From 0591135b37468e8302dd2c78ce355996675aede5 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Wed, 9 Sep 2026 18:10:27 +0000 Subject: [PATCH] Trending CVEs update 2026-09-09 18:10 :robot: --- README.md | 16 ++++++++-------- cves/2026/CVE-2026-11387.md | 1 + cves/2026/CVE-2026-41940.md | 1 + index/github.txt | 2 ++ index/trending.json | 2 +- 5 files changed, 13 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 977080dfb4c..e5ce18689b9 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ PoC Index -[![last sync](https://img.shields.io/badge/last%20sync-09%20Sep%202026%2017%3A07%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609091707)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C700-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609091707)](https://github.com/0xMarcio/pocindex/stargazers) +[![last sync](https://img.shields.io/badge/last%20sync-09%20Sep%202026%2018%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main) [![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202609091808)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-82%2C700-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![known exploited](https://img.shields.io/badge/known%20exploited-1%2C186-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/) [![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202609091808)](https://github.com/0xMarcio/pocindex/stargazers) Search PoC Index @@ -12,13 +12,13 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 0⭐ | 17h ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. | -| 0⭐ | 20h ago | KEV [CVE-2025-55182](https://github.com/r3vpwnx/CVE-2025-55182) | CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight… | +| 0⭐ | 18h ago | [CVE-2026-73312](https://github.com/BomboBombone/CVE-2026-73312) | Sanitized XenForo write-up and proof of concept for CVE-2026-73312. | +| 0⭐ | 21h ago | KEV [CVE-2025-55182](https://github.com/r3vpwnx/CVE-2025-55182) | CVE-2025-55182 - React2Shell (CVE-2025-55182) unauthenticated RCE via React Server Components Flight… | | 0⭐ | 2d ago | KEV [CVE-2025-57819](https://github.com/r3vpwnx/CVE-2025-57819) | CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC) | | 0⭐ | 3d ago | [CVE-2025-24799](https://github.com/galisko/CVE-2025-24799) | GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection… | | 0⭐ | 3d ago | KEV [POC-CVE-2025-68613](https://github.com/rmhowe425/POC-CVE-2025-68613) | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4,… | | 0⭐ | 3d ago | [CVE-2025-4255---Buffer-Overflow](https://github.com/Tenor-Z/CVE-2025-4255---Buffer-Overflow) | Exploit Framework for CVE-2025-4255 | -| 2⭐ | 3d ago | [CVE-2026-58138](https://github.com/0xBlackash/CVE-2026-58138) | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that… | +| 2⭐ | 4d ago | [CVE-2026-58138](https://github.com/0xBlackash/CVE-2026-58138) | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that… | | 4⭐ | 4d ago | KEV [cve-2026-85046-poc](https://github.com/adriyansyah-mf/cve-2026-85046-poc) | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary… | | 0⭐ | 4d ago | [CVE-2025-29927-PoC](https://github.com/Ritinify/CVE-2025-29927-PoC) | Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior… | @@ -26,9 +26,9 @@ | Stars | Updated | Repository | Description | | --- | --- | --- | --- | -| 8⭐ | 15h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | -| 4⭐ | 15h ago | [CVE-2026-19089-WooCommerce-Tyche](https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche) | CVE-2026-19089 WooCommerce Tych Remote Command Execution | -| 824⭐ | 1d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | +| 8⭐ | 16h ago | [CVE-2026-83991-writeup-and-poc](https://github.com/karollooool/CVE-2026-83991-writeup-and-poc) | CVE-2026-83991: Windows Cloud Files access-check bypass | +| 5⭐ | 16h ago | [CVE-2026-19089-WooCommerce-Tyche](https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche) | CVE-2026-19089 WooCommerce Tych Remote Command Execution | +| 824⭐ | 2d ago | KEV [CVE-2026-24061](https://github.com/jacubes/CVE-2026-24061) | CVE-2026-24061 exploit PoC | | 532⭐ | 2d ago | KEV [cve-2026-41940-PoC](https://github.com/lanicer/cve-2026-41940-PoC) | A cPanel and WHM authentication bypassing tool | | 26⭐ | 2d ago | [CVE-2026-28576-poc](https://github.com/mobilehackinglab/CVE-2026-28576-poc) | SQL injection vulnerability in Android 17 (AOSP) | | 4⭐ | 3d ago | KEV [CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) | CVE-2026-41091 RedSun / Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via… | @@ -86,7 +86,7 @@ | 3⭐ | 44d ago | [CVE-2023-52076-PoC](https://github.com/Groppoxx/CVE-2023-52076-PoC) | PoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary… | | 5⭐ | 48d ago | [CVE-2023-36003](https://github.com/johnnygreeme/CVE-2023-36003) | PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. | | 3⭐ | 63d ago | KEV [cve-2023-4911-exploit-optimized](https://github.com/jarpex/cve-2023-4911-exploit-optimized) | Pure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing… | -| 15⭐ | 65d ago | KEV [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass | +| 15⭐ | 66d ago | KEV [CVE-2023-32315-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2023-32315-EXPLOIT) | A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass | | 6⭐ | 81d ago | [CVE-2023-6019](https://github.com/joaquinrrr/CVE-2023-6019) | PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API. | ## Trending in 2022 diff --git a/cves/2026/CVE-2026-11387.md b/cves/2026/CVE-2026-11387.md index c6c27da36da..71f4b13c1e5 100644 --- a/cves/2026/CVE-2026-11387.md +++ b/cves/2026/CVE-2026-11387.md @@ -16,6 +16,7 @@ No PoCs from references. #### Github - https://github.com/1beelze/CVE-2026-11387 +- https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11387.yaml diff --git a/cves/2026/CVE-2026-41940.md b/cves/2026/CVE-2026-41940.md index 1775f308330..a10e4a0f5bf 100644 --- a/cves/2026/CVE-2026-41940.md +++ b/cves/2026/CVE-2026-41940.md @@ -81,6 +81,7 @@ No PoCs from references. - https://github.com/tahaXafous/CVE_2026_41940_scan_exploit - https://github.com/tc4dy/CVE-2026-6875-PoC-Exploit - https://github.com/0xgh057r3c0n/CVE-2026-41940 +- https://github.com/Xrzmodz444/cve-2026-41940-PoC-Linux #### Nuclei - https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml diff --git a/index/github.txt b/index/github.txt index 9193739d7f0..b2bd267a46e 100644 --- a/index/github.txt +++ b/index/github.txt @@ -26684,3 +26684,5 @@ CVE-2026-79617 - https://github.com/alpernae/CVE-2026-79617 CVE-2026-67401 - https://github.com/axedos/CVE-2026-67401 CVE-2026-67401 - https://github.com/jithinkrishnanrs/CVE-2026-67401-cPanel-EmailTrack-SQLi CVE-2026-1337 - https://github.com/Bangkah/apache-auth-bypass-poc +CVE-2026-11387 - https://github.com/abraxas/CVE-2026-11387-WooCommerce-SMS-OTP +CVE-2026-41940 - https://github.com/Xrzmodz444/cve-2026-41940-PoC-Linux diff --git a/index/trending.json b/index/trending.json index 1718ba839f0..b6d7b8c52a9 100644 --- a/index/trending.json +++ b/index/trending.json @@ -12,7 +12,7 @@ }, { "year": 2026, - "stars": 4, + "stars": 5, "name": "CVE-2026-19089-WooCommerce-Tyche", "url": "https://github.com/abraxas/CVE-2026-19089-WooCommerce-Tyche", "desc": "CVE-2026-19089 WooCommerce Tych Remote Command Execution",