diff --git a/README.md b/README.md index 9e7d63c42f6..d40a58ff70c 100644 --- a/README.md +++ b/README.md @@ -1,8 +1,8 @@
-PoC Index +PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-24%20Sep%202026%2001%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609240107)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C331-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C205-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609240107)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-24%20Sep%202026%2002%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609240207)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-83%2C332-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C205-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609240207)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,9 +12,8 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 6h ago | [CVE-2026-87902](https://github.com/bhideki/CVE-2026-87902) | CVE-2026-87902: PoC for WordPress's critical path traversal | -| 0⭐ | 22h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | -| 2⭐ | 1d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 | +| 0⭐ | 7h ago | [CVE-2026-87902](https://github.com/bhideki/CVE-2026-87902) | CVE-2026-87902: PoC for WordPress's critical path traversal | +| 0⭐ | 23h ago | KEV [CVE-2025-39964](https://github.com/suominen/CVE-2025-39964) | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent… | | 2⭐ | 1d ago | [ghostlock-cve-2026-43499](https://github.com/gitchw/ghostlock-cve-2026-43499) | CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting… | | 0⭐ | 2d ago | [CVE-2026-77812](https://github.com/Wh02m1/CVE-2026-77812) | DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID - Proof of Concept for… | | 1⭐ | 2d ago | [CVE-2025-6325_CVE-2025-6327](https://github.com/JohenLastGen-JLG/CVE-2025-6325_CVE-2025-6327) | CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated… | @@ -22,18 +21,20 @@ | 0⭐ | 4d ago | [CVE-2026-84434](https://github.com/murrez/CVE-2026-84434) | PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File… | | 2⭐ | 4d ago | [CVE-2026-89274](https://github.com/murrez/CVE-2026-89274) | PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe… | | 1⭐ | 4d ago | [Flowise-RCE-CVE-2025-59528](https://github.com/arensballiu/Flowise-RCE-CVE-2025-59528) | Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability… | +| 1⭐ | 4d ago | [Flowise-CVE-2025-58434-PasswordReset](https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset) | Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 8⭐ | 6h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | -| 5⭐ | 6h ago | [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console | +| 8⭐ | 7h ago | [CVE-2026-87902](https://github.com/vulpecuna/CVE-2026-87902) | Unauthenticated RCE on Wordpress | +| 5⭐ | 7h ago | [CVE_2026_87902](https://github.com/oliveiralimajr/CVE_2026_87902) | Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console | | 24⭐ | 1d ago | [CVE-2026-87902](https://github.com/abraxas/CVE-2026-87902) | CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion… | -| 22⭐ | 1d ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | +| 3⭐ | 1d ago | [CVE-2026-23921](https://github.com/qucklecrabik/CVE-2026-23921) | This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921 | +| 24⭐ | 1d ago | [cve-2026-87902-poc](https://github.com/ressl/cve-2026-87902-poc) | PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP… | | 825⭐ | 1d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 8⭐ | 1d ago | [CVE-2026-78306](https://github.com/Wh02m1/CVE-2026-78306) | DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306 | -| 22⭐ | 2d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | +| 23⭐ | 2d ago | [CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) | Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that… | | 4⭐ | 2d ago | [CVE-2026-94129](https://github.com/lzty/CVE-2026-94129) | A POC for CVE-2026-94129 | | 4⭐ | 2d ago | [CVE-2026-94128](https://github.com/lzty/CVE-2026-94128) | POC for CVE-2026-94128 | | 3⭐ | 3d ago | [CVE-2026-88854](https://github.com/murrez/CVE-2026-88854) | CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read) | @@ -46,7 +47,6 @@ | 5⭐ | 7d ago | [CVE-2026-12793](https://github.com/murrez/CVE-2026-12793) | CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation | | 4⭐ | 8d ago | [POC-AIOWPM-CVE-2026-19949](https://github.com/686f6c61/POC-AIOWPM-CVE-2026-19949) | PoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <=… | | 3⭐ | 8d ago | [CVE-2026-12944](https://github.com/cflowsec/CVE-2026-12944) | Langflow 1.10.0 urllib SSRF POC | -| 16⭐ | 9d ago | [CVE-2026-31694-POC](https://github.com/0xCyberstan/CVE-2026-31694-POC) | Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a… | ## Trending in 2025 @@ -55,8 +55,8 @@ | 7⭐ | 6d ago | KEV [CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail | | 3⭐ | 27d ago | KEV [CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… | | 7⭐ | 27d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… | -| 6⭐ | 34d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | -| 3⭐ | 36d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | +| 6⭐ | 35d ago | KEV [cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… | +| 3⭐ | 37d ago | KEV [vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 | | 20⭐ | 44d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W | | 6⭐ | 48d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 | | 7⭐ | 52d ago | KEV [SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… | diff --git a/cves/2026/CVE-2026-94504.md b/cves/2026/CVE-2026-94504.md new file mode 100644 index 00000000000..8036f590361 --- /dev/null +++ b/cves/2026/CVE-2026-94504.md @@ -0,0 +1,18 @@ +### [CVE-2026-94504](https://www.cve.org/CVERecord?id=CVE-2026-94504) +**Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting** +![](https://img.shields.io/static/v1?label=Vendor&message=kstover&color=blue) +![](https://img.shields.io/static/v1?label=Product&message=Ninja%20Forms%20%E2%80%93%20Contact%20Form%20Builder%20with%20Calculators%2C%20Quizzes%2C%20Signatures%20%26%20AI%20Form%20Builder&color=blue) +![](https://img.shields.io/static/v1?label=Version&message=0&color=brightgreen) +![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20%28%27Cross-site%20Scripting%27%29&color=brightgreen) + +### Description + +Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the WordPress admin origin. + +### POC + +#### Reference +No PoCs from references. + +#### Github +- https://github.com/cflowsec/cve-2026-94504 diff --git a/docs/hero.svg b/docs/hero.svg index 4693606142c..7871f0c1485 100644 --- a/docs/hero.svg +++ b/docs/hero.svg @@ -1,5 +1,5 @@ + role="img" aria-label="PoC Index, 83,332 CVEs with public proof-of-concept exploits"> @@ -19,10 +19,10 @@ pocindex.io 172,641 + fill="#e6edf3" letter-spacing="-0.5">172,642 CVES INDEXED83,331 + fill="#2f81f7" letter-spacing="-0.5">83,332 WITH POCS1,205 diff --git a/docs/social-card.svg b/docs/social-card.svg index 644fb3bd762..72eaa1985d3 100644 --- a/docs/social-card.svg +++ b/docs/social-card.svg @@ -20,10 +20,10 @@ 172,641 + fill="#e6edf3" letter-spacing="-0.5">172,642 CVES INDEXED83,331 + fill="#2f81f7" letter-spacing="-0.5">83,332 WITH POCS1,205 diff --git a/docs/stats.json b/docs/stats.json index 251ca197cdc..6590d30c6bd 100644 --- a/docs/stats.json +++ b/docs/stats.json @@ -1,5 +1,5 @@ { "kev": 1205, - "total_cves": 172641, - "with_pocs": 83331 + "total_cves": 172642, + "with_pocs": 83332 } diff --git a/index/github.txt b/index/github.txt index 31cc11cdc8e..4b2c2180eea 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26831,3 +26831,4 @@ CVE-2026-87899 - https://github.com/cyeezy08/iamtired CVE-2026-87902 - https://github.com/nextco/wordpress-cve-2026-87902 CVE-2026-95675 - https://github.com/d6fault/CVE-2026-95675 CVE-2026-63030 - https://github.com/fl0ydsec/CVE-2026-63030 +CVE-2026-94504 - https://github.com/cflowsec/cve-2026-94504 diff --git a/index/trending.json b/index/trending.json index ca3bb61e140..57fca60da47 100644 --- a/index/trending.json +++ b/index/trending.json @@ -34,7 +34,18 @@ }, { "year": 2026, - "stars": 22, + "stars": 3, + "name": "CVE-2026-23921", + "url": "https://github.com/qucklecrabik/CVE-2026-23921", + "desc": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921", + "pushed": "2026-09-22T20:10:52Z", + "created": "2026-09-22T20:10:03Z", + "cve": "CVE-2026-23921", + "kev": false + }, + { + "year": 2026, + "stars": 24, "name": "cve-2026-87902-poc", "url": "https://github.com/ressl/cve-2026-87902-poc", "desc": "PoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab", @@ -67,7 +78,7 @@ }, { "year": 2026, - "stars": 22, + "stars": 23, "name": "CVE-2026-43786", "url": "https://github.com/Malwation/CVE-2026-43786", "desc": "Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.", @@ -208,17 +219,6 @@ "cve": "CVE-2026-12944", "kev": false }, - { - "year": 2026, - "stars": 16, - "name": "CVE-2026-31694-POC", - "url": "https://github.com/0xCyberstan/CVE-2026-31694-POC", - "desc": "Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via /etc/passwd page-cache corruption. Run only inside a VM.", - "pushed": "2026-09-14T13:05:46Z", - "created": "2026-06-30T11:49:36Z", - "cve": "CVE-2026-31694", - "kev": false - }, { "year": 2025, "stars": 7, @@ -496,18 +496,6 @@ "kev": true, "landed": true }, - { - "year": 2026, - "stars": 2, - "name": "CVE-2026-23921", - "url": "https://github.com/qucklecrabik/CVE-2026-23921", - "desc": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921", - "pushed": "2026-09-22T20:10:52Z", - "created": "2026-09-22T20:10:03Z", - "cve": "CVE-2026-23921", - "kev": false, - "landed": true - }, { "year": 2026, "stars": 2, @@ -591,5 +579,17 @@ "cve": "CVE-2025-59528", "kev": false, "landed": true + }, + { + "year": 2025, + "stars": 1, + "name": "Flowise-CVE-2025-58434-PasswordReset", + "url": "https://github.com/arensballiu/Flowise-CVE-2025-58434-PasswordReset", + "desc": "Unauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password endpoint to change any user's password without prior authentication. Includes a proof-of-concept script and mitigation guidelines.", + "pushed": "2026-09-19T19:41:07Z", + "created": "2026-04-15T12:40:16Z", + "cve": "CVE-2025-58434", + "kev": false, + "landed": true } ]