diff --git a/README.md b/README.md
index 229b02a7dbf..0810cc35aa1 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

@@ -14,16 +14,16 @@
| Stars | Released | PoC | Description |
| --- | --- | --- | --- |
-| 1⭐ | 25m ago | [CVE-2026-89079](https://github.com/murrez/CVE-2026-89079) | CVE-2026-89079 - WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit).… |
-| 1⭐ | 57m ago | [Gitlab-RCE-CVE-2026-97229](https://github.com/OppositDeer/Gitlab-RCE-CVE-2026-97229) | CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint |
-| 2⭐ | 5h ago | [CVE-2026-96889-nextjs-rce](https://github.com/lion9453/CVE-2026-96889-nextjs-rce) | Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF… |
-| 0⭐ | 7h ago | [CVE-2026-111444](https://github.com/Syscallh00k/CVE-2026-111444) | Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled |
-| 0⭐ | 10h ago | [cve-2024-2961](https://github.com/Sib1110/cve-2024-2961) | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it… |
-| 0⭐ | 11h ago | [VsockDrop-Adapted-CVE-2026-53365](https://github.com/hoodoer/VsockDrop-Adapted-CVE-2026-53365) | A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. |
-| 0⭐ | 13h ago | [CVE-2026-64507](https://github.com/manalejandro/CVE-2026-64507) | CVE-2026-64507 - PoC: IBPB flush on BPF JIT allocation |
-| 1⭐ | 19h ago | [CVE-2026-108578](https://github.com/KernelDotDLL/CVE-2026-108578) | Neterbit NW-431F unauthenticated SMS disclosure |
-| 1⭐ | 20h ago | [CVE-2026-110912](https://github.com/0xBlackash/CVE-2026-110912) | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput()… |
-| 12⭐ | 21h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
+| 0⭐ | 1h ago | [POC-CVE-2026-94134](https://github.com/MosesOX/POC-CVE-2026-94134) | Exploitation POC for CVE-2026-94134 |
+| 0⭐ | 1h ago | [CVE-2026-110896](https://github.com/azqzazq1/CVE-2026-110896) | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly… |
+| 0⭐ | 2h ago |

[exiftool-7.44-12.23-exploit-CVE-2021-22204](https://github.com/cyfrowesny/exiftool-7.44-12.23-exploit-CVE-2021-22204) | ExifToolExploit CVE-2021-22204 \\ Arbitrary Code Execution |
+| 1⭐ | 3h ago | [CVE-2026-89079](https://github.com/murrez/CVE-2026-89079) | CVE-2026-89079 - WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit).… |
+| 1⭐ | 3h ago | [Gitlab-RCE-CVE-2026-97229](https://github.com/OppositDeer/Gitlab-RCE-CVE-2026-97229) | CVE-2026-97229: GitLab RCE Unauthenticated via CI Lint |
+| 2⭐ | 8h ago | [CVE-2026-96889-nextjs-rce](https://github.com/lion9453/CVE-2026-96889-nextjs-rce) | Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF… |
+| 0⭐ | 10h ago | [CVE-2026-111444](https://github.com/Syscallh00k/CVE-2026-111444) | Wheels SQL injection on MySQL/MariaDB with backslash escaping enabled |
+| 0⭐ | 13h ago | [cve-2024-2961](https://github.com/Sib1110/cve-2024-2961) | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it… |
+| 0⭐ | 14h ago | [VsockDrop-Adapted-CVE-2026-53365](https://github.com/hoodoer/VsockDrop-Adapted-CVE-2026-53365) | A slightly more robust version of MaherAzzouzi's POC, created by my agent on the fly during testing. |
+| 0⭐ | 16h ago | [CVE-2026-64507](https://github.com/manalejandro/CVE-2026-64507) | CVE-2026-64507 - PoC: IBPB flush on BPF JIT allocation |
## Trending in 2026
@@ -32,11 +32,11 @@
| 477⭐ | 56d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept |
| 56⭐ | 2d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… |
| 333⭐ | 80d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC |
-| 32⭐ | 2d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC |
+| 33⭐ | 2d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC |
| 96⭐ | 17d ago | [CVE-2026-41096-PoC](https://github.com/ZeroDayEvil/CVE-2026-41096-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep… |
| 187⭐ | 55d ago | [CVE-2026-62911](https://github.com/hypnguyen1209/CVE-2026-62911) | POC pre-auth RCE on Exchange |
-| 12⭐ | 21h ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
| 92⭐ | 34d ago |

[CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… |
+| 12⭐ | 1d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T(PLZ110)临时 root + KernelSU per-boot 接管:CVE-2026-64560 移植,不写分区、重启即失效。内核… |
| 88⭐ | 34d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… |
| 51⭐ | 17d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE |
| 106⭐ | 51d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc |
@@ -54,18 +54,18 @@
| Stars | Updated | Repository | Description |
| --- | --- | --- | --- |
-| 5⭐ | 3d ago |

[CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. |
+| 5⭐ | 4d ago |

[CVE-2025-8110](https://github.com/Ghxstsec/CVE-2025-8110) | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. |
| 22⭐ | 66d ago | [CVE-2025-7771](https://github.com/enessakircolak/CVE-2025-7771) | ThrottleStop.sys Arbitrary Physical Memory R/W |
| 8⭐ | 29d ago |

[CVE-2025-32432-exploit-by-P34NUT](https://github.com/P34NUT2/CVE-2025-32432-exploit-by-P34NUT) | Reliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail |
| 10⭐ | 50d ago |

[vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/linux-tools/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of… |
| 8⭐ | 75d ago |

[SELinux-Permissive-Only-CVE-2025-21479](https://github.com/CamsShaft/SELinux-Permissive-Only-CVE-2025-21479) | This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the… |
-| 7⭐ | 70d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
+| 7⭐ | 71d ago | [CVE-2025-8045](https://github.com/kuzeyardabulut/CVE-2025-8045) | Dirty Pagetable Exploit for CVE-2025-8045 |
| 6⭐ | 57d ago |

[cve-2025-21479_iqooneo8](https://github.com/Qingizi7/cve-2025-21479_iqooneo8) | Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables… |
| 5⭐ | 86d ago |

[CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432) | Exploit, POC for CVE-2025-32432, CraftCMS2Shell |
| 3⭐ | 49d ago |

[CVE-2025-3248-Langflow-RCE](https://github.com/hideki233/CVE-2025-3248-Langflow-RCE) | Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A… |
| 4⭐ | 89d ago | [CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512) | CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads |
| 3⭐ | 59d ago |

[vivo_iqoo_neo_9_root_research_on_CVE-2025-21479](https://github.com/reaizuguo/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479) | iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案 |
-| 3⭐ | 87d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
+| 3⭐ | 88d ago | [CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation](https://github.com/JM00NJ/CVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-Escalation) | CVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation |
2024, 2023, 2022
diff --git a/cves/2021/CVE-2021-22204.md b/cves/2021/CVE-2021-22204.md
index de12d2325e6..38dd57245b5 100644
--- a/cves/2021/CVE-2021-22204.md
+++ b/cves/2021/CVE-2021-22204.md
@@ -42,6 +42,7 @@ Improper neutralization of user data in the DjVu file format in ExifTool version
- https://github.com/szTheory/exifcleaner
- https://github.com/trganda/CVE-2021-22204
- https://github.com/Roronoawjd/CVE-2021-22204
+- https://github.com/cyfrowesny/exiftool-7.44-12.23-exploit-CVE-2021-22204
#### ExploitDB
- https://www.exploit-db.com/exploits/50911
diff --git a/cves/2026/CVE-2026-110896.md b/cves/2026/CVE-2026-110896.md
new file mode 100644
index 00000000000..31175b589f0
--- /dev/null
+++ b/cves/2026/CVE-2026-110896.md
@@ -0,0 +1,18 @@
+### [CVE-2026-110896](https://www.cve.org/CVERecord?id=CVE-2026-110896)
+**WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability**
+
+
+
+
+
+### Description
+
+Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/azqzazq1/CVE-2026-110896
diff --git a/cves/2026/CVE-2026-94134.md b/cves/2026/CVE-2026-94134.md
new file mode 100644
index 00000000000..963c27c78ac
--- /dev/null
+++ b/cves/2026/CVE-2026-94134.md
@@ -0,0 +1,21 @@
+### [CVE-2026-94134](https://www.cve.org/CVERecord?id=CVE-2026-94134)
+**Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default**
+
+
+
+
+
+
+### Description
+
+The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends.
+
+Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+- https://github.com/MosesOX/POC-CVE-2026-94134
diff --git a/docs/hero.svg b/docs/hero.svg
index 3ed54fd82e4..86638ce2ac1 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@