From 02237b2fda6bdd2e4f955d70bda9dcf98a67fd6e Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Mon, 19 Oct 2026 06:11:33 +0000 Subject: [PATCH] Trending CVEs update 2026-10-19 06:11 :robot: --- README.md | 26 +++---- cves/2026/CVE-2026-64560.md | 1 + index/github.txt | 1 + index/releases/2020.json | 2 +- index/releases/2022.json | 2 +- index/releases/2024.json | 4 +- index/releases/2026.json | 1 + index/trending.json | 142 ++++++++++++++++++------------------ 8 files changed, 91 insertions(+), 88 deletions(-) diff --git a/README.md b/README.md index 89429ba9be5..2e53717f10f 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-19%20Oct%202026%2005%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610190507)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C081-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C237-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610190507)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-19%20Oct%202026%2006%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610190607)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-85%2C081-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C237-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610190607)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -14,22 +14,22 @@ | Stars | Released | PoC | Description | | --- | --- | --- | --- | -| 0⭐ | 1h ago | KEV [CVE-2025-55182](https://github.com/0xRAM-bit/CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | -| 0⭐ | 5h ago | [InfinityCore-Android-CVE-2026-97941](https://github.com/ylh440104/InfinityCore-Android-CVE-2026-97941) | Android/ARM64 port | -| 0⭐ | 7h ago | KEV [CVE-2025-3248-CTF-Lab](https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab) | Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경 | -| 0⭐ | 8h ago | [CVE-2026-104736](https://github.com/murrez/CVE-2026-104736) | PoC for CVE-2026-104736 - LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email… | -| 0⭐ | 9h ago | [mariadb-cve-2026-92262](https://github.com/SeanDishman/mariadb-cve-2026-92262) | PoC for CVE-2026-92262, CVE-2026-85746, CVE-2026-85748 against MariaDB 13.0.1 | -| 0⭐ | 11h ago | [CVE-2026-53787-poc](https://github.com/MRdark-ops/CVE-2026-53787-poc) | CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files… | -| 0⭐ | 14h ago | [CVE-2020-36847](https://github.com/K52-ai/CVE-2020-36847) | PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP… | -| 0⭐ | 15h ago | [CVE-2024-25600](https://github.com/K52-ai/CVE-2024-25600) | PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element… | -| 1⭐ | 15h ago | [CVE-2026-99999](https://github.com/01luyicheng/CVE-2026-99999) | CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS… | -| 1⭐ | 21h ago | [CVE-2025-6440-BypassExt](https://github.com/0xCyp1337/CVE-2025-6440-BypassExt) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | +| 0⭐ | 2h ago | KEV [CVE-2025-55182](https://github.com/0xRAM-bit/CVE-2025-55182) | A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0,… | +| 0⭐ | 6h ago | [InfinityCore-Android-CVE-2026-97941](https://github.com/ylh440104/InfinityCore-Android-CVE-2026-97941) | Android/ARM64 port | +| 0⭐ | 8h ago | KEV [CVE-2025-3248-CTF-Lab](https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab) | Langflow 미인증 RCE 취약점(CVE-2025-3248) 기반 경량화 웹 해킹 CTF 문제 및 PoC 실습 환경 | +| 0⭐ | 9h ago | [CVE-2026-104736](https://github.com/murrez/CVE-2026-104736) | PoC for CVE-2026-104736 - LearnPress ≤4.4.10 unauthenticated PHP object injection via checkout-email… | +| 0⭐ | 10h ago | [mariadb-cve-2026-92262](https://github.com/SeanDishman/mariadb-cve-2026-92262) | PoC for CVE-2026-92262, CVE-2026-85746, CVE-2026-85748 against MariaDB 13.0.1 | +| 0⭐ | 12h ago | [CVE-2026-53787-poc](https://github.com/MRdark-ops/CVE-2026-53787-poc) | CVE-2026-53787 Amasty Order Attribute (AOA) file upload exploit, modified to support the upload of HTML files… | +| 0⭐ | 15h ago | [CVE-2020-36847](https://github.com/K52-ai/CVE-2020-36847) | PoC for CVE-2020-36847: unauthenticated file upload to RCE in WordPress Simple File List <=4.2.2. Uploads PHP… | +| 0⭐ | 16h ago | [CVE-2024-25600](https://github.com/K52-ai/CVE-2024-25600) | PoC for CVE-2024-25600: unauthenticated RCE in WordPress Bricks Builder <=1.9.6. Extracts the render_element… | +| 1⭐ | 16h ago | [CVE-2026-99999](https://github.com/01luyicheng/CVE-2026-99999) | CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS… | +| 1⭐ | 22h ago | [CVE-2025-6440-BypassExt](https://github.com/0xCyp1337/CVE-2025-6440-BypassExt) | The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services… | ## Trending in 2026 | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 402⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | +| 409⭐ | 1d ago | KEV [CVE-2026-41940-PoC](https://github.com/sakidekin/CVE-2026-41940-PoC) | cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation | | 477⭐ | 59d ago | [CVE-2026-9830](https://github.com/opaxial/CVE-2026-9830) | CVE-2026-9830 Proof of Concept | | 59⭐ | 5d ago | [CVE-2026-97229-PoC](https://github.com/jburgess-r7/CVE-2026-97229-PoC) | GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64… | | 334⭐ | 83d ago | [CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) | Certighost POC | @@ -39,9 +39,9 @@ | 24⭐ | 2d ago | [CVE-2026-20817](https://github.com/ZeroDayEvil/CVE-2026-20817) | 🛡️ Official AI Security Tool module for CVE-2026-20817 (Windows Error Reporting WER ALPC Local Privilege… | | 24⭐ | 2d ago | [CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) | 🛡️ Official AI Security Tool module for CVE-2026-40369 (Windows NtQuerySystemInformation Class 253 Arbitrary… | | 34⭐ | 5d ago | [CVE-2026-85884](https://github.com/Beardhammer/CVE-2026-85884) | CVE-85884 POC | +| 21⭐ | 3d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 92⭐ | 37d ago | KEV [CVE-2026-20805-PoC](https://github.com/ZeroDayEvil/CVE-2026-20805-PoC) | 🛡️ Official AI Security Tool module for CVE-2026-20805 (Desktop Window Manager / dwm.exe Information… | | 88⭐ | 37d ago | [CVE-2026-21858-n8n-FullChain](https://github.com/ZeroDayEvil/CVE-2026-21858-n8n-FullChain) | 🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated… | -| 20⭐ | 3d ago | [plz110-6.12.69-cve-2026-64560-ksu](https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu) | 一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核… | | 105⭐ | 54d ago | [CVE-2026-75604-poc](https://github.com/rafabd1/CVE-2026-75604-poc) | CVE-2026-75604 Next.js Windows RCE poc | | 53⭐ | 19d ago | [CVE-2026-94545](https://github.com/EQSTLab/CVE-2026-94545) | Next.js RCE | | 86⭐ | 45d ago | [CVE-2026-65343](https://github.com/ByteV0rtex/CVE-2026-65343) | CVE-2026-65343 PoC - AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71) | diff --git a/cves/2026/CVE-2026-64560.md b/cves/2026/CVE-2026-64560.md index 1179359dd8f..7438277de0f 100644 --- a/cves/2026/CVE-2026-64560.md +++ b/cves/2026/CVE-2026-64560.md @@ -133,3 +133,4 @@ No PoCs from references. - https://github.com/totsiaw/cve-2026-64560-rmx6699 - https://github.com/ChaYeWuu/prague-CVE-2026-64560-OS4.0 - https://github.com/imkidz0/exploit-CVE-2026-64560 +- https://github.com/Feng1586/CVE-2026-64560-public diff --git a/index/github.txt b/index/github.txt index 2c74809d117..fd34f05ab86 100644 --- a/index/github.txt +++ b/index/github.txt @@ -27474,3 +27474,4 @@ CVE-2026-104736 - https://github.com/murrez/CVE-2026-104736 CVE-2025-3248 - https://github.com/cpwjdgh/CVE-2025-3248-CTF-Lab CVE-2026-97941 - https://github.com/ylh440104/InfinityCore-Android-CVE-2026-97941 CVE-2025-55182 - https://github.com/0xRAM-bit/CVE-2025-55182 +CVE-2026-64560 - https://github.com/Feng1586/CVE-2026-64560-public diff --git a/index/releases/2020.json b/index/releases/2020.json index 34f99b6926e..8e0b80af1bd 100644 --- a/index/releases/2020.json +++ b/index/releases/2020.json @@ -6629,7 +6629,7 @@ "CVE-2020-8290 https://youtu.be/OpC6neWd2aM":{"basis":"unknown","cve":"CVE-2020-8290","imported":true,"released":null,"url":"https://youtu.be/OpC6neWd2aM"}, "CVE-2020-8298 github:pillys/fs-path/pull/6?#":{"basis":"unknown","cve":"CVE-2020-8298","imported":true,"released":null,"url":"https://github.com/pillys/fs-path/pull/6"}, "CVE-2020-8300 github:stuartcarroll/citrixadc-cve-2020-8300?#":{"basis":"unknown","cve":"CVE-2020-8300","imported":true,"released":null,"url":"https://github.com/stuartcarroll/CitrixADC-CVE-2020-8300"}, -"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"}, +"CVE-2020-8394 github:tzwlhack/vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md?#":{"basis":"unknown","cve":"CVE-2020-8394","gone":"2026-10-19T06:11:09Z","imported":true,"released":null,"url":"https://github.com/tzwlhack/Vulnerability/blob/main/Zoho%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(CVE-2020-8394).md"}, "CVE-2020-8416 https://pastebin.com/wqNWnCuN":{"basis":"unknown","cve":"CVE-2020-8416","imported":true,"released":null,"url":"https://pastebin.com/wqNWnCuN"}, "CVE-2020-8416 https://www.exploit-db.com/exploits/47987":{"basis":"source","cve":"CVE-2020-8416","imported":true,"released":"2020-02-03","source":"2020-02-03","url":"https://www.exploit-db.com/exploits/47987"}, "CVE-2020-8417 github:rapidsafeguard/codesnippets_cve-2020-8417?#":{"basis":"unknown","cve":"CVE-2020-8417","imported":true,"released":null,"url":"https://github.com/Rapidsafeguard/codesnippets_CVE-2020-8417"}, diff --git a/index/releases/2022.json b/index/releases/2022.json index aaa00400ee6..ee7e1d71841 100644 --- a/index/releases/2022.json +++ b/index/releases/2022.json @@ -3826,7 +3826,7 @@ "CVE-2022-26134 github:rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_confluence_namespace_ognl_injection.rb"}, "CVE-2022-26134 github:reph0r/poc-exp?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reph0r/poc-exp"}, "CVE-2022-26134 github:reubensammut/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/reubensammut/cve-2022-26134"}, -"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-19T02:07:53Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"928cb472617e9a438ba57f476192afd76a5575fc","imported":true,"pending":true,"pushed_at":"2026-10-19T01:09:51Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, +"CVE-2022-26134 github:roodhelios/cve-2022-26134-ognl-injection?#":{"basis":"pending","checked":"2026-10-19T06:08:07Z","created":"2026-05-06T01:47:50Z","cve":"CVE-2022-26134","head":"a7ca926754e32e07dbab57888beeb3eda467c9f2","imported":true,"pending":true,"pushed_at":"2026-10-19T05:07:59Z","released":null,"repo":1230429140,"url":"https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection"}, "CVE-2022-26134 github:secjia/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/secjia/CVE-2022-26134"}, "CVE-2022-26134 github:shamo0/cve-2022-26134?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shamo0/CVE-2022-26134"}, "CVE-2022-26134 github:shiftsansan/cve-2022-26134-console?#":{"basis":"unknown","cve":"CVE-2022-26134","imported":true,"released":null,"url":"https://github.com/shiftsansan/CVE-2022-26134-Console"}, diff --git a/index/releases/2024.json b/index/releases/2024.json index ec5bbfcbfb9..c81cd615264 100644 --- a/index/releases/2024.json +++ b/index/releases/2024.json @@ -331,7 +331,7 @@ "CVE-2024-0710 github:karlemilnikka/cve-2024-0710?#":{"basis":"unknown","cve":"CVE-2024-0710","imported":true,"released":null,"url":"https://github.com/karlemilnikka/CVE-2024-0710"}, "CVE-2024-0711 https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90":{"basis":"unknown","cve":"CVE-2024-0711","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/8e286c04-ef32-4af0-be78-d978999b2a90/"}, "CVE-2024-0712 github:gta12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md?#":{"basis":"unknown","cve":"CVE-2024-0712","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.md"}, -"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"}, +"CVE-2024-0713 github:zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml?#":{"basis":"unknown","cve":"CVE-2024-0713","gone":"2026-10-19T06:11:09Z","imported":true,"released":null,"url":"https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2024/CVE-2024-0713.yaml"}, "CVE-2024-0716 github:gta12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md?#":{"basis":"unknown","cve":"CVE-2024-0716","imported":true,"released":null,"url":"https://github.com/GTA12138/vul/blob/main/smart%20s150/s150%20Download%20any%20file/smart%20s150%20download%20any%20file.md"}, "CVE-2024-0717 github:999zzzzz/d-link?#":{"basis":"unknown","cve":"CVE-2024-0717","imported":true,"released":null,"url":"https://github.com/999zzzzz/D-Link"}, "CVE-2024-0718 github:biantaibao/zhglxt_xss/blob/main/xss.md?#":{"basis":"unknown","cve":"CVE-2024-0718","imported":true,"released":null,"url":"https://github.com/biantaibao/zhglxt_xss/blob/main/xss.md"}, @@ -5888,7 +5888,7 @@ "CVE-2024-37873 github:tthuyyy/cve1/issues/2?#":{"basis":"unknown","cve":"CVE-2024-37873","imported":true,"released":null,"url":"https://github.com/TThuyyy/cve1/issues/2"}, "CVE-2024-37880 https://pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity":{"basis":"unknown","cve":"CVE-2024-37880","imported":true,"released":null,"url":"https://pqshield.com/pqshield-plugs-timing-leaks-in-kyber-ml-kem-to-improve-pqc-implementation-maturity/"}, "CVE-2024-37881 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37881.yaml?#":{"basis":"unknown","cve":"CVE-2024-37881","imported":true,"released":null,"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37881.yaml"}, -"CVE-2024-37888 github:7ragnarok7/cve-2024-37888?#":{"basis":"pending","checked":"2026-10-19T02:09:59Z","created":"2024-06-10T07:00:18Z","cve":"CVE-2024-37888","head":"c6de44bb581960c93eb489f2945479bf39fe6c04","imported":true,"pending":true,"pushed_at":"2026-10-16T19:53:34Z","released":null,"repo":812924226,"url":"https://github.com/7Ragnarok7/CVE-2024-37888"}, +"CVE-2024-37888 github:7ragnarok7/cve-2024-37888?#":{"basis":"pending","checked":"2026-10-19T06:10:20Z","created":"2024-06-10T07:00:18Z","cve":"CVE-2024-37888","head":"c6de44bb581960c93eb489f2945479bf39fe6c04","imported":true,"pending":true,"pushed_at":"2026-10-16T19:53:34Z","released":null,"repo":812924226,"url":"https://github.com/7Ragnarok7/CVE-2024-37888"}, "CVE-2024-37889 github:treyww/myfinances/security/advisories/GHSA-4884-3gvp-3wj2?#":{"basis":"unknown","cve":"CVE-2024-37889","imported":true,"released":null,"url":"https://github.com/TreyWW/MyFinances/security/advisories/GHSA-4884-3gvp-3wj2"}, "CVE-2024-37890 github:advisories/ghsa-3h5v-q93c-6h6q?#":{"basis":"unknown","cve":"CVE-2024-37890","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-3h5v-q93c-6h6q"}, "CVE-2024-37891 https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891":{"basis":"unknown","cve":"CVE-2024-37891","imported":true,"released":null,"url":"https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891"}, diff --git a/index/releases/2026.json b/index/releases/2026.json index 891cad0ad84..8c4ac69fcc5 100644 --- a/index/releases/2026.json +++ b/index/releases/2026.json @@ -11257,6 +11257,7 @@ "CVE-2026-64560 github:chayewuu/prague-cve-2026-64560-os4.0?#":{"basis":"commit","blobs":["2a1aae1c84499ae2fbe3b1c06cb28eab596ff48c"],"checked":"2026-10-17T13:08:08Z","commit":"2026-10-17T12:39:15Z","commit_verified":true,"created":"2026-10-17T11:27:09Z","cve":"CVE-2026-64560","head":"7364bc614798e4bdeb9fa1b0dc1770d35ff6a40a","history_paths":["src/exploit-prague.c"],"history_version":3,"paths":["src/exploit-prague.c"],"pushed_at":"2026-10-17T12:41:32Z","released":"2026-10-17T12:39:15Z","repo":1423258376,"rev":"0f128a0ffda1723378a37b4b48319b757c50e29f421db515214952e293b61844","seen":"2026-10-17T13:08:12Z","sha":"7364bc614798e4bdeb9fa1b0dc1770d35ff6a40a","url":"https://github.com/ChaYeWuu/prague-CVE-2026-64560-OS4.0"}, "CVE-2026-64560 github:d1667018881/myroot?#":{"basis":"unknown","cve":"CVE-2026-64560","imported":true,"released":null,"url":"https://github.com/d1667018881/myroot"}, "CVE-2026-64560 github:feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu?#":{"basis":"commit","blobs":["0aad7f1d49a357b27710eb649723f24f930ca2de","e7ce32653cfef22e903655aa03c7a3d23f39de42"],"checked":"2026-10-15T22:09:14Z","commit":"2026-10-15T14:24:25Z","commit_verified":true,"created":"2026-10-15T14:19:23Z","cve":"CVE-2026-64560","head":"80c7392992e0b7c3079660cebd32312f073f8c60","history_paths":["repro/build/plz110-242e1a07f878-ce22/cve-2026-64560-fanout.c"],"history_version":3,"paths":["repro/build/plz110-242e1a07f878-ce22/cve-2026-64560-fanout.c","repro/build/plz110-242e1a07f878-ce22/cve-2026-64560-rotate.c"],"pushed_at":"2026-10-15T14:25:19Z","released":"2026-10-15T14:24:25Z","repo":1420849712,"rev":"fa7248194dd21aec8e4ef8f1efaac70608f0d158789e549ef991ab43521b458d","seen":"2026-10-15T22:09:20Z","sha":"80c7392992e0b7c3079660cebd32312f073f8c60","url":"https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu"}, +"CVE-2026-64560 github:feng1586/cve-2026-64560-public?#":{"basis":"pending","checked":"2026-10-19T06:08:07Z","created":"2026-10-19T05:30:01Z","cve":"CVE-2026-64560","head":"560a4f5260f68a4a79897492d06b4ed5006781c4","pending":true,"pushed_at":"2026-10-19T05:31:28Z","released":null,"repo":1425151242,"seen":"2026-10-19T06:08:17Z","url":"https://github.com/Feng1586/CVE-2026-64560-public"}, "CVE-2026-64560 github:imkidz0/cve-2026-64560-exploit?#":{"basis":"pending","checked":"2026-10-16T18:09:17Z","created":"2026-07-23T09:35:07Z","cve":"CVE-2026-64560","head":"959d0a915ff6fefd75a224a6158eea7190471593","imported":true,"pending":true,"pushed_at":"2026-10-15T19:21:02Z","released":null,"repo":1309769310,"url":"https://github.com/imkidz0/CVE-2026-64560-exploit"}, "CVE-2026-64560 github:imkidz0/exploit-cve-2026-64560?#":{"basis":"unknown","cve":"CVE-2026-64560","released":null,"seen":"2026-10-18T07:24:41Z","url":"https://github.com/imkidz0/exploit-CVE-2026-64560"}, "CVE-2026-64560 github:knowlily/cve-2026-43499-honor?#":{"basis":"unknown","cve":"CVE-2026-64560","imported":true,"released":null,"url":"https://github.com/knowlily/cve-2026-43499-honor"}, diff --git a/index/trending.json b/index/trending.json index 509fe5f8a32..684eb71e3cc 100644 --- a/index/trending.json +++ b/index/trending.json @@ -1,7 +1,7 @@ [ { "year": 2026, - "stars": 402, + "stars": 409, "name": "CVE-2026-41940-PoC", "url": "https://github.com/sakidekin/CVE-2026-41940-PoC", "artifact": false, @@ -10,7 +10,7 @@ "pushed": "2026-10-17T16:48:15Z", "released": "2026-10-15T12:44:31Z", "basis": "commit", - "score": 14.743604667791738, + "score": 14.908001099220574, "trending": true, "created": "2026-10-11T07:54:18Z", "cve": "CVE-2026-41940", @@ -27,7 +27,7 @@ "pushed": "2026-08-20T21:56:15Z", "released": null, "basis": "pending", - "score": 2.9251004237610756, + "score": 2.923691948123935, "trending": true, "created": "2026-08-15T20:57:13Z", "cve": "CVE-2026-9830", @@ -44,7 +44,7 @@ "pushed": "2026-10-13T16:00:26Z", "released": "2026-10-13T16:00:26Z", "basis": "commit", - "score": 1.7115910586569287, + "score": 1.7040382345907985, "trending": true, "created": "2026-10-13T09:39:17Z", "cve": "CVE-2026-97229", @@ -61,7 +61,7 @@ "pushed": "2026-07-27T19:12:07Z", "released": "2026-07-24T03:30:17Z", "basis": "commit", - "score": 1.5711606049549935, + "score": 1.570642507272469, "trending": true, "created": "2026-07-23T18:54:34Z", "cve": "CVE-2026-54121", @@ -78,7 +78,7 @@ "pushed": "2026-09-29T06:20:46Z", "released": "2026-09-29T06:20:46Z", "basis": "commit", - "score": 1.233893981753508, + "score": 1.2321858156565633, "trending": true, "created": "2026-02-05T10:21:22Z", "cve": "CVE-2026-41096", @@ -95,7 +95,7 @@ "pushed": "2026-10-16T18:34:43Z", "released": null, "basis": "pending", - "score": 1.183328377586651, + "score": 1.1734399736154664, "trending": true, "created": "2026-09-28T19:01:45Z", "cve": "CVE-2026-75604", @@ -112,7 +112,7 @@ "pushed": "2026-08-22T04:49:54Z", "released": "2026-08-22T04:49:54Z", "basis": "commit", - "score": 1.1641900929969218, + "score": 1.1636172993584346, "trending": true, "created": "2026-08-22T04:49:33Z", "cve": "CVE-2026-62911", @@ -129,7 +129,7 @@ "pushed": "2026-10-16T18:03:54Z", "released": null, "basis": "pending", - "score": 1.087573429996071, + "score": 1.0785407952887756, "trending": true, "created": "2026-09-28T19:01:20Z", "cve": "CVE-2026-20817", @@ -146,7 +146,7 @@ "pushed": "2026-10-16T17:36:11Z", "released": null, "basis": "pending", - "score": 1.0833617702064693, + "score": 1.0744133517798327, "trending": true, "created": "2026-09-28T18:55:22Z", "cve": "CVE-2026-40369", @@ -163,12 +163,29 @@ "pushed": "2026-10-13T20:06:18Z", "released": "2026-10-13T20:06:18Z", "basis": "commit", - "score": 1.0047508480679992, + "score": 1.0001990917668524, "trending": true, "created": "2026-10-13T20:02:03Z", "cve": "CVE-2026-85884", "kev": false }, + { + "year": 2026, + "stars": 21, + "name": "plz110-6.12.69-cve-2026-64560-ksu", + "url": "https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu", + "artifact": false, + "source": "github.com", + "desc": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", + "pushed": "2026-10-15T14:24:25Z", + "released": "2026-10-15T14:24:25Z", + "basis": "commit", + "score": 0.7734121025896837, + "trending": true, + "created": "2026-10-15T14:19:23Z", + "cve": "CVE-2026-64560", + "kev": false + }, { "year": 2026, "stars": 92, @@ -180,7 +197,7 @@ "pushed": "2026-09-11T16:33:14Z", "released": null, "basis": "pending", - "score": 0.7719933890381242, + "score": 0.7714117482464136, "trending": true, "created": "2026-09-10T11:28:38Z", "cve": "CVE-2026-20805", @@ -197,29 +214,12 @@ "pushed": "2026-09-12T00:03:49Z", "released": null, "basis": "pending", - "score": 0.7426558944933221, + "score": 0.7420917798454358, "trending": true, "created": "2026-09-12T00:03:07Z", "cve": "CVE-2026-21858", "kev": false }, - { - "year": 2026, - "stars": 20, - "name": "plz110-6.12.69-cve-2026-64560-ksu", - "url": "https://github.com/feiguang-ai/plz110-6.12.69-cve-2026-64560-ksu", - "artifact": false, - "source": "github.com", - "desc": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", - "pushed": "2026-10-15T14:24:25Z", - "released": "2026-10-15T14:24:25Z", - "basis": "commit", - "score": 0.7412134786782347, - "trending": true, - "created": "2026-10-15T14:19:23Z", - "cve": "CVE-2026-64560", - "kev": false - }, { "year": 2026, "stars": 105, @@ -231,7 +231,7 @@ "pushed": "2026-08-26T02:23:55Z", "released": "2026-08-25T19:06:37Z", "basis": "created", - "score": 0.6830911315931033, + "score": 0.6827332561581162, "trending": true, "created": "2026-08-25T19:06:37Z", "cve": "CVE-2026-75604", @@ -248,7 +248,7 @@ "pushed": "2026-09-29T07:52:23Z", "released": "2026-09-29T07:57:18Z", "basis": "created", - "score": 0.6827422283142577, + "score": 0.6817940314973572, "trending": true, "created": "2026-09-29T07:57:18Z", "cve": "CVE-2026-94545", @@ -265,7 +265,7 @@ "pushed": "2026-09-03T20:38:35Z", "released": null, "basis": "pending", - "score": 0.633986565882172, + "score": 0.6335895209611407, "trending": true, "created": "2026-09-02T20:12:10Z", "cve": "CVE-2026-65343", @@ -282,7 +282,7 @@ "pushed": "2026-08-03T15:31:59Z", "released": null, "basis": "pending", - "score": 0.5552603391769533, + "score": 0.5550524627301949, "trending": true, "created": "2026-08-03T15:29:22Z", "cve": "CVE-2026-47301", @@ -299,7 +299,7 @@ "pushed": "2026-09-24T02:47:40Z", "released": "2026-09-24T02:47:40Z", "basis": "commit", - "score": 0.4408327184547987, + "score": 0.44034265559330665, "trending": true, "created": "2026-09-24T00:22:30Z", "cve": "CVE-2026-84543", @@ -316,7 +316,7 @@ "pushed": "2026-09-22T19:36:47Z", "released": null, "basis": "pending", - "score": 0.41544116202117176, + "score": 0.41500119832133747, "trending": true, "created": "2026-09-22T18:40:26Z", "cve": "CVE-2026-87902", @@ -333,7 +333,7 @@ "pushed": "2026-10-10T01:25:53Z", "released": "2026-10-10T01:25:43Z", "basis": "commit", - "score": 0.40541372876147863, + "score": 0.40425799231268034, "trending": true, "created": "2026-10-10T01:12:57Z", "cve": "CVE-2026-107181", @@ -350,7 +350,7 @@ "pushed": "2026-10-03T08:14:17Z", "released": null, "basis": "pending", - "score": 0.25425889406150387, + "score": 0.2538219135153903, "trending": true, "created": "2026-04-07T12:02:52Z", "cve": "CVE-2024-56426", @@ -367,7 +367,7 @@ "pushed": "2026-10-12T15:07:46Z", "released": null, "basis": "pending", - "score": 0.1308708877632234, + "score": 0.13037191062942172, "trending": true, "created": "2026-04-11T22:40:07Z", "cve": "CVE-2025-8110", @@ -384,30 +384,12 @@ "pushed": "2026-08-10T23:15:22Z", "released": "2026-08-10T23:15:36Z", "basis": "created", - "score": 0.12123767840136207, + "score": 0.1211875576593183, "trending": true, "created": "2026-08-10T23:15:36Z", "cve": "CVE-2025-7771", "kev": false }, - { - "year": 2026, - "stars": 1, - "name": "CVE-2026-99999", - "url": "https://github.com/01luyicheng/CVE-2026-99999", - "artifact": false, - "source": "github.com", - "desc": "CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)", - "pushed": null, - "released": "2026-10-18T13:16:26Z", - "basis": "commit", - "score": 0.07572323445224706, - "trending": false, - "created": "2026-10-18T13:16:12Z", - "cve": "CVE-2026-99999", - "kev": false, - "landed": true - }, { "year": 2025, "stars": 8, @@ -419,12 +401,30 @@ "pushed": "2026-09-17T02:22:58Z", "released": "2026-09-17T02:22:58Z", "basis": "commit", - "score": 0.07462979609319954, + "score": 0.07456438826958788, "trending": true, "created": "2026-09-16T23:32:09Z", "cve": "CVE-2025-32432", "kev": true }, + { + "year": 2026, + "stars": 1, + "name": "CVE-2026-99999", + "url": "https://github.com/01luyicheng/CVE-2026-99999", + "artifact": false, + "source": "github.com", + "desc": "CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)", + "pushed": null, + "released": "2026-10-18T13:16:26Z", + "basis": "commit", + "score": 0.07443190868241557, + "trending": false, + "created": "2026-10-18T13:16:12Z", + "cve": "CVE-2026-99999", + "kev": false, + "landed": true + }, { "year": 2025, "stars": 1, @@ -436,7 +436,7 @@ "pushed": null, "released": "2026-10-18T07:21:00Z", "basis": "commit", - "score": 0.06873175484563952, + "score": 0.06770840810132513, "trending": false, "created": "2026-10-18T07:18:01Z", "cve": "CVE-2025-6440", @@ -454,7 +454,7 @@ "pushed": "2026-08-27T07:13:42Z", "released": null, "basis": "pending", - "score": 0.06632212153807414, + "score": 0.0662864031780502, "trending": true, "created": "2026-08-19T09:39:46Z", "cve": "CVE-2025-21479", @@ -471,7 +471,7 @@ "pushed": "2026-08-02T06:48:32Z", "released": "2026-07-28T09:37:42Z", "basis": "commit", - "score": 0.043829987758205784, + "score": 0.04381480005502811, "trending": true, "created": "2026-07-28T06:41:38Z", "cve": "CVE-2025-21479", @@ -488,7 +488,7 @@ "pushed": "2026-08-06T14:58:53Z", "released": "2026-08-06T14:58:53Z", "basis": "commit", - "score": 0.03698860449088424, + "score": 0.036974203373219966, "trending": true, "created": "2026-08-06T13:52:33Z", "cve": "CVE-2025-8045", @@ -505,7 +505,7 @@ "pushed": "2026-08-20T01:33:10Z", "released": "2026-08-20T01:20:07Z", "basis": "commit", - "score": 0.036431419514677585, + "score": 0.03641412212390362, "trending": true, "created": "2026-08-20T01:13:39Z", "cve": "CVE-2025-21479", @@ -522,7 +522,7 @@ "pushed": "2026-07-22T19:46:33Z", "released": null, "basis": "pending", - "score": 0.027931555311792505, + "score": 0.027922480559566896, "trending": true, "created": "2026-07-22T19:43:34Z", "cve": "CVE-2023-36003", @@ -539,7 +539,7 @@ "pushed": "2026-08-15T06:21:41Z", "released": null, "basis": "pending", - "score": 0.023038740975726172, + "score": 0.02302859534878186, "trending": true, "created": "2026-08-15T06:12:04Z", "cve": "CVE-2024-56426", @@ -556,7 +556,7 @@ "pushed": "2026-08-28T00:05:41Z", "released": "2026-08-28T00:05:42Z", "basis": "created", - "score": 0.020080219413771035, + "score": 0.020069262302722428, "trending": true, "created": "2026-08-28T00:05:42Z", "cve": "CVE-2025-3248", @@ -573,7 +573,7 @@ "pushed": "2026-08-18T01:39:34Z", "released": null, "basis": "pending", - "score": 0.01781266366681648, + "score": 0.017804472241393515, "trending": true, "created": "2026-08-18T02:31:53Z", "cve": "CVE-2025-21479", @@ -590,7 +590,7 @@ "pushed": "2026-07-29T21:15:12Z", "released": "2026-07-29T21:15:12Z", "basis": "commit", - "score": 0.014793881073362162, + "score": 0.014788661816870578, "trending": true, "created": "2026-07-29T19:59:36Z", "cve": "CVE-2024-36104", @@ -607,7 +607,7 @@ "pushed": "2026-07-27T07:00:54Z", "released": "2026-07-27T06:52:27Z", "basis": "commit", - "score": 0.014475480127200634, + "score": 0.014470530147457238, "trending": true, "created": "2026-07-27T06:51:21Z", "cve": "CVE-2023-52076", @@ -624,7 +624,7 @@ "pushed": "2026-10-08T15:42:17Z", "released": "2025-09-09T01:31:54Z", "basis": "commit", - "score": 0.009681025798203038, + "score": 0.009680333496325272, "trending": true, "created": "2025-09-08T21:12:19Z", "cve": "CVE-2022-22077",