untrusted-config gate (PDFContentScrapingStrategy image_save_dir). Analysis, reproduction harness and verified 0.9.2 vs 0.9.3 boundary.",
"pushed": null,
"released": "2026-10-08T20:54:07Z",
"basis": "created",
"score": 0.0,
"trending": false,
"created": "2026-10-08T20:54:07Z",
"cve": "CVE-2026-91940",
"kev": false,
"landed": true
},
{
"year": 2023,
"stars": 0,
"name": "CVE-2023-54391-RCE",
"url": "https://github.com/alexandrov666/CVE-2023-54391-RCE",
"artifact": false,
"source": "github.com",
"desc": "CVE-2023-54391: Proxmox VE Authentication Bypass RCE",
"pushed": null,
"released": "2026-10-08T20:42:15Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-06T08:49:34Z",
"cve": "CVE-2023-54391",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-67279-Mikrotik-6.42-POC",
"url": "https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC",
"artifact": false,
"source": "github.com",
"desc": "Laboratory proof of concept and research notes for CVE-2026-67279 on MikroTik RouterOS 6.42.",
"pushed": null,
"released": "2026-10-08T20:34:10Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T20:31:26Z",
"cve": "CVE-2026-67279",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-92555",
"url": "https://github.com/Enay-Project/CVE-2026-92555",
"artifact": false,
"source": "github.com",
"desc": "CVE-2026-92555 Exploit",
"pushed": null,
"released": "2026-10-08T17:58:13Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T17:55:10Z",
"cve": "CVE-2026-92555",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "CVE-2026-48908",
"url": "https://github.com/theendofabbys/CVE-2026-48908",
"artifact": false,
"source": "github.com",
"desc": "A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.",
"pushed": null,
"released": "2026-10-08T12:09:11Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T12:08:56Z",
"cve": "CVE-2026-48908",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "wso2_cve-2026-5430_lab",
"url": "https://github.com/getdrive/wso2_cve-2026-5430_lab",
"artifact": false,
"source": "github.com",
"desc": "Уязвимая лаборатория WSO2 API Manager 4.5.0 в Docker, сканер и эксплойт для CVE-2026-5430 (обход аутентификации через поддельный HS256 JWT)",
"pushed": null,
"released": "2026-10-08T09:40:28Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T09:28:12Z",
"cve": "CVE-2026-5430",
"kev": true,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "Keycloak-CVE-2026-18963-Exploit",
"url": "https://github.com/hardeep-sudo/Keycloak-CVE-2026-18963-Exploit",
"artifact": false,
"source": "github.com",
"desc": "A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user accounts by directly setting new credentials.",
"pushed": null,
"released": "2026-10-08T09:35:33Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T09:25:45Z",
"cve": "CVE-2026-18963",
"kev": false,
"landed": true
},
{
"year": 2026,
"stars": 0,
"name": "-CVE-2026-18963-POC",
"url": "https://github.com/SonOfABot/-CVE-2026-18963-POC",
"artifact": false,
"source": "github.com",
"desc": "PoC for keycloak 1.26 vulnerability",
"pushed": null,
"released": "2026-10-08T09:00:04Z",
"basis": "commit",
"score": 0.0,
"trending": false,
"created": "2026-10-08T08:50:26Z",
"cve": "CVE-2026-18963",
"kev": false,
"landed": true
}
]
Reference in new issue View Git Blame Copy Permalink